Henry Mercer
db534af2ae
Remove feature flags for bypassing the toolcache
...
- We can now use the default bundle version feature flags to remediate a
bad bundle update.
- Controlled switchover ensures that a repo consistently gets the same
bundle version, so we no longer have alert churn concerns with Kotlin
and Swift.
2023-02-08 15:20:51 +00:00
Andrew Eisenberg
bbe8d375fd
Ensure qlconfig file is created when config parsing in cli is on
...
Previously, with the config parsing in the cli feature flag turned on,
the CLI was not able to download packs from other registries. This PR
adds the codeql-action changes required for this. The CLI changes will
be in a separate, internal PR.
2023-02-07 10:40:56 -08:00
Chuan-kai Lin
4f08c2cf20
Bump default CodeQL version to 2.12.2
2023-02-07 08:10:01 -08:00
Angela P Wen
81644f35ff
Add max line length of 120 to linter ( #1524 )
2023-02-07 14:09:33 +00:00
Angela P Wen
39c954c513
Support security-experimental as a well-known suite ( #1519 )
2023-02-06 19:26:03 +00:00
Henry Mercer
2b674f7ab9
Fix toolcache behavior when downloading bundle from another repo
2023-02-06 16:25:07 +00:00
Henry Mercer
6d47a7c8b1
Add regression test for bundle from different repo
2023-02-06 16:25:07 +00:00
Henry Mercer
d3f2b2e6d2
Warn when multiple bundles for a single CLI are found in the toolcache
2023-02-06 12:28:33 +00:00
Henry Mercer
d49282c3b5
Rename forceLatest to forceShippedTools
2023-02-06 11:57:48 +00:00
Henry Mercer
f140af5e28
Refactor setting up CodeQL to handle bundle URLs without tags
2023-02-03 19:15:06 +00:00
Henry Mercer
e0fc1c91b2
Add regression test for a bundle URL without a tag
2023-02-03 19:13:24 +00:00
Arthur Baars
2fed02cbe2
Supply authorization parameter to toolcache.downloadTool()
...
Previously we supplied the authorization information via the 'headers'
parameter. This works fine, except in some cases when the request is
retried.
2023-02-03 14:56:00 +01:00
Angela P Wen
4664f39699
Ensure that tools_download_duration_ms is int ( #1513 )
2023-01-27 09:03:57 +00:00
Henry Mercer
75ae065ae6
Fix computation of fallback version
2023-01-26 11:49:51 +00:00
Henry Mercer
0a9e9db27f
Add failing regression test
2023-01-26 11:49:24 +00:00
Angela P Wen
24ca6b0400
Send tools telemetry to init status report ( #1497 )
...
Co-authored-by: Henry Mercer <henry.mercer@me.com >
2023-01-25 11:09:18 -08:00
Henry Mercer
a58e90a9da
Merge pull request #1508 from github/henrymercer/default-version-fallback
...
Fall back to the `defaults.json` CLI version if feature flags misconfigured
2023-01-24 20:01:47 +00:00
Henry Mercer
5d931ea2a2
Fall back to the default.json CLI version if feature flags misconfigured
2023-01-23 20:00:44 +00:00
Henry Mercer
ebdd5a069f
Remove perf_hooks Node 12 comment
...
We don't need the import for Node 12 compat, but we do need it to make
the file compile.
2023-01-23 19:16:03 +00:00
Henry Mercer
d37dce28f6
Bump default CodeQL version to 2.12.1
2023-01-23 11:25:09 +00:00
Henry Mercer
54f4ea7a62
Merge branch 'main' into henrymercer/no-cache-nightlies
2023-01-20 17:35:04 +00:00
Henry Mercer
8e4a1d6e60
Merge branch 'main' into henrymercer/avoid-waiting-for-timeout
2023-01-20 16:29:49 +00:00
Henry Mercer
291cc75959
Add test case
2023-01-20 15:30:57 +00:00
Henry Mercer
2014c859f1
Increase strictness of tool caching threshold to avoid caching nightlies
2023-01-20 15:23:27 +00:00
Henry Mercer
4beb39593b
Explain why we're using --format=json to get the extractor path
2023-01-20 15:01:38 +00:00
Henry Mercer
be8f7b01a2
Add types for package.json via @schemastore/package
2023-01-20 15:01:35 +00:00
Henry Mercer
1b508953b4
Remove checkActionVersion
...
This is no longer needed now that we only release v2
2023-01-20 15:01:35 +00:00
Henry Mercer
cb9be70046
Install @types/uuid and eliminate a cast
2023-01-20 15:01:35 +00:00
Henry Mercer
85f0d840c9
Use a more Promise-oriented approach for the timeout system
2023-01-19 20:25:55 +00:00
Henry Mercer
b61b299591
Immediately unref timers to avoid waiting for them before exit
2023-01-19 18:09:06 +00:00
Henry Mercer
ba93815e25
Merge branch 'main' into henrymercer/upgrade-typescript
2023-01-19 16:15:51 +00:00
Henry Mercer
9012214c80
Merge branch 'main' into henrymercer/controlled-switchover
2023-01-18 22:38:54 +00:00
Henry Mercer
10695e6a20
Fix linter errors
2023-01-18 21:00:05 +00:00
Henry Mercer
5f644f971e
Upgrade TypeScript to 9.2.0
2023-01-18 20:59:57 +00:00
Henry Mercer
597c204127
Merge pull request #1481 from github/henrymercer/discontinue-v1
...
Update deprecation notice to state that CodeQL Action v1 is discontinued
2023-01-18 17:24:19 +00:00
Henry Mercer
8a4abfd10a
Support cli-version-x.y.z-pre.txt marker files
2023-01-18 15:55:23 +00:00
Henry Mercer
5f1362dd53
Merge branch 'main' into henrymercer/controlled-switchover
2023-01-18 15:37:28 +00:00
Andrew Eisenberg
e0fd640b0c
Merge pull request #1487 from github/aeisenberg/queries-check
...
Fix a bug in cli config parsing
2023-01-18 07:29:34 -08:00
Henry Mercer
d731c012c4
Merge pull request #1486 from github/update-supported-enterprise-server-versions
...
Update supported GitHub Enterprise Server versions.
2023-01-18 12:57:55 +00:00
Henry Mercer
6dfc772b5f
Add link to new changelog post
2023-01-18 12:42:11 +00:00
Henry Mercer
60e58b4a21
Merge branch 'main' into henrymercer/discontinue-v1
2023-01-18 12:19:49 +00:00
Andrew Eisenberg
9b1206e898
Fix a bug in cli config parsing
...
When the config specifies queries in external repositories and no other
queries and cli config parsing is enabled, the analyze job is not able
to find any queries to run and it fails. This PR fixes the problem.
Also add some logging statements when writing a copy of the user config
file.
2023-01-17 20:59:36 -08:00
GitHub
e199504667
Update supported GitHub Enterprise Server versions.
2023-01-18 00:12:15 +00:00
Andrew Eisenberg
e6e3bf4923
Update src/actions-util.ts
...
Co-authored-by: Angela P Wen <angelapwen@github.com >
2023-01-17 15:53:14 -08:00
Andrew Eisenberg
b625b628b7
Hide error message and stack for non-error
...
Avoid printing the error message and stack when we fail to find the
commit. This will happen in several non-error states (e.g.,
when there is no repository checked out at the CWD). Move the
error message to a debug message so that it is still available
if someone really wants to see it.
2023-01-17 15:00:24 -08:00
Henry Mercer
4b40a3a20e
Add a notice that CodeQL Action v1 is discontinued
2023-01-16 17:56:31 +00:00
Henry Mercer
b660a383cf
Address review comments
2023-01-16 10:14:35 +00:00
Henry Mercer
115587a52c
Merge branch 'main' into henrymercer/controlled-switchover
2023-01-16 10:10:15 +00:00
Henry Mercer
12998b7ba3
Convert logger call to debug
2023-01-13 16:18:46 +00:00
Rasmus Wriedt Larsen
4bd9723e2b
npm run build
2023-01-13 11:26:22 +01:00
