github/codeql-action
1
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2026-10-25 23:27:13 +00:00
Code Issues Packages Projects Releases Wiki Activity
9,669 Commits 469 Branches 597 Tags
copilot/add-tools-input-source-repository
Commit Graph

9669 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Óscar San José
d1418f9e47 Merge branch 'main' into copilot/add-tools-input-source-repository 2026-06-09 14:30:14 +02:00
copilot-swe-agent[bot]
21066c2326 Pin multi-language workflow action SHAs 2026-06-09 12:25:28 +00:00
Henry Mercer
eda5730a8b Merge pull request #3955 from github/henrymercer/fix-nested-log-group 
Fix broken log grouping due to nested log group
 2026-06-05 13:53:30 +00:00
Henry Mercer
e263f3a83a Merge pull request #3954 from github/henrymercer/tidy-resolve-languages 
Clean up `codeql.resolveLanguages`
 2026-06-05 13:53:24 +00:00
Henry Mercer
ddef289289 Remove one extractor per language assumption 2026-06-05 13:01:12 +01:00
Henry Mercer
99576d59b9 Fix broken log grouping due to nested log group 2026-06-05 12:57:29 +01:00
Henry Mercer
72b0f9fed4 Clean up codeql.resolveLanguages 
Only the betterjson option is now used, so remove the old version.
 2026-06-05 12:50:57 +01:00
Henry Mercer
9fc351a8ac Merge pull request #3953 from github/henrymercer/local-action 
Use local `upload-sarif` Action in PR checks job
 2026-06-05 08:53:57 +00:00
Henry Mercer
72f4abcfcc Use local upload-sarif Action in PR checks job 2026-06-04 16:45:01 +01:00
Henry Mercer
0630e39f3f Merge pull request #3951 from github/mergeback/v4.36.2-to-main-8aad20d1 
Mergeback v4.36.2 refs/heads/releases/v4 into main
 2026-06-04 15:07:37 +00:00
Henry Mercer
2b0250fe46 Fix CHANGELOG indentation 
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
 2026-06-04 15:56:12 +01:00
github-actions[bot]
446948f50b Rebuild 2026-06-04 14:27:34 +00:00
github-actions[bot]
d24f3022a8 Update changelog and version after v4.36.2 2026-06-04 14:27:20 +00:00
Henry Mercer
8aad20d150 Merge pull request #3949 from github/update-v4.36.2-dcb947ce1 
Merge main into releases/v4
v4.36.2 		2026-06-04 15:25:45 +01:00
Henry Mercer
f521b08cd8 Add additional changelog notes 2026-06-04 15:11:55 +01:00
github-actions[bot]
8aeff0ffb7 Update changelog for v4.36.2 2026-06-04 11:17:27 +00:00
Henry Mercer
dcb947ce15 Merge pull request #3948 from github/update-bundle/codeql-bundle-v2.25.6 
Update default bundle to 2.25.6
 2026-06-04 10:56:27 +00:00
github-actions[bot]
c251bcefa1 Add changelog note 2026-06-04 10:43:06 +00:00
github-actions[bot]
62953c18b3 Update default bundle to codeql-bundle-v2.25.6 2026-06-04 10:42:59 +00:00
Henry Mercer
423b570baf Merge pull request #3946 from github/dependabot/npm_and_yarn/npm-minor-5d507a028b 
Bump the npm-minor group across 1 directory with 2 updates
 2026-06-04 10:38:05 +00:00
Henry Mercer
c35d1b1644 Merge pull request #3947 from github/dependabot/github_actions/dot-github/workflows/actions-minor-3d0b6ad432 
Bump ruby/setup-ruby from 1.307.0 to 1.310.0 in /.github/workflows in the actions-minor group across 1 directory
codeql-bundle-v2.25.6 		2026-06-04 10:10:18 +00:00
Robert
cb1a588b02 Merge pull request #3937 from github/robertbrignull/waitForProcessing_backoff 
Change waitForProcessing to use exponential backoff
 2026-06-04 10:06:49 +00:00
Henry Mercer
ba47406412 Merge pull request #3943 from github/henrymercer/cache-cli-version-info 
Cache CLI version information across Actions steps
 2026-06-04 09:58:34 +00:00
Henry Mercer
5be8119767 Merge pull request #3938 from github/henrymercer/git-client-feature-flag 
Add FF to force JGit-based Git backend
 2026-06-04 09:58:15 +00:00
Robert
6047ac775f Merge branch 'main' into robertbrignull/waitForProcessing_backoff 2026-06-04 10:35:04 +01:00
github-actions[bot]
af7b8f37ea Rebuild 2026-06-04 02:43:57 +00:00
dependabot[bot]
3569f75599 Bump ruby/setup-ruby 
Bumps the actions-minor group with 1 update in the /.github/workflows directory: [ruby/setup-ruby](https://github.com/ruby/setup-ruby).


Updates `ruby/setup-ruby` from 1.307.0 to 1.310.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](6aaa311d81...afeafc3d1a)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-version: 1.310.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-04 02:42:04 +00:00
github-actions[bot]
acb38f7265 Rebuild 2026-06-04 02:40:00 +00:00
dependabot[bot]
dd9e36c0d3 Bump the npm-minor group across 1 directory with 2 updates 
Bumps the npm-minor group with 2 updates in the / directory: [semver](https://github.com/npm/node-semver) and [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint).


Updates `semver` from 7.8.0 to 7.8.1
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](https://github.com/npm/node-semver/compare/v7.8.0...v7.8.1)

Updates `typescript-eslint` from 8.59.4 to 8.60.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.60.0/packages/typescript-eslint)

---
updated-dependencies:
- dependency-name: semver
  dependency-version: 7.8.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: typescript-eslint
  dependency-version: 8.60.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-04 02:38:09 +00:00
Henry Mercer
5ccef82244 Address review comments 2026-06-03 18:31:11 +01:00
Henry Mercer
2ceebd64c4 Merge pull request #3945 from github/henrymercer/pin-actions-to-shas 
Pin first-party Actions to SHAs
 2026-06-03 17:09:52 +00:00
Henry Mercer
fd3f10809d Update sync-back script 
This is intended as a workaround until https://github.com/github/codeql-action/pull/3556 is merged.
 2026-06-03 17:21:10 +01:00
Henry Mercer
87f4948cb0 Pin first-party Actions 2026-06-03 17:19:36 +01:00
Henry Mercer
bab673d0e0 Cache CLI version information across Actions steps 2026-06-02 19:27:05 +01:00
Óscar San José
8c6a2b4d4b Rebuild 2026-06-02 15:13:54 +02:00
Henry Mercer
8ed7f7c384 Merge pull request #3941 from github/mergeback/v4.36.1-to-main-87557b9c 
Mergeback v4.36.1 refs/heads/releases/v4 into main
 2026-06-02 10:35:51 +00:00
github-actions[bot]
0ad7c1f95e Rebuild 2026-06-02 10:09:37 +00:00
github-actions[bot]
25c25b5e09 Update changelog and version after v4.36.1 2026-06-02 10:09:22 +00:00
Henry Mercer
87557b9c84 Merge pull request #3940 from github/update-v4.36.1-2a1689ed4 
Merge main into releases/v4
v4.36.1 		2026-06-02 11:07:55 +01:00
github-actions[bot]
9431011964 Update changelog for v4.36.1 2026-06-02 09:50:57 +00:00
Óscar San José
57b3666b1d Apply suggestions from code review 
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
 2026-06-01 20:23:20 +02:00
Óscar San José
1251f87758 Improve testing 2026-06-01 20:19:50 +02:00
Henry Mercer
2a1689ed43 Merge pull request #3939 from github/henrymercer/skip-overlay-revert-when-explicit 
Disable missing diff-ranges fallback when overlay enabled manually
 2026-06-01 17:25:10 +00:00
Óscar San José
6963dfbbc5 Add logging and telemetry for mode 2026-06-01 18:44:55 +02:00
Óscar San José
d426d33115 Implement an enforce/dynamic approach 2026-06-01 18:33:23 +02:00
Robert
d40e417f3c Only do initial wait when not running tests 2026-06-01 16:43:42 +01:00
Óscar San José
f22e7a29ce Merge branch 'main' into copilot/add-tools-input-source-repository 2026-06-01 17:31:14 +02:00
Óscar San José
d8e5e3dbab Rebuild 2026-06-01 17:26:52 +02:00
Henry Mercer
524532393a Disable missing diff-ranges fallback when overlay enabled manually 2026-06-01 15:34:08 +01:00
Henry Mercer
948a63aed1 Add FF to force JGit-based Git backend 2026-06-01 15:20:13 +01:00