github/codeql-action
1
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2026-10-21 02:01:27 +00:00
Code Issues Packages Projects Releases Wiki Activity
10,771 Commits 462 Branches 595 Tags
3db7caf9014b962f9392088c0fcaf53eeddf47db
Commit Graph

10771 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Michael B. Gale
3db7caf901 Merge pull request #4219 from github/mbg/ci/improve-pr-checks-triggers 
Improve `pr-checks.yml` triggers and conditions
 2026-10-16 20:31:59 +00:00
Michael B. Gale
83e1837c6d Merge pull request #4247 from github/mbg/copilot/clarify-feature-flags 
Add Copilot instructions for FFs, and update documentation more generally
 2026-10-16 15:20:34 +00:00
Michael B. Gale
5ecf3b32e9 Suggest "Minor" prefix 2026-10-16 16:03:32 +01:00
Michael B. Gale
e461913b38 Drop "requests" again 2026-10-16 16:03:00 +01:00
Michael B. Gale
6992155901 Elaborate GHES details 2026-10-16 16:02:01 +01:00
Michael B. Gale
f3c93e3106 Add some guidelines for change notes 2026-10-16 15:32:50 +01:00
Michael B. Gale
2441e6e56e Update "Review instructions" based on recent reviews 2026-10-16 15:31:56 +01:00
Michael B. Gale
0d2baf6822 Update copilot-instructions.md to mention feature flags 2026-10-16 15:11:17 +01:00
Henry Mercer
ae098fa9fe Merge pull request #4242 from github/henrymercer/graduate-toolcache-cleanup 
Enable cleaning up toolcache bundles by default
 2026-10-16 12:43:00 +00:00
Michael B. Gale
0a458f10ac Merge pull request #4230 from github/mbg/auth/allow-unauthed 
Make `auth` in `GitHubApiDetails` optional
 2026-10-16 11:05:53 +00:00
Henry Mercer
4ebc48bf25 Remove the toolcache cleanup test override 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Copilot-Session: 9bf883d4-ecd7-4428-970f-86895f760571
 2026-10-15 14:54:30 +01:00
Henry Mercer
1ec6b03cf4 Enable toolcache bundle cleanup by default 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Copilot-Session: 9bf883d4-ecd7-4428-970f-86895f760571
 2026-10-15 14:54:30 +01:00
Michael B. Gale
7a6e2f798f Merge pull request #4240 from github/mergeback/v4.39.0-to-main-6f2ac81f 
Mergeback v4.39.0 refs/heads/releases/v4 into main
 2026-10-15 11:25:10 +00:00
github-actions[bot]
46d3daa879 Rebuild 2026-10-15 10:57:15 +00:00
github-actions[bot]
2edace40f1 Update changelog and version after v4.39.0 2026-10-15 10:57:06 +00:00
Michael B. Gale
6f2ac81f5c Merge pull request #4239 from github/update-v4.39.0-d63383a73 
Merge main into releases/v4
v4 v4.39.0 		2026-10-15 11:55:44 +01:00
Michael B. Gale
eb1c428e6e Trigger workflows 2026-10-15 11:39:58 +01:00
github-actions[bot]
444333376e Update changelog for v4.39.0 2026-10-15 10:34:02 +00:00
Michael B. Gale
e5b217aeb5 Merge pull request #4238 from github/dependabot/github_actions/dot-github/workflows/actions-minor-c673fd7efc 
Bump the actions-minor group across 1 directory with 3 updates
 2026-10-15 10:26:50 +00:00
Michael B. Gale
d63383a731 Merge pull request #4233 from github/mbg/start-proxy/report-version 
Report release version the proxy is taken from in `start-proxy` telemetry
 2026-10-15 10:15:24 +00:00
Michael B. Gale
8dec0b9f88 Rename path to result in tests 2026-10-15 11:03:10 +01:00
Michael B. Gale
3ec43abae3 Merge branch 'main' into dependabot/github_actions/dot-github/workflows/actions-minor-c673fd7efc 2026-10-15 11:01:21 +01:00
Michael B. Gale
d63cb97549 Merge branch 'main' into mbg/ci/improve-pr-checks-triggers 2026-10-15 10:58:57 +01:00
Michael B. Gale
4eabea6b5e Merge remote-tracking branch 'origin/main' into mbg/start-proxy/report-version 2026-10-15 10:31:39 +01:00
Michael B. Gale
57938b8568 Merge pull request #4201 from github/mario-campos/automate-changenotes-assemble 
Incorporate change-notes into CHANGELOG.md at release
 2026-10-15 09:20:41 +00:00
github-actions[bot]
3afe9c01db Rebuild 2026-10-14 21:26:52 +00:00
dependabot[bot]
8844fb33e0 Bump the actions-minor group across 1 directory with 3 updates 
Bumps the actions-minor group with 3 updates in the /.github/workflows directory: [actions/upload-artifact](https://github.com/actions/upload-artifact), [actions/setup-node](https://github.com/actions/setup-node) and [actions/download-artifact](https://github.com/actions/download-artifact).


Updates `actions/upload-artifact` from 7.0.1 to 7.0.2
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](043fb46d1a...cf430e030d)

Updates `actions/setup-node` from 7.0.0 to 7.1.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](8207627860...949feb2413)

Updates `actions/download-artifact` from 8.0.1 to 8.0.2
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](3e5f45b2cf...9000827ccb)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-minor
- dependency-name: actions/setup-node
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
- dependency-name: actions/download-artifact
  dependency-version: 8.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-10-14 21:24:28 +00:00
Michael B. Gale
c1641847bb Remove explicit authorization header from uploadBundledDatabase 2026-10-14 20:03:19 +01:00
Michael B. Gale
047c751d92 Add a test for uploadBundledDatabase 2026-10-14 20:02:27 +01:00
Michael B. Gale
f6e8dce502 Pass apiDetails to getApiClient in uploadBundledDatabase 2026-10-14 18:28:21 +01:00
Michael B. Gale
a08b587b61 Allow getApiClient to accept GitHubApiDetails 2026-10-14 18:27:15 +01:00
Michael B. Gale
bfe264b559 Add very basic getApiClientWithExternalAuth test 2026-10-14 18:19:52 +01:00
Michael B. Gale
f9b4185b99 Check token value in uploadBundledDatabase 2026-10-14 18:19:52 +01:00
Michael B. Gale
66c96fdc35 Check auth value in getAuthorizationHeaderFor 
Also add some tests for it
 2026-10-14 18:19:52 +01:00
Michael B. Gale
1d30a842cd Guard against blank auth value 
This shouldn't be possible, but was previously handled by the library
 2026-10-14 18:19:51 +01:00
Michael B. Gale
1b0a617641 Make externalRepoAuth check more consistent 2026-10-14 18:19:51 +01:00
Michael B. Gale
96501a33ac Use getCurrentInstance() 2026-10-14 18:19:51 +01:00
Michael B. Gale
a2438139ce Make auth property on GitHubApiDetails optional 2026-10-14 18:19:50 +01:00
Michael B. Gale
e0625309c3 Move GitHubApiDetails to github.ts 2026-10-14 18:19:50 +01:00
Michael B. Gale
61bfcffab9 Add functions to get the current and dotcom instance 2026-10-14 18:19:50 +01:00
Michael B. Gale
102e46e9d1 Move some definitions out of util.ts into a new github.ts module 2026-10-14 18:19:46 +01:00
Michael B. Gale
0735d7910f Improve GitHubApiDetails types and documentation 2026-10-14 18:14:48 +01:00
Michael B. Gale
ee07b503f4 Merge pull request #4236 from github/mbg/add-missing-changenotes 
Add missing change notes for recent PRs
 2026-10-14 15:25:08 +00:00
Michael B. Gale
a897ed5c2e Add change note for #4206 2026-10-14 16:05:40 +01:00
Michael B. Gale
c8bd0195fb Add change note for #4198 2026-10-14 16:03:37 +01:00
Michael B. Gale
c98271eca2 Add change note for #4148 2026-10-14 16:01:09 +01:00
Michael B. Gale
2a3e7563aa Merge pull request #4148 from github/mbg/improve-checkout-path 
Validate `checkout_path` input in `analyze` action
 2026-10-14 14:52:50 +00:00
Michael B. Gale
f460dc7f72 Merge pull request #4206 from github/mbg/set-restore-keys 
Include primary cache keys as restore key
 2026-10-14 14:45:03 +00:00
Michael B. Gale
f5b8e09db2 Merge pull request #4198 from github/mbg/start-proxy/deprecate-fallback 
Use `setup-codeql` logic for finding release assets in `start-proxy`
 2026-10-14 14:39:32 +00:00
Michael B. Gale
28d5dd9818 Revert "Allow logging functions to accept string[] directly" 
This reverts commit 909fda1468.
 2026-10-14 15:07:40 +01:00