github/codeql-action
0
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2026-04-01 09:12:17 +00:00
Code Issues Packages Projects Releases Wiki Activity
9,254 Commits 330 Branches 535 Tags
main
Commit Graph

9254 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Henry Mercer
c618c9bddb Merge pull request #3789 from github/henrymercer/lower-minimum-git-if-no-submodules 
Overlay: Only require Git 2.36.0 for repos that contain submodules
 2026-03-31 10:10:05 +00:00
Henry Mercer
a507a542a4 Test fallback when repo has no submodules 2026-03-30 15:58:58 +01:00
Henry Mercer
be0a156326 Save a computation of the git root 2026-03-30 13:37:14 +01:00
Henry Mercer
0592832ed8 Add changelog note 2026-03-27 18:58:05 +00:00
Henry Mercer
88a7e5118e Don't disable if we don't need the git version 2026-03-27 18:54:26 +00:00
Henry Mercer
6643a7d207 Only require Git 2.36.0 when repo contains submodules 2026-03-27 18:54:24 +00:00
Henry Mercer
a899987af2 Merge pull request #3786 from github/henrymercer/faster-interactive-jobs 
Move time-sensitive Actions workflows to `ubuntu-latest`
 2026-03-27 18:08:16 +00:00
Henry Mercer
191d7c6f13 Merge pull request #3783 from github/mergeback/v4.35.1-to-main-c10b8064 
Mergeback v4.35.1 refs/heads/releases/v4 into main
 2026-03-27 17:11:42 +00:00
Henry Mercer
aa69c483cd Merge pull request #3779 from github/henrymercer/remove-unused-dependency 
Remove unused `@schemastore/package` dependency
 2026-03-27 17:11:32 +00:00
Henry Mercer
fe775da508 Merge pull request #3780 from github/dependabot/npm_and_yarn/brace-expansion-1.1.13 
Bump brace-expansion from 1.1.12 to 1.1.13
 2026-03-27 17:11:18 +00:00
Henry Mercer
353802f9f2 Move time-sensitive Actions workflows to ubuntu-latest 
We originally moved these to `ubuntu-slim`, but there is a significant performance difference.  Since we often find ourselves waiting on these jobs, let's use the faster runners.
 2026-03-27 16:22:19 +00:00
github-actions[bot]
cc7db4a1f9 Rebuild 2026-03-27 16:20:01 +00:00
github-actions[bot]
6010f9d8e2 Update changelog and version after v4.35.1 2026-03-27 16:10:47 +00:00
Henry Mercer
c10b8064de Merge pull request #3782 from github/update-v4.35.1-d6d1743b8 
Merge main into releases/v4
v4 v4.35.1 		2026-03-27 16:07:37 +00:00
github-actions[bot]
c5ffd06837 Update changelog for v4.35.1 2026-03-27 15:39:16 +00:00
Henry Mercer
d6d1743b8e Merge pull request #3781 from github/henrymercer/update-git-minimum-version 
Update minimum Git version for overlay to 2.36.0
 2026-03-27 14:59:36 +00:00
github-actions[bot]
999119ba45 Rebuild 2026-03-27 14:00:54 +00:00
Henry Mercer
65d2efa733 Add changelog note 2026-03-27 14:00:27 +00:00
Henry Mercer
2437b20ab3 Update minimum git version for overlay to 2.36.0 2026-03-27 14:00:17 +00:00
dependabot[bot]
f13c600724 Bump brace-expansion from 1.1.12 to 1.1.13 
Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 1.1.12 to 1.1.13.
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](https://github.com/juliangruber/brace-expansion/compare/v1.1.12...v1.1.13)

---
updated-dependencies:
- dependency-name: brace-expansion
  dependency-version: 1.1.13
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-27 13:58:43 +00:00
Henry Mercer
7dcea06663 Remove unused @schemastore/package dependency 2026-03-27 13:57:52 +00:00
Michael B. Gale
ea5f71947c Merge pull request #3775 from github/dependabot/npm_and_yarn/node-forge-1.4.0 
Bump node-forge from 1.3.3 to 1.4.0
 2026-03-27 13:47:55 +00:00
Henry Mercer
45ceeea896 Merge pull request #3777 from github/mergeback/v4.35.0-to-main-b8bb9f28 
Mergeback v4.35.0 refs/heads/releases/v4 into main
 2026-03-27 13:36:14 +00:00
github-actions[bot]
24448c9843 Rebuild 2026-03-27 12:23:25 +00:00
github-actions[bot]
7c51060631 Update changelog and version after v4.35.0 2026-03-27 12:14:07 +00:00
Óscar San José
b8bb9f28b8 Merge pull request #3776 from github/update-v4.35.0-0078ad667 
Merge main into releases/v4
v4.35.0 		2026-03-27 13:11:18 +01:00
github-actions[bot]
e9cf68bb33 Update changelog for v4.35.0 2026-03-27 11:44:34 +00:00
github-actions[bot]
36791d8d66 Rebuild 2026-03-27 10:27:12 +00:00
dependabot[bot]
22eba96a28 Bump node-forge from 1.3.3 to 1.4.0 
Bumps [node-forge](https://github.com/digitalbazaar/forge) from 1.3.3 to 1.4.0.
- [Changelog](https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md)
- [Commits](https://github.com/digitalbazaar/forge/compare/v1.3.3...v1.4.0)

---
updated-dependencies:
- dependency-name: node-forge
  dependency-version: 1.4.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-27 10:25:06 +00:00
Óscar San José
0078ad667e Merge pull request #3773 from github/update-bundle/codeql-bundle-v2.25.1 
Update default bundle to 2.25.1
 2026-03-27 10:02:52 +00:00
github-actions[bot]
fa7a15b909 Add changelog note 2026-03-27 09:43:23 +00:00
github-actions[bot]
8c29faa7ab Update default bundle to codeql-bundle-v2.25.1 2026-03-27 09:43:12 +00:00
Henry Mercer
f94817b9f0 Merge pull request #3772 from github/dependabot/npm_and_yarn/yaml-2.8.3 
Bump yaml from 2.8.2 to 2.8.3
codeql-bundle-v2.25.1 		2026-03-26 19:43:58 +00:00
dependabot[bot]
dd060970a5 Bump yaml from 2.8.2 to 2.8.3 
Bumps [yaml](https://github.com/eemeli/yaml) from 2.8.2 to 2.8.3.
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](https://github.com/eemeli/yaml/compare/v2.8.2...v2.8.3)

---
updated-dependencies:
- dependency-name: yaml
  dependency-version: 2.8.3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-26 18:26:45 +00:00
Michael B. Gale
5cc552f43e Merge pull request #3768 from github/dependabot/npm_and_yarn/npm-minor-3536e7c6f0 
Bump the npm-minor group with 5 updates
 2026-03-26 17:46:04 +00:00
Michael B. Gale
6b1a9f2131 Merge branch 'main' into dependabot/npm_and_yarn/npm-minor-3536e7c6f0 2026-03-26 16:36:54 +00:00
Michael B. Gale
9d3ec5727a Merge pull request #3770 from github/dependabot/github_actions/dot-github/workflows/actions-minor-266139ee1d 
Bump ruby/setup-ruby from 1.288.0 to 1.295.0 in /.github/workflows in the actions-minor group across 1 directory
 2026-03-26 16:32:19 +00:00
Michael B. Gale
3ff82aacd0 Merge pull request #3575 from github/mbg/ts/sync-checks 
Convert `release-branches.py` and `update-required-checks.sh` to TypeScript
 2026-03-26 15:47:43 +00:00
Sam Robson
4bdd4e7526 Merge pull request #3554 from github/sam-robson/overlay-include-diff 
feat: always include files from diff in overlay changed files
 2026-03-26 10:57:24 +00:00
Sam Robson
23a0098b57 fix: improve error handling and logging for diff range path resolution 2026-03-25 19:53:21 +00:00
github-actions[bot]
ea7b090925 Rebuild 2026-03-25 18:01:40 +00:00
dependabot[bot]
a663d0174a Bump ruby/setup-ruby 
Bumps the actions-minor group with 1 update in the /.github/workflows directory: [ruby/setup-ruby](https://github.com/ruby/setup-ruby).


Updates `ruby/setup-ruby` from 1.288.0 to 1.295.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](09a7688d3b...319994f95f)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-version: 1.295.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-25 17:59:44 +00:00
dependabot[bot]
b659882aae Bump the npm-minor group with 5 updates 
Bumps the npm-minor group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [esbuild](https://github.com/evanw/esbuild) | `0.27.3` | `0.27.4` |
| [eslint-plugin-import-x](https://github.com/un-ts/eslint-plugin-import-x) | `4.16.1` | `4.16.2` |
| [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc) | `62.7.1` | `62.8.0` |
| [sinon](https://github.com/sinonjs/sinon) | `21.0.2` | `21.0.3` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.57.0` | `8.57.1` |


Updates `esbuild` from 0.27.3 to 0.27.4
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](https://github.com/evanw/esbuild/compare/v0.27.3...v0.27.4)

Updates `eslint-plugin-import-x` from 4.16.1 to 4.16.2
- [Release notes](https://github.com/un-ts/eslint-plugin-import-x/releases)
- [Changelog](https://github.com/un-ts/eslint-plugin-import-x/blob/master/CHANGELOG.md)
- [Commits](https://github.com/un-ts/eslint-plugin-import-x/compare/v4.16.1...v4.16.2)

Updates `eslint-plugin-jsdoc` from 62.7.1 to 62.8.0
- [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases)
- [Commits](https://github.com/gajus/eslint-plugin-jsdoc/compare/v62.7.1...v62.8.0)

Updates `sinon` from 21.0.2 to 21.0.3
- [Release notes](https://github.com/sinonjs/sinon/releases)
- [Changelog](https://github.com/sinonjs/sinon/blob/main/docs/changelog.md)
- [Commits](https://github.com/sinonjs/sinon/compare/v21.0.2...v21.0.3)

Updates `typescript-eslint` from 8.57.0 to 8.57.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.57.1/packages/typescript-eslint)

---
updated-dependencies:
- dependency-name: esbuild
  dependency-version: 0.27.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: eslint-plugin-import-x
  dependency-version: 4.16.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: eslint-plugin-jsdoc
  dependency-version: 62.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: sinon
  dependency-version: 21.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: typescript-eslint
  dependency-version: 8.57.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-25 17:53:49 +00:00
Sam Robson
d5bb39fa0b refactor: single source of truth for getDiffRangesJsonFilePath and simplified getDiffRangeFilePaths 2026-03-25 15:51:51 +00:00
Sam Robson
521c3536d3 feat: always include files from diff in overlay changed files 2026-03-25 15:51:51 +00:00
Michael B. Gale
972365e142 Fix comment 2026-03-25 14:15:39 +00:00
Michael B. Gale
8a0b4f2746 fixup! Update CONTRIBUTING.md 2026-03-25 14:14:49 +00:00
Michael B. Gale
a5418e172c Delete releases.ini 2026-03-25 13:49:47 +00:00
Michael B. Gale
fae4c28b51 Update CONTRIBUTING.md 2026-03-25 13:48:55 +00:00
Michael B. Gale
661a8fbbe3 Default ref to main 2026-03-25 13:40:05 +00:00