github/codeql-action
1
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2026-11-05 04:29:40 +00:00
Code Issues Packages Projects Releases Wiki Activity
10,960 Commits 486 Branches 602 Tags
5bdb913da11ac3b7db87fced3be7d5b04d836809
Commit Graph

1492 Commits

Author SHA1 Message Date
Michael B. Gale
5bdb913da1 Rename FF to include "Abort" instead of "Skip" 2026-10-30 11:00:42 +00:00
Michael B. Gale
ad2b30ba0f Use new FF in e2e test 2026-10-28 13:29:20 +00:00
Michael B. Gale
17685f3eba Add e2e test 2026-10-28 13:01:50 +00:00
Michael B. Gale
166cc10f7e Merge pull request #4270 from github/dependabot/github_actions/dot-github/workflows/actions-minor-4af230c318 
Bump actions/download-artifact from 8.0.1 to 8.0.2 in /.github/workflows in the actions-minor group across 1 directory
 2026-10-27 14:06:42 +00:00
Michael B. Gale
16555031e0 Merge pull request #4271 from github/dependabot/github_actions/dot-github/actions/release-initialise/actions/setup-node-7.1.0 
Bump actions/setup-node from 6.4.0 to 7.1.0 in /.github/actions/release-initialise
 2026-10-27 13:37:01 +00:00
Michael B. Gale
5fc537340c Merge branch 'main' into dependabot/github_actions/dot-github/workflows/actions-minor-4af230c318 2026-10-27 13:28:02 +00:00
Henry Mercer
9be075c646 Merge pull request #4273 from github/henrymercer/fix-debug-artifacts-failure-check 
Fix "Debug artifacts after failure" PR check not checking any artifacts
 2026-10-27 13:25:27 +00:00
Michael B. Gale
844a4fa9f9 Merge branch 'main' into dependabot/github_actions/dot-github/actions/release-initialise/actions/setup-node-7.1.0 2026-10-27 13:20:35 +00:00
Michael B. Gale
c9d42955da Merge pull request #4268 from github/mbg/deps/undici-7 
Bump `undici` override to the latest `7.x` version
 2026-10-27 13:14:37 +00:00
Michael B. Gale
9ff762d747 Merge branch 'main' into henrymercer/notify-enqueuer-on-dequeue 2026-10-27 12:06:11 +00:00
Michael B. Gale
d59d891623 Merge branch 'main' into mbg/deps/undici-7 2026-10-27 12:02:48 +00:00
Henry Mercer
05650bc71b Fix "Debug artifacts after failure" PR check not checking any artifacts 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-27 11:58:02 +00:00
dependabot[bot]
2d923f7a7e Bump actions/setup-node in /.github/actions/release-initialise 
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6.4.0 to 7.1.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](48b55a011b...949feb2413)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-10-27 11:57:40 +00:00
dependabot[bot]
179d51bf56 Bump actions/download-artifact 
Bumps the actions-minor group with 1 update in the /.github/workflows directory: [actions/download-artifact](https://github.com/actions/download-artifact).


Updates `actions/download-artifact` from 8.0.1 to 8.0.2
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v8.0.1...9000827ccba6bdab643e8b6fd33ac0654aef8333)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: 8.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-10-27 11:57:33 +00:00
Michael B. Gale
2908c78a82 Remove Rubocop from deflake workflow 2026-10-27 11:19:11 +00:00
Michael B. Gale
bcc1fbe153 Add comment to debug-artifacts workflows 2026-10-27 11:18:33 +00:00
Michael B. Gale
0b8f4560ec Add comment for the Kotlin version 2026-10-27 10:23:02 +00:00
Michael B. Gale
171607b66f Remove Rubocop workflow 2026-10-26 13:45:49 +00:00
Michael B. Gale
ab743b6301 Install newer version of code-scanning-rubocop 2026-10-26 13:29:56 +00:00
Michael B. Gale
eac0005d0c Temporarily switch old CLI checks to older Ubuntu runner 2026-10-26 13:23:29 +00:00
Michael B. Gale
dd68f130c6 Install a newer Ruby version 2026-10-26 13:23:29 +00:00
Michael B. Gale
ce7d3f7738 Install newer Kotlin version 2026-10-26 13:23:28 +00:00
Michael B. Gale
515fac0ed0 Configure Dependabot to ignore undici for the moment 2026-10-26 13:00:49 +00:00
Michael B. Gale
b913bf6353 Point Dependabot at subdirectories in .github/actions 2026-10-26 12:51:54 +00:00
Michael B. Gale
b63386c3d8 Update setup-kotlin to the latest version 2026-10-26 12:49:37 +00:00
Henry Mercer
49bbf2b590 Ping the user who enqueued a PR when it's removed from the merge queue 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-23 13:30:18 +01:00
Michael B. Gale
37a5faff25 Switch to pull_request.user.login 2026-10-23 12:19:29 +01:00
Michael B. Gale
54b2801f20 Merge branch 'main' into mbg/pr-dequeue-notify 2026-10-22 17:33:56 +01:00
Michael B. Gale
040890448b Add workflow to comment on a PR when it was dequeued 2026-10-22 16:11:13 +01:00
Henry Mercer
c2293b32da Merge pull request #4244 from github/henrymercer/graduate-per-language-bundles 
Use per-language CodeQL bundles by default
 2026-10-22 14:01:48 +00:00
Michael B. Gale
5196baec01 Merge remote-tracking branch 'origin/main' into mbg/diagnostics/failed-sarif 2026-10-22 14:24:21 +01:00
Henry Mercer
f033e23010 Clarify why the file baseline check uses a custom configuration 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-22 12:04:37 +01:00
Henry Mercer
626d8b9364 Use toolcache.ts in per-language-bundle-validation.yml 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-22 11:49:39 +01:00
Henry Mercer
922e2ff061 Merge remote-tracking branch 'origin/main' into henrymercer/graduate-per-language-bundles 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-22 11:43:17 +01:00
Michael B. Gale
ac509b698f Merge branch 'main' into mbg/diagnostics/failed-sarif 2026-10-22 11:42:14 +01:00
Michael B. Gale
e0b72fe71a Merge pull request #4261 from github/dependabot/github_actions/dot-github/workflows/actions-minor-4a8da92e94 
Bump the actions-minor group across 1 directory with 3 updates
 2026-10-22 10:34:34 +00:00
Michael B. Gale
d04fe60a48 Merge pull request #4255 from github/mbg/npm-versions 
Add `toolcache.ts` script for `bundle(-from)-toolcache` checks
 2026-10-22 09:47:21 +00:00
dependabot[bot]
ec3f8658b6 Bump the actions-minor group across 1 directory with 3 updates 
Bumps the actions-minor group with 3 updates in the /.github/workflows directory: [actions/setup-java](https://github.com/actions/setup-java), [ruby/setup-ruby](https://github.com/ruby/setup-ruby) and [actions/create-github-app-token](https://github.com/actions/create-github-app-token).


Updates `actions/setup-java` from 6.0.1 to 6.1.0
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](de7274f081...b843ebf9b9)

Updates `ruby/setup-ruby` from 1.327.0 to 1.329.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](14594264cd...651ff0d62c)

Updates `actions/create-github-app-token` from 3.2.0 to 3.3.0
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md)
- [Commits](bcd2ba4921...64ab729a62)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
- dependency-name: ruby/setup-ruby
  dependency-version: 1.329.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
- dependency-name: actions/create-github-app-token
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-10-21 17:56:03 +00:00
Michael B. Gale
c3f2a34e23 Clarify comment that explains how the test works 2026-10-21 15:31:30 +01:00
Michael B. Gale
a83f6f50cd Update skipped analyze step comment 2026-10-21 15:17:33 +01:00
Michael B. Gale
67cd8c12d4 Rename env var to DIAGNOSTICS_DIR 2026-10-21 15:15:17 +01:00
Michael B. Gale
b963054f39 Add e2e test 2026-10-20 17:48:17 +00:00
Michael B. Gale
24408cc688 Use toolcache.ts in bundle-from-toolcache.yml 2026-10-20 17:30:55 +01:00
Michael B. Gale
297dec926f Add toolcache.ts script for bundle-toolcache.yml 2026-10-20 17:30:54 +01:00
Michael B. Gale
0fda7a646f Merge pull request #4248 from github/mbg/move-diag-export-script 
Move inline script from `diagnostics-export.yml` to a `.ts` file
 2026-10-20 15:53:36 +00:00
Michael B. Gale
3db7caf901 Merge pull request #4219 from github/mbg/ci/improve-pr-checks-triggers 
Improve `pr-checks.yml` triggers and conditions
 2026-10-16 20:31:59 +00:00
Michael B. Gale
604377fd2d Move inline script from diagnostics-export.yml to a .ts file 2026-10-16 16:53:07 +01:00
Michael B. Gale
5ecf3b32e9 Suggest "Minor" prefix 2026-10-16 16:03:32 +01:00
Michael B. Gale
e461913b38 Drop "requests" again 2026-10-16 16:03:00 +01:00
Michael B. Gale
6992155901 Elaborate GHES details 2026-10-16 16:02:01 +01:00