github/codeql-action
1
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2026-10-03 09:14:58 +00:00
Code Issues Packages Projects Releases Wiki Activity
9,640 Commits 445 Branches 589 Tags
99576d59b9fc0a52007dd1903d940c4066d3d4ec
Commit Graph

9640 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Henry Mercer
99576d59b9 Fix broken log grouping due to nested log group 2026-06-05 12:57:29 +01:00
Henry Mercer
9fc351a8ac Merge pull request #3953 from github/henrymercer/local-action 
Use local `upload-sarif` Action in PR checks job
 2026-06-05 08:53:57 +00:00
Henry Mercer
72f4abcfcc Use local upload-sarif Action in PR checks job 2026-06-04 16:45:01 +01:00
Henry Mercer
0630e39f3f Merge pull request #3951 from github/mergeback/v4.36.2-to-main-8aad20d1 
Mergeback v4.36.2 refs/heads/releases/v4 into main
 2026-06-04 15:07:37 +00:00
Henry Mercer
2b0250fe46 Fix CHANGELOG indentation 
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
 2026-06-04 15:56:12 +01:00
github-actions[bot]
446948f50b Rebuild 2026-06-04 14:27:34 +00:00
github-actions[bot]
d24f3022a8 Update changelog and version after v4.36.2 2026-06-04 14:27:20 +00:00
Henry Mercer
8aad20d150 Merge pull request #3949 from github/update-v4.36.2-dcb947ce1 
Merge main into releases/v4
v4.36.2 		2026-06-04 15:25:45 +01:00
Henry Mercer
f521b08cd8 Add additional changelog notes 2026-06-04 15:11:55 +01:00
github-actions[bot]
8aeff0ffb7 Update changelog for v4.36.2 2026-06-04 11:17:27 +00:00
Henry Mercer
dcb947ce15 Merge pull request #3948 from github/update-bundle/codeql-bundle-v2.25.6 
Update default bundle to 2.25.6
 2026-06-04 10:56:27 +00:00
github-actions[bot]
c251bcefa1 Add changelog note 2026-06-04 10:43:06 +00:00
github-actions[bot]
62953c18b3 Update default bundle to codeql-bundle-v2.25.6 2026-06-04 10:42:59 +00:00
Henry Mercer
423b570baf Merge pull request #3946 from github/dependabot/npm_and_yarn/npm-minor-5d507a028b 
Bump the npm-minor group across 1 directory with 2 updates
 2026-06-04 10:38:05 +00:00
Henry Mercer
c35d1b1644 Merge pull request #3947 from github/dependabot/github_actions/dot-github/workflows/actions-minor-3d0b6ad432 
Bump ruby/setup-ruby from 1.307.0 to 1.310.0 in /.github/workflows in the actions-minor group across 1 directory
codeql-bundle-v2.25.6 		2026-06-04 10:10:18 +00:00
Robert
cb1a588b02 Merge pull request #3937 from github/robertbrignull/waitForProcessing_backoff 
Change waitForProcessing to use exponential backoff
 2026-06-04 10:06:49 +00:00
Henry Mercer
ba47406412 Merge pull request #3943 from github/henrymercer/cache-cli-version-info 
Cache CLI version information across Actions steps
 2026-06-04 09:58:34 +00:00
Henry Mercer
5be8119767 Merge pull request #3938 from github/henrymercer/git-client-feature-flag 
Add FF to force JGit-based Git backend
 2026-06-04 09:58:15 +00:00
Robert
6047ac775f Merge branch 'main' into robertbrignull/waitForProcessing_backoff 2026-06-04 10:35:04 +01:00
github-actions[bot]
af7b8f37ea Rebuild 2026-06-04 02:43:57 +00:00
dependabot[bot]
3569f75599 Bump ruby/setup-ruby 
Bumps the actions-minor group with 1 update in the /.github/workflows directory: [ruby/setup-ruby](https://github.com/ruby/setup-ruby).


Updates `ruby/setup-ruby` from 1.307.0 to 1.310.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](6aaa311d81...afeafc3d1a)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-version: 1.310.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-04 02:42:04 +00:00
github-actions[bot]
acb38f7265 Rebuild 2026-06-04 02:40:00 +00:00
dependabot[bot]
dd9e36c0d3 Bump the npm-minor group across 1 directory with 2 updates 
Bumps the npm-minor group with 2 updates in the / directory: [semver](https://github.com/npm/node-semver) and [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint).


Updates `semver` from 7.8.0 to 7.8.1
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](https://github.com/npm/node-semver/compare/v7.8.0...v7.8.1)

Updates `typescript-eslint` from 8.59.4 to 8.60.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.60.0/packages/typescript-eslint)

---
updated-dependencies:
- dependency-name: semver
  dependency-version: 7.8.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: typescript-eslint
  dependency-version: 8.60.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-04 02:38:09 +00:00
Henry Mercer
5ccef82244 Address review comments 2026-06-03 18:31:11 +01:00
Henry Mercer
2ceebd64c4 Merge pull request #3945 from github/henrymercer/pin-actions-to-shas 
Pin first-party Actions to SHAs
 2026-06-03 17:09:52 +00:00
Henry Mercer
fd3f10809d Update sync-back script 
This is intended as a workaround until https://github.com/github/codeql-action/pull/3556 is merged.
 2026-06-03 17:21:10 +01:00
Henry Mercer
87f4948cb0 Pin first-party Actions 2026-06-03 17:19:36 +01:00
Henry Mercer
bab673d0e0 Cache CLI version information across Actions steps 2026-06-02 19:27:05 +01:00
Henry Mercer
8ed7f7c384 Merge pull request #3941 from github/mergeback/v4.36.1-to-main-87557b9c 
Mergeback v4.36.1 refs/heads/releases/v4 into main
 2026-06-02 10:35:51 +00:00
github-actions[bot]
0ad7c1f95e Rebuild 2026-06-02 10:09:37 +00:00
github-actions[bot]
25c25b5e09 Update changelog and version after v4.36.1 2026-06-02 10:09:22 +00:00
Henry Mercer
87557b9c84 Merge pull request #3940 from github/update-v4.36.1-2a1689ed4 
Merge main into releases/v4
v4.36.1 		2026-06-02 11:07:55 +01:00
github-actions[bot]
9431011964 Update changelog for v4.36.1 2026-06-02 09:50:57 +00:00
Henry Mercer
2a1689ed43 Merge pull request #3939 from github/henrymercer/skip-overlay-revert-when-explicit 
Disable missing diff-ranges fallback when overlay enabled manually
 2026-06-01 17:25:10 +00:00
Robert
d40e417f3c Only do initial wait when not running tests 2026-06-01 16:43:42 +01:00
Henry Mercer
524532393a Disable missing diff-ranges fallback when overlay enabled manually 2026-06-01 15:34:08 +01:00
Henry Mercer
948a63aed1 Add FF to force JGit-based Git backend 2026-06-01 15:20:13 +01:00
Henry Mercer
d1eb1207b4 Merge pull request #3933 from github/update-supported-enterprise-server-versions 
Update supported GitHub Enterprise Server versions
 2026-05-29 11:10:43 +00:00
Michael B. Gale
115001ba8d Merge pull request #3934 from github/dependabot/npm_and_yarn/npm-minor-86fb5ccea6 
Bump the npm-minor group across 1 directory with 2 updates
 2026-05-28 14:53:43 +00:00
Michael B. Gale
cef2e7a910 Merge pull request #3925 from github/dependabot/github_actions/dot-github/workflows/actions-minor-da8be134b1 
Bump ruby/setup-ruby from 1.306.0 to 1.307.0 in /.github/workflows in the actions-minor group across 1 directory
 2026-05-28 13:59:27 +00:00
Michael B. Gale
5e6adf70ed Merge pull request #3936 from github/dependabot/npm_and_yarn/tmp-0.2.7 
Bump tmp from 0.2.4 to 0.2.7
 2026-05-28 13:54:02 +00:00
Michael B. Gale
ad170e6c4e Merge branch 'main' into dependabot/github_actions/dot-github/workflows/actions-minor-da8be134b1 2026-05-28 14:48:30 +01:00
Robert
dfc14113e3 Change waitForProcessing to use exponential backoff 2026-05-28 11:15:07 +01:00
github-actions[bot]
6a37b3a57a Rebuild 2026-05-28 02:48:34 +00:00
dependabot[bot]
bef1eb7126 Bump tmp from 0.2.4 to 0.2.7 
Bumps [tmp](https://github.com/raszi/node-tmp) from 0.2.4 to 0.2.7.
- [Changelog](https://github.com/raszi/node-tmp/blob/master/CHANGELOG.md)
- [Commits](https://github.com/raszi/node-tmp/compare/v0.2.4...v0.2.7)

---
updated-dependencies:
- dependency-name: tmp
  dependency-version: 0.2.7
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-28 02:46:38 +00:00
dependabot[bot]
b42b7546a5 Bump the npm-minor group across 1 directory with 2 updates 
Bumps the npm-minor group with 2 updates in the / directory: [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) and [tsx](https://github.com/privatenumber/tsx).


Updates `typescript-eslint` from 8.59.3 to 8.59.4
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.59.4/packages/typescript-eslint)

Updates `tsx` from 4.21.0 to 4.22.3
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](https://github.com/privatenumber/tsx/compare/v4.21.0...v4.22.3)

---
updated-dependencies:
- dependency-name: typescript-eslint
  dependency-version: 8.59.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: tsx
  dependency-version: 4.22.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-27 20:06:49 +00:00
github-actions[bot]
8b0c522441 Update supported GitHub Enterprise Server versions 2026-05-27 00:44:49 +00:00
Michael B. Gale
0e150e4076 Merge pull request #3921 from github/dependabot/npm_and_yarn/npm-minor-28e225f5ad 
Bump the npm-minor group across 1 directory with 6 updates
 2026-05-22 14:35:33 +00:00
Michael B. Gale
8a1e375368 Merge branch 'main' into dependabot/npm_and_yarn/npm-minor-28e225f5ad 2026-05-22 15:08:30 +01:00
Óscar San José
0fb8a6672b Merge pull request #3928 from github/mergeback/v4.36.0-to-main-7211b7c8 
Mergeback v4.36.0 refs/heads/releases/v4 into main
 2026-05-22 11:28:10 +00:00