github/codeql-action
0
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2026-04-02 01:32:17 +00:00
Code Issues Packages Projects Releases Wiki Activity
9,272 Commits 331 Branches 535 Tags
main
Commit Graph

9272 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
github-actions[bot]
a0e3ed6555 Rebuild 2026-03-16 09:08:32 +00:00
github-actions[bot]
fbb2eb9556 Update changelog and version after v4.33.0 2026-03-16 09:03:58 +00:00
Michael B. Gale
b1bff81932 Merge pull request #3574 from github/update-v4.32.7-7dd76e6bf 
Merge main into releases/v4
v4.33.0 		2026-03-16 09:01:14 +00:00
Michael B. Gale
e682234222 Add changelog entry for #3570 2026-03-16 08:43:35 +00:00
Michael B. Gale
95be291f41 Bump minor version 2026-03-16 08:38:13 +00:00
github-actions[bot]
59bcb6025e Update changelog for v4.32.7 2026-03-16 08:20:09 +00:00
Michael B. Gale
7dd76e6bf7 Merge pull request #3572 from github/mbg/pr-checks/eslint 
Add eslint for `pr-checks`
 2026-03-13 18:51:29 +00:00
Michael B. Gale
e3200e331b Merge pull request #3563 from github/mbg/private-registry/oidc 
Accept OIDC configurations in `start-proxy`
 2026-03-13 11:58:36 +00:00
Michael B. Gale
4c356c71a2 Merge pull request #3570 from github/mbg/repo-props/warn-on-unexpected-props 
Emit warning for unrecognised repo properties with our common prefix
 2026-03-13 11:13:21 +00:00
Michael B. Gale
b4937c19e5 Only emit one message with accumulated property names 2026-03-13 10:56:36 +00:00
Michael B. Gale
136b8ab377 Remove cache-dependency-path options as well 2026-03-13 10:46:40 +00:00
Michael B. Gale
a5aba5952c Remove package-lock.json that's no longer needed 
Since `pr-checks` is now a workspace of the main `package.json`
 2026-03-13 10:43:43 +00:00
Michael B. Gale
dafe74070a Merge pull request #3573 from github/mbg/esbuild/no-package-json 
Avoid bundling `package.json` in JavaScript files
 2026-03-13 10:38:58 +00:00
Michael B. Gale
fc8d303906 Add step (in root directory) to install dependencies 2026-03-12 22:39:45 +00:00
Michael B. Gale
3bc3228be2 Add explicit cache dependency paths in pr-checks.yml 2026-03-12 22:39:45 +00:00
Michael B. Gale
b4cb1049fb Fix linter errors in sync-back.test.ts 2026-03-12 22:39:45 +00:00
Michael B. Gale
b171c1c6d9 Fix linter errors in sync-back.ts 2026-03-12 22:39:44 +00:00
Michael B. Gale
967ca853e1 Rename sync_back to sync-back 2026-03-12 22:39:44 +00:00
Michael B. Gale
7950e47b7f Fix linter errors in sync.ts 2026-03-12 22:39:44 +00:00
Michael B. Gale
e608db4784 Add eslint configuration for pr-checks 2026-03-12 22:39:44 +00:00
Michael B. Gale
7df3db2b6f Add minimal Step type 2026-03-12 22:39:44 +00:00
Michael B. Gale
b5e1fb009d Add workspaces to root package.json 2026-03-12 22:39:44 +00:00
Michael B. Gale
ea703668e0 Avoid bundling package.json 
- `package.json` is bundled by `esbuild` because we depend on it in `actions-util.ts`
- That is so we can access the `version` property
- We now use `build.mjs` to define a constant for it instead
- We also set this constant in `ava.setup.mjs` for tests
- This reduces the size of the generated `.js` files and avoids changing them entirely in some cases
 2026-03-12 18:55:03 +00:00
Michael B. Gale
c183dca871 Move ava config out of package.json 2026-03-12 18:43:14 +00:00
Michael B. Gale
a717db1a90 Emit warning for unrecognised repo properties with our common prefix 2026-03-12 11:49:17 +00:00
Henry Mercer
1dbebad653 Merge pull request #3566 from github/dependabot/npm_and_yarn/npm-minor-aebc49e072 
Bump the npm-minor group with 2 updates
 2026-03-11 20:49:27 +00:00
Henry Mercer
82d7a77abc Merge pull request #3567 from github/dependabot/npm_and_yarn/ava-7.0.0 
Bump ava from 6.4.1 to 7.0.0
 2026-03-11 20:47:14 +00:00
Henry Mercer
926e6dfee5 Stub RUNNER_NAME in unit tests 2026-03-11 20:16:47 +00:00
Henry Mercer
b1f1e7bd31 Add changelog note 2026-03-11 19:56:42 +00:00
Henry Mercer
a91b7a3e57 Add unit tests for isTrapCachingEnabled 2026-03-11 19:52:12 +00:00
github-actions[bot]
0d0df94d93 Rebuild 2026-03-11 19:51:54 +00:00
github-actions[bot]
373dec9f22 Rebuild 2026-03-11 19:51:53 +00:00
Henry Mercer
9771a765ac Merge branch 'main' into dependabot/npm_and_yarn/npm-minor-aebc49e072 2026-03-11 19:49:56 +00:00
Henry Mercer
363219d88d Merge branch 'main' into dependabot/npm_and_yarn/ava-7.0.0 2026-03-11 19:49:53 +00:00
Henry Mercer
556dd79c4b Drive-by comment fixes 2026-03-11 19:33:57 +00:00
Henry Mercer
19544bb9b4 Remove dead Python library extraction code 2026-03-11 19:32:36 +00:00
Henry Mercer
d74701caa1 Drive-by cleanup: Always use --cache-cleanup 2026-03-11 19:31:03 +00:00
Henry Mercer
d05b50b13f Clean up: Remove unneeded CodeQL version guard 2026-03-11 19:30:13 +00:00
Henry Mercer
70d5cccce1 Disable TRAP caching when conditions met 2026-03-11 19:25:29 +00:00
Henry Mercer
b04e63ffdf Enablement: Move TRAP caching check after overlay 2026-03-11 19:21:17 +00:00
Henry Mercer
378e4b367d Merge pull request #3568 from github/henrymercer/fix-rebuild 
Fix rebuild Action
 2026-03-11 19:18:28 +00:00
Henry Mercer
309fd2aac7 Merge pull request #3565 from github/henrymercer/go-macos-checks 
PR checks: Only run Go macOS tests on latest CodeQL versions
 2026-03-11 19:11:16 +00:00
Henry Mercer
b0f877255d Add FF for disabling TRAP caching when overlay enabled 2026-03-11 18:44:41 +00:00
Henry Mercer
567ca73ff8 Address review comments 2026-03-11 18:40:22 +00:00
Henry Mercer
5f3f250f83 Fix finishing up in progress merge 2026-03-11 18:24:00 +00:00
Henry Mercer
6fb1c2a300 Fix merge in progress detection 2026-03-11 18:23:04 +00:00
Henry Mercer
44720043ea CI: Set up Node.js 24 in rebuild workflow 2026-03-11 18:18:30 +00:00
dependabot[bot]
f9f5edb76f Bump ava from 6.4.1 to 7.0.0 
Bumps [ava](https://github.com/avajs/ava) from 6.4.1 to 7.0.0.
- [Release notes](https://github.com/avajs/ava/releases)
- [Commits](https://github.com/avajs/ava/compare/v6.4.1...v7.0.0)

---
updated-dependencies:
- dependency-name: ava
  dependency-version: 7.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-11 17:53:48 +00:00
dependabot[bot]
de2997a8c8 Bump the npm-minor group with 2 updates 
Bumps the npm-minor group with 2 updates: [globals](https://github.com/sindresorhus/globals) and [sinon](https://github.com/sinonjs/sinon).


Updates `globals` from 17.3.0 to 17.4.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](https://github.com/sindresorhus/globals/compare/v17.3.0...v17.4.0)

Updates `sinon` from 21.0.1 to 21.0.2
- [Release notes](https://github.com/sinonjs/sinon/releases)
- [Changelog](https://github.com/sinonjs/sinon/blob/main/docs/changelog.md)
- [Commits](https://github.com/sinonjs/sinon/compare/v21.0.1...v21.0.2)

---
updated-dependencies:
- dependency-name: globals
  dependency-version: 17.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: sinon
  dependency-version: 21.0.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-11 17:53:18 +00:00
Henry Mercer
117bf916af Sort OS list and versions consistently 2026-03-11 17:11:07 +00:00