github/codeql-action
1
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2026-11-10 14:56:01 +00:00
Code Issues Packages Projects Releases Wiki Activity
11,013 Commits 487 Branches 602 Tags
1a18e9047fd7a703087fbac3cecc1c64fcf5ed7d
Commit Graph

1312 Commits

Author SHA1 Message Date
Mario Campos
1a18e9047f Merge branch 'main' into mario-campos/warn-on-changelog-write 2026-10-30 09:27:10 -05:00
Michael B. Gale
b46c2ee59b Merge pull request #4221 from github/mbg/macos27/warn 
Check for versions of macOS and Xcode that are unsupported for traced analysis
 2026-10-30 13:18:49 +00:00
Michael B. Gale
5bdb913da1 Rename FF to include "Abort" instead of "Skip" 2026-10-30 11:00:42 +00:00
Mario Campos
94f0998581 Avoid creating resolved comments without an existing warning 
Use a boolean --create-if-missing flag, supplied by the composite action by default and omitted for resolution updates.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-29 11:32:57 -05:00
Mario Campos
9359b6b571 Wrap --marker argument in HTML comment tags automatically 2026-10-29 10:34:12 -05:00
Mario Campos
87cac24cdd Avoid sparse checkout 
This codebase is a tad coupled; it could end up biting us.
 2026-10-29 10:03:32 -05:00
Mario Campos
2902eeab4d Checkout main instead of PR's base for the post-pr-comments job 2026-10-29 10:01:27 -05:00
Mario Campos
36f220a96c Remove unused post-comment step IDs 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-28 16:08:22 -05:00
Mario Campos
03137fc68d Rename changelog outputs to modified 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-28 16:06:08 -05:00
Mario Campos
94488778fd Simplify post-comment to a single set-comment mode 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-28 16:00:37 -05:00
Mario Campos
ae23865548 Move comment branching into workflow steps 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-28 15:53:36 -05:00
Mario Campos
ae9f97bade Make post-comment marker configurable 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-28 15:30:49 -05:00
dependabot[bot]
1b863a0649 Bump actions/setup-python 
Bumps the actions-minor group with 1 update in the /.github/workflows directory: [actions/setup-python](https://github.com/actions/setup-python).


Updates `actions/setup-python` from 7.0.0 to 7.1.0
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](5fda3b95a4...6d4fd22b20)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-10-28 17:57:49 +00:00
Michael B. Gale
ad2b30ba0f Use new FF in e2e test 2026-10-28 13:29:20 +00:00
Michael B. Gale
17685f3eba Add e2e test 2026-10-28 13:01:50 +00:00
Michael B. Gale
166cc10f7e Merge pull request #4270 from github/dependabot/github_actions/dot-github/workflows/actions-minor-4af230c318 
Bump actions/download-artifact from 8.0.1 to 8.0.2 in /.github/workflows in the actions-minor group across 1 directory
 2026-10-27 14:06:42 +00:00
Michael B. Gale
5fc537340c Merge branch 'main' into dependabot/github_actions/dot-github/workflows/actions-minor-4af230c318 2026-10-27 13:28:02 +00:00
Henry Mercer
9be075c646 Merge pull request #4273 from github/henrymercer/fix-debug-artifacts-failure-check 
Fix "Debug artifacts after failure" PR check not checking any artifacts
 2026-10-27 13:25:27 +00:00
Michael B. Gale
9ff762d747 Merge branch 'main' into henrymercer/notify-enqueuer-on-dequeue 2026-10-27 12:06:11 +00:00
Henry Mercer
05650bc71b Fix "Debug artifacts after failure" PR check not checking any artifacts 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-27 11:58:02 +00:00
dependabot[bot]
179d51bf56 Bump actions/download-artifact 
Bumps the actions-minor group with 1 update in the /.github/workflows directory: [actions/download-artifact](https://github.com/actions/download-artifact).


Updates `actions/download-artifact` from 8.0.1 to 8.0.2
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v8.0.1...9000827ccba6bdab643e8b6fd33ac0654aef8333)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: 8.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-10-27 11:57:33 +00:00
Michael B. Gale
2908c78a82 Remove Rubocop from deflake workflow 2026-10-27 11:19:11 +00:00
Michael B. Gale
bcc1fbe153 Add comment to debug-artifacts workflows 2026-10-27 11:18:33 +00:00
Michael B. Gale
171607b66f Remove Rubocop workflow 2026-10-26 13:45:49 +00:00
Michael B. Gale
ab743b6301 Install newer version of code-scanning-rubocop 2026-10-26 13:29:56 +00:00
Michael B. Gale
eac0005d0c Temporarily switch old CLI checks to older Ubuntu runner 2026-10-26 13:23:29 +00:00
Michael B. Gale
dd68f130c6 Install a newer Ruby version 2026-10-26 13:23:29 +00:00
Henry Mercer
49bbf2b590 Ping the user who enqueued a PR when it's removed from the merge queue 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-23 13:30:18 +01:00
Michael B. Gale
37a5faff25 Switch to pull_request.user.login 2026-10-23 12:19:29 +01:00
Michael B. Gale
54b2801f20 Merge branch 'main' into mbg/pr-dequeue-notify 2026-10-22 17:33:56 +01:00
Michael B. Gale
040890448b Add workflow to comment on a PR when it was dequeued 2026-10-22 16:11:13 +01:00
Henry Mercer
c2293b32da Merge pull request #4244 from github/henrymercer/graduate-per-language-bundles 
Use per-language CodeQL bundles by default
 2026-10-22 14:01:48 +00:00
Michael B. Gale
5196baec01 Merge remote-tracking branch 'origin/main' into mbg/diagnostics/failed-sarif 2026-10-22 14:24:21 +01:00
Henry Mercer
f033e23010 Clarify why the file baseline check uses a custom configuration 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-22 12:04:37 +01:00
Henry Mercer
626d8b9364 Use toolcache.ts in per-language-bundle-validation.yml 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-22 11:49:39 +01:00
Henry Mercer
922e2ff061 Merge remote-tracking branch 'origin/main' into henrymercer/graduate-per-language-bundles 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-22 11:43:17 +01:00
Michael B. Gale
ac509b698f Merge branch 'main' into mbg/diagnostics/failed-sarif 2026-10-22 11:42:14 +01:00
Michael B. Gale
e0b72fe71a Merge pull request #4261 from github/dependabot/github_actions/dot-github/workflows/actions-minor-4a8da92e94 
Bump the actions-minor group across 1 directory with 3 updates
 2026-10-22 10:34:34 +00:00
Michael B. Gale
d04fe60a48 Merge pull request #4255 from github/mbg/npm-versions 
Add `toolcache.ts` script for `bundle(-from)-toolcache` checks
 2026-10-22 09:47:21 +00:00
dependabot[bot]
ec3f8658b6 Bump the actions-minor group across 1 directory with 3 updates 
Bumps the actions-minor group with 3 updates in the /.github/workflows directory: [actions/setup-java](https://github.com/actions/setup-java), [ruby/setup-ruby](https://github.com/ruby/setup-ruby) and [actions/create-github-app-token](https://github.com/actions/create-github-app-token).


Updates `actions/setup-java` from 6.0.1 to 6.1.0
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](de7274f081...b843ebf9b9)

Updates `ruby/setup-ruby` from 1.327.0 to 1.329.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](14594264cd...651ff0d62c)

Updates `actions/create-github-app-token` from 3.2.0 to 3.3.0
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md)
- [Commits](bcd2ba4921...64ab729a62)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
- dependency-name: ruby/setup-ruby
  dependency-version: 1.329.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
- dependency-name: actions/create-github-app-token
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-10-21 17:56:03 +00:00
Michael B. Gale
c3f2a34e23 Clarify comment that explains how the test works 2026-10-21 15:31:30 +01:00
Michael B. Gale
a83f6f50cd Update skipped analyze step comment 2026-10-21 15:17:33 +01:00
Michael B. Gale
67cd8c12d4 Rename env var to DIAGNOSTICS_DIR 2026-10-21 15:15:17 +01:00
Michael B. Gale
b963054f39 Add e2e test 2026-10-20 17:48:17 +00:00
Michael B. Gale
24408cc688 Use toolcache.ts in bundle-from-toolcache.yml 2026-10-20 17:30:55 +01:00
Michael B. Gale
297dec926f Add toolcache.ts script for bundle-toolcache.yml 2026-10-20 17:30:54 +01:00
Michael B. Gale
0fda7a646f Merge pull request #4248 from github/mbg/move-diag-export-script 
Move inline script from `diagnostics-export.yml` to a `.ts` file
 2026-10-20 15:53:36 +00:00
Michael B. Gale
3db7caf901 Merge pull request #4219 from github/mbg/ci/improve-pr-checks-triggers 
Improve `pr-checks.yml` triggers and conditions
 2026-10-16 20:31:59 +00:00
Michael B. Gale
604377fd2d Move inline script from diagnostics-export.yml to a .ts file 2026-10-16 16:53:07 +01:00
Henry Mercer
2d68850214 Remove per-language bundle rollout flag 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Copilot-Session: d9f196d4-6d15-44ca-bd01-cd022d57d2cc
 2026-10-16 14:00:39 +01:00