github/codeql-action
1
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2026-10-03 09:14:58 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • b6d38e563b Merge pull request #4192 from github/mbg/project-changes main default-setup-testing Michael B. Gale 2026-10-02 17:50:29 +00:00
  • b948c4d91e Normalise feed URLs in package-lock.json Michael B. Gale 2026-10-02 18:36:05 +01:00
  • 894842692f Install newer npm in Node 20 workflows Michael B. Gale 2026-10-02 18:17:20 +01:00
  • 62b0dd96ff Add check for non-public feed URLs Michael B. Gale 2026-10-02 16:29:16 +01:00
  • c275b4a69e Merge branch 'main' into henrymercer/per-language-pr-check-failures henrymercer/per-language-pr-check-failures Henry Mercer 2026-10-02 17:53:12 +01:00
  • 4d9cd8c21b Rebuild dependabot/github_actions/dot-github/workflows/actions-minor-e631a66382 github-actions[bot] 2026-10-02 16:50:10 +00:00
  • 412197a0f3 Bump ruby/setup-ruby dependabot[bot] 2026-10-02 16:48:21 +00:00
  • 0cd78b35d9 Merge pull request #4194 from github/mbg/dependency/downgrade-cache Michael B. Gale 2026-10-02 16:31:11 +00:00
  • c26ee0ca71 Merge pull request #4193 from github/mbg/dependabot/uniform-cooldown Michael B. Gale 2026-10-02 16:30:54 +00:00
  • 6ce88f6aaf Downgrade @actions/cache Michael B. Gale 2026-10-02 17:14:01 +01:00
  • 1f8080af29 Add min-release-age=7 to .npmrc Michael B. Gale 2026-10-02 17:12:09 +01:00
  • 56b0d5f02c Fix the rebuild workflow failing when merging the base branch conflicts henrymercer/ci-job-failure-investigation Henry Mercer 2026-10-02 16:06:52 +01:00
  • b804ae96cc Dependabot: Apply cooldown uniformly Michael B. Gale 2026-10-02 17:09:26 +01:00
  • a47cc9ff16 Merge remote-tracking branch 'origin/main' into henrymercer/per-language-pr-check-failures copilot-swe-agent[bot] 2026-10-02 15:36:15 +00:00
  • 27c60c532d Fix detection of merge conflicts outside lib in the rebuild workflow Henry Mercer 2026-10-02 16:06:06 +01:00
  • bac9cb908d Update undici mbg/update-undici Michael B. Gale 2026-10-02 15:51:50 +01:00
  • c535168544 Merge pull request #4189 from github/dependabot/npm_and_yarn/brace-expansion-1.1.21 Michael B. Gale 2026-10-02 14:21:51 +00:00
  • 1099e77a72 Rebuild mergeback/v4.38.3-to-mbg/improve-release-workflow-488027b5 github-actions[bot] 2026-10-02 14:14:33 +00:00
  • 303fff9865 Update changelog and version after v4.38.3 github-actions[bot] 2026-10-02 14:14:25 +00:00
  • 488027b53c Update comment mbg/improve-release-workflow Michael B. Gale 2026-10-02 15:11:42 +01:00
  • dc1f3ac122 Merge remote-tracking branch 'origin/main' into mbg/improve-release-workflow Michael B. Gale 2026-10-02 15:10:36 +01:00
  • 05d2a1a6fb Trigger workflows Michael B. Gale 2026-10-02 15:09:03 +01:00
  • f6a7f00613 Point to the Default Setup config schema from the per-language bundle check Henry Mercer 2026-10-02 14:30:02 +01:00
  • 113b18e688 Parse the config input once Henry Mercer 2026-10-02 14:29:22 +01:00
  • e869836b5a Share the check of the properties that Default Setup sets in the config input Henry Mercer 2026-10-02 14:24:04 +01:00
  • 1c0814d7d2 Parse lists of queries with a single function Henry Mercer 2026-10-02 14:22:24 +01:00
  • ce28f3e445 Explain why the file baseline PR check uses the combined bundle Henry Mercer 2026-10-02 13:49:21 +01:00
  • f24d88130e Merge pull request #4183 from github/dependabot/github_actions/dot-github/workflows/actions-minor-f389ef8e3c Michael B. Gale 2026-10-02 12:19:56 +00:00
  • f45aab1a23 Trigger workflows Michael B. Gale 2026-10-02 13:08:36 +01:00
  • d036b81d95 Rebuild github-actions[bot] 2026-10-02 09:57:43 +00:00
  • f306a93590 Bump brace-expansion from 1.1.18 to 1.1.21 dependabot[bot] 2026-10-02 09:55:58 +00:00
  • ffc4a0cd10 Merge pull request #4182 from github/dependabot/npm_and_yarn/npm-minor-e4df014d00 Michael B. Gale 2026-10-02 09:41:59 +00:00
  • d06baaa128 Update supported GitHub Enterprise Server versions update-supported-enterprise-server-versions github-actions[bot] 2026-10-02 00:27:53 +00:00
  • a6cd2a544a Check what the config input sets instead of exempting dynamic workflows Henry Mercer 2026-10-01 17:59:47 +01:00
  • 1bb99cb5c7 Explain what a reason to use the combined bundle means where it's checked Henry Mercer 2026-10-01 17:46:49 +01:00
  • 725421c272 Explain that the config input can configure queries Henry Mercer 2026-10-01 17:46:33 +01:00
  • 70897a78fe Reuse the parsing of query inputs when choosing a bundle Henry Mercer 2026-10-01 17:46:17 +01:00
  • a4fbe39872 Extract parsing of the queries input and the extra queries repository property Henry Mercer 2026-10-01 17:45:31 +01:00
  • a98f604084 Read the config and queries inputs once in init Henry Mercer 2026-10-01 17:44:31 +01:00
  • 2da0d298e0 Omit the feature flag name from the per-language bundle debug log Henry Mercer 2026-10-01 11:20:10 +01:00
  • 87a1923fea Use a new feature flag for per-language bundles Henry Mercer 2026-10-01 10:33:35 +01:00
  • 222d54a705 Rebuild github-actions[bot] 2026-09-30 17:57:51 +00:00
  • cbe61e2f00 Bump ruby/setup-ruby dependabot[bot] 2026-09-30 17:56:03 +00:00
  • f1b8b0f7b3 Rebuild github-actions[bot] 2026-09-30 17:55:56 +00:00
  • 99522b4961 Bump the npm-minor group across 1 directory with 4 updates dependabot[bot] 2026-09-30 17:54:15 +00:00
  • 7816c33354 Fix the docs for the languages and analysis-kinds inputs of setup-codeql Henry Mercer 2026-09-30 16:21:00 +01:00
  • d8b6f2a09b Always use the combined bundle in setup-codeql Henry Mercer 2026-09-30 15:24:35 +01:00
  • 1609a51ab7 Avoid per-language bundles when queries may need other languages' library packs Henry Mercer 2026-09-29 19:38:55 +01:00
  • 5e3132db95 Move defaultSuites to config/db-config.ts Henry Mercer 2026-09-29 19:32:48 +01:00
  • b5a476b47f Disable per-language bundles in the file baseline PR check Henry Mercer 2026-09-29 19:31:48 +01:00
  • 61817fadad Merge pull request #4181 from github/mbg/start-proxy/linux-arm64 Michael B. Gale 2026-09-29 17:31:06 +00:00
  • 2bf5522d9e Rebuild mergeback/v4.38.2-to-mbg/improve-release-workflow-cd1a7c16 github-actions[bot] 2026-09-29 16:07:39 +00:00
  • a66411c7d9 Update changelog and version after v4.38.2 github-actions[bot] 2026-09-29 16:07:31 +00:00
  • cd1a7c16f0 Use test tags in rollback-release.yml workflow Michael B. Gale 2026-09-29 17:03:57 +01:00
  • 8e838ff396 Add tests Michael B. Gale 2026-09-29 16:02:55 +01:00
  • 10e476ce02 Fix values used in log message Michael B. Gale 2026-09-29 16:02:49 +01:00
  • fc2d2f7d2d Make ActionState available to getDownloadUrl Michael B. Gale 2026-09-28 19:32:12 +01:00
  • 62a2268b34 Use getBundlePlatform in getDownloadUrl Michael B. Gale 2026-09-28 16:55:43 +01:00
  • 97a91d9861 Make platform+arch available in BaseState Michael B. Gale 2026-09-28 19:03:35 +01:00
  • 85c0c095cb Merge pull request #4178 from github/mbg/use-api-error-classification-more Michael B. Gale 2026-09-28 15:26:45 +00:00
  • c2215db9ae Update git-utils tests mbg/improve-checkout-path Michael B. Gale 2026-09-28 10:51:26 +01:00
  • 5769ffc476 Merge remote-tracking branch 'origin/main' into mbg/improve-checkout-path Michael B. Gale 2026-09-28 10:49:13 +01:00
  • 503e2f62a9 Add test for repeated wrapApiConfigurationError Michael B. Gale 2026-09-28 10:38:14 +01:00
  • 260cb2adcf Break up wrapApiConfigurationError tests Michael B. Gale 2026-09-28 10:20:27 +01:00
  • 31252c2639 Change wrapApiConfigurationError to not be serial Michael B. Gale 2026-09-28 10:11:34 +01:00
  • 9bd4b5ea8f Add the PR link to the changelog entry henrymercer/release-url-tools-input Henry Mercer 2026-09-25 19:25:46 +01:00
  • c1e8d8d12c Reuse the toolcache for stable releases in the CodeQL Action repositories Henry Mercer 2026-09-25 17:46:14 +01:00
  • 17f14786a5 Extract the default bundle sources from selectDefaultBundle Henry Mercer 2026-09-25 17:45:42 +01:00
  • 0e574bc821 Accept GitHub release URLs in the tools input Henry Mercer 2026-09-25 17:44:56 +01:00
  • 4cea925541 Look up releases requested by URL Henry Mercer 2026-09-25 17:41:59 +01:00
  • e8f5d72ffe Read the CLI version of a release from its assets Henry Mercer 2026-09-25 17:41:13 +01:00
  • 4a4922e538 Parse GitHub release URLs Henry Mercer 2026-09-25 17:40:24 +01:00
  • 78a5dc251b Extract the toolcache lookup from getCodeQLSource Henry Mercer 2026-09-25 17:39:02 +01:00
  • db99327672 Document how the CodeQL tools are versioned in the toolcache Henry Mercer 2026-09-25 17:37:13 +01:00
  • 1991d2001e Use wrapApiConfigurationError in init-action-post error handler Michael B. Gale 2026-09-25 18:21:45 +01:00
  • 0af3281195 Use gitHubVersion from config if available in init-action-post Michael B. Gale 2026-09-25 18:17:29 +01:00
  • 8dfe937b99 Use wrapApiConfigurationError for getGitHubVersionFromApi Michael B. Gale 2026-09-25 18:14:47 +01:00
  • 8102666a8c Improve return type for wrapApiConfigurationError and add docs Michael B. Gale 2026-09-25 18:12:23 +01:00
  • 7f964a9e6e Select the default bundle from the first compatible release henrymercer/select-bundles-from-releases Henry Mercer 2026-09-24 15:38:23 +01:00
  • 027ab3179c Test falling back to the public release for the default bundle Henry Mercer 2026-09-24 15:37:43 +01:00
  • caa2cae2fb Record per-language bundle fallbacks on the download source Henry Mercer 2026-09-24 15:23:35 +01:00
  • ffc453273e Select the latest nightly bundle with selectBundle Henry Mercer 2026-09-24 15:22:24 +01:00
  • 303b251f60 Pass tarSupportsZstd to getLatestNightlyBundle Henry Mercer 2026-09-24 15:21:06 +01:00
  • f03d2dfd0b Add helpers for selecting a CodeQL bundle from a release Henry Mercer 2026-09-24 15:19:37 +01:00
  • 6393cd425b Document how getCodeQLSource handles the tools input Henry Mercer 2026-09-25 17:03:18 +01:00
  • 7b6a151fb5 Merge pull request #4177 from github/mbg/version-check/recommend-dependabot-grouping Michael B. Gale 2026-09-25 15:14:03 +00:00
  • 29b01b6799 Point at Dependabot groups docs in version mismatch error Michael B. Gale 2026-09-25 15:59:36 +01:00
  • fa2bea7c7a Merge pull request #4176 from github/mbg/start-proxy/improve-post-githubversion-logic Michael B. Gale 2026-09-25 14:39:40 +00:00
  • 9fb2fa5f46 Avoid duplicate getApiDetails in getGitHubVersion Michael B. Gale 2026-09-25 15:02:13 +01:00
  • 054b25e1c2 Remove unnecessary config check Michael B. Gale 2026-09-25 14:58:43 +01:00
  • 6ec2b18519 Rename logPerLanguageBundleFallback to logMissingPerLanguageBundle Henry Mercer 2026-09-24 13:04:04 +01:00
  • fa8392b7e5 Merge pull request #4161 from github/mbg/improve-json-failures Michael B. Gale 2026-09-24 11:18:23 +00:00
  • 38c1d74ffa Merge remote-tracking branch 'origin/main' into mbg/improve-json-failures Michael B. Gale 2026-09-24 12:06:30 +01:00
  • 19aa55de51 Log error in getTracerConfigForCluster instead of re-throwing it Michael B. Gale 2026-09-24 12:06:01 +01:00
  • 1190a975f9 Merge pull request #4171 from github/backport-v3.38.2-2892aa5e1 v3.38.2 v3 releases/v3 Michael B. Gale 2026-09-24 12:00:34 +01:00
  • a7334dd080 Merge pull request #4170 from github/mergeback/v4.38.2-to-main-2892aa5e Michael B. Gale 2026-09-24 10:45:39 +00:00
  • aa2cb993a1 Merge remote-tracking branch 'origin/main' into mbg/improve-json-failures Michael B. Gale 2026-09-24 11:42:41 +01:00
  • 9c970806c4 Merge pull request #4167 from github/henrymercer/move-bundle-helpers Henry Mercer 2026-09-24 10:40:36 +00:00
  • 415d925fee Fix formatting of mergeback checklist Michael B. Gale 2026-09-24 11:36:37 +01:00
  • b5f938c947 Log error in restoreInputs instead of re-throwing it Michael B. Gale 2026-09-24 11:34:56 +01:00