github/codeql-action
1
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2026-10-03 17:41:28 +00:00
Code Issues Packages Projects Releases Wiki Activity
10,030 Commits 445 Branches 589 Tags
v4.37.3
Commit Graph

10030 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Michael B. Gale
e4fba868fa Merge pull request #4031 from github/update-v4.37.3-72f6a9da0 
Merge main into releases/v4
v4.37.3 		2026-07-22 06:35:10 +01:00
github-actions[bot]
fb50ab5d62 Update changelog for v4.37.3 2026-07-22 05:17:19 +00:00
Michael B. Gale
72f6a9da0d Merge pull request #4030 from github/mbg/fix/no-proxy 
Use default `request` options instead of `undefined`
 2026-07-22 06:11:17 +01:00
Michael B. Gale
3b5ee58597 Use default request options instead of undefined 2026-07-22 05:55:30 +01:00
Henry Mercer
bfb6be4b5e Merge pull request #4028 from github/mergeback/v4.37.2-to-main-e0647621 
Mergeback v4.37.2 refs/heads/releases/v4 into main
 2026-07-21 18:29:45 +00:00
github-actions[bot]
526ab84f98 Rebuild 2026-07-21 16:06:39 +01:00
github-actions[bot]
d6217b9b8c Update changelog and version after v4.37.2 2026-07-21 14:26:50 +00:00
Michael B. Gale
e0647621c2 Merge pull request #4027 from github/update-v4.37.2-385bcdc5a 
Merge main into releases/v4
v4.37.2 		2026-07-21 15:25:12 +01:00
Michael B. Gale
e0faed8391 Add a couple of change notes 2026-07-21 15:06:15 +01:00
github-actions[bot]
73aad0eaa9 Update changelog for v4.37.2 2026-07-21 13:47:43 +00:00
Michael B. Gale
385bcdc5af Merge pull request #4026 from github/dependabot/npm_and_yarn/tar-7.5.20 
Bump tar from 7.5.16 to 7.5.20
 2026-07-21 13:29:48 +00:00
Michael B. Gale
de0229cea1 Merge branch 'main' into dependabot/npm_and_yarn/tar-7.5.20 2026-07-21 14:15:53 +01:00
Michael B. Gale
115e8cbbe9 Merge pull request #4010 from github/mbg/ts/update-release-branch 
Convert `update-release-branch.py` to TypeScript
 2026-07-21 12:57:10 +00:00
dependabot[bot]
dbdf0b0c7d Bump tar from 7.5.16 to 7.5.20 
Bumps [tar](https://github.com/isaacs/node-tar) from 7.5.16 to 7.5.20.
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](https://github.com/isaacs/node-tar/compare/v7.5.16...v7.5.20)

---
updated-dependencies:
- dependency-name: tar
  dependency-version: 7.5.20
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-21 11:39:14 +00:00
Michael B. Gale
830c23121c Merge pull request #4023 from github/mbg/ff/remove-new-remote-file-addresses-ff 
Promote `NewRemoteFileAddresses` FF
 2026-07-21 11:25:34 +00:00
Michael B. Gale
69fd9e97ba Merge pull request #4024 from github/mbg/private-registry/make-docker-available 
Always make `docker_registry` registries available
 2026-07-21 10:58:49 +00:00
Michael B. Gale
b85568788a Always make docker_registry registries available 2026-07-20 19:56:46 +01:00
Michael B. Gale
dd35309c87 Remove explicit FF from start-proxy check 2026-07-20 11:23:22 +01:00
Michael B. Gale
da21ad6a71 Remove NewRemoteFileAddresses FF and default to its behaviour 2026-07-20 11:22:34 +01:00
Michael B. Gale
cf463419fd Merge pull request #4007 from github/mbg/use-registry-proxy-for-repo-auth 
Use private registry proxy for API requests when available
 2026-07-17 14:03:28 +00:00
Michael B. Gale
7db34ae6f4 Refactor looking up proxy env vars into getRegistryProxyConfig. 
This makes that function testable.
 2026-07-17 13:48:49 +01:00
Michael B. Gale
8125f87336 Remove unused getApiFetch 2026-07-16 21:34:10 +01:00
Óscar San José
7c4a258544 Merge pull request #4021 from github/mergeback/v4.37.1-to-main-7188fc36 
Mergeback v4.37.1 refs/heads/releases/v4 into main
 2026-07-16 16:22:12 +00:00
github-actions[bot]
0297913805 Rebuild 2026-07-16 15:35:21 +00:00
github-actions[bot]
1226301537 Update changelog and version after v4.37.1 2026-07-16 15:35:09 +00:00
Óscar San José
7188fc3636 Merge pull request #4020 from github/update-v4.37.1-9e7c07009 
Merge main into releases/v4
v4.37.1 		2026-07-16 17:33:33 +02:00
github-actions[bot]
c8b5f69be6 Update changelog for v4.37.1 2026-07-16 15:02:41 +00:00
Michael B. Gale
9e7c070092 Merge pull request #4014 from github/mbg/explicit-remote-prefix 
Add support for an explicit remote path prefix
 2026-07-16 11:58:30 +00:00
Michael B. Gale
4292bd7215 Remove unneeded type assertion now that ApiClient exists 2026-07-16 12:54:34 +01:00
Michael B. Gale
7b19180f8d Merge remote-tracking branch 'origin/main' into mbg/use-registry-proxy-for-repo-auth 2026-07-16 12:48:24 +01:00
Michael B. Gale
3492b7e9ab Change REMOTE_PATH_PREFIX to remote= 2026-07-16 12:43:48 +01:00
Michael B. Gale
3654baa924 Merge remote-tracking branch 'origin/main' into mbg/explicit-remote-prefix 2026-07-16 12:41:37 +01:00
Michael B. Gale
2d682ac05f Merge pull request #4017 from github/dependabot/github_actions/dot-github/workflows/actions-minor-059448b906 
Bump ruby/setup-ruby from 1.315.0 to 1.316.0 in /.github/workflows in the actions-minor group across 1 directory
 2026-07-16 11:08:08 +00:00
Michael B. Gale
23f6a50753 Merge pull request #4009 from github/mbg/action-state/additions 
Add `Api`, `ReadOnlyEnv`, and `Base` state features
 2026-07-16 10:20:43 +00:00
Michael B. Gale
1ee3c75d19 Merge pull request #4018 from github/dependabot/github_actions/dot-github/workflows/actions/setup-node-7.0.0 
Bump actions/setup-node from 6.4.0 to 7.0.0 in /.github/workflows
 2026-07-16 10:11:14 +00:00
Michael B. Gale
e053684dc5 Merge pull request #4015 from github/dependabot/npm_and_yarn/npm-minor-fd2e8365b1 
Bump the npm-minor group across 1 directory with 4 updates
 2026-07-16 10:03:24 +00:00
Óscar San José
6803c5671d Merge pull request #4019 from github/update-bundle/codeql-bundle-v2.26.1 
Update default bundle to 2.26.1
 2026-07-16 09:24:40 +00:00
github-actions[bot]
8507f884db Add changelog note 2026-07-16 09:08:17 +00:00
github-actions[bot]
c31b06d582 Update default bundle to codeql-bundle-v2.26.1 2026-07-16 09:08:11 +00:00
github-actions[bot]
cc5c777dcd Rebuild 2026-07-15 17:59:50 +00:00
github-actions[bot]
c224750821 Rebuild 2026-07-15 17:59:29 +00:00
dependabot[bot]
db76a66b98 Bump actions/setup-node from 6.4.0 to 7.0.0 in /.github/workflows 
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6.4.0 to 7.0.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](48b55a011b...8207627860)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-15 17:57:52 +00:00
dependabot[bot]
c263ed7d83 Bump ruby/setup-ruby 
Bumps the actions-minor group with 1 update in the /.github/workflows directory: [ruby/setup-ruby](https://github.com/ruby/setup-ruby).


Updates `ruby/setup-ruby` from 1.315.0 to 1.316.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](0dafeac902...d45b1a4e94)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-version: 1.316.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-15 17:57:33 +00:00
github-actions[bot]
60e79ccb20 Rebuild 2026-07-15 17:56:43 +00:00
dependabot[bot]
b82a08934e Bump the npm-minor group across 1 directory with 4 updates 
Bumps the npm-minor group with 4 updates in the / directory: [js-yaml](https://github.com/nodeca/js-yaml), [eslint-plugin-github](https://github.com/github/eslint-plugin-github), [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) and [tsx](https://github.com/privatenumber/tsx).


Updates `js-yaml` from 5.2.0 to 5.2.1
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/compare/5.2.0...5.2.1)

Updates `eslint-plugin-github` from 6.0.0 to 6.1.0
- [Release notes](https://github.com/github/eslint-plugin-github/releases)
- [Commits](https://github.com/github/eslint-plugin-github/compare/v6.0.0...v6.1.0)

Updates `typescript-eslint` from 8.62.1 to 8.63.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.63.0/packages/typescript-eslint)

Updates `tsx` from 4.22.4 to 4.23.0
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](https://github.com/privatenumber/tsx/compare/v4.22.4...v4.23.0)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 5.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: eslint-plugin-github
  dependency-version: 6.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: typescript-eslint
  dependency-version: 8.63.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: tsx
  dependency-version: 4.23.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-07-15 17:54:50 +00:00
Michael B. Gale
247ce88c8f Gate changes behind new format FF 2026-07-15 16:14:55 +01:00
Michael B. Gale
decb87044a Rename helper functions 2026-07-15 16:13:02 +01:00
Michael B. Gale
abce6483ea Fix typo in comment 2026-07-15 16:11:50 +01:00
Michael B. Gale
23339952d6 Add expliciit prefix for remote file addresses 2026-07-15 15:59:23 +01:00
Michael B. Gale
57ca205769 Add AssertableTarget interface 2026-07-15 15:58:24 +01:00