github/codeql-action
1
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2025-12-27 09:40:17 +08:00
Code Issues Packages Projects Releases Wiki Activity
6,707 Commits 297 Branches 500 Tags
codeql-bundle-v2.21.2
Commit Graph

6707 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
github-actions[bot]
52189d23af Update default bundle to codeql-bundle-v2.20.4 2025-02-04 11:22:50 +00:00
Henry Mercer
08bc0cf022 Merge pull request #2751 from github/henrymercer/fix-init-post-without-config 
Send `init-post` status report in absence of config
codeql-bundle-v2.20.4 		2025-02-03 20:00:22 +00:00
Henry Mercer
cf7c687919 Send init-post status report in absence of config 2025-02-03 19:46:23 +00:00
Angela P Wen
ad42dbd32d Merge pull request #2750 from github/dependabot/npm_and_yarn/npm-768bd9b555 
build(deps): bump the npm group with 5 updates
 2025-02-03 10:00:42 -08:00
Angela P Wen
a8f5935da0 Merge pull request #2749 from github/dependabot/github_actions/actions-29d379cebb 
build(deps): bump actions/create-github-app-token from 1.11.1 to 1.11.2 in the actions group
 2025-02-03 09:24:29 -08:00
github-actions[bot]
9660df3fcc Update checked-in dependencies 2025-02-03 17:20:53 +00:00
dependabot[bot]
3e913ef09d build(deps): bump the npm group with 5 updates 
Bumps the npm group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [@octokit/types](https://github.com/octokit/types.ts) | `13.7.0` | `13.8.0` |
| [semver](https://github.com/npm/node-semver) | `7.6.3` | `7.7.0` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.22.0` | `8.23.0` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.22.0` | `8.23.0` |
| [eslint-plugin-github](https://github.com/github/eslint-plugin-github) | `5.1.5` | `5.1.7` |


Updates `@octokit/types` from 13.7.0 to 13.8.0
- [Release notes](https://github.com/octokit/types.ts/releases)
- [Commits](https://github.com/octokit/types.ts/compare/v13.7.0...v13.8.0)

Updates `semver` from 7.6.3 to 7.7.0
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](https://github.com/npm/node-semver/compare/v7.6.3...v7.7.0)

Updates `@typescript-eslint/eslint-plugin` from 8.22.0 to 8.23.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.23.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.22.0 to 8.23.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.23.0/packages/parser)

Updates `eslint-plugin-github` from 5.1.5 to 5.1.7
- [Release notes](https://github.com/github/eslint-plugin-github/releases)
- [Commits](https://github.com/github/eslint-plugin-github/compare/v5.1.5...v5.1.7)

---
updated-dependencies:
- dependency-name: "@octokit/types"
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: semver
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@typescript-eslint/parser"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: eslint-plugin-github
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-02-03 17:19:36 +00:00
dependabot[bot]
e456c53578 build(deps): bump actions/create-github-app-token in the actions group 
Bumps the actions group with 1 update: [actions/create-github-app-token](https://github.com/actions/create-github-app-token).


Updates `actions/create-github-app-token` from 1.11.1 to 1.11.2
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Commits](c1a285145b...136412a57a)

---
updated-dependencies:
- dependency-name: actions/create-github-app-token
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-02-03 17:10:22 +00:00
Óscar San José
0701025a8b Merge pull request #2727 from github/oscarsj-patch-1 
Switch auth for enterprises-release repo from ssh to codeql CI token
TEST 		2025-01-30 19:22:18 +01:00
Henry Mercer
9a4ae2164a Merge pull request #2748 from github/henrymercer/pin-setup-ruby 
Pin `ruby/setup-ruby` Action to v1.215.0
 2025-01-30 17:48:15 +00:00
Henry Mercer
5be1eb0d46 Pin ruby/setup-ruby Action to v1.215.0 2025-01-30 11:09:54 +00:00
Andrew Eisenberg
dcf2d0d183 Merge branch 'main' into oscarsj-patch-1 2025-01-29 14:16:29 -08:00
Andrew Eisenberg
e9987ad0c1 Merge pull request #2725 from github/aeisenberg/enable-actions-analysis 
Add actions analysis to code scanning
 2025-01-29 14:16:07 -08:00
Andrew Eisenberg
50954e7f00 Use a separate config file for actions queries 2025-01-29 12:25:34 -08:00
Henry Mercer
cf6550fa50 Merge pull request #2747 from github/mergeback/v3.28.8-to-main-dd746615 
Mergeback v3.28.8 refs/heads/releases/v3 into main
 2025-01-29 19:50:50 +00:00
github-actions[bot]
30ac3f3555 Update checked-in dependencies 2025-01-29 19:00:06 +00:00
github-actions[bot]
44dfd8f991 Update changelog and version after v3.28.8 2025-01-29 18:58:44 +00:00
Ian Lynagh
dd746615b3 Merge pull request #2746 from github/update-v3.28.8-a91a3f767 
Merge main into releases/v3
v3.28.8 		2025-01-29 18:57:40 +00:00
Ian Lynagh
3210a3cda6 Fix Kotlin version in changelog 2025-01-29 18:33:39 +00:00
github-actions[bot]
72f9d0296b Update changelog for v3.28.8 2025-01-29 18:02:09 +00:00
Ian Lynagh
a91a3f7678 Merge pull request #2744 from github/igfoo/kot2.1.10 
Kotlin: The 2.20.3 release supports Kotlin 2.1.10.
 2025-01-29 16:45:39 +00:00
Marco Gario
c520fb59d4 Merge pull request #2745 from github/mergeback/v3.28.7-to-main-6e545590 
Mergeback v3.28.7 refs/heads/releases/v3 into main
 2025-01-29 14:22:11 +01:00
Ian Lynagh
3879c57660 Add changelog entry 2025-01-29 13:08:49 +00:00
Ian Lynagh
0c2193725f Run "npm run build" 2025-01-29 13:08:49 +00:00
Ian Lynagh
5a61bf07fa Kotlin: The 2.20.3 release supports Kotlin 2.1.10. 2025-01-29 13:08:49 +00:00
github-actions[bot]
163d1195df Update checked-in dependencies 2025-01-29 13:05:13 +00:00
github-actions[bot]
bcf5cecbc6 Update changelog and version after v3.28.7 2025-01-29 13:04:01 +00:00
Marco Gario
6e54559041 Merge pull request #2743 from github/update-v3.28.7-797fb30ed 
Merge main into releases/v3
v3.28.7 		2025-01-29 14:03:15 +01:00
github-actions[bot]
cd346029a4 Update changelog for v3.28.7 2025-01-29 12:45:09 +00:00
Marco Gario
797fb30eda Merge pull request #2741 from github/reset_proxy_envs 
Properly unset proxy env if empty
 2025-01-29 13:23:57 +01:00
Óscar San José
1b7bc4888b Rename token to clarify scope 2025-01-29 12:34:35 +01:00
Marco Gario
f98f14dd82 Unset proxy env 2025-01-29 11:04:28 +00:00
Marco Gario
14b9c0ec59 Merge pull request #2740 from github/revert-2724-marcogario/skip_proxy 
Revert "start-proxy: Skip proxy setup if no credentials are available"
 2025-01-29 11:03:48 +01:00
Marco Gario
7fdc1b8d67 Revert "start-proxy: Skip proxy setup if no credentials are available" 2025-01-29 09:33:23 +01:00
Marco Gario
54b1c84213 Merge pull request #2724 from github/marcogario/skip_proxy 
start-proxy: Skip proxy setup if no credentials are available
 2025-01-28 22:15:51 +01:00
Marco Gario
76622e7fee Merge branch 'main' into marcogario/skip_proxy 2025-01-28 19:49:45 +00:00
Marco Gario
5f4f998a94 Merge pull request #2733 from github/marcogario/remove_proxy_password 
start-proxy: Remove unusued proxy_password input
 2025-01-28 09:59:10 +01:00
Andrew Eisenberg
43cffee811 Merge pull request #2736 from github/mergeback/v3.28.6-to-main-17a820bf 
Mergeback v3.28.6 refs/heads/releases/v3 into main
 2025-01-27 13:25:18 -08:00
github-actions[bot]
a5f217b812 Update checked-in dependencies 2025-01-27 21:06:23 +00:00
github-actions[bot]
c386dcd486 Update changelog and version after v3.28.6 2025-01-27 21:04:21 +00:00
Andrew Eisenberg
17a820bf2e Merge pull request #2735 from github/aeisenberg/fix-permissions 
Add extra permission to mergeback workflow
v3.28.6 		2025-01-27 13:00:25 -08:00
Andrew Eisenberg
3a4eae00ff Add extra permission to mergeback workflow 2025-01-27 12:45:34 -08:00
Andrew Eisenberg
4e83f6b818 Merge pull request #2732 from github/update-v3.28.6-b49419044 
Merge main into releases/v3
 2025-01-27 12:28:00 -08:00
Marco Gario
e2f043dee4 Remove unusued proxy_password input 2025-01-27 20:10:59 +00:00
github-actions[bot]
64ad47c7c1 Update changelog for v3.28.6 2025-01-27 20:04:40 +00:00
Marco Gario
8aa028b476 Merge branch 'main' into marcogario/skip_proxy 2025-01-27 20:24:32 +01:00
Andrew Eisenberg
b494190443 Merge pull request #2726 from github/aeisenberg/reenable-artifact-upload 
Ensure artifacts are only uploaded in safe situations
 2025-01-27 11:10:46 -08:00
Andrew Eisenberg
a879704805 Clarify test fail;ure message 2025-01-27 10:51:01 -08:00
Andrew Eisenberg
62c322fad9 Add better comments around artifact upload tests 2025-01-27 10:18:03 -08:00
Andrew Eisenberg
c6b286132e Merge pull request #2731 from github/dependabot/npm_and_yarn/npm-e1e9e6cd15 
build(deps-dev): bump the npm group with 4 updates
 2025-01-27 10:14:25 -08:00