github/codeql-action
1
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2026-11-05 04:29:40 +00:00
Code Issues Packages Projects Releases Wiki Activity
10,913 Commits 486 Branches 602 Tags
d433dabfd06559f6ef170033c94dcfbd48fd877f
Commit Graph

10913 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
akream
d433dabfd0 decode SARIF URIs when filtering diff-informed alerts 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Copilot-Session: b1744ae3-8204-4901-8dc7-16368fd6d865
 2026-10-28 12:06:28 +00:00
Michael B. Gale
166cc10f7e Merge pull request #4270 from github/dependabot/github_actions/dot-github/workflows/actions-minor-4af230c318 
Bump actions/download-artifact from 8.0.1 to 8.0.2 in /.github/workflows in the actions-minor group across 1 directory
 2026-10-27 14:06:42 +00:00
Michael B. Gale
16555031e0 Merge pull request #4271 from github/dependabot/github_actions/dot-github/actions/release-initialise/actions/setup-node-7.1.0 
Bump actions/setup-node from 6.4.0 to 7.1.0 in /.github/actions/release-initialise
 2026-10-27 13:37:01 +00:00
Michael B. Gale
5fc537340c Merge branch 'main' into dependabot/github_actions/dot-github/workflows/actions-minor-4af230c318 2026-10-27 13:28:02 +00:00
Henry Mercer
9be075c646 Merge pull request #4273 from github/henrymercer/fix-debug-artifacts-failure-check 
Fix "Debug artifacts after failure" PR check not checking any artifacts
 2026-10-27 13:25:27 +00:00
Michael B. Gale
844a4fa9f9 Merge branch 'main' into dependabot/github_actions/dot-github/actions/release-initialise/actions/setup-node-7.1.0 2026-10-27 13:20:35 +00:00
Henry Mercer
0a3c5e5f2e Merge pull request #4269 from github/dependabot/npm_and_yarn/npm-minor-b59f2173c9 
Bump the npm-minor group across 1 directory with 3 updates
 2026-10-27 13:20:01 +00:00
Michael B. Gale
c9d42955da Merge pull request #4268 from github/mbg/deps/undici-7 
Bump `undici` override to the latest `7.x` version
 2026-10-27 13:14:37 +00:00
Henry Mercer
89dbac699b Merge branch 'main' into dependabot/npm_and_yarn/npm-minor-b59f2173c9 2026-10-27 13:07:20 +00:00
Henry Mercer
8a992c68e8 Merge pull request #4265 from github/henrymercer/notify-enqueuer-on-dequeue 
Ping the user who enqueued a PR when it's removed from the merge queue
 2026-10-27 12:18:27 +00:00
Henry Mercer
c9ae8b94e1 Merge pull request #4266 from github/update-supported-enterprise-server-versions 
Update supported GitHub Enterprise Server versions
 2026-10-27 12:13:51 +00:00
Michael B. Gale
9ff762d747 Merge branch 'main' into henrymercer/notify-enqueuer-on-dequeue 2026-10-27 12:06:11 +00:00
Michael B. Gale
d59d891623 Merge branch 'main' into mbg/deps/undici-7 2026-10-27 12:02:48 +00:00
github-actions[bot]
d1617c5ce4 Rebuild 2026-10-27 11:59:57 +00:00
Henry Mercer
05650bc71b Fix "Debug artifacts after failure" PR check not checking any artifacts 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-27 11:58:02 +00:00
dependabot[bot]
2d923f7a7e Bump actions/setup-node in /.github/actions/release-initialise 
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6.4.0 to 7.1.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](48b55a011b...949feb2413)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-10-27 11:57:40 +00:00
dependabot[bot]
179d51bf56 Bump actions/download-artifact 
Bumps the actions-minor group with 1 update in the /.github/workflows directory: [actions/download-artifact](https://github.com/actions/download-artifact).


Updates `actions/download-artifact` from 8.0.1 to 8.0.2
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v8.0.1...9000827ccba6bdab643e8b6fd33ac0654aef8333)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: 8.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-10-27 11:57:33 +00:00
Henry Mercer
1108171143 Merge branch 'main' into update-supported-enterprise-server-versions 2026-10-27 11:57:20 +00:00
github-actions[bot]
483db645df Rebuild 2026-10-27 11:56:28 +00:00
dependabot[bot]
edc50a623c Bump the npm-minor group across 1 directory with 3 updates 
Bumps the npm-minor group with 3 updates in the / directory: [js-yaml](https://github.com/nodeca/js-yaml), [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc) and [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint).


Updates `js-yaml` from 5.4.3 to 5.5.0
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/compare/5.4.3...5.5.0)

Updates `eslint-plugin-jsdoc` from 65.3.4 to 65.3.15
- [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases)
- [Commits](https://github.com/gajus/eslint-plugin-jsdoc/compare/v65.3.4...v65.3.15)

Updates `typescript-eslint` from 8.71.2 to 8.72.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.0/packages/typescript-eslint)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 5.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: eslint-plugin-jsdoc
  dependency-version: 65.3.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: typescript-eslint
  dependency-version: 8.72.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-10-27 11:54:12 +00:00
Michael B. Gale
bc9bb20aed Merge pull request #4267 from github/mbg/deps/setup-kotlin 
Address `ubuntu-26.04`-related CI failures
 2026-10-27 11:39:17 +00:00
Michael B. Gale
2908c78a82 Remove Rubocop from deflake workflow 2026-10-27 11:19:11 +00:00
Michael B. Gale
bcc1fbe153 Add comment to debug-artifacts workflows 2026-10-27 11:18:33 +00:00
Michael B. Gale
0b8f4560ec Add comment for the Kotlin version 2026-10-27 10:23:02 +00:00
Michael B. Gale
8fb8b475a9 Consistently use JSDocs in sync.ts 2026-10-27 10:20:12 +00:00
Henry Mercer
4a890e46e0 Remove GHES 3.18 from compatibility table 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-26 16:43:21 +00:00
Henry Mercer
bfac910f06 Update CodeQL deprecation warning for GHES 3.18 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-26 16:43:13 +00:00
Michael B. Gale
63b184d4bc Improve sync.ts version typing so that check constant becomes an error once removed 2026-10-26 14:33:26 +00:00
Michael B. Gale
34b4917832 Add comment to sync.ts 2026-10-26 14:26:53 +00:00
Michael B. Gale
171607b66f Remove Rubocop workflow 2026-10-26 13:45:49 +00:00
Michael B. Gale
ab743b6301 Install newer version of code-scanning-rubocop 2026-10-26 13:29:56 +00:00
Michael B. Gale
eac0005d0c Temporarily switch old CLI checks to older Ubuntu runner 2026-10-26 13:23:29 +00:00
Michael B. Gale
dd68f130c6 Install a newer Ruby version 2026-10-26 13:23:29 +00:00
Michael B. Gale
ce7d3f7738 Install newer Kotlin version 2026-10-26 13:23:28 +00:00
Michael B. Gale
515fac0ed0 Configure Dependabot to ignore undici for the moment 2026-10-26 13:00:49 +00:00
Michael B. Gale
39119659f3 Bump undici override to the latest 7.x version 2026-10-26 13:00:39 +00:00
Michael B. Gale
b913bf6353 Point Dependabot at subdirectories in .github/actions 2026-10-26 12:51:54 +00:00
Michael B. Gale
b63386c3d8 Update setup-kotlin to the latest version 2026-10-26 12:49:37 +00:00
github-actions[bot]
fc9487df66 Update supported GitHub Enterprise Server versions 2026-10-24 00:23:30 +00:00
Henry Mercer
49bbf2b590 Ping the user who enqueued a PR when it's removed from the merge queue 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-23 13:30:18 +01:00
Michael B. Gale
3306ba4df7 Merge pull request #4263 from github/mbg/pr-dequeue-notify 
Add workflow to comment on a PR when it was dequeued
 2026-10-23 12:00:00 +00:00
Henry Mercer
562acf5a94 Merge pull request #4264 from github/henrymercer/exclude-pr-only-checks-from-sync-checks 
Exclude checks that don't always run from the sync script
 2026-10-23 11:30:29 +00:00
Michael B. Gale
37a5faff25 Switch to pull_request.user.login 2026-10-23 12:19:29 +01:00
Michael B. Gale
54b2801f20 Merge branch 'main' into mbg/pr-dequeue-notify 2026-10-22 17:33:56 +01:00
Michael B. Gale
040890448b Add workflow to comment on a PR when it was dequeued 2026-10-22 16:11:13 +01:00
Henry Mercer
c1ab1b4065 Don't require github-advanced-security or License compliance check 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-22 15:13:50 +01:00
Henry Mercer
c2293b32da Merge pull request #4244 from github/henrymercer/graduate-per-language-bundles 
Use per-language CodeQL bundles by default
 2026-10-22 14:01:48 +00:00
Michael B. Gale
0acb923c1d Merge pull request #4223 from github/mbg/diagnostics/failed-sarif 
Include diagnostics in failed SARIF if they were created before a database was initialised
 2026-10-22 13:38:57 +00:00
Michael B. Gale
5196baec01 Merge remote-tracking branch 'origin/main' into mbg/diagnostics/failed-sarif 2026-10-22 14:24:21 +01:00
Henry Mercer
bdadc0358c Merge pull request #4246 from github/henrymercer/graduate-overlay-version-match 
Graduate overlay-aware CodeQL version selection
 2026-10-22 12:52:48 +00:00