github/codeql-action
1
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2026-11-13 16:21:26 +00:00
Code Issues Packages Projects Releases Wiki Activity
11,143 Commits 488 Branches 602 Tags
b7384929d0a0aaf4cc5ba409aaa2fa131e043788
Commit Graph

1551 Commits

Author SHA1 Message Date
dependabot[bot]
b7384929d0 Bump the actions-minor group across 1 directory with 2 updates 
Bumps the actions-minor group with 2 updates in the /.github/workflows directory: [actions/setup-dotnet](https://github.com/actions/setup-dotnet) and [actions/setup-java](https://github.com/actions/setup-java).


Updates `actions/setup-dotnet` from 6.0.0 to 6.1.0
- [Release notes](https://github.com/actions/setup-dotnet/releases)
- [Commits](a98b56852c...0f4a354dd5)

Updates `actions/setup-java` from 6.1.0 to 6.2.0
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](b843ebf9b9...77dd5b2ce2)

---
updated-dependencies:
- dependency-name: actions/setup-dotnet
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
- dependency-name: actions/setup-java
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-11-11 17:56:06 +00:00
Mario Campos
3ea37a44b6 Merge pull request #4217 from github/mario-campos/warn-on-changelog-write 
Add `post-comment` Action
 2026-11-11 04:38:32 +00:00
Henry Mercer
4e3aa4135f Remove the CodeQL Bundle All PR check, which duplicates all-platform-bundle 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-11-09 17:13:44 +00:00
Henry Mercer
91bae3ac68 Check that the all-platform-bundle PR check uses an all-platform bundle 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-11-09 17:13:32 +00:00
Henry Mercer
cfb3940966 Respect use-all-platform-bundle for the latest nightly in prepare-test 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-11-09 17:13:08 +00:00
Henry Mercer
d2a785ca9c Remove macos-14-xlarge from codeql workflow 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-11-06 18:17:27 +00:00
Michael B. Gale
160e5474d2 Merge remote-tracking branch 'origin/main' into mbg/ci/validate-yaml 2026-11-04 11:56:23 +00:00
Mario Campos
05870b623f Defer workflow activation to a follow-up PR 
Keep the post-comment implementation independent of the workflow that loads it from main.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-11-03 11:13:53 -06:00
Michael B. Gale
7bcfa1eeee Merge branch 'main' into mbg/ci/validate-yaml 2026-11-03 12:59:48 +00:00
Michael B. Gale
de3ece651e Merge branch 'main' into mbg/ci/fix-sync-back 2026-11-03 12:58:27 +00:00
Michael B. Gale
cc88e02cc1 Update version of actions/download-artifact in unsupported-macos for consistency 2026-11-03 12:34:09 +00:00
Henry Mercer
9bc74b13fb Create a changenote for bundle updates instead of editing the changelog 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-11-02 17:40:43 +00:00
Mario Campos
9d1378fb6e Use new case expression for evaluating conditional --update-only flag 2026-11-02 09:23:54 -06:00
Michael B. Gale
9151e9044f Merge branch 'main' into mbg/ci/validate-yaml 2026-11-02 12:15:05 +00:00
Michael B. Gale
8e175f388e Merge remote-tracking branch 'origin/main' into mbg/ci/typecheck 2026-10-30 16:24:52 +00:00
Mario Campos
d71593936c Replace --create-if-missing to --update-only 
`--update-only` is disabled by default, whereas `--create-if-missing` should've been enabled by default but was not.
 2026-10-30 10:41:05 -05:00
Michael B. Gale
b2e3b75374 Rename to check-unchanged and add YAML check 2026-10-30 15:33:50 +00:00
Michael B. Gale
c8db21e0dc Convert check-js.sh to TypeScript 2026-10-30 15:33:50 +00:00
Michael B. Gale
2c6d525faa Apply consistent YAML formatting 2026-10-30 15:33:50 +00:00
Mario Campos
97a381d7b6 Split long line 2026-10-30 09:51:41 -05:00
Mario Campos
eec64423e6 Make precedence explicit with parens 2026-10-30 09:50:21 -05:00
Mario Campos
a5878670a9 Update actions/setup-node action to version 7.1.0 2026-10-30 09:28:58 -05:00
Mario Campos
1a18e9047f Merge branch 'main' into mario-campos/warn-on-changelog-write 2026-10-30 09:27:10 -05:00
Michael B. Gale
104d2381d1 Update workflows 2026-10-30 14:23:48 +00:00
Michael B. Gale
ea41ba5518 Merge branch 'main' into mbg/avoid-latest 2026-10-30 14:08:07 +00:00
Michael B. Gale
b46c2ee59b Merge pull request #4221 from github/mbg/macos27/warn 
Check for versions of macOS and Xcode that are unsupported for traced analysis
 2026-10-30 13:18:49 +00:00
Michael B. Gale
0aaf198c56 Seperate checks in pr-checks.yml 2026-10-30 11:43:19 +00:00
Michael B. Gale
690197ddd4 Replace macos-latest-xlarge with macos-26-xlarge 2026-10-30 11:39:57 +00:00
Michael B. Gale
5bdb913da1 Rename FF to include "Abort" instead of "Skip" 2026-10-30 11:00:42 +00:00
Mario Campos
68a9dcbb35 Prefer == true over != false 2026-10-29 19:46:00 -05:00
Mario Campos
94f0998581 Avoid creating resolved comments without an existing warning 
Use a boolean --create-if-missing flag, supplied by the composite action by default and omitted for resolution updates.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-29 11:32:57 -05:00
Michael B. Gale
c8bf9adf8a Update hard-coded latest runner labels 2026-10-29 16:25:19 +00:00
Mario Campos
9359b6b571 Wrap --marker argument in HTML comment tags automatically 2026-10-29 10:34:12 -05:00
Mario Campos
87cac24cdd Avoid sparse checkout 
This codebase is a tad coupled; it could end up biting us.
 2026-10-29 10:03:32 -05:00
Mario Campos
2902eeab4d Checkout main instead of PR's base for the post-pr-comments job 2026-10-29 10:01:27 -05:00
Mario Campos
56fa196def Use YAML multiline string for the Action's inputs' descriptions 2026-10-29 09:58:48 -05:00
Mario Campos
36f220a96c Remove unused post-comment step IDs 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-28 16:08:22 -05:00
Mario Campos
03137fc68d Rename changelog outputs to modified 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-28 16:06:08 -05:00
Mario Campos
94488778fd Simplify post-comment to a single set-comment mode 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-28 16:00:37 -05:00
Mario Campos
ae23865548 Move comment branching into workflow steps 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-28 15:53:36 -05:00
Mario Campos
ae9f97bade Make post-comment marker configurable 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-28 15:30:49 -05:00
dependabot[bot]
1b863a0649 Bump actions/setup-python 
Bumps the actions-minor group with 1 update in the /.github/workflows directory: [actions/setup-python](https://github.com/actions/setup-python).


Updates `actions/setup-python` from 7.0.0 to 7.1.0
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](5fda3b95a4...6d4fd22b20)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-10-28 17:57:49 +00:00
Michael B. Gale
b8e636781a Replace -latest with current, corresponding labels in DEFAULT_RUNNER_IMAGES 2026-10-28 16:02:23 +00:00
Michael B. Gale
ad2b30ba0f Use new FF in e2e test 2026-10-28 13:29:20 +00:00
Michael B. Gale
17685f3eba Add e2e test 2026-10-28 13:01:50 +00:00
Michael B. Gale
166cc10f7e Merge pull request #4270 from github/dependabot/github_actions/dot-github/workflows/actions-minor-4af230c318 
Bump actions/download-artifact from 8.0.1 to 8.0.2 in /.github/workflows in the actions-minor group across 1 directory
 2026-10-27 14:06:42 +00:00
Michael B. Gale
16555031e0 Merge pull request #4271 from github/dependabot/github_actions/dot-github/actions/release-initialise/actions/setup-node-7.1.0 
Bump actions/setup-node from 6.4.0 to 7.1.0 in /.github/actions/release-initialise
 2026-10-27 13:37:01 +00:00
Michael B. Gale
5fc537340c Merge branch 'main' into dependabot/github_actions/dot-github/workflows/actions-minor-4af230c318 2026-10-27 13:28:02 +00:00
Henry Mercer
9be075c646 Merge pull request #4273 from github/henrymercer/fix-debug-artifacts-failure-check 
Fix "Debug artifacts after failure" PR check not checking any artifacts
 2026-10-27 13:25:27 +00:00
Michael B. Gale
844a4fa9f9 Merge branch 'main' into dependabot/github_actions/dot-github/actions/release-initialise/actions/setup-node-7.1.0 2026-10-27 13:20:35 +00:00