github/codeql-action
1
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2026-11-05 04:29:40 +00:00
Code Issues Packages Projects Releases Wiki Activity
10,887 Commits 486 Branches 602 Tags
bc9bb20aed2af58b032dbc1ada3255b4a7debee0
Commit Graph

10887 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Michael B. Gale
bc9bb20aed Merge pull request #4267 from github/mbg/deps/setup-kotlin 
Address `ubuntu-26.04`-related CI failures
 2026-10-27 11:39:17 +00:00
Michael B. Gale
2908c78a82 Remove Rubocop from deflake workflow 2026-10-27 11:19:11 +00:00
Michael B. Gale
bcc1fbe153 Add comment to debug-artifacts workflows 2026-10-27 11:18:33 +00:00
Michael B. Gale
0b8f4560ec Add comment for the Kotlin version 2026-10-27 10:23:02 +00:00
Michael B. Gale
8fb8b475a9 Consistently use JSDocs in sync.ts 2026-10-27 10:20:12 +00:00
Michael B. Gale
63b184d4bc Improve sync.ts version typing so that check constant becomes an error once removed 2026-10-26 14:33:26 +00:00
Michael B. Gale
34b4917832 Add comment to sync.ts 2026-10-26 14:26:53 +00:00
Michael B. Gale
171607b66f Remove Rubocop workflow 2026-10-26 13:45:49 +00:00
Michael B. Gale
ab743b6301 Install newer version of code-scanning-rubocop 2026-10-26 13:29:56 +00:00
Michael B. Gale
eac0005d0c Temporarily switch old CLI checks to older Ubuntu runner 2026-10-26 13:23:29 +00:00
Michael B. Gale
dd68f130c6 Install a newer Ruby version 2026-10-26 13:23:29 +00:00
Michael B. Gale
ce7d3f7738 Install newer Kotlin version 2026-10-26 13:23:28 +00:00
Michael B. Gale
b913bf6353 Point Dependabot at subdirectories in .github/actions 2026-10-26 12:51:54 +00:00
Michael B. Gale
b63386c3d8 Update setup-kotlin to the latest version 2026-10-26 12:49:37 +00:00
Michael B. Gale
3306ba4df7 Merge pull request #4263 from github/mbg/pr-dequeue-notify 
Add workflow to comment on a PR when it was dequeued
 2026-10-23 12:00:00 +00:00
Henry Mercer
562acf5a94 Merge pull request #4264 from github/henrymercer/exclude-pr-only-checks-from-sync-checks 
Exclude checks that don't always run from the sync script
 2026-10-23 11:30:29 +00:00
Michael B. Gale
37a5faff25 Switch to pull_request.user.login 2026-10-23 12:19:29 +01:00
Michael B. Gale
54b2801f20 Merge branch 'main' into mbg/pr-dequeue-notify 2026-10-22 17:33:56 +01:00
Michael B. Gale
040890448b Add workflow to comment on a PR when it was dequeued 2026-10-22 16:11:13 +01:00
Henry Mercer
c1ab1b4065 Don't require github-advanced-security or License compliance check 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-22 15:13:50 +01:00
Henry Mercer
c2293b32da Merge pull request #4244 from github/henrymercer/graduate-per-language-bundles 
Use per-language CodeQL bundles by default
 2026-10-22 14:01:48 +00:00
Michael B. Gale
0acb923c1d Merge pull request #4223 from github/mbg/diagnostics/failed-sarif 
Include diagnostics in failed SARIF if they were created before a database was initialised
 2026-10-22 13:38:57 +00:00
Michael B. Gale
5196baec01 Merge remote-tracking branch 'origin/main' into mbg/diagnostics/failed-sarif 2026-10-22 14:24:21 +01:00
Henry Mercer
bdadc0358c Merge pull request #4246 from github/henrymercer/graduate-overlay-version-match 
Graduate overlay-aware CodeQL version selection
 2026-10-22 12:52:48 +00:00
Michael B. Gale
87da5f37e5 Improve wording to address review feedback 2026-10-22 13:48:48 +01:00
Henry Mercer
6aa7e65207 Merge remote-tracking branch 'origin/main' into henrymercer/graduate-overlay-version-match 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-22 12:40:12 +01:00
Henry Mercer
f033e23010 Clarify why the file baseline check uses a custom configuration 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-22 12:04:37 +01:00
Henry Mercer
0171a2b52f Take a single ActionState parameter in getPerLanguageBundleLanguage 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-22 12:04:37 +01:00
Henry Mercer
626d8b9364 Use toolcache.ts in per-language-bundle-validation.yml 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-22 11:49:39 +01:00
Henry Mercer
922e2ff061 Merge remote-tracking branch 'origin/main' into henrymercer/graduate-per-language-bundles 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-22 11:43:17 +01:00
Michael B. Gale
ac509b698f Merge branch 'main' into mbg/diagnostics/failed-sarif 2026-10-22 11:42:14 +01:00
Michael B. Gale
b484113f11 Merge pull request #4260 from github/dependabot/npm_and_yarn/npm-minor-74c39c9262 
Bump the npm-minor group across 1 directory with 3 updates
 2026-10-22 10:39:44 +00:00
Michael B. Gale
2d0d1c1dcd Merge branch 'main' into mbg/diagnostics/failed-sarif 2026-10-22 11:36:46 +01:00
Michael B. Gale
e0b72fe71a Merge pull request #4261 from github/dependabot/github_actions/dot-github/workflows/actions-minor-4a8da92e94 
Bump the actions-minor group across 1 directory with 3 updates
 2026-10-22 10:34:34 +00:00
Michael B. Gale
b79966a8ee Clean up path functions in diagnostics.ts and add some tests 2026-10-22 11:32:04 +01:00
Henry Mercer
54af742a29 Simplify the condition for overlay-aware version selection 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-22 11:23:40 +01:00
Michael B. Gale
a50b39a27f Merge pull request #4235 from github/mbg/deprecate-getRunnerLogger 
Remove `getRunnerLogger`
 2026-10-22 10:20:15 +00:00
Michael B. Gale
d04fe60a48 Merge pull request #4255 from github/mbg/npm-versions 
Add `toolcache.ts` script for `bundle(-from)-toolcache` checks
 2026-10-22 09:47:21 +00:00
Michael B. Gale
308d941317 Only warn for missing config if init was successful 2026-10-22 10:37:37 +01:00
Michael B. Gale
26f5c5e4e0 Improve logging and error handling in logTemporaryDiagnostics 2026-10-22 10:30:34 +01:00
Michael B. Gale
347d5ce5d5 Trigger workflows 2026-10-22 10:17:39 +01:00
Michael B. Gale
c758339759 Trigger workflows 2026-10-22 10:17:07 +01:00
Michael B. Gale
0a00d0c14f Rename noCodeQLInToolcache 2026-10-21 19:36:54 +01:00
Michael B. Gale
6b344309f7 Log versions if there are some 2026-10-21 19:36:06 +01:00
Michael B. Gale
34f75b50e7 Rename argument 2026-10-21 19:34:35 +01:00
Michael B. Gale
487ba2e156 Merge branch 'main' into mbg/deprecate-getRunnerLogger 2026-10-21 19:30:29 +01:00
github-actions[bot]
fb5d8688b9 Rebuild 2026-10-21 17:58:09 +00:00
dependabot[bot]
ec3f8658b6 Bump the actions-minor group across 1 directory with 3 updates 
Bumps the actions-minor group with 3 updates in the /.github/workflows directory: [actions/setup-java](https://github.com/actions/setup-java), [ruby/setup-ruby](https://github.com/ruby/setup-ruby) and [actions/create-github-app-token](https://github.com/actions/create-github-app-token).


Updates `actions/setup-java` from 6.0.1 to 6.1.0
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](de7274f081...b843ebf9b9)

Updates `ruby/setup-ruby` from 1.327.0 to 1.329.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](14594264cd...651ff0d62c)

Updates `actions/create-github-app-token` from 3.2.0 to 3.3.0
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md)
- [Commits](bcd2ba4921...64ab729a62)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
- dependency-name: ruby/setup-ruby
  dependency-version: 1.329.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
- dependency-name: actions/create-github-app-token
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-10-21 17:56:03 +00:00
dependabot[bot]
d1db36d302 Bump the npm-minor group across 1 directory with 3 updates 
Bumps the npm-minor group with 3 updates in the / directory: [uuid](https://github.com/uuidjs/uuid), [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc) and [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint).


Updates `uuid` from 14.0.2 to 14.0.3
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](https://github.com/uuidjs/uuid/compare/v14.0.2...v14.0.3)

Updates `eslint-plugin-jsdoc` from 65.2.0 to 65.3.4
- [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases)
- [Commits](https://github.com/gajus/eslint-plugin-jsdoc/compare/v65.2.0...v65.3.4)

Updates `typescript-eslint` from 8.71.1 to 8.71.2
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.71.2/packages/typescript-eslint)

---
updated-dependencies:
- dependency-name: uuid
  dependency-version: 14.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: eslint-plugin-jsdoc
  dependency-version: 65.3.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: typescript-eslint
  dependency-version: 8.71.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-10-21 17:54:13 +00:00
Mario Campos
4e7f1a8de7 Merge pull request #4258 from github/mergeback/v4.39.1-to-main-9b325408 
Mergeback v4.39.1 refs/heads/releases/v4 into main
 2026-10-21 16:25:11 +00:00