github/codeql-action
1
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2026-10-21 02:01:27 +00:00
Code Issues Packages Projects Releases Wiki Activity
10,756 Commits 462 Branches 595 Tags
f83967b909b35220e3a9c23ddee5083aa0333305
Commit Graph

10756 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Michael B. Gale
f83967b909 Allow to explicitly not skip the SARIF upload 2026-10-16 12:23:16 +01:00
Michael B. Gale
f80ca03949 Merge branch 'main' into mbg/diagnostics/failed-sarif 2026-10-15 14:26:52 +01:00
Michael B. Gale
7a6e2f798f Merge pull request #4240 from github/mergeback/v4.39.0-to-main-6f2ac81f 
Mergeback v4.39.0 refs/heads/releases/v4 into main
 2026-10-15 11:25:10 +00:00
github-actions[bot]
46d3daa879 Rebuild 2026-10-15 10:57:15 +00:00
github-actions[bot]
2edace40f1 Update changelog and version after v4.39.0 2026-10-15 10:57:06 +00:00
Michael B. Gale
6f2ac81f5c Merge pull request #4239 from github/update-v4.39.0-d63383a73 
Merge main into releases/v4
v4 v4.39.0 		2026-10-15 11:55:44 +01:00
Michael B. Gale
eb1c428e6e Trigger workflows 2026-10-15 11:39:58 +01:00
github-actions[bot]
444333376e Update changelog for v4.39.0 2026-10-15 10:34:02 +00:00
Michael B. Gale
e5b217aeb5 Merge pull request #4238 from github/dependabot/github_actions/dot-github/workflows/actions-minor-c673fd7efc 
Bump the actions-minor group across 1 directory with 3 updates
 2026-10-15 10:26:50 +00:00
Michael B. Gale
d63383a731 Merge pull request #4233 from github/mbg/start-proxy/report-version 
Report release version the proxy is taken from in `start-proxy` telemetry
 2026-10-15 10:15:24 +00:00
Michael B. Gale
8dec0b9f88 Rename path to result in tests 2026-10-15 11:03:10 +01:00
Michael B. Gale
3ec43abae3 Merge branch 'main' into dependabot/github_actions/dot-github/workflows/actions-minor-c673fd7efc 2026-10-15 11:01:21 +01:00
Michael B. Gale
4eabea6b5e Merge remote-tracking branch 'origin/main' into mbg/start-proxy/report-version 2026-10-15 10:31:39 +01:00
Michael B. Gale
57938b8568 Merge pull request #4201 from github/mario-campos/automate-changenotes-assemble 
Incorporate change-notes into CHANGELOG.md at release
 2026-10-15 09:20:41 +00:00
github-actions[bot]
3afe9c01db Rebuild 2026-10-14 21:26:52 +00:00
dependabot[bot]
8844fb33e0 Bump the actions-minor group across 1 directory with 3 updates 
Bumps the actions-minor group with 3 updates in the /.github/workflows directory: [actions/upload-artifact](https://github.com/actions/upload-artifact), [actions/setup-node](https://github.com/actions/setup-node) and [actions/download-artifact](https://github.com/actions/download-artifact).


Updates `actions/upload-artifact` from 7.0.1 to 7.0.2
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](043fb46d1a...cf430e030d)

Updates `actions/setup-node` from 7.0.0 to 7.1.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](8207627860...949feb2413)

Updates `actions/download-artifact` from 8.0.1 to 8.0.2
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](3e5f45b2cf...9000827ccb)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-minor
- dependency-name: actions/setup-node
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
- dependency-name: actions/download-artifact
  dependency-version: 8.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-10-14 21:24:28 +00:00
Michael B. Gale
ee07b503f4 Merge pull request #4236 from github/mbg/add-missing-changenotes 
Add missing change notes for recent PRs
 2026-10-14 15:25:08 +00:00
Michael B. Gale
a897ed5c2e Add change note for #4206 2026-10-14 16:05:40 +01:00
Michael B. Gale
c8bd0195fb Add change note for #4198 2026-10-14 16:03:37 +01:00
Michael B. Gale
c98271eca2 Add change note for #4148 2026-10-14 16:01:09 +01:00
Michael B. Gale
2a3e7563aa Merge pull request #4148 from github/mbg/improve-checkout-path 
Validate `checkout_path` input in `analyze` action
 2026-10-14 14:52:50 +00:00
Michael B. Gale
f460dc7f72 Merge pull request #4206 from github/mbg/set-restore-keys 
Include primary cache keys as restore key
 2026-10-14 14:45:03 +00:00
Michael B. Gale
f5b8e09db2 Merge pull request #4198 from github/mbg/start-proxy/deprecate-fallback 
Use `setup-codeql` logic for finding release assets in `start-proxy`
 2026-10-14 14:39:32 +00:00
Michael B. Gale
28d5dd9818 Revert "Allow logging functions to accept string[] directly" 
This reverts commit 909fda1468.
 2026-10-14 15:07:40 +01:00
Michael B. Gale
962aaad938 Rename proxyBin to proxyDir 2026-10-14 13:58:37 +01:00
Michael B. Gale
71ad3a794a Fix typo in log message 2026-10-14 13:57:43 +01:00
Michael B. Gale
9da96258e6 Merge remote-tracking branch 'origin/main' into mbg/start-proxy/deprecate-fallback 2026-10-14 13:56:57 +01:00
Henry Mercer
2b07ff4ed2 Merge pull request #4208 from github/dependabot/npm_and_yarn/octokit/plugin-paginate-rest-16.0.0 
Bump @octokit/plugin-paginate-rest from 15.0.0 to 16.0.0
 2026-10-14 10:22:18 +00:00
Henry Mercer
85944e0b34 Merge pull request #4234 from github/dependabot/npm_and_yarn/npm-minor-2d4d2c9463 
Bump the npm-minor group across 1 directory with 7 updates
 2026-10-14 10:21:43 +00:00
Michael B. Gale
4f747696ca Merge branch 'main' into mbg/improve-checkout-path 2026-10-14 10:57:57 +01:00
github-actions[bot]
25fe42ad78 Rebuild 2026-10-14 09:51:41 +00:00
dependabot[bot]
efdb69c1d7 Bump the npm-minor group across 1 directory with 7 updates 
Bumps the npm-minor group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@actions/cache](https://github.com/actions/toolkit/tree/HEAD/packages/cache) | `5.2.0` | `5.3.0` |
| [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.16.0` | `1.16.1` |
| [js-yaml](https://github.com/nodeca/js-yaml) | `5.4.2` | `5.4.3` |
| [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc) | `65.0.1` | `65.2.0` |
| [globals](https://github.com/sindresorhus/globals) | `17.12.0` | `17.13.0` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.70.1` | `8.71.1` |
| [mdast-util-from-markdown](https://github.com/syntax-tree/mdast-util-from-markdown) | `2.0.3` | `2.1.0` |



Updates `@actions/cache` from 5.2.0 to 5.3.0
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/cache/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/cache)

Updates `follow-redirects` from 1.16.0 to 1.16.1
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases)
- [Commits](https://github.com/follow-redirects/follow-redirects/compare/v1.16.0...v1.16.1)

Updates `js-yaml` from 5.4.2 to 5.4.3
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/compare/5.4.2...5.4.3)

Updates `eslint-plugin-jsdoc` from 65.0.1 to 65.2.0
- [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases)
- [Commits](https://github.com/gajus/eslint-plugin-jsdoc/compare/v65.0.1...v65.2.0)

Updates `globals` from 17.12.0 to 17.13.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](https://github.com/sindresorhus/globals/compare/v17.12.0...v17.13.0)

Updates `typescript-eslint` from 8.70.1 to 8.71.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.71.1/packages/typescript-eslint)

Updates `mdast-util-from-markdown` from 2.0.3 to 2.1.0
- [Release notes](https://github.com/syntax-tree/mdast-util-from-markdown/releases)
- [Commits](https://github.com/syntax-tree/mdast-util-from-markdown/compare/2.0.3...2.1.0)

---
updated-dependencies:
- dependency-name: "@actions/cache"
  dependency-version: 5.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: follow-redirects
  dependency-version: 1.16.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: js-yaml
  dependency-version: 5.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: eslint-plugin-jsdoc
  dependency-version: 65.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: globals
  dependency-version: 17.13.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: typescript-eslint
  dependency-version: 8.71.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: mdast-util-from-markdown
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-10-14 09:49:53 +00:00
Michael B. Gale
a5e9aebc25 Merge branch 'main' into dependabot/npm_and_yarn/octokit/plugin-paginate-rest-16.0.0 2026-10-14 10:45:53 +01:00
Michael B. Gale
4061d4ea89 Scaffold validation job 2026-10-14 10:35:31 +01:00
Michael B. Gale
d0bbbf819a Log when we didn't get a normal configuration file 2026-10-14 10:35:31 +01:00
Michael B. Gale
0570c2f5e9 Upload failed SARIF as workflow artifact in test mode 2026-10-14 10:35:30 +01:00
Michael B. Gale
a033fca529 Add test for new generateFailedSarif behaviour 2026-10-14 10:35:30 +01:00
Michael B. Gale
6964da9adb Address EXDEV issue 2026-10-14 10:35:30 +01:00
Michael B. Gale
33049e1967 Handle failures in writeTemporaryDiagnosticFile 2026-10-14 10:35:30 +01:00
Michael B. Gale
7e304e9cf7 Refactor writeTemporaryDiagnosticFile out of add[NoLanguage]Diagnostic 2026-10-14 10:35:29 +01:00
Michael B. Gale
555b654c2c Fix typos 2026-10-14 10:35:29 +01:00
Michael B. Gale
1b0a4317e7 Fix hardcoded path separator 2026-10-14 10:35:29 +01:00
Michael B. Gale
89b1f61746 Add e2e test 2026-10-14 10:35:29 +01:00
Michael B. Gale
3d2a6f22f2 Use temporary diagnostic dir in generateFailedSarif 2026-10-14 10:35:28 +01:00
Michael B. Gale
f61e1c4fea Make diagnostics less dependent on global state 
Add limited test coverage
 2026-10-14 10:35:28 +01:00
Michael B. Gale
ed5bb3c5a3 Write diagnostics to temporary location when database isn't ready 2026-10-14 10:35:28 +01:00
Michael B. Gale
bf28f43414 Refactor writeDiagnosticFile out of writeDiagnostic 2026-10-14 10:35:28 +01:00
Michael B. Gale
15800587e3 Add unit test for sendSuccessStatusReport 2026-10-14 10:31:29 +01:00
Michael B. Gale
6aee1f8ef9 Sort registry_types in status report 2026-10-14 10:30:14 +01:00
Michael B. Gale
a7700b5a50 Merge branch 'main' into mario-campos/automate-changenotes-assemble 2026-10-14 10:07:46 +01:00