github/codeql-action
1
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2026-10-29 17:17:15 +00:00
Code Issues Packages Projects Releases Wiki Activity
10,583 Commits 472 Branches 597 Tags
f455295c9bb30e8b7ffc3fa519da0b0bd4880eb2
Commit Graph

10583 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Michael B. Gale
f455295c9b Merge pull request #4169 from github/mbg/improve-release-workflow 
Improve job naming for the release workflow
 2026-10-06 16:15:00 +00:00
Henry Mercer
7265309f7a Merge pull request #4188 from github/update-supported-enterprise-server-versions 
Update supported GitHub Enterprise Server versions
 2026-10-06 14:45:57 +00:00
Henry Mercer
d1ca36fda6 Update CHANGELOG.md 
Co-authored-by: Michael B. Gale <mbg@github.com>
 2026-10-06 14:09:40 +01:00
Henry Mercer
2c8d410c03 Merge pull request #4184 from github/henrymercer/per-language-pr-check-failures 
Use the combined bundle when queries may need other languages' library packs
 2026-10-06 12:06:49 +00:00
Henry Mercer
118af5959a Remove unsupported GHES versions from compatibility table 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-05 17:57:06 +01:00
Henry Mercer
61c3b54338 Update CodeQL deprecation warning for GHES 3.17 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-05 17:55:31 +01:00
Henry Mercer
12db63b222 Explain why the config input test compares with a separate object 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-05 14:24:02 +01:00
Henry Mercer
55e4091e2b Describe what parseUserConfig accepts, returns and throws more precisely 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-05 14:24:02 +01:00
Henry Mercer
8e6b600bd0 Compare originalUserInput with a separate object in the config input test 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-05 14:24:01 +01:00
Henry Mercer
9d3242ebc0 Say that parseUserConfig's pathInput may not be a file path 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-05 14:24:01 +01:00
Henry Mercer
e0b8480262 Parse the config input in init without the parseConfigInput wrapper 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-05 14:24:01 +01:00
Henry Mercer
6cb83faca6 Construct UserConfig objects directly in the config-utils tests 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-05 14:24:01 +01:00
Henry Mercer
a4a04dc476 Explain that the config input is written to disk without merging 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-05 14:24:01 +01:00
Henry Mercer
966f3c3593 Say that the Default Setup config schema reflects what Default Setup is known to send 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-05 14:24:01 +01:00
Henry Mercer
711f3bffae Remove the checkDefaultSetupConfig wrapper around checkSchema 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-05 14:24:01 +01:00
Henry Mercer
ac4b9b891d Return early from parseQueriesFromInput when there are no queries 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-05 14:24:00 +01:00
Henry Mercer
c1e7769cf5 Reword the JSDoc for parseQueriesFromInput 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-05 14:24:00 +01:00
Henry Mercer
1767808e11 Merge pull request #4196 from github/dependabot/github_actions/dot-github/workflows/actions-minor-e631a66382 
Bump ruby/setup-ruby from 1.326.0 to 1.327.0 in /.github/workflows in the actions-minor group across 1 directory
 2026-10-05 10:37:35 +00:00
Michael B. Gale
aeafd00d94 Merge pull request #4197 from github/mbg/vscode/workspace-improvements 
Minor VSCode workspace settings changes
 2026-10-05 10:32:44 +00:00
Michael B. Gale
363d874905 Exclude "tests" folder from workspace 2026-10-05 11:11:58 +01:00
Michael B. Gale
fa90489493 Replace deprecated config key 2026-10-05 11:08:19 +01:00
Henry Mercer
d8251b8572 Merge pull request #4191 from github/henrymercer/ci-job-failure-investigation 
Fix merge conflict handling in the rebuild workflow
 2026-10-05 09:46:01 +00:00
Michael B. Gale
b6d38e563b Merge pull request #4192 from github/mbg/project-changes 
Check `package-lock.json` for wrong addresses
 2026-10-02 17:50:29 +00:00
Michael B. Gale
b948c4d91e Normalise feed URLs in package-lock.json 2026-10-02 18:38:04 +01:00
Michael B. Gale
894842692f Install newer npm in Node 20 workflows 2026-10-02 18:31:31 +01:00
Michael B. Gale
62b0dd96ff Add check for non-public feed URLs 2026-10-02 18:31:30 +01:00
Henry Mercer
c275b4a69e Merge branch 'main' into henrymercer/per-language-pr-check-failures 2026-10-02 17:53:12 +01:00
github-actions[bot]
4d9cd8c21b Rebuild 2026-10-02 16:50:10 +00:00
dependabot[bot]
412197a0f3 Bump ruby/setup-ruby 
Bumps the actions-minor group with 1 update in the /.github/workflows directory: [ruby/setup-ruby](https://github.com/ruby/setup-ruby).


Updates `ruby/setup-ruby` from 1.326.0 to 1.327.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](762794c140...14594264cd)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-version: 1.327.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-10-02 16:48:21 +00:00
Michael B. Gale
0cd78b35d9 Merge pull request #4194 from github/mbg/dependency/downgrade-cache 
Downgrade `@actions/cache` for now
 2026-10-02 16:31:11 +00:00
Michael B. Gale
c26ee0ca71 Merge pull request #4193 from github/mbg/dependabot/uniform-cooldown 
Dependabot: Apply `cooldown` uniformly
 2026-10-02 16:30:54 +00:00
Michael B. Gale
6ce88f6aaf Downgrade @actions/cache 2026-10-02 17:17:40 +01:00
Michael B. Gale
1f8080af29 Add min-release-age=7 to .npmrc 2026-10-02 17:12:09 +01:00
Henry Mercer
56b0d5f02c Fix the rebuild workflow failing when merging the base branch conflicts 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-02 17:11:55 +01:00
Michael B. Gale
b804ae96cc Dependabot: Apply cooldown uniformly 
Remove exceptions for Actions dependencies
 2026-10-02 17:09:26 +01:00
copilot-swe-agent[bot]
a47cc9ff16 Merge remote-tracking branch 'origin/main' into henrymercer/per-language-pr-check-failures 
# Conflicts:
#	lib/entry-points.js

Co-authored-by: henrymercer <14129055+henrymercer@users.noreply.github.com>
 2026-10-02 15:36:15 +00:00
Henry Mercer
27c60c532d Fix detection of merge conflicts outside lib in the rebuild workflow 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-02 16:06:06 +01:00
Michael B. Gale
c535168544 Merge pull request #4189 from github/dependabot/npm_and_yarn/brace-expansion-1.1.21 
Bump brace-expansion from 1.1.18 to 1.1.21
 2026-10-02 14:21:51 +00:00
Michael B. Gale
488027b53c Update comment 2026-10-02 15:11:42 +01:00
Michael B. Gale
dc1f3ac122 Merge remote-tracking branch 'origin/main' into mbg/improve-release-workflow 2026-10-02 15:10:36 +01:00
Michael B. Gale
05d2a1a6fb Trigger workflows 2026-10-02 15:09:03 +01:00
Henry Mercer
f6a7f00613 Point to the Default Setup config schema from the per-language bundle check 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-02 14:42:42 +01:00
Henry Mercer
113b18e688 Parse the config input once 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-02 14:42:42 +01:00
Henry Mercer
e869836b5a Share the check of the properties that Default Setup sets in the config input 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-02 14:24:04 +01:00
Henry Mercer
1c0814d7d2 Parse lists of queries with a single function 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-02 14:22:24 +01:00
Henry Mercer
ce28f3e445 Explain why the file baseline PR check uses the combined bundle 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-10-02 13:53:53 +01:00
Michael B. Gale
f24d88130e Merge pull request #4183 from github/dependabot/github_actions/dot-github/workflows/actions-minor-f389ef8e3c 
Bump ruby/setup-ruby from 1.323.0 to 1.326.0 in /.github/workflows in the actions-minor group across 1 directory
 2026-10-02 12:19:56 +00:00
Michael B. Gale
f45aab1a23 Trigger workflows 2026-10-02 13:08:36 +01:00
github-actions[bot]
d036b81d95 Rebuild 2026-10-02 09:57:43 +00:00
dependabot[bot]
f306a93590 Bump brace-expansion from 1.1.18 to 1.1.21 
Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 1.1.18 to 1.1.21.
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](https://github.com/juliangruber/brace-expansion/compare/v1.1.18...v1.1.21)

---
updated-dependencies:
- dependency-name: brace-expansion
  dependency-version: 1.1.21
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-10-02 09:55:58 +00:00