github/codeql-action
0
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2026-04-02 01:32:17 +00:00
Code Issues Packages Projects Releases Wiki Activity
9,272 Commits 331 Branches 535 Tags
main
Commit Graph

9272 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Michael B. Gale
34950e1b11 Merge pull request #3792 from github/mario-campos/issue-1664 
Extend start-proxy.yml to test multiple registry support
 2026-04-01 13:59:59 +00:00
Henry Mercer
57ec7e1000 Merge pull request #3794 from github/henrymercer/cleanup 
Python: Disable standard library extraction on GHES
 2026-04-01 11:37:34 +00:00
Henry Mercer
311573e58e Add changelog note 2026-04-01 12:19:11 +01:00
Henry Mercer
1f4c852aeb Clean up Python extract stdlib feature flag 2026-04-01 12:08:06 +01:00
Michael B. Gale
2e3aaaefca Merge pull request #3787 from github/mbg/bundle/metadata 
Generate and analyse esbuild bundle metadata
 2026-04-01 10:29:27 +00:00
Mario Campos
e2203c62cf Delete fromJSON() calls in test validation step 2026-03-31 13:19:33 -05:00
Mario Campos
7b0c5b1669 Keep validation steps named consistently 2026-03-31 12:49:07 -05:00
Mario Campos
faf45e07f9 Use different maven URL for start-proxy.yml test 2026-03-31 12:44:43 -05:00
Mario Campos
8b5e60477c Use maven_repository, not maven-repository 
The registry/language mapping table does not map the one with hyphens.
 2026-03-31 11:36:17 -05:00
Mario Campos
99b8dd4d57 Run pr-checks/sync.sh to generate __start-proxy.yml. 2026-03-31 09:32:42 -05:00
Henry Mercer
c618c9bddb Merge pull request #3789 from github/henrymercer/lower-minimum-git-if-no-submodules 
Overlay: Only require Git 2.36.0 for repos that contain submodules
 2026-03-31 10:10:05 +00:00
Mario Campos
9fd9b64766 Replace jq with Actions expression for proxy_urls validation 
For the sake of consistency with the other pre-existing validation code.
 2026-03-30 22:47:06 -05:00
Mario Campos
0c7c298b2a Extend start-proxy.yml to test multiple registry support 2026-03-30 18:35:04 -05:00
Henry Mercer
a507a542a4 Test fallback when repo has no submodules 2026-03-30 15:58:58 +01:00
Henry Mercer
be0a156326 Save a computation of the git root 2026-03-30 13:37:14 +01:00
Michael B. Gale
f98bf5e347 Output relative to __dirname 2026-03-27 19:21:14 +00:00
Michael B. Gale
3db32b5d27 Fix outputs type 2026-03-27 19:13:22 +00:00
Michael B. Gale
4e0952a3c0 Output largest inputs 2026-03-27 19:13:02 +00:00
Henry Mercer
0592832ed8 Add changelog note 2026-03-27 18:58:05 +00:00
Henry Mercer
88a7e5118e Don't disable if we don't need the git version 2026-03-27 18:54:26 +00:00
Henry Mercer
6643a7d207 Only require Git 2.36.0 when repo contains submodules 2026-03-27 18:54:24 +00:00
Michael B. Gale
47f1709a3c Add basic metadata analysis script 2026-03-27 18:19:57 +00:00
Michael B. Gale
b1981a5480 Move getApiClient out of sync-checks.ts 2026-03-27 18:13:48 +00:00
Henry Mercer
a899987af2 Merge pull request #3786 from github/henrymercer/faster-interactive-jobs 
Move time-sensitive Actions workflows to `ubuntu-latest`
 2026-03-27 18:08:16 +00:00
Michael B. Gale
4ed3c0efe6 Generate esbuild metadata file 2026-03-27 17:54:29 +00:00
Henry Mercer
191d7c6f13 Merge pull request #3783 from github/mergeback/v4.35.1-to-main-c10b8064 
Mergeback v4.35.1 refs/heads/releases/v4 into main
 2026-03-27 17:11:42 +00:00
Henry Mercer
aa69c483cd Merge pull request #3779 from github/henrymercer/remove-unused-dependency 
Remove unused `@schemastore/package` dependency
 2026-03-27 17:11:32 +00:00
Henry Mercer
fe775da508 Merge pull request #3780 from github/dependabot/npm_and_yarn/brace-expansion-1.1.13 
Bump brace-expansion from 1.1.12 to 1.1.13
 2026-03-27 17:11:18 +00:00
Henry Mercer
353802f9f2 Move time-sensitive Actions workflows to ubuntu-latest 
We originally moved these to `ubuntu-slim`, but there is a significant performance difference.  Since we often find ourselves waiting on these jobs, let's use the faster runners.
 2026-03-27 16:22:19 +00:00
github-actions[bot]
cc7db4a1f9 Rebuild 2026-03-27 16:20:01 +00:00
github-actions[bot]
6010f9d8e2 Update changelog and version after v4.35.1 2026-03-27 16:10:47 +00:00
Henry Mercer
c10b8064de Merge pull request #3782 from github/update-v4.35.1-d6d1743b8 
Merge main into releases/v4
v4 v4.35.1 		2026-03-27 16:07:37 +00:00
github-actions[bot]
c5ffd06837 Update changelog for v4.35.1 2026-03-27 15:39:16 +00:00
Henry Mercer
d6d1743b8e Merge pull request #3781 from github/henrymercer/update-git-minimum-version 
Update minimum Git version for overlay to 2.36.0
 2026-03-27 14:59:36 +00:00
github-actions[bot]
999119ba45 Rebuild 2026-03-27 14:00:54 +00:00
Henry Mercer
65d2efa733 Add changelog note 2026-03-27 14:00:27 +00:00
Henry Mercer
2437b20ab3 Update minimum git version for overlay to 2.36.0 2026-03-27 14:00:17 +00:00
dependabot[bot]
f13c600724 Bump brace-expansion from 1.1.12 to 1.1.13 
Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 1.1.12 to 1.1.13.
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](https://github.com/juliangruber/brace-expansion/compare/v1.1.12...v1.1.13)

---
updated-dependencies:
- dependency-name: brace-expansion
  dependency-version: 1.1.13
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-27 13:58:43 +00:00
Henry Mercer
7dcea06663 Remove unused @schemastore/package dependency 2026-03-27 13:57:52 +00:00
Michael B. Gale
ea5f71947c Merge pull request #3775 from github/dependabot/npm_and_yarn/node-forge-1.4.0 
Bump node-forge from 1.3.3 to 1.4.0
 2026-03-27 13:47:55 +00:00
Henry Mercer
45ceeea896 Merge pull request #3777 from github/mergeback/v4.35.0-to-main-b8bb9f28 
Mergeback v4.35.0 refs/heads/releases/v4 into main
 2026-03-27 13:36:14 +00:00
github-actions[bot]
24448c9843 Rebuild 2026-03-27 12:23:25 +00:00
github-actions[bot]
7c51060631 Update changelog and version after v4.35.0 2026-03-27 12:14:07 +00:00
Óscar San José
b8bb9f28b8 Merge pull request #3776 from github/update-v4.35.0-0078ad667 
Merge main into releases/v4
v4.35.0 		2026-03-27 13:11:18 +01:00
github-actions[bot]
e9cf68bb33 Update changelog for v4.35.0 2026-03-27 11:44:34 +00:00
github-actions[bot]
36791d8d66 Rebuild 2026-03-27 10:27:12 +00:00
dependabot[bot]
22eba96a28 Bump node-forge from 1.3.3 to 1.4.0 
Bumps [node-forge](https://github.com/digitalbazaar/forge) from 1.3.3 to 1.4.0.
- [Changelog](https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md)
- [Commits](https://github.com/digitalbazaar/forge/compare/v1.3.3...v1.4.0)

---
updated-dependencies:
- dependency-name: node-forge
  dependency-version: 1.4.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-27 10:25:06 +00:00
Óscar San José
0078ad667e Merge pull request #3773 from github/update-bundle/codeql-bundle-v2.25.1 
Update default bundle to 2.25.1
 2026-03-27 10:02:52 +00:00
github-actions[bot]
fa7a15b909 Add changelog note 2026-03-27 09:43:23 +00:00
github-actions[bot]
8c29faa7ab Update default bundle to codeql-bundle-v2.25.1 2026-03-27 09:43:12 +00:00