github/codeql-action
1
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2025-12-26 17:20:10 +08:00
Code Issues Packages Projects Releases Wiki Activity
7,323 Commits 297 Branches 500 Tags
v3.30.0
Commit Graph

7323 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Henry Mercer
2d92b76c45 Merge pull request #3067 from github/update-v3.30.0-92eada825 
Merge main into releases/v3
v3.30.0 		2025-09-01 14:34:07 +01:00
github-actions[bot]
390daafd7d Update changelog for v3.30.0 2025-09-01 13:00:32 +00:00
Michael B. Gale
92eada825a Merge pull request #3033 from github/mbg/ci/rollback-release 
Add workflow for rolling back release
 2025-09-01 13:57:36 +01:00
Michael B. Gale
872a6a41e9 Add pull-requests: write permission 2025-09-01 13:37:45 +01:00
Michael B. Gale
9389ce0cc4 Merge remote-tracking branch 'origin/main' into mbg/ci/rollback-release 2025-08-29 15:22:49 +01:00
Henry Mercer
02ab253bd2 Merge pull request #3054 from github/henrymercer/bundle 
Bundle Actions using esbuild
 2025-08-29 14:02:43 +01:00
Michael B. Gale
b06d325850 Add draft release URL to job summary 2025-08-29 13:11:27 +01:00
Michael B. Gale
43d629cdfd Use argparse in rollback_changelog.py 2025-08-29 13:06:21 +01:00
Michael B. Gale
8f01f5d429 Apply suggestions from code review 
Co-authored-by: Henry Mercer <henrymercer@github.com>
 2025-08-29 12:32:11 +01:00
Henry Mercer
3e493e72f7 Remove removeNPMAbsolutePaths 
It's no longer needed since we aren't checking in `node_modules`.
 2025-08-29 12:14:24 +01:00
Henry Mercer
138655eddc Update CONTRIBUTING.md 2025-08-29 12:13:22 +01:00
Henry Mercer
6d7d2c657b Bump minor version number 2025-08-29 12:09:57 +01:00
Henry Mercer
68be0dc609 Merge branch 'main' into henrymercer/bundle 2025-08-29 12:08:22 +01:00
Henry Mercer
48dd624a81 Merge pull request #3059 from github/dependabot/github_actions/actions-fd207b077b 
Bump the actions group with 2 updates
 2025-08-29 10:25:13 +01:00
Henry Mercer
2e868982cd Merge pull request #3060 from github/dependabot/npm_and_yarn/npm-5e05c77296 
Bump the npm group with 4 updates
 2025-08-29 10:23:14 +01:00
Henry Mercer
dc3244db26 Update generated sources 2025-08-29 10:11:09 +01:00
github-actions[bot]
6d122f1b85 Update checked-in dependencies 2025-08-28 17:11:32 +00:00
Henry Mercer
71327f5f4d Bump @typescript-eslint/parser version in package.json 
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
 2025-08-28 18:10:17 +01:00
Michael B. Gale
a880e53ace Merge pull request #3061 from github/mbg/cq/analysis-kinds-input 
Add `analysis-kinds` input
 2025-08-28 16:17:35 +01:00
Michael B. Gale
d61a10ac5b Merge branch 'main' into mbg/cq/analysis-kinds-input 2025-08-28 16:02:22 +01:00
Paolo Tranquilli
046c593fb6 Merge pull request #3063 from github/mbg/ci/pin-xcode16 
Pin Xcode 16
 2025-08-28 16:49:34 +02:00
Michael B. Gale
c0abce94a0 Don't pin Xcode for nightly tests 2025-08-28 15:15:33 +01:00
Michael B. Gale
caeeaa1fe8 Select Xcode 16 in workflows that analyse Swift 2025-08-28 14:01:23 +01:00
Michael B. Gale
5dc3d77633 Remove setup-swift action from repo 2025-08-28 13:56:56 +01:00
Michael B. Gale
5896c12c39 Remove setup-swift steps 2025-08-28 13:56:38 +01:00
Michael B. Gale
57b2c02524 Merge pull request #3055 from github/mbg/cq/telemetry 
Report which analysis kinds are enabled in status reports
 2025-08-28 12:16:38 +01:00
Michael B. Gale
270f7ad1da Fix import order in testing-utils.ts 2025-08-27 22:27:45 +01:00
Michael B. Gale
d72c7f186a Use analysisKinds from config in createStatusReportBase 
Replaces the synthetic value for `analysisKinds`
 2025-08-27 22:25:18 +01:00
Michael B. Gale
c1efb64b83 Fix missing analysisKinds in createTestConfig 2025-08-27 22:24:32 +01:00
Michael B. Gale
f96201c4af Use analysisKinds to decide if Code Quality is enabled 2025-08-27 18:23:02 +01:00
Michael B. Gale
06c39b6b6f Add Code Quality to enabled analysis kinds if there is an input to quality-queries 
For backwards compatibility. We should remove this once `quality-queries` is no longer in use.
 2025-08-27 18:23:02 +01:00
Michael B. Gale
e0104a269f Add analysis-kinds input and parse it 2025-08-27 18:23:01 +01:00
Michael B. Gale
15ed54f81f Move updated changelog into place before creating mergeback PR 2025-08-27 12:42:01 +01:00
Michael B. Gale
25c4fcc317 Ensure NEW_BRANCH is checked out in prepare-mergeback-branch 2025-08-27 12:34:27 +01:00
Michael B. Gale
67e42fe257 Use PR branch as BASE_BRANCH when testing, to make sure script changes are available 2025-08-27 12:23:03 +01:00
Michael B. Gale
1e21ce3021 Ensure we check out the base branch, before creating the mergeback branch 2025-08-27 12:23:03 +01:00
Michael B. Gale
e22f34a405 Create a new tag for test runs, to make sure we have changes from a PR 2025-08-27 12:23:03 +01:00
Michael B. Gale
e1654f1296 Fix prepare_changelog.py not using changelog_file consistently 2025-08-27 12:23:03 +01:00
Michael B. Gale
4205856118 Create mergeback branch/PR 2025-08-27 12:23:03 +01:00
Michael B. Gale
c9665e6850 Add dry-run input to prepare-mergeback-branch 2025-08-27 12:23:02 +01:00
Michael B. Gale
c700209743 Add script for creating a rollback changelog 2025-08-27 12:21:26 +01:00
Michael B. Gale
41dab09adf Refactor mergeback branch prep into an action 2025-08-27 12:21:26 +01:00
Michael B. Gale
541b8e4e38 Improve comment 2025-08-27 12:21:26 +01:00
Michael B. Gale
a1212db66e Fix uses paths 2025-08-27 12:21:26 +01:00
Michael B. Gale
049a0a7bc1 Add initial rollback-release workflow 2025-08-27 12:21:26 +01:00
Michael B. Gale
bd8a3cee96 Refactor prepare job into a reusable workflow 2025-08-27 12:21:25 +01:00
Henry Mercer
d2dfa8cd83 Check in precompiled upload-lib.ts for testing environments 2025-08-27 10:59:27 +01:00
github-actions[bot]
2b18179b02 Update checked-in dependencies 2025-08-26 06:39:21 +00:00
dependabot[bot]
88b121290c Bump the npm group with 4 updates 
Bumps the npm group with 4 updates: [@types/node-forge](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node-forge), [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js), [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) and [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser).


Updates `@types/node-forge` from 1.3.13 to 1.3.14
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node-forge)

Updates `@eslint/js` from 9.33.0 to 9.34.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/commits/v9.34.0/packages/js)

Updates `@typescript-eslint/eslint-plugin` from 8.40.0 to 8.41.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.41.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.40.0 to 8.41.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.41.0/packages/parser)

---
updated-dependencies:
- dependency-name: "@types/node-forge"
  dependency-version: 1.3.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@eslint/js"
  dependency-version: 9.34.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.41.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.41.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-08-26 06:38:36 +00:00
dependabot[bot]
88e5287228 Bump the actions group with 2 updates 
Bumps the actions group with 2 updates: [actions/setup-java](https://github.com/actions/setup-java) and [ruby/setup-ruby](https://github.com/ruby/setup-ruby).


Updates `actions/setup-java` from 4 to 5
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](https://github.com/actions/setup-java/compare/v4...v5)

Updates `ruby/setup-ruby` from 1.255.0 to 1.256.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](829114fc20...efbf473cab)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: ruby/setup-ruby
  dependency-version: 1.256.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-08-26 04:55:28 +00:00