Angela P Wen
a9f7529f47
Quote expected-config-file-contents input
2025-02-24 13:05:29 -08:00
Angela P Wen
5e88a178fe
Update .github/actions/check-codescanning-config/action.yml
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-02-24 12:52:19 -08:00
Angela P Wen
c0a8eb9a67
Use $RUNNER_TEMP for good measure
...
`runner.temp` is not user-controlled but we replace it with `$RUNNER_TEMP` in any case.
2025-02-24 12:35:51 -08:00
Angela P Wen
286fd68a67
Use env var for EXPECTED_CONFIG_FILE_CONTENTS
2025-02-24 12:35:17 -08:00
Angela P Wen
d3c7d03197
Merge pull request #2780 from github/angelapwen/fix-inconsistent-action-input
...
Unify `token` description for `resolve-environment`, `start-proxy`, and `upload-sarif`
2025-02-24 12:09:09 -08:00
Angela P Wen
03c921eac5
Unify token description for resolve-environment, start-proxy, and upload-sarif`
2025-02-24 11:26:00 -08:00
Ian Lynagh
ff79de67cc
Merge pull request #2779 from github/mergeback/v3.28.10-to-main-b56ba49b
...
Mergeback v3.28.10 refs/heads/releases/v3 into main
2025-02-21 16:32:29 +00:00
github-actions[bot]
5d1a3cb0ee
Update checked-in dependencies
2025-02-21 16:12:38 +00:00
github-actions[bot]
2923046360
Update changelog and version after v3.28.10
2025-02-21 16:09:55 +00:00
Ian Lynagh
b56ba49b26
Merge pull request #2778 from github/update-v3.28.10-9856c48b1
...
Merge main into releases/v3
2025-02-21 16:09:01 +00:00
github-actions[bot]
60c9c77c33
Update changelog for v3.28.10
2025-02-21 15:15:06 +00:00
Paolo Tranquilli
9856c48b1a
Merge pull request #2773 from github/redsun82/rust
...
Support rust analysis
2025-02-20 18:03:30 +01:00
Paolo Tranquilli
9572e09da4
Rust: fix log string
2025-02-20 17:38:35 +01:00
Paolo Tranquilli
1a529366ac
Rust: special case default setup
2025-02-20 17:38:02 +01:00
Ian Lynagh
cf7e90952b
Merge pull request #2772 from github/update-bundle/codeql-bundle-v2.20.5
...
Update default bundle to 2.20.5
2025-02-20 14:19:30 +00:00
Ian Lynagh
b7006aab6d
Merge branch 'main' into update-bundle/codeql-bundle-v2.20.5
2025-02-20 13:27:14 +00:00
Paolo Tranquilli
cfedae723e
Rust: throw configuration errors if requested and not correctly enabled
2025-02-20 11:49:32 +01:00
Paolo Tranquilli
3971ed2a74
Merge branch 'main' into redsun82/rust
2025-02-20 08:13:54 +01:00
Angela P Wen
d38c6e60df
Merge pull request #2775 from github/angelapwen/bump-octokit
...
Upgrade `octokit` to v4.1.2
2025-02-19 11:31:42 -08:00
github-actions[bot]
c0d59dba56
Update checked-in dependencies
2025-02-19 19:16:52 +00:00
Angela P Wen
c1745a9831
Upgrade octokit to v4.1.2
2025-02-19 11:13:12 -08:00
Henry Mercer
67e48c1eaf
Merge branch 'main' into update-bundle/codeql-bundle-v2.20.5
2025-02-19 18:38:45 +00:00
Chuan-kai Lin
dbbcbe019d
Merge pull request #2765 from github/cklin/alert-diff-filtering
...
Perform consistent diff-informed alert filtering in the action
2025-02-19 10:15:01 -08:00
Paolo Tranquilli
fb3e7cdd88
Merge pull request #2774 from github/redsun82/sync
...
Fix sync recipes and add base `justfile`
2025-02-19 17:26:08 +01:00
Paolo Tranquilli
ff50469ca0
Add comments to the justfile
2025-02-19 17:13:51 +01:00
Paolo Tranquilli
d0aab9fc20
Fix sync recipes and add base justfile
...
Both the justfile and the pre-commit configuration for the `pr-check`
sync were broken:
* justfiles run recipes one line at a time in a fresh shell, so the venv
activation was not working
* the pre-commit config was relying on an installed `ruamel.yaml`
pakcage, but the default one installable via `apt` on Ubuntu 24.04 is
old and generates different output (with formatting differences).
Now:
* the venv dance is put in a separate bash script
* both just and pre-commit will use that same script, so both problems
will be fixed
As a bonus, a root `justfile` is added exposing the `update-pr-checks`
recipes plus a `build` one. Running `just` without arguments will also
now call the default `sync` recipes that will call both of the above.
2025-02-19 16:51:46 +01:00
Paolo Tranquilli
c9ebc3bb8b
Regenerate workflows with more recent ruamel.yaml
2025-02-19 16:21:48 +01:00
Paolo Tranquilli
a7b17782a9
Support rust analysis
...
This is supposed to enable rust analysis for the staff ship only.
2025-02-19 15:56:52 +01:00
Chuan-kai Lin
f85d8b5a74
build: refresh js files
2025-02-19 06:26:33 -08:00
Chuan-kai Lin
dae1626680
Filter alerts by pr-diff-range JSON file
2025-02-19 06:26:11 -08:00
Henry Mercer
d99c7e8e5b
Merge pull request #2771 from github/revert-2767-cklin/prefer-gtar
...
Revert "Prefer gtar if available"
2025-02-18 16:05:36 +00:00
github-actions[bot]
eb88b40ca4
Add changelog note
2025-02-18 12:37:24 +00:00
github-actions[bot]
6b1da0d33e
Update default bundle to codeql-bundle-v2.20.5
2025-02-18 12:37:20 +00:00
Henry Mercer
906452d251
Merge branch 'main' into revert-2767-cklin/prefer-gtar
2025-02-18 10:47:19 +00:00
Henry Mercer
0656d7fb91
Add changelog note for #2768
2025-02-18 10:45:37 +00:00
Henry Mercer
1bb15d06a6
Merge pull request #2768 from github/smowton/fix/zstd-tarball-trailing-zeros
...
Pass `--ignore-zeros` to `tar` when decompressing `zstd`-compressed tarballs
2025-02-18 10:42:42 +00:00
Henry Mercer
65a3aa1fbc
Revert "Prefer gtar if available"
2025-02-18 10:38:41 +00:00
Henry Mercer
acadfedea5
Merge pull request #2770 from github/dependabot/npm_and_yarn/npm-17cd1da1dd
...
build(deps): bump the npm group with 5 updates
2025-02-17 19:30:47 +00:00
Henry Mercer
1930ca4359
Merge pull request #2769 from github/dependabot/github_actions/actions-60ccfc8cbe
...
build(deps): bump the actions group with 2 updates
2025-02-17 19:30:27 +00:00
Henry Mercer
1d4f241470
Update generated workflow source
2025-02-17 19:17:28 +00:00
github-actions[bot]
9dfa165835
Update checked-in dependencies
2025-02-17 18:21:02 +00:00
dependabot[bot]
47d5364431
build(deps): bump the npm group with 5 updates
...
Bumps the npm group with 5 updates:
| Package | From | To |
| --- | --- | --- |
| [@actions/cache](https://github.com/actions/toolkit/tree/HEAD/packages/cache ) | `4.0.0` | `4.0.1` |
| [long](https://github.com/dcodeIO/long.js ) | `5.3.0` | `5.3.1` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin ) | `8.23.0` | `8.24.1` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser ) | `8.23.0` | `8.24.1` |
| [eslint-import-resolver-typescript](https://github.com/import-js/eslint-import-resolver-typescript ) | `3.7.0` | `3.8.1` |
Updates `@actions/cache` from 4.0.0 to 4.0.1
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/cache/RELEASES.md )
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/cache )
Updates `long` from 5.3.0 to 5.3.1
- [Release notes](https://github.com/dcodeIO/long.js/releases )
- [Commits](https://github.com/dcodeIO/long.js/compare/v5.3.0...v5.3.1 )
Updates `@typescript-eslint/eslint-plugin` from 8.23.0 to 8.24.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases )
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md )
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.24.1/packages/eslint-plugin )
Updates `@typescript-eslint/parser` from 8.23.0 to 8.24.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases )
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md )
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.24.1/packages/parser )
Updates `eslint-import-resolver-typescript` from 3.7.0 to 3.8.1
- [Release notes](https://github.com/import-js/eslint-import-resolver-typescript/releases )
- [Changelog](https://github.com/import-js/eslint-import-resolver-typescript/blob/master/CHANGELOG.md )
- [Commits](https://github.com/import-js/eslint-import-resolver-typescript/compare/v3.7.0...v3.8.1 )
---
updated-dependencies:
- dependency-name: "@actions/cache"
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: npm
- dependency-name: long
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: npm
- dependency-name: "@typescript-eslint/eslint-plugin"
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: npm
- dependency-name: "@typescript-eslint/parser"
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: npm
- dependency-name: eslint-import-resolver-typescript
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: npm
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-02-17 18:20:12 +00:00
dependabot[bot]
30b1c2ae15
build(deps): bump the actions group with 2 updates
...
Bumps the actions group with 2 updates: [ruby/setup-ruby](https://github.com/ruby/setup-ruby ) and [actions/create-github-app-token](https://github.com/actions/create-github-app-token ).
Updates `ruby/setup-ruby` from 1.218.0 to 1.221.0
- [Release notes](https://github.com/ruby/setup-ruby/releases )
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb )
- [Commits](d781c1b4ed...32110d4e31https://github.com/actions/create-github-app-token/releases )
- [Commits](67e27a7eb7...0d564482f0support@github.com >
2025-02-17 17:37:07 +00:00
github-actions[bot]
c4158ff890
Rebuild
2025-02-17 17:21:30 +00:00
Chris Smowton
2be5f244ff
Pass --ignore-zeros to tar when decompressing zstd-compressed tarballs
...
See comment in the diff for full explanation.
2025-02-17 17:04:36 +00:00
Ian Lynagh
8c1551cdd4
Merge pull request #2767 from github/cklin/prefer-gtar
...
Prefer gtar if available
2025-02-17 12:31:54 +00:00
Chuan-kai Lin
fc4873bed7
Changelog entry: Prefer gtar if available
2025-02-14 13:57:09 -08:00
Chuan-kai Lin
c3ad6e9deb
build: refresh js files
2025-02-14 13:40:54 -08:00
Chuan-kai Lin
61c77a48ff
Prefer gtar if available
2025-02-14 13:34:30 -08:00
Chuan-kai Lin
4267fa66a2
getTarVersion(): add programName parameter
...
This commit changes getTarVersion() so that it receives the name of the
tar program from the caller instead of using the hardcoded string "tar".
2025-02-14 13:24:19 -08:00
