Merge pull request #3359 from github/dependabot/npm_and_yarn/npm-minor-b2e0062778

Bump the npm-minor group with 3 updates
Merge branch 'main' into dependabot/npm_and_yarn/npm-minor-b2e0062778
2025-12-18 21:39:15 +08:00 · 2025-12-17 11:04:55 +00:00 · 2025-12-17 10:38:55 +00:00 · 2025-12-17 09:59:27 +00:00 · 2025-12-16 19:33:12 +00:00 · 2025-12-16 18:56:12 +00:00
15 changed files with 271720 additions and 190425 deletions
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,10 @@
 See the [releases page](https://github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs.
 ## [UNRELEASED]
 No user facing changes.
 ## 4.31.9 - 16 Dec 2025
 No user facing changes.
--- a/lib/analyze-action-post.js
+++ b/lib/analyze-action-post.js
--- a/lib/analyze-action.js
+++ b/lib/analyze-action.js
--- a/lib/autobuild-action.js
+++ b/lib/autobuild-action.js
--- a/lib/init-action-post.js
+++ b/lib/init-action-post.js
--- a/lib/init-action.js
+++ b/lib/init-action.js
--- a/lib/resolve-environment-action.js
+++ b/lib/resolve-environment-action.js
--- a/lib/setup-codeql-action.js
+++ b/lib/setup-codeql-action.js
--- a/lib/start-proxy-action-post.js
+++ b/lib/start-proxy-action-post.js
--- a/lib/start-proxy-action.js
+++ b/lib/start-proxy-action.js
--- a/lib/upload-lib.js
+++ b/lib/upload-lib.js
--- a/lib/upload-sarif-action-post.js
+++ b/lib/upload-sarif-action-post.js
--- a/lib/upload-sarif-action.js
+++ b/lib/upload-sarif-action.js
--- a/package-lock.json
+++ b/package-lock.json
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
  "name": "codeql",
-  "version": "4.31.9",
+  "version": "4.31.10",
  "private": true,
  "description": "CodeQL action",
  "scripts": {
@@ -24,12 +24,12 @@
  },
  "license": "MIT",
  "dependencies": {
-    "@actions/artifact": "^4.0.0",
+    "@actions/artifact": "^5.0.1",
    "@actions/artifact-legacy": "npm:@actions/artifact@^1.1.2",
-    "@actions/cache": "^4.1.0",
+    "@actions/cache": "^5.0.1",
-    "@actions/core": "^1.11.1",
+    "@actions/core": "^2.0.1",
-    "@actions/exec": "^1.1.1",
+    "@actions/exec": "^2.0.0",
-    "@actions/github": "^6.0.0",
+    "@actions/github": "^6.0.1",
    "@actions/glob": "^0.5.0",
    "@actions/http-client": "^3.0.0",
    "@actions/io": "^2.0.0",
@@ -51,7 +51,7 @@
    "@ava/typescript": "6.0.0",
    "@eslint/compat": "^2.0.0",
    "@eslint/eslintrc": "^3.3.3",
-    "@eslint/js": "^9.39.1",
+    "@eslint/js": "^9.39.2",
    "@microsoft/eslint-formatter-sarif": "^3.1.0",
    "@octokit/types": "^16.0.0",
    "@types/archiver": "^7.0.0",
@@ -61,7 +61,7 @@
    "@types/node-forge": "^1.3.14",
    "@types/semver": "^7.7.1",
    "@types/sinon": "^21.0.0",
-    "@typescript-eslint/eslint-plugin": "^8.48.1",
+    "@typescript-eslint/eslint-plugin": "^8.49.0",
    "@typescript-eslint/parser": "^8.48.0",
    "ava": "^6.4.1",
    "esbuild": "^0.27.1",
Author	SHA1	Message	Date
Henry Mercer	b88acb2f6c	Merge pull request #3359 from github/dependabot/npm_and_yarn/npm-minor-b2e0062778 Bump the npm-minor group with 3 updates	2025-12-17 11:04:55 +00:00
Henry Mercer	241948c698	Merge branch 'main' into dependabot/npm_and_yarn/npm-minor-b2e0062778	2025-12-17 10:38:55 +00:00
Henry Mercer	1fe89fe9cb	Merge pull request #3368 from github/copilot/bump-actions-npm-packages Bump @actions/* npm packages to latest versions	2025-12-17 09:59:27 +00:00
Henry Mercer	6dba00881c	Merge pull request #3372 from github/mergeback/v4.31.9-to-main-5d4e8d1a Mergeback v4.31.9 refs/heads/releases/v4 into main	2025-12-16 19:33:12 +00:00
github-actions[bot]	d4d47c0d3d	Rebuild	2025-12-16 18:56:12 +00:00
github-actions[bot]	6c6e810910	Update changelog and version after v4.31.9	2025-12-16 18:32:18 +00:00
Henry Mercer	7a5748cf0d	Remove changelog note	2025-12-16 13:41:13 +00:00
copilot-swe-agent[bot]	db75d46248	Bump @actions/* npm packages to latest versions Co-authored-by: henrymercer <14129055+henrymercer@users.noreply.github.com>	2025-12-16 13:34:51 +00:00
copilot-swe-agent[bot]	a0fc644617	Initial plan	2025-12-16 13:29:18 +00:00
github-actions[bot]	e1058e4d74	Rebuild	2025-12-15 17:03:33 +00:00
dependabot[bot]	d4f39b0766	Bump the npm-minor group with 3 updates Bumps the npm-minor group with 3 updates: [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js), [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) and [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser). Updates `@eslint/js` from 9.39.1 to 9.39.2 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](https://github.com/eslint/eslint/commits/v9.39.2/packages/js) Updates `@typescript-eslint/eslint-plugin` from 8.48.1 to 8.49.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.49.0/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 8.48.1 to 8.49.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.49.0/packages/parser) --- updated-dependencies: - dependency-name: "@eslint/js" dependency-version: 9.39.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor - dependency-name: "@typescript-eslint/eslint-plugin" dependency-version: 8.49.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor - dependency-name: "@typescript-eslint/parser" dependency-version: 8.49.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2025-12-15 17:01:55 +00:00