github/codeql-action
1
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2025-12-29 18:50:25 +08:00
Code Issues Packages Projects Releases Wiki Activity
7,136 Commits 297 Branches 500 Tags
2d7401b8878fa411683aaccf7e7e5169ee02d97d
Commit Graph

7136 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Paolo Tranquilli
2d7401b887 Revert ruamel.yaml back to 0.17.31 
And revert back related changes
 2025-08-11 15:36:42 +02:00
Paolo Tranquilli
28f2516040 Improve Rust analysis PR check 
Also run the `rust` checks on "milestone" CLI releases, to ensure we
remain backward compatible with those versions. This was prompted by
https://github.com/github/codeql-action/pull/2960#pullrequestreview-3104730221

Running this on current `main` and then on that PR should improve our
confidence we remain backward compatible.

It also turns out a probable `ruamel.yaml` update was changing a lot of
generated workflows, so I've:
* fixed the `ruamel.yaml` version to the latest in `sync.sh`
* added `yaml.width = 120` in `sync.py` to minimize (but not entirely
  remove) the number of changes
* checked in the workflows whose formatting was changed by the new
  `ruamel.yaml` version
 2025-08-11 14:58:50 +02:00
Henry Mercer
4474150eef Merge pull request #3020 from github/mergeback/v3.29.8-to-main-76621b61 
Mergeback v3.29.8 refs/heads/releases/v3 into main
 2025-08-08 11:53:05 +01:00
github-actions[bot]
5fabbc2b0d Update checked-in dependencies 2025-08-08 10:39:10 +00:00
github-actions[bot]
9ec8453e11 Update changelog and version after v3.29.8 2025-08-08 10:09:34 +00:00
Henry Mercer
76621b61de Merge pull request #3019 from github/update-v3.29.8-679a40d33 
Merge main into releases/v3
v3.29.8 		2025-08-08 11:09:06 +01:00
Henry Mercer
29ac3cefbb Add release notes for 3.29.7 2025-08-08 10:46:17 +01:00
github-actions[bot]
737cfdebe6 Update changelog for v3.29.8 2025-08-08 09:36:40 +00:00
Henry Mercer
679a40d337 Merge pull request #3014 from github/henrymercer/rebuild-dispatch 
Enable rebuilding PRs with conflicts
 2025-08-08 09:45:36 +01:00
Henry Mercer
6fe50b283a Merge pull request #3015 from github/henrymercer/language-autodetection-workaround 
Fix auto-detection of extractors that aren't languages
 2025-08-07 21:28:43 +01:00
Henry Mercer
6bc91d64f6 Add changelog note 2025-08-07 21:13:25 +01:00
Henry Mercer
6b4fedca4f Bump Action patch version 2025-08-07 21:12:21 +01:00
Henry Mercer
5794ffcb4a Fix auto-detection of extractors that aren't languages 2025-08-07 21:09:22 +01:00
Henry Mercer
bd62bf449c Finish in-progress merges 2025-08-07 18:21:57 +01:00
Henry Mercer
2afb4e6f3c Avoid specifying branch unnecessarily 2025-08-07 17:51:55 +01:00
Henry Mercer
1fd38a4712 Improve logging 2025-08-07 17:50:25 +01:00
Henry Mercer
bf301d1b77 Finish merge if in progress 2025-08-07 17:46:04 +01:00
Henry Mercer
2ee230f7c4 Update .github/workflows/rebuild.yml 2025-08-07 17:34:44 +01:00
Henry Mercer
3425bf931d Use updated output API 2025-08-07 17:21:48 +01:00
Henry Mercer
ddc8e21357 Allow running rebuild workflow on workflow dispatch 2025-08-07 16:52:41 +01:00
Chuan-kai Lin
afbbdf51df Merge pull request #3013 from github/mergeback/v3.29.6-to-main-a4e1a019 
Mergeback v3.29.6 refs/heads/releases/v3 into main
 2025-08-07 08:30:35 -07:00
github-actions[bot]
e1be6ef300 Update checked-in dependencies 2025-08-07 15:08:18 +00:00
github-actions[bot]
3c7d12c160 Update changelog and version after v3.29.6 2025-08-07 15:06:41 +00:00
Chuan-kai Lin
a4e1a019f5 Merge pull request #3012 from github/update-v3.29.6-67a6ea72b 
Merge main into releases/v3
v3.29.6 		2025-08-07 08:06:12 -07:00
Henry Mercer
4a32399f5f Merge pull request #3011 from github/henrymercer/prefer-injecting-codeql 
Prefer providing CodeQL via dependency injection
 2025-08-07 15:45:58 +01:00
github-actions[bot]
c587f0a77d Update changelog for v3.29.6 2025-08-07 14:44:41 +00:00
Henry Mercer
8e6104d51e Merge branch 'main' into henrymercer/prefer-injecting-codeql 2025-08-07 15:32:20 +01:00
Henry Mercer
67a6ea72bf Merge pull request #3010 from github/henrymercer/cleanup-for-mrva 
Clean up the database if it will be uploaded
 2025-08-07 15:31:02 +01:00
Paolo Tranquilli
588ff737e7 Merge pull request #3005 from github/redsun82/unsupported-plat 
Make all errors on an unsupported platform `ConfigurationError`s
 2025-08-07 16:24:35 +02:00
Henry Mercer
239ed87059 Fix bad merge 2025-08-07 15:10:28 +01:00
Henry Mercer
8c8bdce638 Update log message for cleanup 2025-08-07 15:09:42 +01:00
Henry Mercer
b7beff905a Merge branch 'main' into henrymercer/cleanup-for-mrva 2025-08-07 15:06:26 +01:00
Henry Mercer
6422cf7859 Simplify: Remove databaseCleanup 2025-08-07 15:05:29 +01:00
Henry Mercer
eddeaf42e5 Update changelog note 2025-08-07 15:03:03 +01:00
Paolo Tranquilli
739fb03359 Merge branch 'main' into redsun82/unsupported-plat 2025-08-07 15:47:22 +02:00
Paolo Tranquilli
bb56324516 Address review 2025-08-07 15:43:56 +02:00
Michael B. Gale
bc90418e92 Merge pull request #3009 from github/mbg/auto-detect-actions 
Support auto-detecting Actions workflows
 2025-08-07 12:58:47 +01:00
Michael B. Gale
f28436bcbf Update log message in getRawLanguagesInRepo 2025-08-07 12:43:21 +01:00
Henry Mercer
f8c2086872 Prefer providing CodeQL via dependency injection 2025-08-07 12:16:00 +01:00
Henry Mercer
c7884c6fd8 Clean up the database if it will be uploaded 2025-08-07 11:47:45 +01:00
Michael B. Gale
a625e1693a Merge pull request #3003 from github/mbg/rewrite-quality-category 
Rewrite legacy SARIF categories for CQ
 2025-08-07 11:30:12 +01:00
Michael B. Gale
5e22b5feee Merge pull request #3007 from github/dependabot/npm_and_yarn/npm_and_yarn-5a0513363d 
Bump tmp from 0.2.3 to 0.2.4 in the npm_and_yarn group
 2025-08-07 11:25:38 +01:00
Michael B. Gale
0d72a5b371 Check that stats isn't undefined before trying to call isDirectory 2025-08-07 11:25:01 +01:00
Michael B. Gale
43638b10a0 Support auto-detecting Actions workflows 2025-08-07 11:04:21 +01:00
Paolo Tranquilli
1cfc0c2621 Add tests for cli-errors and fix one bug 
Tests were added with copilot, and uncovered a bug where one of the
regexps looking for `[autobuild]` was not escaping the square brackets.
 2025-08-07 09:55:59 +02:00
Paolo Tranquilli
7b33b610d4 Make all errors on an unsupported platform ConfigurationErrors 2025-08-07 09:53:36 +02:00
Chuan-kai Lin
e2b6f0f4a3 Merge pull request #3000 from github/update-bundle/codeql-bundle-v2.22.3 
Update default bundle to 2.22.3
 2025-08-06 13:25:55 -07:00
Chuan-kai Lin
ec8d9c637a Merge branch 'main' into update-bundle/codeql-bundle-v2.22.3 2025-08-06 10:44:20 -07:00
github-actions[bot]
6db9524876 Update checked-in dependencies 2025-08-06 17:24:01 +00:00
dependabot[bot]
ae2a79254b Bump tmp from 0.2.3 to 0.2.4 in the npm_and_yarn group 
Bumps the npm_and_yarn group with 1 update: [tmp](https://github.com/raszi/node-tmp).


Updates `tmp` from 0.2.3 to 0.2.4
- [Changelog](https://github.com/raszi/node-tmp/blob/master/CHANGELOG.md)
- [Commits](https://github.com/raszi/node-tmp/compare/v0.2.3...v0.2.4)

---
updated-dependencies:
- dependency-name: tmp
  dependency-version: 0.2.4
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-08-06 17:23:23 +00:00