github/codeql-action
0
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2026-04-26 16:58:47 +00:00
Code Issues Packages Projects Releases Wiki Activity
7,460 Commits 341 Branches 538 Tags
0abf548bb364e0852a4bf445eb1aa80755288fd4
Commit Graph

7460 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Nick Rolfe 0abf548bb3 Add feature flag to roll out JAR minimization in the Java extractor 2025-09-12 12:09:34 +01:00
Henry Mercer df1fe23118 Merge pull request #3083 from github/henrymercer/resolve-languages-default-queries 
Resolve supported languages using CodeQL CLI
 2025-09-12 10:12:15 +01:00
Chuan-kai Lin 0d33fd9f26 Merge pull request #3109 from github/cklin/init-save-updated-config 
init-action: save updated config
 2025-09-11 14:18:59 -07:00
Chuan-kai Lin 5c30ae46c1 Stop saving config in initConfig() 2025-09-11 12:31:29 -07:00
Chuan-kai Lin 4e2e64a92a init-action: save updated config 
This commit updates the init action to save the config again at the end
of run(), so that config updates in run() are correctly propagated to
the analyze action.
 2025-09-11 08:07:50 -07:00
Michael B. Gale 148e76abb6 Merge pull request #3108 from github/mbg/changelog/workflow-validation 
Add changelog entry for improved version consistency checks
 2025-09-11 14:06:40 +01:00
Michael B. Gale 21a1feb391 Add changenote for improved version consistency checks 2025-09-11 12:03:09 +01:00
Michael B. Gale 1479235f5d Merge pull request #3100 from github/mbg/config-version 
Store and check action version in `Config`
 2025-09-11 11:56:05 +01:00
Michael B. Gale 0d058cdc59 Merge pull request #3099 from github/mbg/validate-action-version-in-workflow 
Validate workflow to check that all `codeql-action` versions are the same
 2025-09-11 11:53:14 +01:00
Chuan-kai Lin 25e54dffab Merge pull request #3105 from github/mergeback/v3.30.3-to-main-192325c8 
Mergeback v3.30.3 refs/heads/releases/v3 into main
 2025-09-10 10:55:01 -07:00
github-actions[bot] 25c32186df Rebuild 2025-09-10 17:35:23 +00:00
github-actions[bot] 191d3de659 Update changelog and version after v3.30.3 2025-09-10 17:32:56 +00:00
Chuan-kai Lin 192325c861 Merge pull request #3104 from github/update-v3.30.3-b660efdcf 
Merge main into releases/v3
v3.30.3 		2025-09-10 10:32:26 -07:00
github-actions[bot] e68956d90b Update changelog for v3.30.3 2025-09-10 15:34:46 +00:00
Michael B. Gale b660efdcfd Merge pull request #3103 from github/mbg/fix/category-check 
Fix `runInterpretResultsFor` using the wrong `AnalysisConfig` for Code Quality `category` fix
 2025-09-10 16:30:12 +01:00
Michael B. Gale e49458befe Fix runInterpretResultsFor using the wrong AnalysisConfig for category fix 2025-09-10 16:14:19 +01:00
Kasper Svendsen f374a62c8b Merge pull request #3098 from github/kaspersv/increase-overlay-base-size-limit 
Overlay: Increase size limit for cached overlay base database
 2025-09-10 15:01:08 +02:00
Michael B. Gale 0487de31f2 Update src/config-utils.test.ts 
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
 2025-09-10 13:47:47 +01:00
Michael B. Gale 754f2e184f Simplify step.uses condition 2025-09-10 13:35:39 +01:00
Michael B. Gale 4f56152a48 Store and check action version in Config 2025-09-10 13:33:17 +01:00
Michael B. Gale 5efa438e92 Merge pull request #3101 from github/mbg/public-repo-notice-in-pr-template 
Add a reminder to the PR template that this is a public repo
 2025-09-10 13:29:04 +01:00
Michael B. Gale bb98ff4838 Validate workflow to check that all codeql-action versions are the same 2025-09-10 13:02:28 +01:00
Kasper Svendsen 8a84a62542 Overlay: Increase size limit for cached overlay base database 2025-09-10 12:30:56 +02:00
Paolo Tranquilli eb50a881d8 Merge pull request #3097 from github/redsun82/only-dump-sarif 
Dump soon to be uploaded SARIF on request
 2025-09-10 12:07:32 +02:00
Paolo Tranquilli 4c534612bf Tweak sarif dump log 2025-09-10 07:52:59 +02:00
Paolo Tranquilli dae3742b0a Dump soon to be uploaded SARIF on request 
This introduces a new internal environment variable flag
(`CODEQL_ACTION_SARIF_DUMP_DIR`) that, when set to `true`, causes the
SARIF file that will be uploaded to be dumped to the specified
directory. The filename will be `upload.sarif` or `upload.quality.sarif`
depending on the upload target.
 2025-09-10 07:46:05 +02:00
Henry Mercer 31d3ae847e Merge pull request #3095 from github/copilot/fix-9c4e2e82-c57a-4af0-8336-b8b24b72dba3 
Remove --intra-layer-parallelism flag from CodeQL CLI commands
 2025-09-09 20:18:54 +01:00
copilot-swe-agent[bot] 2a4630c7f1 Remove --intra-layer-parallelism flag from CodeQL CLI commands 
Co-authored-by: henrymercer <14129055+henrymercer@users.noreply.github.com>
 2025-09-09 16:53:28 +00:00
copilot-swe-agent[bot] 4366c13457 Initial plan 2025-09-09 16:33:51 +00:00
Henry Mercer ed9d73bc6f Alphabetically order ToolsFeature 2025-09-09 14:42:39 +01:00
Michael B. Gale 52ddbe1e52 Merge pull request #3092 from github/mergeback/v3.30.2-to-main-d3678e23 
Mergeback v3.30.2 refs/heads/releases/v3 into main
 2025-09-09 12:10:43 +01:00
github-actions[bot] 6c261ed0c7 Rebuild 2025-09-09 10:36:55 +00:00
github-actions[bot] deb055de7e Update changelog and version after v3.30.2 2025-09-09 10:34:25 +00:00
Michael B. Gale d3678e237b Merge pull request #3090 from github/update-v3.30.2-d7a501da0 
Merge main into releases/v3
v3.30.2 		2025-09-09 11:33:45 +01:00
Michael B. Gale 14bbb6a806 Add changelog entries 2025-09-09 11:20:20 +01:00
github-actions[bot] a879d03368 Update changelog for v3.30.2 2025-09-09 10:12:06 +00:00
Michael B. Gale d7a501da01 Merge pull request #3085 from github/mbg/multi-language-repo/gitignore 
Add C# artifacts to `.gitignore` for `multi-language-repo`
 2025-09-09 11:10:03 +01:00
Henry Mercer c90f0747e2 Merge pull request #3087 from github/dependabot/npm_and_yarn/npm-1cf7fedfcf 
Bump the npm group with 5 updates
 2025-09-08 18:46:27 +01:00
Michael B. Gale d8df826a79 Merge pull request #3086 from github/mbg/docs/required-checks 
Clarify instructions for updating PR checks to avoid emphasis on `main`
 2025-09-08 18:41:00 +01:00
github-actions[bot] 23419de6bd Rebuild 2025-09-08 17:18:08 +00:00
dependabot[bot] 7d8e1e924f Bump the npm group with 5 updates 
Bumps the npm group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [uuid](https://github.com/uuidjs/uuid) | `11.1.0` | `12.0.0` |
| [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) | `9.34.0` | `9.35.0` |
| [@types/semver](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/semver) | `7.7.0` | `7.7.1` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.41.0` | `8.43.0` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.41.0` | `8.43.0` |


Updates `uuid` from 11.1.0 to 12.0.0
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](https://github.com/uuidjs/uuid/compare/v11.1.0...v12.0.0)

Updates `@eslint/js` from 9.34.0 to 9.35.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/commits/v9.35.0/packages/js)

Updates `@types/semver` from 7.7.0 to 7.7.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/semver)

Updates `@typescript-eslint/eslint-plugin` from 8.41.0 to 8.43.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.43.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.41.0 to 8.43.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.43.0/packages/parser)

---
updated-dependencies:
- dependency-name: uuid
  dependency-version: 12.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: "@eslint/js"
  dependency-version: 9.35.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@types/semver"
  dependency-version: 7.7.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.43.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.43.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-09-08 17:16:35 +00:00
Michael B. Gale 76a3cccaa4 Clarify instructions for updating PR checks for PRs 2025-09-08 17:35:54 +01:00
Michael B. Gale 01fd48d5b6 Remove comment about main from update-required-checks.sh 2025-09-08 17:29:49 +01:00
Michael B. Gale ec4b36c090 Add C# artifacts to .gitignore for multi-language-repo 2025-09-08 16:19:57 +01:00
Michael B. Gale 0a56aada02 Merge pull request #3064 from github/mbg/cq/allow-cq-only-analysis 
Allow Code Quality only analysis
 2025-09-08 16:13:19 +01:00
Chuan-kai Lin 1c6bc389a1 Merge pull request #3080 from github/cklin/overlay-db-automation-id 
Overlay: add automation ID to cache key
 2025-09-08 06:33:55 -07:00
Michael B. Gale 144880b6f0 Merge pull request #3084 from github/mbg/fix/hasActionsWorkflows 
Fix `hasActionsWorkflows` throwing an exception if the workflows folder doesn't exist
 2025-09-08 09:54:45 +01:00
Michael B. Gale e045f5eeb4 Fix hasActionsWorkflows throwing if workflows folder doesn't exist 2025-09-05 21:11:33 +01:00
Michael B. Gale ab82675d3b Add test to check hasActionsWorkflows doesn't throw 2025-09-05 21:10:17 +01:00
Chuan-kai Lin 0e42ed405c build: refresh js files 2025-09-05 11:38:15 -07:00