github/codeql-action
1
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2026-10-29 17:17:15 +00:00
Code Issues Packages Projects Releases Wiki Activity
10,620 Commits 472 Branches 597 Tags
14cefaa03ce3f948a8c839aa160cd1f52100a34c
Commit Graph

1443 Commits

Author SHA1 Message Date
Mario Campos
14cefaa03c Replace bash/run step with local Action post-comment 2026-10-08 23:03:55 -05:00
Mario Campos
8c8b0827d5 Add script and Action for managing PR comments 2026-10-08 23:02:25 -05:00
Mario Campos
9fe741e77d Simplify if condition of CHANGELOG-comment-post step 2026-10-08 15:26:56 -05:00
Mario Campos
27d37d97e2 Format all file references as inline Markdown code spans 
Co-authored-by: Michael B. Gale <mbg@github.com>
 2026-10-08 15:19:38 -05:00
Mario Campos
0707124ab8 Delete CHANGELOG.md-modification comment if CHANGELOG.md no longer modified 2026-10-08 13:11:34 -05:00
Mario Campos
928548a094 Refine exclusion conditions for CHANGELOG-modification comment 
Refactor conditions for PR title checks in workflow.

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
 2026-10-08 12:57:52 -05:00
Mario Campos
ccdf69089a Escape backticks PR comment body 
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
 2026-10-08 12:55:10 -05:00
Mario Campos
d97a656f70 Update CHANGELOG.md warning message to reference change-notes directory 2026-10-08 12:41:52 -05:00
Mario Campos
6e4d3fb63d Use a sticky comment to warn about CHANGELOG.md changes 2026-10-08 12:31:10 -05:00
Mario Campos
ae75d466ce Exclude "Mergeback" and "Update default bundle" PRs from CHANGELOG.md change warning 2026-10-08 12:11:29 -05:00
Mario Campos
780e947861 Skip CHANGELOG.md modification warning for release and backport PRs 2026-10-08 11:48:09 -05:00
Mario Campos
f7aa9dc1ba Move post-comment step to post-pr-comments job 2026-10-08 11:40:38 -05:00
Mario Campos
43ac64c267 Use gh api instead of third-party Action 2026-10-08 11:16:19 -05:00
Mario Campos
fbd33ac6fc Gate comment-post step on successful fetch-base 2026-10-08 10:50:34 -05:00
Mario Campos
b2b77a81a2 Add CHANGELOG.md modification check and warning comment 2026-10-08 10:47:46 -05:00
Henry Mercer
6b99698c8c Pin Python 3.13.15 for older CLI versions in multi-language check 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-07 18:58:17 +01:00
Michael B. Gale
0f3412f832 Replace .mts with .ts in comments and workflows 2026-10-06 18:28:05 +01:00
Michael B. Gale
f455295c9b Merge pull request #4169 from github/mbg/improve-release-workflow 
Improve job naming for the release workflow
 2026-10-06 16:15:00 +00:00
Henry Mercer
2c8d410c03 Merge pull request #4184 from github/henrymercer/per-language-pr-check-failures 
Use the combined bundle when queries may need other languages' library packs
 2026-10-06 12:06:49 +00:00
Henry Mercer
1767808e11 Merge pull request #4196 from github/dependabot/github_actions/dot-github/workflows/actions-minor-e631a66382 
Bump ruby/setup-ruby from 1.326.0 to 1.327.0 in /.github/workflows in the actions-minor group across 1 directory
 2026-10-05 10:37:35 +00:00
Henry Mercer
d8251b8572 Merge pull request #4191 from github/henrymercer/ci-job-failure-investigation 
Fix merge conflict handling in the rebuild workflow
 2026-10-05 09:46:01 +00:00
Michael B. Gale
894842692f Install newer npm in Node 20 workflows 2026-10-02 18:31:31 +01:00
Michael B. Gale
62b0dd96ff Add check for non-public feed URLs 2026-10-02 18:31:30 +01:00
Henry Mercer
c275b4a69e Merge branch 'main' into henrymercer/per-language-pr-check-failures 2026-10-02 17:53:12 +01:00
dependabot[bot]
412197a0f3 Bump ruby/setup-ruby 
Bumps the actions-minor group with 1 update in the /.github/workflows directory: [ruby/setup-ruby](https://github.com/ruby/setup-ruby).


Updates `ruby/setup-ruby` from 1.326.0 to 1.327.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](762794c140...14594264cd)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-version: 1.327.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-10-02 16:48:21 +00:00
Henry Mercer
56b0d5f02c Fix the rebuild workflow failing when merging the base branch conflicts 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-02 17:11:55 +01:00
Michael B. Gale
b804ae96cc Dependabot: Apply cooldown uniformly 
Remove exceptions for Actions dependencies
 2026-10-02 17:09:26 +01:00
copilot-swe-agent[bot]
a47cc9ff16 Merge remote-tracking branch 'origin/main' into henrymercer/per-language-pr-check-failures 
# Conflicts:
#	lib/entry-points.js

Co-authored-by: henrymercer <14129055+henrymercer@users.noreply.github.com>
 2026-10-02 15:36:15 +00:00
Henry Mercer
27c60c532d Fix detection of merge conflicts outside lib in the rebuild workflow 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-02 16:06:06 +01:00
Michael B. Gale
488027b53c Update comment 2026-10-02 15:11:42 +01:00
Michael B. Gale
dc1f3ac122 Merge remote-tracking branch 'origin/main' into mbg/improve-release-workflow 2026-10-02 15:10:36 +01:00
dependabot[bot]
cbe61e2f00 Bump ruby/setup-ruby 
Bumps the actions-minor group with 1 update in the /.github/workflows directory: [ruby/setup-ruby](https://github.com/ruby/setup-ruby).


Updates `ruby/setup-ruby` from 1.323.0 to 1.326.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](984c0c8908...762794c140)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-version: 1.326.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-30 17:56:03 +00:00
Henry Mercer
b5a476b47f Disable per-language bundles in the file baseline PR check 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-09-29 19:31:48 +01:00
Michael B. Gale
cd1a7c16f0 Use test tags in rollback-release.yml workflow 2026-09-29 17:03:57 +01:00
Michael B. Gale
415d925fee Fix formatting of mergeback checklist 2026-09-24 11:36:37 +01:00
Michael B. Gale
b435ce4361 Disambiguate "Prepare release" job naming 2026-09-24 11:12:09 +01:00
Michael B. Gale
477ba697e3 Name unnamed jobs in release workflow 2026-09-24 11:09:45 +01:00
dependabot[bot]
b13f5f47d5 Bump ruby/setup-ruby 
Bumps the actions-minor group with 1 update in the /.github/workflows directory: [ruby/setup-ruby](https://github.com/ruby/setup-ruby).


Updates `ruby/setup-ruby` from 1.321.0 to 1.323.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](95ef2b042f...984c0c8908)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-version: 1.323.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-23 17:56:05 +00:00
Michael B. Gale
a65b83a73d Merge pull request #4146 from github/henrymercer/per-language-bundles-pr 
Use per-language CodeQL bundles
 2026-09-18 12:30:36 +00:00
Henry Mercer
2f552a99f3 Clarify bundle resolution and latest-nightly selection 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-09-16 17:36:46 +01:00
Henry Mercer
289376d7dd Use per-language CodeQL bundles 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-09-16 16:56:33 +01:00
Mario Campos
9961729e06 Merge pull request #4116 from github/mario-campos/validate-cn-workflow 
Validate change-notes as a PR check
 2026-09-16 15:12:11 +00:00
Michael B. Gale
53e5014d5d Address review comments 2026-09-16 11:29:45 +01:00
Mario Campos
f60f4d9500 Validate change-notes in PRs 
This commit also introduces the 'empty' home directory for future change-notes.
 2026-09-11 16:04:21 -05:00
Michael B. Gale
cc78526536 Improve Copilot instructions 2026-09-11 14:19:19 +01:00
Michael B. Gale
0484c3ad1d Merge remote-tracking branch 'origin/main' into mbg/move-changetool 2026-09-10 17:09:46 +01:00
dependabot[bot]
a72798355c Bump actions/setup-java 
Bumps the actions-minor group with 1 update in the /.github/workflows directory: [actions/setup-java](https://github.com/actions/setup-java).


Updates `actions/setup-java` from 6.0.0 to 6.0.1
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](dd06d9cba3...de7274f081)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-09 17:56:16 +00:00
Henry Mercer
bfcc52b4f5 Run slow macOS checks on larger runners 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-09-09 12:57:40 +01:00
Michael B. Gale
b1363526cf Fix some formatting in pr-checks.yml 2026-09-09 11:44:23 +01:00
Michael B. Gale
83d1431d4e Migrate changetool to pr-checks 2026-09-09 11:44:23 +01:00