github/codeql-action
1
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2026-10-21 02:01:27 +00:00
Code Issues Packages Projects Releases Wiki Activity
10,662 Commits 462 Branches 595 Tags
eb94de7c5cfc51dc10fff26d52210eb23a589b0e
Commit Graph

10662 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Henry Mercer
d8251b8572 Merge pull request #4191 from github/henrymercer/ci-job-failure-investigation 
Fix merge conflict handling in the rebuild workflow
 2026-10-05 09:46:01 +00:00
Michael B. Gale
b6d38e563b Merge pull request #4192 from github/mbg/project-changes 
Check `package-lock.json` for wrong addresses
 2026-10-02 17:50:29 +00:00
Michael B. Gale
b948c4d91e Normalise feed URLs in package-lock.json 2026-10-02 18:38:04 +01:00
Michael B. Gale
894842692f Install newer npm in Node 20 workflows 2026-10-02 18:31:31 +01:00
Michael B. Gale
62b0dd96ff Add check for non-public feed URLs 2026-10-02 18:31:30 +01:00
Henry Mercer
c275b4a69e Merge branch 'main' into henrymercer/per-language-pr-check-failures 2026-10-02 17:53:12 +01:00
github-actions[bot]
4d9cd8c21b Rebuild 2026-10-02 16:50:10 +00:00
dependabot[bot]
412197a0f3 Bump ruby/setup-ruby 
Bumps the actions-minor group with 1 update in the /.github/workflows directory: [ruby/setup-ruby](https://github.com/ruby/setup-ruby).


Updates `ruby/setup-ruby` from 1.326.0 to 1.327.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](762794c140...14594264cd)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-version: 1.327.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-10-02 16:48:21 +00:00
Michael B. Gale
0cd78b35d9 Merge pull request #4194 from github/mbg/dependency/downgrade-cache 
Downgrade `@actions/cache` for now
 2026-10-02 16:31:11 +00:00
Michael B. Gale
c26ee0ca71 Merge pull request #4193 from github/mbg/dependabot/uniform-cooldown 
Dependabot: Apply `cooldown` uniformly
 2026-10-02 16:30:54 +00:00
Michael B. Gale
6ce88f6aaf Downgrade @actions/cache 2026-10-02 17:17:40 +01:00
Michael B. Gale
1f8080af29 Add min-release-age=7 to .npmrc 2026-10-02 17:12:09 +01:00
Henry Mercer
56b0d5f02c Fix the rebuild workflow failing when merging the base branch conflicts 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-02 17:11:55 +01:00
Michael B. Gale
b804ae96cc Dependabot: Apply cooldown uniformly 
Remove exceptions for Actions dependencies
 2026-10-02 17:09:26 +01:00
copilot-swe-agent[bot]
a47cc9ff16 Merge remote-tracking branch 'origin/main' into henrymercer/per-language-pr-check-failures 
# Conflicts:
#	lib/entry-points.js

Co-authored-by: henrymercer <14129055+henrymercer@users.noreply.github.com>
 2026-10-02 15:36:15 +00:00
Henry Mercer
27c60c532d Fix detection of merge conflicts outside lib in the rebuild workflow 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-02 16:06:06 +01:00
Michael B. Gale
c535168544 Merge pull request #4189 from github/dependabot/npm_and_yarn/brace-expansion-1.1.21 
Bump brace-expansion from 1.1.18 to 1.1.21
 2026-10-02 14:21:51 +00:00
Michael B. Gale
488027b53c Update comment 2026-10-02 15:11:42 +01:00
Michael B. Gale
dc1f3ac122 Merge remote-tracking branch 'origin/main' into mbg/improve-release-workflow 2026-10-02 15:10:36 +01:00
Michael B. Gale
05d2a1a6fb Trigger workflows 2026-10-02 15:09:03 +01:00
Henry Mercer
f6a7f00613 Point to the Default Setup config schema from the per-language bundle check 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-02 14:42:42 +01:00
Henry Mercer
113b18e688 Parse the config input once 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-02 14:42:42 +01:00
Henry Mercer
e869836b5a Share the check of the properties that Default Setup sets in the config input 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-02 14:24:04 +01:00
Henry Mercer
1c0814d7d2 Parse lists of queries with a single function 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-02 14:22:24 +01:00
Henry Mercer
ce28f3e445 Explain why the file baseline PR check uses the combined bundle 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-02 13:53:53 +01:00
Michael B. Gale
f24d88130e Merge pull request #4183 from github/dependabot/github_actions/dot-github/workflows/actions-minor-f389ef8e3c 
Bump ruby/setup-ruby from 1.323.0 to 1.326.0 in /.github/workflows in the actions-minor group across 1 directory
 2026-10-02 12:19:56 +00:00
Michael B. Gale
f45aab1a23 Trigger workflows 2026-10-02 13:08:36 +01:00
github-actions[bot]
d036b81d95 Rebuild 2026-10-02 09:57:43 +00:00
dependabot[bot]
f306a93590 Bump brace-expansion from 1.1.18 to 1.1.21 
Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 1.1.18 to 1.1.21.
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](https://github.com/juliangruber/brace-expansion/compare/v1.1.18...v1.1.21)

---
updated-dependencies:
- dependency-name: brace-expansion
  dependency-version: 1.1.21
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-10-02 09:55:58 +00:00
Michael B. Gale
ffc4a0cd10 Merge pull request #4182 from github/dependabot/npm_and_yarn/npm-minor-e4df014d00 
Bump the npm-minor group across 1 directory with 4 updates
 2026-10-02 09:41:59 +00:00
github-actions[bot]
d06baaa128 Update supported GitHub Enterprise Server versions 2026-10-02 00:27:53 +00:00
Henry Mercer
a6cd2a544a Check what the config input sets instead of exempting dynamic workflows 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-01 18:10:03 +01:00
Henry Mercer
1bb99cb5c7 Explain what a reason to use the combined bundle means where it's checked 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-01 17:59:09 +01:00
Henry Mercer
725421c272 Explain that the config input can configure queries 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-01 17:59:09 +01:00
Henry Mercer
70897a78fe Reuse the parsing of query inputs when choosing a bundle 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-01 17:59:08 +01:00
Henry Mercer
a4fbe39872 Extract parsing of the queries input and the extra queries repository property 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-01 17:59:08 +01:00
Henry Mercer
a98f604084 Read the config and queries inputs once in init 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-01 17:44:31 +01:00
Henry Mercer
2da0d298e0 Omit the feature flag name from the per-language bundle debug log 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-01 12:00:27 +01:00
Henry Mercer
87a1923fea Use a new feature flag for per-language bundles 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-01 11:48:55 +01:00
github-actions[bot]
222d54a705 Rebuild 2026-09-30 17:57:51 +00:00
dependabot[bot]
cbe61e2f00 Bump ruby/setup-ruby 
Bumps the actions-minor group with 1 update in the /.github/workflows directory: [ruby/setup-ruby](https://github.com/ruby/setup-ruby).


Updates `ruby/setup-ruby` from 1.323.0 to 1.326.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](984c0c8908...762794c140)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-version: 1.326.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-30 17:56:03 +00:00
github-actions[bot]
f1b8b0f7b3 Rebuild 2026-09-30 17:55:56 +00:00
dependabot[bot]
99522b4961 Bump the npm-minor group across 1 directory with 4 updates 
Bumps the npm-minor group with 4 updates in the / directory: [@actions/cache](https://github.com/actions/toolkit/tree/HEAD/packages/cache), [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc), [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) and [tsx](https://github.com/privatenumber/tsx).


Updates `@actions/cache` from 5.2.0 to 5.3.0
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/cache/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/cache)

Updates `eslint-plugin-jsdoc` from 64.5.2 to 64.5.4
- [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases)
- [Commits](https://github.com/gajus/eslint-plugin-jsdoc/compare/v64.5.2...v64.5.4)

Updates `typescript-eslint` from 8.70.0 to 8.70.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.70.1/packages/typescript-eslint)

Updates `tsx` from 4.23.13 to 4.23.15
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](https://github.com/privatenumber/tsx/compare/v4.23.13...v4.23.15)

---
updated-dependencies:
- dependency-name: "@actions/cache"
  dependency-version: 5.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: eslint-plugin-jsdoc
  dependency-version: 64.5.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: typescript-eslint
  dependency-version: 8.70.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: tsx
  dependency-version: 4.23.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-30 17:54:15 +00:00
Henry Mercer
7816c33354 Fix the docs for the languages and analysis-kinds inputs of setup-codeql 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-09-30 16:21:00 +01:00
Henry Mercer
d8b6f2a09b Always use the combined bundle in setup-codeql 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-09-30 15:50:56 +01:00
Henry Mercer
1609a51ab7 Avoid per-language bundles when queries may need other languages' library packs 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-09-30 15:50:55 +01:00
Henry Mercer
5e3132db95 Move defaultSuites to config/db-config.ts 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-09-29 19:32:48 +01:00
Henry Mercer
b5a476b47f Disable per-language bundles in the file baseline PR check 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-09-29 19:31:48 +01:00
Michael B. Gale
61817fadad Merge pull request #4181 from github/mbg/start-proxy/linux-arm64 
Support `linux-arm64` assets in `start-proxy`
 2026-09-29 17:31:06 +00:00
Michael B. Gale
cd1a7c16f0 Use test tags in rollback-release.yml workflow 2026-09-29 17:03:57 +01:00