a134948b87
Bump brace-expansion
...
Address https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-jxxr-4gwj-5jf2
2026-05-20 15:17:16 +01:00
f4d0a7abf7
Merge pull request #3912 from github/henrymercer/smaller-upload-lib
...
Action size: Reduce duplication between `upload-lib` and `entry-points`
2026-05-19 18:55:28 +00:00
2a7340616e
Address review comments
2026-05-19 19:41:51 +01:00
b79a976789
Merge remote-tracking branch 'origin/main' into mbg/analysis-kinds/warn-on-non-cs-advanced-setup
2026-05-19 14:18:19 +01:00
fcc1e3197f
Action size: Reduce duplication between upload-lib and entry-points
2026-05-18 17:18:03 +01:00
05e8f288eb
Merge branch 'main' into henrymercer/require-codeql-2.19.4
2026-05-15 18:13:43 +01:00
5b815f25ca
Merge branch 'main' into henrymercer/sha256
2026-05-15 14:58:14 +01:00
f1ce9f4421
Rebuild
2026-05-15 11:30:22 +00:00
b43bb7bd69
Merge branch 'main' into henrymercer/sha256
2026-05-15 11:41:47 +01:00
127de8117f
Merge remote-tracking branch 'origin/main' into mbg/esbuild/split
2026-05-14 19:14:01 +01:00
0d08c01f78
Auto-generate shared bundle
2026-05-14 18:27:46 +01:00
14085a675c
Auto-generate entry points
2026-05-14 18:13:01 +01:00
e8d3fa290e
Merge branch 'main' into henrymercer/sha256
2026-05-14 17:10:41 +01:00
d7e50c23fe
Fix linter errors
2026-05-14 15:24:33 +01:00
bb30f3132d
Avoid top-level promise in analyze-action
2026-05-14 15:14:03 +01:00
2f137c9dc6
Add remaining new entry points
2026-05-14 14:55:33 +01:00
9d7243005b
Merge remote-tracking branch 'origin/main' into sam-robson/overlay-fallback
...
* origin/main: (40 commits)
Bump the npm-minor group across 1 directory with 3 updates
Bump actions/create-github-app-token
Nit: Tweak JSDoc for `getRawLanguagesNoAutodetect`
Enable only `code-scanning`
Use overlay-aware version for code scanning exclusively
Add changelog entry
Rebuild
Bump five transitive dependencies
Throw error if multiple analysis kinds are specified
Bump fast-xml-builder from 1.1.5 to 1.2.0
Improve tests
Improve error message
Remove dead code
Remove `makeOverlayMatchFeatures` indirection
Add JSDoc for `getRawLanguagesNoAutodetect`
Enable overlay-aware version selection in `setup-codeql`
Minor: Introduce constant to avoid duplication
Improve changelog note
Rebuild
Update changelog and version after v4.35.4
...
# Conflicts:
# lib/init-action.js
# src/diff-informed-analysis-utils.test.ts
2026-05-14 13:39:44 +01:00
237b03b3c3
WIP: Reduce bundle duplication
2026-05-14 12:47:34 +01:00
93d215d874
Merge branch 'main' into henrymercer/sha256
2026-05-13 18:44:38 +01:00
4235601f6f
Log error for non-default analysis-kinds input outside of managed workflows
2026-05-13 17:43:16 +01:00
3d6ea97f26
Merge pull request #3891 from github/navntoft/dep/remove-brace-expansion-override
...
Bump brace-expansion and 4 dev dependencies
2026-05-13 15:46:57 +00:00
4dc72761a6
Merge remote-tracking branch 'origin/main' into mbg/analysis-kinds/warn-on-multiple
2026-05-13 16:20:45 +01:00
a66f7bbb5a
Merge branch 'main' into henrymercer/sha256
2026-05-13 10:51:44 +01:00
a333d64ec4
Remove DatabaseInterpretResultsSupportsSarifRunProperty tools feature
...
This feature has been supported since CodeQL CLI v2.19.0
2026-05-12 19:26:21 +01:00
97fb30df6b
Remove ForceOverwrite tools feature
...
This feature has been supported since CodeQL CLI v2.18.0, which is below the new minimum version.
2026-05-12 19:26:20 +01:00
d122da3c9f
Bump minimum CodeQL CLI version to 2.19.4
2026-05-12 19:26:20 +01:00
de3e561d12
Improve regex clarity
2026-05-12 19:06:04 +01:00
6a4e35fad9
Add support for SHA-256 Git object IDs
2026-05-12 18:24:21 +01:00
257b3d3fc8
Enable only code-scanning
2026-05-12 15:46:28 +01:00
201a96b541
Use overlay-aware version for code scanning exclusively
2026-05-12 15:25:40 +01:00
2ca0fbdca8
Rebuild
2026-05-12 15:59:34 +02:00
70419e3273
Throw error if multiple analysis kinds are specified
2026-05-12 14:54:11 +01:00
87ac48dae6
Improve error message
2026-05-08 19:16:47 +01:00
540699dcca
Remove makeOverlayMatchFeatures indirection
2026-05-08 19:14:05 +01:00
2a950b930c
Enable overlay-aware version selection in setup-codeql
2026-05-08 19:14:05 +01:00
4f815a68d3
Minor: Introduce constant to avoid duplication
2026-05-08 19:14:04 +01:00
0aedbb71d8
Merge branch 'main' into henrymercer/overlay-match-codeql-version
2026-05-08 19:10:45 +01:00
272ada693f
Rebuild
2026-05-07 15:58:38 +00:00
b81d0d250f
Merge pull request #3874 from github/henrymercer/slow-tests-ci-only
...
Tests: Run slow `scanArtifactsForTokens` test in CI only by default
2026-05-07 15:04:47 +00:00
0c80cee806
Add explicit error on Windows
2026-05-07 15:39:42 +01:00
9f82f88f07
Update default bundle to codeql-bundle-v2.25.4
2026-05-07 12:49:13 +00:00
7525c68ea1
Nit: Dedupe languages
2026-05-07 11:01:15 +01:00
01bc9be56a
Filter to code scanning only
2026-05-07 11:00:54 +01:00
9d6b456c59
Merge branch 'main' into sam-robson/overlay-fallback
2026-05-06 20:26:20 +01:00
e259d26055
refactor: rename overlay-disabled reason and add changelog entry
2026-05-06 20:23:20 +01:00
817b68489e
Merge branch 'main' into henrymercer/overlay-match-codeql-version
2026-05-06 19:20:52 +01:00
b967fdfbdc
Add dry run mode so we can dark ship
2026-05-06 18:30:24 +01:00
55d6319f96
Match CLI version to cached overlay-base database
2026-05-06 18:01:37 +01:00
b0942116d7
Expose all enabled default CLI versions
2026-05-06 17:45:56 +01:00
a796e3e4ed
Add OverlayAnalysisMatchCodeqlVersion feature flag
2026-05-06 15:14:04 +01:00
Henry Mercer
Henry Mercer
Michael B. Gale
github-actions[bot]
Sam Robson
Mads Navntoft