github/codeql-action
1
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2026-11-06 21:19:42 +00:00
Code Issues Packages Projects Releases Wiki Activity
10,838 Commits 487 Branches 602 Tags
040890448b2ead3ae67c1f514514955da784ec52
Commit Graph

10838 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Michael B. Gale
040890448b Add workflow to comment on a PR when it was dequeued 2026-10-22 16:11:13 +01:00
Henry Mercer
bdadc0358c Merge pull request #4246 from github/henrymercer/graduate-overlay-version-match 
Graduate overlay-aware CodeQL version selection
 2026-10-22 12:52:48 +00:00
Henry Mercer
6aa7e65207 Merge remote-tracking branch 'origin/main' into henrymercer/graduate-overlay-version-match 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-22 12:40:12 +01:00
Michael B. Gale
b484113f11 Merge pull request #4260 from github/dependabot/npm_and_yarn/npm-minor-74c39c9262 
Bump the npm-minor group across 1 directory with 3 updates
 2026-10-22 10:39:44 +00:00
Michael B. Gale
e0b72fe71a Merge pull request #4261 from github/dependabot/github_actions/dot-github/workflows/actions-minor-4a8da92e94 
Bump the actions-minor group across 1 directory with 3 updates
 2026-10-22 10:34:34 +00:00
Henry Mercer
54af742a29 Simplify the condition for overlay-aware version selection 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-22 11:23:40 +01:00
Michael B. Gale
a50b39a27f Merge pull request #4235 from github/mbg/deprecate-getRunnerLogger 
Remove `getRunnerLogger`
 2026-10-22 10:20:15 +00:00
Michael B. Gale
d04fe60a48 Merge pull request #4255 from github/mbg/npm-versions 
Add `toolcache.ts` script for `bundle(-from)-toolcache` checks
 2026-10-22 09:47:21 +00:00
Michael B. Gale
347d5ce5d5 Trigger workflows 2026-10-22 10:17:39 +01:00
Michael B. Gale
c758339759 Trigger workflows 2026-10-22 10:17:07 +01:00
Michael B. Gale
0a00d0c14f Rename noCodeQLInToolcache 2026-10-21 19:36:54 +01:00
Michael B. Gale
6b344309f7 Log versions if there are some 2026-10-21 19:36:06 +01:00
Michael B. Gale
34f75b50e7 Rename argument 2026-10-21 19:34:35 +01:00
Michael B. Gale
487ba2e156 Merge branch 'main' into mbg/deprecate-getRunnerLogger 2026-10-21 19:30:29 +01:00
github-actions[bot]
fb5d8688b9 Rebuild 2026-10-21 17:58:09 +00:00
dependabot[bot]
ec3f8658b6 Bump the actions-minor group across 1 directory with 3 updates 
Bumps the actions-minor group with 3 updates in the /.github/workflows directory: [actions/setup-java](https://github.com/actions/setup-java), [ruby/setup-ruby](https://github.com/ruby/setup-ruby) and [actions/create-github-app-token](https://github.com/actions/create-github-app-token).


Updates `actions/setup-java` from 6.0.1 to 6.1.0
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](de7274f081...b843ebf9b9)

Updates `ruby/setup-ruby` from 1.327.0 to 1.329.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](14594264cd...651ff0d62c)

Updates `actions/create-github-app-token` from 3.2.0 to 3.3.0
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md)
- [Commits](bcd2ba4921...64ab729a62)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
- dependency-name: ruby/setup-ruby
  dependency-version: 1.329.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
- dependency-name: actions/create-github-app-token
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-10-21 17:56:03 +00:00
dependabot[bot]
d1db36d302 Bump the npm-minor group across 1 directory with 3 updates 
Bumps the npm-minor group with 3 updates in the / directory: [uuid](https://github.com/uuidjs/uuid), [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc) and [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint).


Updates `uuid` from 14.0.2 to 14.0.3
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](https://github.com/uuidjs/uuid/compare/v14.0.2...v14.0.3)

Updates `eslint-plugin-jsdoc` from 65.2.0 to 65.3.4
- [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases)
- [Commits](https://github.com/gajus/eslint-plugin-jsdoc/compare/v65.2.0...v65.3.4)

Updates `typescript-eslint` from 8.71.1 to 8.71.2
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.71.2/packages/typescript-eslint)

---
updated-dependencies:
- dependency-name: uuid
  dependency-version: 14.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: eslint-plugin-jsdoc
  dependency-version: 65.3.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: typescript-eslint
  dependency-version: 8.71.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-10-21 17:54:13 +00:00
Mario Campos
4e7f1a8de7 Merge pull request #4258 from github/mergeback/v4.39.1-to-main-9b325408 
Mergeback v4.39.1 refs/heads/releases/v4 into main
 2026-10-21 16:25:11 +00:00
Mario Campos
0fcd0abe85 Trigger workflows 2026-10-21 11:10:30 -05:00
Henry Mercer
0b9cddc4ff Merge pull request #4243 from github/henrymercer/remove-trap-cache-cleanup 
Remove TRAP cache cleanup
 2026-10-21 16:03:23 +00:00
Michael B. Gale
16aecb7bc0 Merge branch 'main' into mbg/deprecate-getRunnerLogger 2026-10-21 17:01:07 +01:00
github-actions[bot]
4cf3224289 Rebuild 2026-10-21 15:48:52 +00:00
github-actions[bot]
33f58aa90d Update changelog and version after v4.39.1 2026-10-21 15:48:42 +00:00
Mario Campos
9b32540854 Merge pull request #4257 from github/update-v4.39.1-c5a2f4b0f 
Merge main into releases/v4
v4.39.1 		2026-10-21 10:47:17 -05:00
Mario Campos
b5e1ed9574 Trigger workflows 2026-10-21 10:05:32 -05:00
github-actions[bot]
20f5ec3910 Update changelog for v4.39.1 2026-10-21 14:20:41 +00:00
Henry Mercer
961c8405b4 Merge remote-tracking branch 'origin/main' into henrymercer/graduate-overlay-version-match 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-21 13:11:37 +01:00
Henry Mercer
c5a2f4b0fe Merge pull request #4245 from github/henrymercer/graduate-overlay-trap-caching 
Graduate overlay TRAP caching defaults
 2026-10-20 17:45:59 +00:00
Mario Campos
61a5a80dd9 Merge pull request #4256 from github/update-bundle/codeql-bundle-v2.27.3 
Update default bundle to 2.27.3
 2026-10-20 17:41:23 +00:00
Michael B. Gale
3dd33f8b69 Merge pull request #4249 from github/mbg/upload-improvements-for-4223 
Failed SARIF testing and logging improvements
 2026-10-20 17:35:13 +00:00
Michael B. Gale
596ae5c8cf Make comparison strict 2026-10-20 18:12:38 +01:00
Michael B. Gale
b96e3390db Change comment for getConfig call in upload-sarif 2026-10-20 18:07:32 +01:00
Michael B. Gale
7fa45180db Use shouldSkipSarifUpload in analyze-action.ts 2026-10-20 18:06:24 +01:00
Michael B. Gale
a69c7cb332 Document that setting the env vars to false takes precedence 2026-10-20 18:02:30 +01:00
Michael B. Gale
74ddcd9f65 Fix typo in comment 2026-10-20 17:59:12 +01:00
github-actions[bot]
260a53409e Add changelog note 2026-10-20 16:53:41 +00:00
github-actions[bot]
72cb698832 Update default bundle to codeql-bundle-v2.27.3 2026-10-20 16:53:32 +00:00
Michael B. Gale
d0ab717e67 Replace rmdir with rmSync 2026-10-20 17:45:21 +01:00
Michael B. Gale
57804e978e Add @actions/tool-cache as an explicit dependency 2026-10-20 17:30:55 +01:00
Michael B. Gale
24408cc688 Use toolcache.ts in bundle-from-toolcache.yml 2026-10-20 17:30:55 +01:00
Michael B. Gale
297dec926f Add toolcache.ts script for bundle-toolcache.yml 2026-10-20 17:30:54 +01:00
Michael B. Gale
950b1479a1 Ensure that rootDirectory is suitable for sarifFile in uploadSarifArtifact 2026-10-20 16:07:25 +00:00
Michael B. Gale
5b69b28796 Improve logging in uploadSarifArtifact 2026-10-20 16:07:25 +00:00
Michael B. Gale
1d373e07cd Upload failed SARIF as workflow artifact in test mode 2026-10-20 16:07:25 +00:00
Michael B. Gale
e7340eea1b Skip waiting for SARIF if nothing was uploaded 2026-10-20 16:07:25 +00:00
Michael B. Gale
02fb8cc38a Propagate Config to combineSarifFilesUsingCLI 2026-10-20 16:07:25 +00:00
Michael B. Gale
6e9aec682d Add and use shouldSkipGenerateFailedSarif 2026-10-20 16:07:25 +00:00
Michael B. Gale
a9cd2f9fa7 Allow to explicitly not skip the SARIF upload 2026-10-20 16:07:25 +00:00
Michael B. Gale
be1223f63e Log when we didn't get a normal configuration file 2026-10-20 16:07:25 +00:00
Michael B. Gale
0fda7a646f Merge pull request #4248 from github/mbg/move-diag-export-script 
Move inline script from `diagnostics-export.yml` to a `.ts` file
codeql-bundle-v2.27.3 		2026-10-20 15:53:36 +00:00