github/codeql-action
1
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2025-12-27 01:30:10 +08:00
Code Issues Packages Projects Releases Wiki Activity
7,494 Commits 297 Branches 500 Tags
codeql-bundle-v2.23.1
Commit Graph

7494 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
dependabot[bot]
ae2a79254b Bump tmp from 0.2.3 to 0.2.4 in the npm_and_yarn group 
Bumps the npm_and_yarn group with 1 update: [tmp](https://github.com/raszi/node-tmp).


Updates `tmp` from 0.2.3 to 0.2.4
- [Changelog](https://github.com/raszi/node-tmp/blob/master/CHANGELOG.md)
- [Commits](https://github.com/raszi/node-tmp/compare/v0.2.3...v0.2.4)

---
updated-dependencies:
- dependency-name: tmp
  dependency-version: 0.2.4
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-08-06 17:23:23 +00:00
Michael B. Gale
2d082457bf Update src/analyze.ts 
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
 2025-08-06 16:33:06 +01:00
Michael B. Gale
594623d72f Fix linter errors 2025-08-06 16:19:09 +01:00
Michael B. Gale
e448add687 Merge branch 'main' into mbg/rewrite-quality-category 2025-08-06 16:16:22 +01:00
Michael B. Gale
1b76c0b9c1 Use withMockedEnv 2025-08-06 12:39:35 +01:00
Henry Mercer
b1228d060c Merge pull request #3004 from github/mbg/missing-query-pack-config-error 
Treat missing pack errors as configuration errors
 2025-08-06 12:22:06 +01:00
Michael B. Gale
c87fc48ec5 Treat missing pack errors as configuration errors 2025-08-06 12:09:30 +01:00
Michael B. Gale
9fb8f2d0c2 Update src/actions-util.ts 
Co-authored-by: Henry Mercer <henrymercer@github.com>
 2025-08-06 10:38:34 +01:00
Michael B. Gale
72770345eb Fix legacy SARIF categories for CQ in default setup 2025-08-06 10:14:36 +01:00
Michael B. Gale
f5d3601aaa Make SARIF category a parameter of runInterpretResults 2025-08-06 09:58:48 +01:00
Michael B. Gale
06e521573a Log qualityAnalysisSummary after analysisSummary 2025-08-06 09:58:31 +01:00
Henry Mercer
60bf7dfc0e Merge pull request #2914 from github/henrymercer/language-extensibility 
Allow using new CodeQL languages without updating the CodeQL Action
 2025-08-06 09:38:35 +01:00
Henry Mercer
f30d00fe8d Update Language doc 2025-08-06 09:23:40 +01:00
Paolo Tranquilli
8d19b249dd Transpile 2025-08-06 06:38:05 +02:00
Paolo Tranquilli
68025974a1 Update comments on rust support in init-action 
Clarify comments regarding rust support in codeql versions
 2025-08-06 06:35:34 +02:00
Paolo Tranquilli
3e4d85617c Fix typo 2025-08-06 06:33:08 +02:00
Henry Mercer
377976a96e Improve type of trapCaches now Language is non-exhaustive 2025-08-05 18:09:37 +01:00
Henry Mercer
ea05bf27b6 Use more explicit checks on .length for readability 2025-08-05 17:55:50 +01:00
Henry Mercer
e682065360 Fix docstring in start-proxy 2025-08-05 17:51:51 +01:00
Henry Mercer
fa18cc9db4 Improve docstrings for language types 2025-08-05 17:49:01 +01:00
Henry Mercer
bf692c08e7 Merge branch 'main' into henrymercer/language-extensibility 2025-08-05 13:21:29 +01:00
Henry Mercer
83e92edc4b Improve detection of Rust in languages input 2025-08-05 11:43:04 +01:00
Henry Mercer
bbfff2f20a Merge pull request #2999 from github/henrymercer/deprecate-cleanup-level 
Deprecate the 'cleanup-level' option
 2025-08-05 11:22:53 +01:00
Henry Mercer
cfb8d07200 Remove unnecessary String initializations 
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
 2025-08-05 11:18:46 +01:00
Henry Mercer
87e59d0f95 Improve changelog formatting 
Co-authored-by: Michael B. Gale <mbg@github.com>
 2025-08-05 11:08:19 +01:00
Henry Mercer
c481481d7d Merge branch 'main' into henrymercer/language-extensibility 2025-08-05 11:07:39 +01:00
Henry Mercer
e37c03628f Merge pull request #3001 from github/dependabot/npm_and_yarn/npm-5c47c8ab2f 
Bump the npm group with 5 updates
 2025-08-05 11:05:58 +01:00
github-actions[bot]
563cbbb24d Update checked-in dependencies 2025-08-05 09:51:38 +00:00
Henry Mercer
443f94c758 Bump @types/node 2025-08-05 10:45:17 +01:00
Henry Mercer
a5cdb299bc Merge pull request #3002 from github/dependabot/github_actions/actions-f69d1f6078 
Bump ruby/setup-ruby from 1.253.0 to 1.254.0 in the actions group
 2025-08-05 10:27:07 +01:00
Henry Mercer
5547ed31c9 Bump version in generated source 2025-08-05 10:14:47 +01:00
dependabot[bot]
69ccd54e34 Bump ruby/setup-ruby from 1.253.0 to 1.254.0 in the actions group 
Bumps the actions group with 1 update: [ruby/setup-ruby](https://github.com/ruby/setup-ruby).


Updates `ruby/setup-ruby` from 1.253.0 to 1.254.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](bb6434c747...2a7b30092b)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-version: 1.254.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-08-04 23:16:04 +00:00
github-actions[bot]
a3810fa54b Update checked-in dependencies 2025-08-04 22:26:01 +00:00
dependabot[bot]
a28b9b5e2f Bump the npm group with 5 updates 
Bumps the npm group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.15.9` | `1.15.11` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.38.0` | `8.39.0` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.38.0` | `8.39.0` |
| [nock](https://github.com/nock/nock) | `14.0.7` | `14.0.8` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.8.3` | `5.9.2` |


Updates `follow-redirects` from 1.15.9 to 1.15.11
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases)
- [Commits](https://github.com/follow-redirects/follow-redirects/compare/v1.15.9...v1.15.11)

Updates `@typescript-eslint/eslint-plugin` from 8.38.0 to 8.39.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.39.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.38.0 to 8.39.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.39.0/packages/parser)

Updates `nock` from 14.0.7 to 14.0.8
- [Release notes](https://github.com/nock/nock/releases)
- [Changelog](https://github.com/nock/nock/blob/main/CHANGELOG.md)
- [Commits](https://github.com/nock/nock/compare/v14.0.7...v14.0.8)

Updates `typescript` from 5.8.3 to 5.9.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release-publish.yml)
- [Commits](https://github.com/microsoft/TypeScript/compare/v5.8.3...v5.9.2)

---
updated-dependencies:
- dependency-name: follow-redirects
  dependency-version: 1.15.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.39.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.39.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: nock
  dependency-version: 14.0.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: typescript
  dependency-version: 5.9.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-08-04 22:25:25 +00:00
github-actions[bot]
fff9bbe33f Add changelog note 2025-08-04 18:41:52 +00:00
github-actions[bot]
cfa0a4e416 Update default bundle to codeql-bundle-v2.22.3 2025-08-04 18:41:48 +00:00
Henry Mercer
f9d6919415 Add changelog note 2025-08-04 18:00:50 +01:00
Henry Mercer
e95a3a9768 Deprecate the 'cleanup-level' option 2025-08-04 17:52:09 +01:00
Paolo Tranquilli
a58e7d8cef Simplify rust check 2025-08-04 17:38:29 +02:00
Paolo Tranquilli
662cec85ed Merge branch 'main' into redsun82/rust 2025-08-04 17:24:20 +02:00
Koen Vlaswinkel
7273f08caa Merge pull request #2991 from github/koesie10/remove-disable-combine-sarif-files-ff 
Remove `disable_combine_sarif_files` feature flag
codeql-bundle-v2.22.3 		2025-08-01 16:33:16 +02:00
dependabot[bot]
b9b3b12fa2 Bump form-data from 2.5.1 to 2.5.5 in the npm_and_yarn group (#2982) 
* Bump form-data from 2.5.1 to 2.5.5 in the npm_and_yarn group

Bumps the npm_and_yarn group with 1 update: [form-data](https://github.com/form-data/form-data).


Updates `form-data` from 2.5.1 to 2.5.5
- [Release notes](https://github.com/form-data/form-data/releases)
- [Changelog](https://github.com/form-data/form-data/blob/v2.5.5/CHANGELOG.md)
- [Commits](https://github.com/form-data/form-data/compare/v2.5.1...v2.5.5)

---
updated-dependencies:
- dependency-name: form-data
  dependency-version: 2.5.5
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>

* Update checked-in dependencies

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Michael B. Gale <mbg@github.com>
 2025-07-30 16:14:48 +01:00
Michael B. Gale
20c7f06b9a Merge pull request #2995 from github/dependabot/github_actions/actions-010b5c0fb1 
Bump ruby/setup-ruby from 1.247.0 to 1.253.0 in the actions group
 2025-07-30 11:31:54 +01:00
Chuan-kai Lin
acdac9e37d Merge pull request #2998 from github/mergeback/v3.29.5-to-main-51f77329 
Mergeback v3.29.5 refs/heads/releases/v3 into main
 2025-07-29 14:26:29 -07:00
github-actions[bot]
1a4f45d622 Update checked-in dependencies 2025-07-29 21:09:35 +00:00
github-actions[bot]
297691ddab Update changelog and version after v3.29.5 2025-07-29 21:06:19 +00:00
Chuan-kai Lin
51f77329af Merge pull request #2997 from github/update-v3.29.5-80a09d7b0 
Merge main into releases/v3
v3.29.5 v3.29.7 		2025-07-29 14:05:50 -07:00
github-actions[bot]
8e90243ddb Update changelog for v3.29.5 2025-07-29 20:38:47 +00:00
Michael B. Gale
0521b5facf Merge branch 'main' into koesie10/remove-disable-combine-sarif-files-ff 2025-07-29 18:27:02 +01:00
Michael B. Gale
84720e2ef6 Update workflow template 2025-07-29 18:26:18 +01:00