github/codeql-action
1
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2026-11-08 14:09:51 +00:00
Code Issues Packages Projects Releases Wiki Activity
10,932 Commits 487 Branches 602 Tags
2d7aeadbf01df0b0a833f218ff2eccfb1b5fc291
Commit Graph

845 Commits

Author SHA1 Message Date
Michael B. Gale
354d3a23c0 Merge pull request #4262 from github/mbg/cherry-picks/macos-deprecation 
Minor improvements to prepare for #4221
 2026-10-28 11:31:43 +00:00
Michael B. Gale
18f7f5c848 Merge branch 'main' into mbg/cherry-picks/macos-deprecation 2026-10-27 13:15:10 +00:00
github-actions[bot]
d1617c5ce4 Rebuild 2026-10-27 11:59:57 +00:00
Michael B. Gale
8fb8b475a9 Consistently use JSDocs in sync.ts 2026-10-27 10:20:12 +00:00
Michael B. Gale
63b184d4bc Improve sync.ts version typing so that check constant becomes an error once removed 2026-10-26 14:33:26 +00:00
Michael B. Gale
34b4917832 Add comment to sync.ts 2026-10-26 14:26:53 +00:00
Michael B. Gale
171607b66f Remove Rubocop workflow 2026-10-26 13:45:49 +00:00
Michael B. Gale
ab743b6301 Install newer version of code-scanning-rubocop 2026-10-26 13:29:56 +00:00
Michael B. Gale
eac0005d0c Temporarily switch old CLI checks to older Ubuntu runner 2026-10-26 13:23:29 +00:00
Michael B. Gale
dd68f130c6 Install a newer Ruby version 2026-10-26 13:23:29 +00:00
Michael B. Gale
5a097f3eea Merge remote-tracking branch 'origin/main' into mbg/cherry-picks/macos-deprecation 2026-10-23 12:52:18 +01:00
Henry Mercer
562acf5a94 Merge pull request #4264 from github/henrymercer/exclude-pr-only-checks-from-sync-checks 
Exclude checks that don't always run from the sync script
 2026-10-23 11:30:29 +00:00
Michael B. Gale
0c057be418 Merge branch 'main' into mbg/cherry-picks/macos-deprecation 2026-10-22 17:33:16 +01:00
Henry Mercer
c1ab1b4065 Don't require github-advanced-security or License compliance check 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-22 15:13:50 +01:00
Henry Mercer
c2293b32da Merge pull request #4244 from github/henrymercer/graduate-per-language-bundles 
Use per-language CodeQL bundles by default
 2026-10-22 14:01:48 +00:00
Michael B. Gale
7a0df8fe5b Improve globSync call 2026-10-22 14:57:07 +01:00
Michael B. Gale
5a546846a4 Allow check-diagnostics.ts to check multiple SARIF files 2026-10-22 14:39:51 +01:00
Michael B. Gale
00d7ef8570 Refactor top-level code into checkSarif 2026-10-22 14:39:51 +01:00
Michael B. Gale
5196baec01 Merge remote-tracking branch 'origin/main' into mbg/diagnostics/failed-sarif 2026-10-22 14:24:21 +01:00
Henry Mercer
f033e23010 Clarify why the file baseline check uses a custom configuration 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-22 12:04:37 +01:00
Henry Mercer
626d8b9364 Use toolcache.ts in per-language-bundle-validation.yml 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-22 11:49:39 +01:00
Henry Mercer
922e2ff061 Merge remote-tracking branch 'origin/main' into henrymercer/graduate-per-language-bundles 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-22 11:43:17 +01:00
Michael B. Gale
ac509b698f Merge branch 'main' into mbg/diagnostics/failed-sarif 2026-10-22 11:42:14 +01:00
Michael B. Gale
e0b72fe71a Merge pull request #4261 from github/dependabot/github_actions/dot-github/workflows/actions-minor-4a8da92e94 
Bump the actions-minor group across 1 directory with 3 updates
 2026-10-22 10:34:34 +00:00
Michael B. Gale
d04fe60a48 Merge pull request #4255 from github/mbg/npm-versions 
Add `toolcache.ts` script for `bundle(-from)-toolcache` checks
 2026-10-22 09:47:21 +00:00
Michael B. Gale
0a00d0c14f Rename noCodeQLInToolcache 2026-10-21 19:36:54 +01:00
Michael B. Gale
6b344309f7 Log versions if there are some 2026-10-21 19:36:06 +01:00
Michael B. Gale
34f75b50e7 Rename argument 2026-10-21 19:34:35 +01:00
github-actions[bot]
fb5d8688b9 Rebuild 2026-10-21 17:58:09 +00:00
Michael B. Gale
c3f2a34e23 Clarify comment that explains how the test works 2026-10-21 15:31:30 +01:00
Michael B. Gale
a83f6f50cd Update skipped analyze step comment 2026-10-21 15:17:33 +01:00
Michael B. Gale
67cd8c12d4 Rename env var to DIAGNOSTICS_DIR 2026-10-21 15:15:17 +01:00
Michael B. Gale
b963054f39 Add e2e test 2026-10-20 17:48:17 +00:00
Michael B. Gale
596ae5c8cf Make comparison strict 2026-10-20 18:12:38 +01:00
Michael B. Gale
d0ab717e67 Replace rmdir with rmSync 2026-10-20 17:45:21 +01:00
Michael B. Gale
57804e978e Add @actions/tool-cache as an explicit dependency 2026-10-20 17:30:55 +01:00
Michael B. Gale
24408cc688 Use toolcache.ts in bundle-from-toolcache.yml 2026-10-20 17:30:55 +01:00
Michael B. Gale
297dec926f Add toolcache.ts script for bundle-toolcache.yml 2026-10-20 17:30:54 +01:00
Michael B. Gale
604377fd2d Move inline script from diagnostics-export.yml to a .ts file 2026-10-16 16:53:07 +01:00
Henry Mercer
2d68850214 Remove per-language bundle rollout flag 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Copilot-Session: d9f196d4-6d15-44ca-bd01-cd022d57d2cc
 2026-10-16 14:00:39 +01:00
Henry Mercer
64e5c6243a Prepare per-language bundle graduation checks 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Copilot-Session: d9f196d4-6d15-44ca-bd01-cd022d57d2cc
 2026-10-16 13:59:52 +01:00
Henry Mercer
ae098fa9fe Merge pull request #4242 from github/henrymercer/graduate-toolcache-cleanup 
Enable cleaning up toolcache bundles by default
 2026-10-16 12:43:00 +00:00
Henry Mercer
4ebc48bf25 Remove the toolcache cleanup test override 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Copilot-Session: 9bf883d4-ecd7-4428-970f-86895f760571
 2026-10-15 14:54:30 +01:00
Michael B. Gale
3ec43abae3 Merge branch 'main' into dependabot/github_actions/dot-github/workflows/actions-minor-c673fd7efc 2026-10-15 11:01:21 +01:00
Michael B. Gale
57938b8568 Merge pull request #4201 from github/mario-campos/automate-changenotes-assemble 
Incorporate change-notes into CHANGELOG.md at release
 2026-10-15 09:20:41 +00:00
github-actions[bot]
3afe9c01db Rebuild 2026-10-14 21:26:52 +00:00
Henry Mercer
2b07ff4ed2 Merge pull request #4208 from github/dependabot/npm_and_yarn/octokit/plugin-paginate-rest-16.0.0 
Bump @octokit/plugin-paginate-rest from 15.0.0 to 16.0.0
 2026-10-14 10:22:18 +00:00
dependabot[bot]
efdb69c1d7 Bump the npm-minor group across 1 directory with 7 updates 
Bumps the npm-minor group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@actions/cache](https://github.com/actions/toolkit/tree/HEAD/packages/cache) | `5.2.0` | `5.3.0` |
| [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.16.0` | `1.16.1` |
| [js-yaml](https://github.com/nodeca/js-yaml) | `5.4.2` | `5.4.3` |
| [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc) | `65.0.1` | `65.2.0` |
| [globals](https://github.com/sindresorhus/globals) | `17.12.0` | `17.13.0` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.70.1` | `8.71.1` |
| [mdast-util-from-markdown](https://github.com/syntax-tree/mdast-util-from-markdown) | `2.0.3` | `2.1.0` |



Updates `@actions/cache` from 5.2.0 to 5.3.0
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/cache/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/cache)

Updates `follow-redirects` from 1.16.0 to 1.16.1
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases)
- [Commits](https://github.com/follow-redirects/follow-redirects/compare/v1.16.0...v1.16.1)

Updates `js-yaml` from 5.4.2 to 5.4.3
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/compare/5.4.2...5.4.3)

Updates `eslint-plugin-jsdoc` from 65.0.1 to 65.2.0
- [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases)
- [Commits](https://github.com/gajus/eslint-plugin-jsdoc/compare/v65.0.1...v65.2.0)

Updates `globals` from 17.12.0 to 17.13.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](https://github.com/sindresorhus/globals/compare/v17.12.0...v17.13.0)

Updates `typescript-eslint` from 8.70.1 to 8.71.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.71.1/packages/typescript-eslint)

Updates `mdast-util-from-markdown` from 2.0.3 to 2.1.0
- [Release notes](https://github.com/syntax-tree/mdast-util-from-markdown/releases)
- [Commits](https://github.com/syntax-tree/mdast-util-from-markdown/compare/2.0.3...2.1.0)

---
updated-dependencies:
- dependency-name: "@actions/cache"
  dependency-version: 5.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: follow-redirects
  dependency-version: 1.16.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: js-yaml
  dependency-version: 5.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: eslint-plugin-jsdoc
  dependency-version: 65.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: globals
  dependency-version: 17.13.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: typescript-eslint
  dependency-version: 8.71.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: mdast-util-from-markdown
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-10-14 09:49:53 +00:00
Michael B. Gale
a5e9aebc25 Merge branch 'main' into dependabot/npm_and_yarn/octokit/plugin-paginate-rest-16.0.0 2026-10-14 10:45:53 +01:00
Michael B. Gale
a7700b5a50 Merge branch 'main' into mario-campos/automate-changenotes-assemble 2026-10-14 10:07:46 +01:00