github/codeql-action
1
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2025-12-27 01:30:10 +08:00
Code Issues Packages Projects Releases Wiki Activity
7,174 Commits 297 Branches 500 Tags
v3.29.9
Commit Graph

7174 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Michael B. Gale
df559355d5 Merge pull request #3026 from github/update-v3.29.9-cc722e476 
Merge main into releases/v3
v3.29.9 		2025-08-12 11:30:20 +01:00
github-actions[bot]
53f255b421 Update changelog for v3.29.9 2025-08-12 10:06:05 +00:00
Michael B. Gale
cc722e476f Merge pull request #3023 from github/redsun82/rust-test 
Improve Rust analysis PR check
 2025-08-12 11:02:27 +01:00
Henry Mercer
a4cd8fd036 Merge pull request #3024 from github/dependabot/npm_and_yarn/npm-3a4f9bf414 
Bump the npm group with 6 updates
 2025-08-12 10:30:05 +01:00
github-actions[bot]
542b274f93 Update checked-in dependencies 2025-08-12 02:07:02 +00:00
dependabot[bot]
1a376ca348 Bump the npm group with 6 updates 
Bumps the npm group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [@actions/cache](https://github.com/actions/toolkit/tree/HEAD/packages/cache) | `4.0.3` | `4.0.5` |
| [@eslint/compat](https://github.com/eslint/rewrite/tree/HEAD/packages/compat) | `1.3.1` | `1.3.2` |
| [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) | `9.32.0` | `9.33.0` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.39.0` | `8.39.1` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.39.0` | `8.39.1` |
| [nock](https://github.com/nock/nock) | `14.0.8` | `14.0.9` |


Updates `@actions/cache` from 4.0.3 to 4.0.5
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/cache/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/cache)

Updates `@eslint/compat` from 1.3.1 to 1.3.2
- [Release notes](https://github.com/eslint/rewrite/releases)
- [Changelog](https://github.com/eslint/rewrite/blob/main/packages/compat/CHANGELOG.md)
- [Commits](https://github.com/eslint/rewrite/commits/compat-v1.3.2/packages/compat)

Updates `@eslint/js` from 9.32.0 to 9.33.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/commits/v9.33.0/packages/js)

Updates `@typescript-eslint/eslint-plugin` from 8.39.0 to 8.39.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.39.1/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.39.0 to 8.39.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.39.1/packages/parser)

Updates `nock` from 14.0.8 to 14.0.9
- [Release notes](https://github.com/nock/nock/releases)
- [Changelog](https://github.com/nock/nock/blob/main/CHANGELOG.md)
- [Commits](https://github.com/nock/nock/compare/v14.0.8...v14.0.9)

---
updated-dependencies:
- dependency-name: "@actions/cache"
  dependency-version: 4.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@eslint/compat"
  dependency-version: 1.3.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@eslint/js"
  dependency-version: 9.33.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.39.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.39.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: nock
  dependency-version: 14.0.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-08-12 02:06:25 +00:00
Paolo Tranquilli
9f966bbbf5 Merge branch 'main' into redsun82/rust-test 2025-08-11 17:01:23 +02:00
Chuan-kai Lin
c6dcdfa33a Merge pull request #2993 from github/cklin/overlay-pack-check 
Overlay: check query packs for compatibility
 2025-08-11 07:42:07 -07:00
Chuan-kai Lin
821d3bd162 Merge branch 'main' into cklin/overlay-pack-check 2025-08-11 07:10:04 -07:00
Paolo Tranquilli
bf1dd6901d Move comments up in rust.yml 2025-08-11 15:44:35 +02:00
Paolo Tranquilli
286b9e9d74 Specify the ruamel.yaml version in one place only (sync.sh) 2025-08-11 15:38:32 +02:00
Paolo Tranquilli
2d7401b887 Revert ruamel.yaml back to 0.17.31 
And revert back related changes
 2025-08-11 15:36:42 +02:00
Henry Mercer
f45dfa6abd Merge pull request #2839 from github/marcogario/clean-up-proxy-workaround 
Clean-up logic for overriding proxy
 2025-08-11 14:23:00 +01:00
Henry Mercer
efcb415657 Merge pull request #3022 from github/henrymercer/improve-pr-template 
Add risk assessment to PR template
 2025-08-11 14:09:01 +01:00
Henry Mercer
be99c61783 Merge branch 'main' into marcogario/clean-up-proxy-workaround 2025-08-11 14:08:12 +01:00
Paolo Tranquilli
28f2516040 Improve Rust analysis PR check 
Also run the `rust` checks on "milestone" CLI releases, to ensure we
remain backward compatible with those versions. This was prompted by
https://github.com/github/codeql-action/pull/2960#pullrequestreview-3104730221

Running this on current `main` and then on that PR should improve our
confidence we remain backward compatible.

It also turns out a probable `ruamel.yaml` update was changing a lot of
generated workflows, so I've:
* fixed the `ruamel.yaml` version to the latest in `sync.sh`
* added `yaml.width = 120` in `sync.py` to minimize (but not entirely
  remove) the number of changes
* checked in the workflows whose formatting was changed by the new
  `ruamel.yaml` version
 2025-08-11 14:58:50 +02:00
Henry Mercer
916d5bdef0 Merge branch 'main' into henrymercer/improve-pr-template 2025-08-11 13:54:50 +01:00
Henry Mercer
5b6f1d22a1 Merge pull request #3021 from github/henrymercer/cleanup-extract-to-toolcache 
Cleanup extract to toolcache feature flag
 2025-08-11 13:46:30 +01:00
Chuan-kai Lin
e47147711b build: refresh js files 2025-08-08 10:36:17 -07:00
Chuan-kai Lin
baac9295dc Check both qlpack.yml and codeql-pack.yml 2025-08-08 10:34:53 -07:00
Chuan-kai Lin
57f4ac5c1b PR checks: add overlay-init-fallback.yml 2025-08-08 09:57:45 -07:00
Chuan-kai Lin
8dbcef50df Extract getGeneratedSuitePath() 2025-08-08 08:53:04 -07:00
Chuan-kai Lin
ee698cb5ba init-action: inhibit non-empty dbLocation warning when restarting 2025-08-08 08:53:04 -07:00
Chuan-kai Lin
bc9c32ed0b init-action: check packs for overlay compatibility 2025-08-08 08:53:04 -07:00
Chuan-kai Lin
ee7cacdb6b Inline runInit() 
This commit inlines runInit(), so that it is easier to repeat the
runDatabaseInitCluster() call when needed.
 2025-08-08 08:53:04 -07:00
Chuan-kai Lin
ed9d057cde Extract runDatabaseInitCluster() 2025-08-08 08:53:04 -07:00
Chuan-kai Lin
c47e1541d8 Add checkPacksForOverlayCompatibility() 2025-08-08 08:53:03 -07:00
Chuan-kai Lin
9d202e0975 Add resolveQueriesStartingPacks() 2025-08-08 08:47:24 -07:00
Chuan-kai Lin
ad19982a1f Remove packDownload() 2025-08-08 08:47:24 -07:00
Chuan-kai Lin
a71ebf32ea Remove resolveQueries() 2025-08-08 08:47:24 -07:00
Chuan-kai Lin
da8dabf356 VersionInfo: add overlayVersion field 2025-08-08 08:47:24 -07:00
Chuan-kai Lin
6504a72ad7 Update CODEQL_OVERLAY_MINIMUM_VERSION 2025-08-08 08:47:24 -07:00
Henry Mercer
f3997c21f2 Add risk assessment to PR template 2025-08-08 16:08:42 +01:00
Henry Mercer
1ae99dedc6 Update cleanup-level input description 2025-08-08 15:59:27 +01:00
Henry Mercer
4474150eef Merge pull request #3020 from github/mergeback/v3.29.8-to-main-76621b61 
Mergeback v3.29.8 refs/heads/releases/v3 into main
 2025-08-08 11:53:05 +01:00
Henry Mercer
84973f707e Clean up toolcache PR checks 2025-08-08 11:48:29 +01:00
Henry Mercer
01992a9420 Clean up Zstd bundle PR checks 2025-08-08 11:45:43 +01:00
github-actions[bot]
5fabbc2b0d Update checked-in dependencies 2025-08-08 10:39:10 +00:00
Henry Mercer
c9d51abc0b Remove blank lines 2025-08-08 11:38:12 +01:00
Henry Mercer
1afa0e7463 Cleanup extract to toolcache feature flag 2025-08-08 11:26:14 +01:00
Henry Mercer
8cec93ae81 Clean up zstd streaming extraction feature flag 2025-08-08 11:18:56 +01:00
github-actions[bot]
9ec8453e11 Update changelog and version after v3.29.8 2025-08-08 10:09:34 +00:00
Henry Mercer
76621b61de Merge pull request #3019 from github/update-v3.29.8-679a40d33 
Merge main into releases/v3
v3.29.8 		2025-08-08 11:09:06 +01:00
Henry Mercer
29ac3cefbb Add release notes for 3.29.7 2025-08-08 10:46:17 +01:00
github-actions[bot]
737cfdebe6 Update changelog for v3.29.8 2025-08-08 09:36:40 +00:00
Henry Mercer
679a40d337 Merge pull request #3014 from github/henrymercer/rebuild-dispatch 
Enable rebuilding PRs with conflicts
 2025-08-08 09:45:36 +01:00
Henry Mercer
6fe50b283a Merge pull request #3015 from github/henrymercer/language-autodetection-workaround 
Fix auto-detection of extractors that aren't languages
 2025-08-07 21:28:43 +01:00
Henry Mercer
6bc91d64f6 Add changelog note 2025-08-07 21:13:25 +01:00
Henry Mercer
6b4fedca4f Bump Action patch version 2025-08-07 21:12:21 +01:00
Henry Mercer
5794ffcb4a Fix auto-detection of extractors that aren't languages 2025-08-07 21:09:22 +01:00