github/codeql-action
1
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2026-11-05 04:29:40 +00:00
Code Issues Packages Projects Releases Wiki Activity
11,073 Commits 486 Branches 602 Tags
24393f8692ae5a8fb94c4f5829ffa08cea01bd1b
Commit Graph

11073 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
github-actions[bot]
24393f8692 Update changelog for v4.39.3 2026-11-04 15:21:56 +00:00
Michael B. Gale
064910ba27 Merge pull request #4297 from github/mbg/update-glob 
Update `glob` to `14.0.3`
 2026-11-04 13:56:56 +00:00
Michael B. Gale
f532ac5951 Update glob to 14.0.3 2026-11-04 13:08:55 +00:00
Michael B. Gale
8cd4dfa419 Merge pull request #4280 from github/mbg/ci/validate-yaml 
Consistently format YAML and add CI check
 2026-11-04 12:16:33 +00:00
Michael B. Gale
cea289b432 Return different exit code when a language is not recognised 2026-11-04 11:58:17 +00:00
Michael B. Gale
7287bb3627 Remove exclude entry that's no longer needed 2026-11-04 11:57:34 +00:00
Michael B. Gale
8eb7cdf7ab Use normal .editorconfig pattern 2026-11-04 11:57:07 +00:00
Michael B. Gale
160e5474d2 Merge remote-tracking branch 'origin/main' into mbg/ci/validate-yaml 2026-11-04 11:56:23 +00:00
Sam Robson
913e1bb775 Merge pull request #4283 from github/sam-robson/decode-diff-informed-sarif-uris 
fix: decode SARIF location URIs in diff-informed alert filtering
 2026-11-03 19:47:09 +00:00
Michael B. Gale
c5320e3a8a Merge pull request #4288 from github/dependabot/npm_and_yarn/node-forge-1.4.1 
Bump node-forge from 1.4.0 to 1.4.1
 2026-11-03 15:53:37 +00:00
Michael B. Gale
875ac0c36c Merge pull request #4287 from github/dependabot/npm_and_yarn/pr-checks/glob-14.0.3 
Bump glob from 13.0.6 to 14.0.3 in /pr-checks
 2026-11-03 15:49:12 +00:00
github-actions[bot]
d0468de4ad Rebuild 2026-11-03 15:38:38 +00:00
Michael B. Gale
6a39e2e9cd Merge branch 'main' into dependabot/npm_and_yarn/pr-checks/glob-14.0.3 2026-11-03 15:36:40 +00:00
Michael B. Gale
7c5ee8eaaf Merge branch 'main' into dependabot/npm_and_yarn/node-forge-1.4.1 2026-11-03 15:33:20 +00:00
Michael B. Gale
1f8cacc390 Merge pull request #4292 from github/mbg/ci/fix-sync-back 
Maintain action versions by workflow in `sync-back.ts`
 2026-11-03 14:27:13 +00:00
Michael B. Gale
8a05ce6067 Update JSDoc for scanGeneratedWorkflows 2026-11-03 13:41:11 +00:00
Michael B. Gale
7bcfa1eeee Merge branch 'main' into mbg/ci/validate-yaml 2026-11-03 12:59:48 +00:00
Michael B. Gale
de3ece651e Merge branch 'main' into mbg/ci/fix-sync-back 2026-11-03 12:58:27 +00:00
Michael B. Gale
cc88e02cc1 Update version of actions/download-artifact in unsupported-macos for consistency 2026-11-03 12:34:09 +00:00
Michael B. Gale
7b8e4ced67 Maintain action versions by workflow in sync-back.ts 
This avoids failures on PRs where `sync-back.ts` is run as part of the "Rebuild" job if there are already version inconsistencies on the base branch.
 2026-11-03 12:34:09 +00:00
Henry Mercer
093c0af4c3 Merge pull request #4290 from github/mergeback/v4.39.2-to-main-1fc58d04 
Mergeback v4.39.2 refs/heads/releases/v4 into main
 2026-11-03 11:09:56 +00:00
github-actions[bot]
30626207b6 Rebuild 2026-11-03 10:46:49 +00:00
github-actions[bot]
eb1e5bd7ab Update changelog and version after v4.39.2 2026-11-03 10:46:39 +00:00
Henry Mercer
1fc58d04a4 Merge pull request #4286 from github/update-v4.39.2-c05042115 
Merge main into releases/v4
v4.39.2 		2026-11-03 10:45:07 +00:00
dependabot[bot]
dc4b73f464 Bump node-forge from 1.4.0 to 1.4.1 
Bumps [node-forge](https://github.com/digitalbazaar/forge) from 1.4.0 to 1.4.1.
- [Changelog](https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md)
- [Commits](https://github.com/digitalbazaar/forge/compare/v1.4.0...v1.4.1)

---
updated-dependencies:
- dependency-name: node-forge
  dependency-version: 1.4.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-11-03 10:27:23 +00:00
dependabot[bot]
3b22011a97 Bump glob from 13.0.6 to 14.0.3 in /pr-checks 
Bumps [glob](https://github.com/isaacs/node-glob) from 13.0.6 to 14.0.3.
- [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md)
- [Commits](https://github.com/isaacs/node-glob/compare/v13.0.6...v14.0.3)

---
updated-dependencies:
- dependency-name: glob
  dependency-version: 14.0.3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-11-03 10:27:18 +00:00
github-actions[bot]
d9984814e4 Update changelog for v4.39.2 2026-11-03 10:25:27 +00:00
Henry Mercer
0d5ac7a9b1 Merge pull request #4285 from github/henrymercer/automated-change-notes 
Migrate bundle update workflow to new changenote tooling
 2026-11-03 10:13:30 +00:00
Michael B. Gale
70417cd0ad Merge remote-tracking branch 'origin/main' into mbg/ci/validate-yaml 2026-11-03 10:10:17 +00:00
Henry Mercer
39528452cf Remove unused updateChangelog from bundle-changelog.ts 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-11-02 17:40:43 +00:00
Henry Mercer
9bc74b13fb Create a changenote for bundle updates instead of editing the changelog 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-11-02 17:40:43 +00:00
Henry Mercer
c050421152 Merge pull request #4284 from github/update-bundle/codeql-bundle-v2.27.4 
Update default bundle to 2.27.4
 2026-11-02 16:43:58 +00:00
Henry Mercer
750fe8feea Merge branch 'main' into update-bundle/codeql-bundle-v2.27.4 2026-11-02 16:16:46 +00:00
github-actions[bot]
adfcd5ffb8 Add changelog note 2026-11-02 16:15:59 +00:00
github-actions[bot]
2ef3b62201 Update default bundle to codeql-bundle-v2.27.4 2026-11-02 16:15:52 +00:00
Sam Robson
b05fe69863 fix: decode SARIF location URIs in diff-informed alert filtering 2026-11-02 16:04:35 +00:00
Michael B. Gale
b35c6c6aae Merge pull request #4251 from github/mbg/refactor-util/errors 
Refactor a few things out of `util.ts`
 2026-11-02 16:00:32 +00:00
Michael B. Gale
ac9f257611 Merge remote-tracking branch 'origin/main' into mbg/refactor-util/errors 2026-11-02 14:28:50 +00:00
Michael B. Gale
52cf185226 Merge pull request #4278 from github/mbg/macos27/xcode-detection 
Add `xcrun`-based fallback for Xcode version detection
codeql-bundle-v2.27.4 		2026-11-02 12:37:03 +00:00
Michael B. Gale
95dd6bfbc4 Fix new test not providing typical input 2026-11-02 12:24:01 +00:00
Michael B. Gale
9151e9044f Merge branch 'main' into mbg/ci/validate-yaml 2026-11-02 12:15:05 +00:00
Michael B. Gale
120993f723 Convert diagnostic ID to kebab case 2026-10-30 18:06:04 +00:00
Henry Mercer
4f900f43bc Merge pull request #4281 from github/henrymercer/tar-path-in-extracttarzst 
Run tar from its resolved path when extracting zstd bundles
 2026-10-30 17:48:07 +00:00
Michael B. Gale
f1396bd6e2 Fix incorrect xcodeVer check 2026-10-30 17:47:22 +00:00
Michael B. Gale
9fe80b66a8 Avoid ESM-specific entry check for now 2026-10-30 17:41:30 +00:00
Michael B. Gale
5e9db0e82c Merge pull request #4272 from github/mbg/ci/typecheck 
Add `typecheck` commands
 2026-10-30 17:36:54 +00:00
Henry Mercer
8512f45c1a Fix stdout and stderr being swapped in tar extraction errors 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-30 17:10:42 +00:00
Henry Mercer
0b97d53711 Extract zstd bundles using the tar path found by getTarVersion 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-30 17:10:09 +00:00
Michael B. Gale
8d18caadc8 Distinguish between Xcode and SDK version in messages 2026-10-30 17:09:47 +00:00
Michael B. Gale
410d706e43 Combine product name and version into ProductVersion type 2026-10-30 16:58:46 +00:00