github/codeql-action
1
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2026-11-10 14:56:01 +00:00
Code Issues Packages Projects Releases Wiki Activity
11,017 Commits 487 Branches 602 Tags
8ba2b06960f40a8fe33efd04d8dd57f2f84d2d24
Commit Graph

11017 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Michael B. Gale
26f5c5e4e0 Improve logging and error handling in logTemporaryDiagnostics 2026-10-22 10:30:34 +01:00
Michael B. Gale
347d5ce5d5 Trigger workflows 2026-10-22 10:17:39 +01:00
Michael B. Gale
c758339759 Trigger workflows 2026-10-22 10:17:07 +01:00
Michael B. Gale
0a00d0c14f Rename noCodeQLInToolcache 2026-10-21 19:36:54 +01:00
Michael B. Gale
6b344309f7 Log versions if there are some 2026-10-21 19:36:06 +01:00
Michael B. Gale
34f75b50e7 Rename argument 2026-10-21 19:34:35 +01:00
Michael B. Gale
487ba2e156 Merge branch 'main' into mbg/deprecate-getRunnerLogger 2026-10-21 19:30:29 +01:00
github-actions[bot]
fb5d8688b9 Rebuild 2026-10-21 17:58:09 +00:00
dependabot[bot]
ec3f8658b6 Bump the actions-minor group across 1 directory with 3 updates 
Bumps the actions-minor group with 3 updates in the /.github/workflows directory: [actions/setup-java](https://github.com/actions/setup-java), [ruby/setup-ruby](https://github.com/ruby/setup-ruby) and [actions/create-github-app-token](https://github.com/actions/create-github-app-token).


Updates `actions/setup-java` from 6.0.1 to 6.1.0
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](de7274f081...b843ebf9b9)

Updates `ruby/setup-ruby` from 1.327.0 to 1.329.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](14594264cd...651ff0d62c)

Updates `actions/create-github-app-token` from 3.2.0 to 3.3.0
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md)
- [Commits](bcd2ba4921...64ab729a62)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
- dependency-name: ruby/setup-ruby
  dependency-version: 1.329.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
- dependency-name: actions/create-github-app-token
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-10-21 17:56:03 +00:00
dependabot[bot]
d1db36d302 Bump the npm-minor group across 1 directory with 3 updates 
Bumps the npm-minor group with 3 updates in the / directory: [uuid](https://github.com/uuidjs/uuid), [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc) and [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint).


Updates `uuid` from 14.0.2 to 14.0.3
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](https://github.com/uuidjs/uuid/compare/v14.0.2...v14.0.3)

Updates `eslint-plugin-jsdoc` from 65.2.0 to 65.3.4
- [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases)
- [Commits](https://github.com/gajus/eslint-plugin-jsdoc/compare/v65.2.0...v65.3.4)

Updates `typescript-eslint` from 8.71.1 to 8.71.2
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.71.2/packages/typescript-eslint)

---
updated-dependencies:
- dependency-name: uuid
  dependency-version: 14.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: eslint-plugin-jsdoc
  dependency-version: 65.3.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: typescript-eslint
  dependency-version: 8.71.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-10-21 17:54:13 +00:00
Mario Campos
4e7f1a8de7 Merge pull request #4258 from github/mergeback/v4.39.1-to-main-9b325408 
Mergeback v4.39.1 refs/heads/releases/v4 into main
 2026-10-21 16:25:11 +00:00
Mario Campos
0fcd0abe85 Trigger workflows 2026-10-21 11:10:30 -05:00
Henry Mercer
0b9cddc4ff Merge pull request #4243 from github/henrymercer/remove-trap-cache-cleanup 
Remove TRAP cache cleanup
 2026-10-21 16:03:23 +00:00
Michael B. Gale
16aecb7bc0 Merge branch 'main' into mbg/deprecate-getRunnerLogger 2026-10-21 17:01:07 +01:00
github-actions[bot]
4cf3224289 Rebuild 2026-10-21 15:48:52 +00:00
github-actions[bot]
33f58aa90d Update changelog and version after v4.39.1 2026-10-21 15:48:42 +00:00
Mario Campos
9b32540854 Merge pull request #4257 from github/update-v4.39.1-c5a2f4b0f 
Merge main into releases/v4
v4.39.1 		2026-10-21 10:47:17 -05:00
Mario Campos
b5e1ed9574 Trigger workflows 2026-10-21 10:05:32 -05:00
Michael B. Gale
c3f2a34e23 Clarify comment that explains how the test works 2026-10-21 15:31:30 +01:00
github-actions[bot]
20f5ec3910 Update changelog for v4.39.1 2026-10-21 14:20:41 +00:00
Michael B. Gale
a83f6f50cd Update skipped analyze step comment 2026-10-21 15:17:33 +01:00
Michael B. Gale
67cd8c12d4 Rename env var to DIAGNOSTICS_DIR 2026-10-21 15:15:17 +01:00
Henry Mercer
961c8405b4 Merge remote-tracking branch 'origin/main' into henrymercer/graduate-overlay-version-match 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-21 13:11:37 +01:00
Michael B. Gale
4707994e6e Don't include diagnostics if FF is off 2026-10-21 13:03:37 +01:00
Michael B. Gale
98b8e51380 Always check whether config file exists 
And emit a warning if it doesn't
 2026-10-21 12:28:26 +01:00
Michael B. Gale
d7bad7d923 Merge remote-tracking branch 'origin/main' into mbg/diagnostics/failed-sarif 2026-10-21 12:22:54 +01:00
Michael B. Gale
8357829c18 Use same sub-path in getDiagnosticsPath for no language case 2026-10-21 12:22:44 +01:00
Michael B. Gale
b963054f39 Add e2e test 2026-10-20 17:48:17 +00:00
Michael B. Gale
ba569ac626 Omit --sarif-codescanning-config if the config file doesn't exist 2026-10-20 17:48:17 +00:00
Michael B. Gale
581a0e148e Refactor writeTemporaryDiagnosticFile out of add[NoLanguage]Diagnostic 2026-10-20 17:48:17 +00:00
Michael B. Gale
64723df932 Use temporary diagnostic dir in generateFailedSarif 2026-10-20 17:48:17 +00:00
Michael B. Gale
67f25913cb Make diagnostics less dependent on global state 
Add limited test coverage
 2026-10-20 17:48:17 +00:00
Michael B. Gale
f422d8a874 Write diagnostics to temporary location when database isn't ready 2026-10-20 17:48:17 +00:00
Michael B. Gale
56e0d42f68 Refactor writeDiagnosticFile out of writeDiagnostic 2026-10-20 17:48:17 +00:00
Henry Mercer
c5a2f4b0fe Merge pull request #4245 from github/henrymercer/graduate-overlay-trap-caching 
Graduate overlay TRAP caching defaults
 2026-10-20 17:45:59 +00:00
Mario Campos
61a5a80dd9 Merge pull request #4256 from github/update-bundle/codeql-bundle-v2.27.3 
Update default bundle to 2.27.3
 2026-10-20 17:41:23 +00:00
Michael B. Gale
3dd33f8b69 Merge pull request #4249 from github/mbg/upload-improvements-for-4223 
Failed SARIF testing and logging improvements
 2026-10-20 17:35:13 +00:00
Michael B. Gale
596ae5c8cf Make comparison strict 2026-10-20 18:12:38 +01:00
Michael B. Gale
b96e3390db Change comment for getConfig call in upload-sarif 2026-10-20 18:07:32 +01:00
Michael B. Gale
7fa45180db Use shouldSkipSarifUpload in analyze-action.ts 2026-10-20 18:06:24 +01:00
Michael B. Gale
a69c7cb332 Document that setting the env vars to false takes precedence 2026-10-20 18:02:30 +01:00
Michael B. Gale
74ddcd9f65 Fix typo in comment 2026-10-20 17:59:12 +01:00
github-actions[bot]
260a53409e Add changelog note 2026-10-20 16:53:41 +00:00
github-actions[bot]
72cb698832 Update default bundle to codeql-bundle-v2.27.3 2026-10-20 16:53:32 +00:00
Michael B. Gale
d0ab717e67 Replace rmdir with rmSync 2026-10-20 17:45:21 +01:00
Michael B. Gale
57804e978e Add @actions/tool-cache as an explicit dependency 2026-10-20 17:30:55 +01:00
Michael B. Gale
24408cc688 Use toolcache.ts in bundle-from-toolcache.yml 2026-10-20 17:30:55 +01:00
Michael B. Gale
297dec926f Add toolcache.ts script for bundle-toolcache.yml 2026-10-20 17:30:54 +01:00
Michael B. Gale
950b1479a1 Ensure that rootDirectory is suitable for sarifFile in uploadSarifArtifact 2026-10-20 16:07:25 +00:00
Michael B. Gale
5b69b28796 Improve logging in uploadSarifArtifact 2026-10-20 16:07:25 +00:00