github/codeql-action
1
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2026-11-14 00:31:27 +00:00
Code Issues Packages Projects Releases Wiki Activity
11,143 Commits 489 Branches 602 Tags
a8ec27f3dad06444249223bb4f5ecf541602242a
Commit Graph

11143 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Copilot
a8ec27f3da [Copilot Dreaming] Reduce upkeep by removing duplicate build descriptions 
Maintainers have two copies of the compilation and tracked-output
descriptions to update when the build layout changes. The same Copilot
reader already receives both descriptions in the overview, so removing
the repeated narration avoids that extra upkeep.
3ea37a44b6/.github/copilot-instructions.md (L8-L10)

No prohibition, check, or limit is removed. Generated-code review
exclusions and freshness-check guidance still apply in Generated code.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
 2026-11-13 17:43:52 +00:00
Mario Campos
3ea37a44b6 Merge pull request #4217 from github/mario-campos/warn-on-changelog-write 
Add `post-comment` Action
 2026-11-11 04:38:32 +00:00
Henry Mercer
592d162ba3 Merge pull request #4312 from github/henrymercer/all-platform-bundle-checks 
Make the "All-platform bundle" PR check use the all-platform bundle
 2026-11-10 18:07:39 +00:00
Henry Mercer
4e3aa4135f Remove the CodeQL Bundle All PR check, which duplicates all-platform-bundle 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-11-09 17:13:44 +00:00
Henry Mercer
91bae3ac68 Check that the all-platform-bundle PR check uses an all-platform bundle 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-11-09 17:13:32 +00:00
Henry Mercer
cfb3940966 Respect use-all-platform-bundle for the latest nightly in prepare-test 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-11-09 17:13:08 +00:00
Michael B. Gale
fbfa9f3747 Merge pull request #4311 from github/henrymercer/exclude-notify-from-required-checks 
Exclude `Notify` from required checks
 2026-11-09 13:24:24 +00:00
Henry Mercer
ce8b5602e2 Merge pull request #4302 from github/henrymercer/toolcache-cleanup-duration 
Report how long toolcache cleanup takes
 2026-11-09 12:03:29 +00:00
Henry Mercer
e4ce43d857 Merge pull request #4309 from github/henrymercer/replace-macos-14-xlarge-runner 
Remove `macos-14-xlarge` from `codeql` workflow
 2026-11-09 11:54:44 +00:00
Henry Mercer
822e91c47d Exclude Notify from required checks 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-11-06 18:24:29 +00:00
Henry Mercer
d2a785ca9c Remove macos-14-xlarge from codeql workflow 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-11-06 18:17:27 +00:00
Sam Robson
0911ee96d2 Merge pull request #4303 from github/mergeback/v4.39.3-to-main-33d7b85d 
Mergeback v4.39.3 refs/heads/releases/v4 into main
 2026-11-04 17:52:12 +00:00
github-actions[bot]
d11b2246b1 Rebuild 2026-11-04 16:49:37 +00:00
github-actions[bot]
8e42d3873f Update changelog and version after v4.39.3 2026-11-04 16:49:21 +00:00
Sam Robson
33d7b85da1 Merge pull request #4299 from github/update-v4.39.3-064910ba2 
Merge main into releases/v4
v4 v4.39.3 		2026-11-04 16:47:01 +00:00
Michael B. Gale
8aab3d8601 Merge pull request #4298 from github/mbg/decouple-features-enum 
Move `Feature` enum to a separate file
 2026-11-04 15:50:28 +00:00
github-actions[bot]
24393f8692 Update changelog for v4.39.3 2026-11-04 15:21:56 +00:00
Henry Mercer
e70c0414bf Record how long the toolcache cleanup takes in telemetry 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-11-04 14:31:49 +00:00
Henry Mercer
e7ce43a4dc Log how long deleting each CodeQL version from the toolcache takes 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-11-04 14:27:07 +00:00
Michael B. Gale
064910ba27 Merge pull request #4297 from github/mbg/update-glob 
Update `glob` to `14.0.3`
 2026-11-04 13:56:56 +00:00
Michael B. Gale
29ddace71d Move Feature enum to a separate file 2026-11-04 13:14:15 +00:00
Michael B. Gale
f532ac5951 Update glob to 14.0.3 2026-11-04 13:08:55 +00:00
Michael B. Gale
8cd4dfa419 Merge pull request #4280 from github/mbg/ci/validate-yaml 
Consistently format YAML and add CI check
 2026-11-04 12:16:33 +00:00
Michael B. Gale
cea289b432 Return different exit code when a language is not recognised 2026-11-04 11:58:17 +00:00
Michael B. Gale
7287bb3627 Remove exclude entry that's no longer needed 2026-11-04 11:57:34 +00:00
Michael B. Gale
8eb7cdf7ab Use normal .editorconfig pattern 2026-11-04 11:57:07 +00:00
Michael B. Gale
160e5474d2 Merge remote-tracking branch 'origin/main' into mbg/ci/validate-yaml 2026-11-04 11:56:23 +00:00
Sam Robson
913e1bb775 Merge pull request #4283 from github/sam-robson/decode-diff-informed-sarif-uris 
fix: decode SARIF location URIs in diff-informed alert filtering
 2026-11-03 19:47:09 +00:00
Mario Campos
05870b623f Defer workflow activation to a follow-up PR 
Keep the post-comment implementation independent of the workflow that loads it from main.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-11-03 11:13:53 -06:00
Michael B. Gale
c5320e3a8a Merge pull request #4288 from github/dependabot/npm_and_yarn/node-forge-1.4.1 
Bump node-forge from 1.4.0 to 1.4.1
 2026-11-03 15:53:37 +00:00
Michael B. Gale
875ac0c36c Merge pull request #4287 from github/dependabot/npm_and_yarn/pr-checks/glob-14.0.3 
Bump glob from 13.0.6 to 14.0.3 in /pr-checks
 2026-11-03 15:49:12 +00:00
github-actions[bot]
d0468de4ad Rebuild 2026-11-03 15:38:38 +00:00
Michael B. Gale
6a39e2e9cd Merge branch 'main' into dependabot/npm_and_yarn/pr-checks/glob-14.0.3 2026-11-03 15:36:40 +00:00
Michael B. Gale
7c5ee8eaaf Merge branch 'main' into dependabot/npm_and_yarn/node-forge-1.4.1 2026-11-03 15:33:20 +00:00
Michael B. Gale
1f8cacc390 Merge pull request #4292 from github/mbg/ci/fix-sync-back 
Maintain action versions by workflow in `sync-back.ts`
 2026-11-03 14:27:13 +00:00
Michael B. Gale
8a05ce6067 Update JSDoc for scanGeneratedWorkflows 2026-11-03 13:41:11 +00:00
Michael B. Gale
7bcfa1eeee Merge branch 'main' into mbg/ci/validate-yaml 2026-11-03 12:59:48 +00:00
Michael B. Gale
de3ece651e Merge branch 'main' into mbg/ci/fix-sync-back 2026-11-03 12:58:27 +00:00
Michael B. Gale
cc88e02cc1 Update version of actions/download-artifact in unsupported-macos for consistency 2026-11-03 12:34:09 +00:00
Michael B. Gale
7b8e4ced67 Maintain action versions by workflow in sync-back.ts 
This avoids failures on PRs where `sync-back.ts` is run as part of the "Rebuild" job if there are already version inconsistencies on the base branch.
 2026-11-03 12:34:09 +00:00
Henry Mercer
093c0af4c3 Merge pull request #4290 from github/mergeback/v4.39.2-to-main-1fc58d04 
Mergeback v4.39.2 refs/heads/releases/v4 into main
 2026-11-03 11:09:56 +00:00
github-actions[bot]
30626207b6 Rebuild 2026-11-03 10:46:49 +00:00
github-actions[bot]
eb1e5bd7ab Update changelog and version after v4.39.2 2026-11-03 10:46:39 +00:00
Henry Mercer
1fc58d04a4 Merge pull request #4286 from github/update-v4.39.2-c05042115 
Merge main into releases/v4
v4.39.2 		2026-11-03 10:45:07 +00:00
dependabot[bot]
dc4b73f464 Bump node-forge from 1.4.0 to 1.4.1 
Bumps [node-forge](https://github.com/digitalbazaar/forge) from 1.4.0 to 1.4.1.
- [Changelog](https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md)
- [Commits](https://github.com/digitalbazaar/forge/compare/v1.4.0...v1.4.1)

---
updated-dependencies:
- dependency-name: node-forge
  dependency-version: 1.4.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-11-03 10:27:23 +00:00
dependabot[bot]
3b22011a97 Bump glob from 13.0.6 to 14.0.3 in /pr-checks 
Bumps [glob](https://github.com/isaacs/node-glob) from 13.0.6 to 14.0.3.
- [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md)
- [Commits](https://github.com/isaacs/node-glob/compare/v13.0.6...v14.0.3)

---
updated-dependencies:
- dependency-name: glob
  dependency-version: 14.0.3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-11-03 10:27:18 +00:00
github-actions[bot]
d9984814e4 Update changelog for v4.39.2 2026-11-03 10:25:27 +00:00
Henry Mercer
0d5ac7a9b1 Merge pull request #4285 from github/henrymercer/automated-change-notes 
Migrate bundle update workflow to new changenote tooling
 2026-11-03 10:13:30 +00:00
Michael B. Gale
70417cd0ad Merge remote-tracking branch 'origin/main' into mbg/ci/validate-yaml 2026-11-03 10:10:17 +00:00
Henry Mercer
39528452cf Remove unused updateChangelog from bundle-changelog.ts 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-11-02 17:40:43 +00:00