github/codeql-action
1
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2026-10-03 17:41:28 +00:00
Code Issues Packages Projects Releases Wiki Activity
9,953 Commits 445 Branches 589 Tags
3654baa924bc6456db54002581cb7c1c877548c4
Commit Graph

9953 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Michael B. Gale
80dcb7ccdf Add RUNNER_ENVIRONMENT to ActionsEnvVars 2026-07-09 14:51:22 +01:00
Michael B. Gale
a440e35eda Move ActionsEnvVars to environment.ts 2026-07-09 12:48:49 +01:00
Michael B. Gale
be67a7be93 Add hasChanged method to Env 2026-07-09 12:41:31 +01:00
Michael B. Gale
732911a2fa Turn Env into a class, and add ReadOnlyEnv 2026-07-09 12:38:40 +01:00
Michael B. Gale
1d0e1b20e5 Move env var getters out of util.ts 2026-07-09 12:20:20 +01:00
Michael B. Gale
4c868b3e7e Allow setting environment variables 2026-07-09 12:14:09 +01:00
Michael B. Gale
8d24507592 Allow env input for relevant functions in actions-util.ts 2026-07-09 12:14:07 +01:00
Michael B. Gale
c7d9083db4 Make ALWAYS_ENABLED_REGISTRY_TYPE read-only 2026-07-09 12:05:14 +01:00
Michael B. Gale
2831d9a0e9 Fix previously wrong comment 2026-07-09 12:03:31 +01:00
github-actions[bot]
258af3df60 Rebuild 2026-07-08 17:59:16 +00:00
github-actions[bot]
d8168ab655 Rebuild 2026-07-08 17:57:12 +00:00
dependabot[bot]
ac36b7d725 Bump the actions-minor group across 1 directory with 2 updates 
Bumps the actions-minor group with 2 updates in the /.github/workflows directory: [actions/setup-java](https://github.com/actions/setup-java) and [ruby/setup-ruby](https://github.com/ruby/setup-ruby).


Updates `actions/setup-java` from 5.4.0 to 5.5.0
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](1bcf9fb12c...0f481fcb61)

Updates `ruby/setup-ruby` from 1.314.0 to 1.315.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](9eb537ca03...0dafeac902)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-version: 5.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
- dependency-name: ruby/setup-ruby
  dependency-version: 1.315.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-08 17:57:09 +00:00
dependabot[bot]
9fdfd3e4c8 Bump @types/sinon from 21.0.1 to 22.0.0 
Bumps [@types/sinon](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/sinon) from 21.0.1 to 22.0.0.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/sinon)

---
updated-dependencies:
- dependency-name: "@types/sinon"
  dependency-version: 22.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-08 17:55:17 +00:00
dependabot[bot]
1c42f21061 Bump the npm-minor group across 1 directory with 4 updates 
Bumps the npm-minor group with 4 updates in the / directory: [js-yaml](https://github.com/nodeca/js-yaml), [eslint-plugin-import-x](https://github.com/un-ts/eslint-plugin-import-x), [nock](https://github.com/nock/nock) and [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint).


Updates `js-yaml` from 5.1.0 to 5.2.0
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/compare/5.1.0...5.2.0)

Updates `eslint-plugin-import-x` from 4.17.0 to 4.17.1
- [Release notes](https://github.com/un-ts/eslint-plugin-import-x/releases)
- [Changelog](https://github.com/un-ts/eslint-plugin-import-x/blob/master/CHANGELOG.md)
- [Commits](https://github.com/un-ts/eslint-plugin-import-x/compare/v4.17.0...v4.17.1)

Updates `nock` from 14.0.15 to 14.0.16
- [Release notes](https://github.com/nock/nock/releases)
- [Changelog](https://github.com/nock/nock/blob/main/CHANGELOG.md)
- [Commits](https://github.com/nock/nock/compare/v14.0.15...v14.0.16)

Updates `typescript-eslint` from 8.62.0 to 8.62.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.62.1/packages/typescript-eslint)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 5.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: eslint-plugin-import-x
  dependency-version: 4.17.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: nock
  dependency-version: 14.0.16
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: typescript-eslint
  dependency-version: 8.62.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-08 17:55:10 +00:00
Michael B. Gale
06898d7b8b Rename mergeUserConfigs 2026-07-08 17:46:02 +01:00
Michael B. Gale
7ccd988125 Merge branch 'main' into mbg/config/merge 2026-07-08 17:31:19 +01:00
Michael B. Gale
ef79560bc8 Always enable git_source registries 2026-07-08 17:13:20 +01:00
Michael B. Gale
4581e395f3 Merge pull request #3999 from github/mbg/bump-undici 
Bump undici and js-yaml
 2026-07-08 15:29:40 +00:00
Michael B. Gale
76d37c509a Bump undici and js-yaml 2026-07-08 15:47:15 +01:00
Mario Campos
0e974e6288 Merge pull request #3980 from github/mario-campos/add-optional-to-json 
Support `undefined`, `number` in JSON module
 2026-07-08 13:05:24 +00:00
Michael B. Gale
721b977126 Merge pull request #3997 from github/mergeback/v4.37.0-to-main-99df26d4 
Mergeback v4.37.0 refs/heads/releases/v4 into main
 2026-07-08 12:46:02 +00:00
github-actions[bot]
329fc9cde0 Rebuild 2026-07-08 12:09:56 +00:00
github-actions[bot]
f27c81bb1c Update changelog and version after v4.37.0 2026-07-08 12:09:43 +00:00
Michael B. Gale
99df26d4f1 Merge pull request #3996 from github/update-v4.37.0-c7c896d71 
Merge main into releases/v4
v4.37.0 		2026-07-08 13:08:22 +01:00
Michael B. Gale
31c27074fd Add changenote for #3973 2026-07-08 12:53:26 +01:00
github-actions[bot]
72df2181aa Update changelog for v4.37.0 2026-07-08 11:42:48 +00:00
Michael B. Gale
c7c896d71b Merge pull request #3995 from github/update-bundle/codeql-bundle-v2.26.0 
Update default bundle to 2.26.0
 2026-07-08 07:57:31 +00:00
github-actions[bot]
3f34ff0ea3 Add changelog note 2026-07-08 07:34:38 +00:00
github-actions[bot]
43bec09f1d Update default bundle to codeql-bundle-v2.26.0 2026-07-08 07:34:33 +00:00
Michael B. Gale
f58f0d11eb Merge pull request #3973 from github/mbg/repo-props/config-file-shorthands 
Support shorthand forms for `getRemoteConfig`
codeql-bundle-v2.26.0 		2026-07-07 16:55:52 +00:00
Michael B. Gale
8be707bd2c Merge remote-tracking branch 'origin/main' into mbg/config/merge 2026-07-06 15:56:19 +01:00
Michael B. Gale
7dc37cbb5b Merge remote-tracking branch 'origin/main' into mbg/repo-props/config-file-shorthands 2026-07-06 15:51:36 +01:00
Michael B. Gale
8e22350a7e Thread ActionState to initConfig 2026-07-06 15:46:35 +01:00
Michael B. Gale
69c9e8c7d9 Mark some status-report imports as type-only to avoid circular dependencies 2026-07-06 15:27:54 +01:00
Michael B. Gale
73f4741039 Refactor pack registry code out of config-utils 2026-07-06 15:24:50 +01:00
Michael B. Gale
5094019011 Refactor Config type out of config-utils 2026-07-06 15:14:11 +01:00
Michael B. Gale
006d029c8d Merge pull request #3990 from github/mbg/action-state 
Add `ActionState` type and make some initial use of it
 2026-07-06 13:47:46 +00:00
Michael B. Gale
8476401b09 Make lazy FF check less ambiguous 2026-07-06 14:45:41 +01:00
Michael B. Gale
4509fb3c4b Fix JSDoc for determineUserConfig 2026-07-06 14:43:49 +01:00
Michael B. Gale
44d6b3b016 Initialise env in actions-util when not provided 
This makes the implementations more consistent for now, and less error-prone
 2026-07-06 14:41:55 +01:00
Michael B. Gale
d309c0e332 Improve FieldsOf 2026-07-06 14:34:41 +01:00
Michael B. Gale
e34d7fe5bf Fix: Use getTestActionsEnv 2026-07-06 14:32:18 +01:00
Michael B. Gale
5fa9c0c3e2 Add and use getDisplayActionName for log message 2026-07-06 14:20:08 +01:00
Michael B. Gale
eba9d55e1f Merge remote-tracking branch 'origin/main' into mbg/action-state 2026-07-06 14:13:51 +01:00
Michael B. Gale
9a06fa6b38 Set the required workspacePath input 2026-07-06 14:10:30 +01:00
Michael B. Gale
764f470b74 Test inputs.configFile mutation in tests 2026-07-06 13:50:40 +01:00
Michael B. Gale
d149f93d92 Return mergedConfig instead of loading it again 2026-07-06 13:50:39 +01:00
Michael B. Gale
3707b44eaa Document that inputs might be mutated 2026-07-06 13:50:39 +01:00
Michael B. Gale
42c0c6aedd Allow merging Default Setup config with config file 2026-07-06 13:50:39 +01:00
Michael B. Gale
31577749b3 Give determineUserConfig access to the environment 2026-07-06 13:50:39 +01:00