github/codeql-action
0
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2026-04-26 16:58:47 +00:00
Code Issues Packages Projects Releases Wiki Activity
8,382 Commits 341 Branches 538 Tags
1ac62705ed88e2025d9aaef131e0997f0897fd70
Commit Graph

8382 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Michael B. Gale 1ac62705ed Change log message to warning 2026-01-20 13:25:25 +00:00
Michael B. Gale 9a57e78a04 Improving sorting of matrix keys 2026-01-20 13:21:16 +00:00
Michael B. Gale 7e96d45489 Use uploadArtifacts for start-proxy post action 2026-01-20 12:52:35 +00:00
Michael B. Gale 13eb1818b9 Refactor generic part of uploadDebugArtifacts into uploadArtifacts 2026-01-20 12:49:19 +00:00
Michael B. Gale f950f7f442 Add unit tests for getArtifactSuffix 2026-01-20 12:41:35 +00:00
Michael B. Gale 69173ea009 Refactor artifact suffix computation into getArtifactSuffix 2026-01-20 12:41:22 +00:00
Michael B. Gale 044ff10e29 Merge pull request #3406 from github/dependabot/npm_and_yarn/npm-minor-e76a272df4 
Bump the npm-minor group with 4 updates
 2026-01-20 11:18:45 +00:00
Michael B. Gale 84edfc05fa Merge pull request #3407 from github/dependabot/github_actions/dot-github/workflows/actions-minor-ec7bddb364 
Bump ruby/setup-ruby from 1.281.0 to 1.284.0 in /.github/workflows in the actions-minor group across 1 directory
 2026-01-20 11:16:49 +00:00
github-actions[bot] df0cc0ca39 Rebuild 2026-01-19 19:40:50 +00:00
dependabot[bot] 24f1cbdafb Bump ruby/setup-ruby 
Bumps the actions-minor group with 1 update in the /.github/workflows directory: [ruby/setup-ruby](https://github.com/ruby/setup-ruby).


Updates `ruby/setup-ruby` from 1.281.0 to 1.284.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](https://github.com/ruby/setup-ruby/compare/675dd7ba1b06c8786a1480d89c384f5620a42647...80740b3b13bf9857e28854481ca95a84e78a2bdf)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-version: 1.284.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-01-19 19:39:18 +00:00
github-actions[bot] 8881a4160f Rebuild 2026-01-19 19:34:41 +00:00
dependabot[bot] 1191c09db6 Bump the npm-minor group with 4 updates 
Bumps the npm-minor group with 4 updates: [@actions/cache](https://github.com/actions/toolkit/tree/HEAD/packages/cache), [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin), [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) and [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc).


Updates `@actions/cache` from 5.0.2 to 5.0.3
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/cache/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/cache)

Updates `@typescript-eslint/eslint-plugin` from 8.53.0 to 8.53.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.53.1/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.53.0 to 8.53.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.53.1/packages/parser)

Updates `eslint-plugin-jsdoc` from 62.0.0 to 62.2.0
- [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases)
- [Commits](https://github.com/gajus/eslint-plugin-jsdoc/compare/v62.0.0...v62.2.0)

---
updated-dependencies:
- dependency-name: "@actions/cache"
  dependency-version: 5.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.53.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.53.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: eslint-plugin-jsdoc
  dependency-version: 62.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-01-19 19:33:09 +00:00
Michael B. Gale 1ec7dd2bc4 Merge pull request #3398 from github/dependabot/npm_and_yarn/actions/github-7.0.0 
Bump @actions/github from 6.0.1 to 7.0.0
 2026-01-19 14:47:09 +00:00
github-actions[bot] 1b4c62b79d Rebuild 2026-01-19 14:20:47 +00:00
dependabot[bot] 6c5e0ea335 Bump @actions/github from 6.0.1 to 7.0.0 
Bumps [@actions/github](https://github.com/actions/toolkit/tree/HEAD/packages/github) from 6.0.1 to 7.0.0.
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/github/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/github)

---
updated-dependencies:
- dependency-name: "@actions/github"
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-01-19 13:05:53 +00:00
Michael B. Gale c99e493099 Merge pull request #3399 from github/dependabot/npm_and_yarn/eslint-plugin-jsdoc-62.0.0 
Bump eslint-plugin-jsdoc from 61.5.0 to 62.0.0
 2026-01-19 13:04:30 +00:00
Michael B. Gale f687ebf1c9 Merge pull request #3397 from github/dependabot/npm_and_yarn/npm-minor-70139cb906 
Bump the npm-minor group with 7 updates
 2026-01-19 11:46:30 +00:00
Michael B. Gale 070e2a5f21 Merge pull request #3400 from github/dependabot/npm_and_yarn/actions/tool-cache-3.0.0 
Bump @actions/tool-cache from 2.0.2 to 3.0.0
 2026-01-19 10:49:50 +00:00
Michael B. Gale fb650c22f9 Merge pull request #3401 from github/dependabot/github_actions/dot-github/workflows/actions-minor-c79fd65a81 
Bump ruby/setup-ruby from 1.278.0 to 1.281.0 in /.github/workflows in the actions-minor group across 1 directory
 2026-01-16 18:03:34 +00:00
github-actions[bot] 21c5dc0f33 Rebuild 2026-01-12 22:02:32 +00:00
dependabot[bot] bdabb8f1bc Bump ruby/setup-ruby 
Bumps the actions-minor group with 1 update in the /.github/workflows directory: [ruby/setup-ruby](https://github.com/ruby/setup-ruby).


Updates `ruby/setup-ruby` from 1.278.0 to 1.281.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](https://github.com/ruby/setup-ruby/compare/4c24fa5ec04b2e79eb40571b1cee2a0d2b705771...675dd7ba1b06c8786a1480d89c384f5620a42647)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-version: 1.281.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-01-12 21:59:39 +00:00
github-actions[bot] 39105f35da Rebuild 2026-01-12 21:55:29 +00:00
github-actions[bot] dc7e2ff87d Rebuild 2026-01-12 21:55:24 +00:00
github-actions[bot] 642eca368e Rebuild 2026-01-12 21:54:58 +00:00
dependabot[bot] e20d24fb28 Bump @actions/tool-cache from 2.0.2 to 3.0.0 
Bumps [@actions/tool-cache](https://github.com/actions/toolkit/tree/HEAD/packages/tool-cache) from 2.0.2 to 3.0.0.
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/tool-cache/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/tool-cache)

---
updated-dependencies:
- dependency-name: "@actions/tool-cache"
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-01-12 21:53:57 +00:00
dependabot[bot] f301585a01 Bump eslint-plugin-jsdoc from 61.5.0 to 62.0.0 
Bumps [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc) from 61.5.0 to 62.0.0.
- [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases)
- [Commits](https://github.com/gajus/eslint-plugin-jsdoc/compare/v61.5.0...v62.0.0)

---
updated-dependencies:
- dependency-name: eslint-plugin-jsdoc
  dependency-version: 62.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-01-12 21:53:52 +00:00
dependabot[bot] c8914af920 Bump the npm-minor group with 7 updates 
Bumps the npm-minor group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [@actions/artifact](https://github.com/actions/toolkit/tree/HEAD/packages/artifact) | `5.0.1` | `5.0.2` |
| [@actions/cache](https://github.com/actions/toolkit/tree/HEAD/packages/cache) | `5.0.1` | `5.0.2` |
| [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) | `2.0.1` | `2.0.2` |
| [@actions/http-client](https://github.com/actions/toolkit/tree/HEAD/packages/http-client) | `3.0.0` | `3.0.1` |
| [@eslint/compat](https://github.com/eslint/rewrite/tree/HEAD/packages/compat) | `2.0.0` | `2.0.1` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.52.0` | `8.53.0` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.52.0` | `8.53.0` |


Updates `@actions/artifact` from 5.0.1 to 5.0.2
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/artifact/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/artifact)

Updates `@actions/cache` from 5.0.1 to 5.0.2
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/cache/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/cache)

Updates `@actions/core` from 2.0.1 to 2.0.2
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core)

Updates `@actions/http-client` from 3.0.0 to 3.0.1
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/http-client/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/http-client)

Updates `@eslint/compat` from 2.0.0 to 2.0.1
- [Release notes](https://github.com/eslint/rewrite/releases)
- [Changelog](https://github.com/eslint/rewrite/blob/main/packages/compat/CHANGELOG.md)
- [Commits](https://github.com/eslint/rewrite/commits/compat-v2.0.1/packages/compat)

Updates `@typescript-eslint/eslint-plugin` from 8.52.0 to 8.53.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.53.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.52.0 to 8.53.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.53.0/packages/parser)

---
updated-dependencies:
- dependency-name: "@actions/artifact"
  dependency-version: 5.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: "@actions/cache"
  dependency-version: 5.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: "@actions/core"
  dependency-version: 2.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: "@actions/http-client"
  dependency-version: 3.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: "@eslint/compat"
  dependency-version: 2.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.53.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.53.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-01-12 21:53:28 +00:00
Ian Lynagh a2d9de63c2 Merge pull request #3395 from github/mergeback/v4.31.10-to-main-cdefb33c 
Mergeback v4.31.10 refs/heads/releases/v4 into main
 2026-01-12 15:23:02 +00:00
github-actions[bot] 4672d7807f Rebuild 2026-01-12 14:39:48 +00:00
github-actions[bot] be6e3c4480 Update changelog and version after v4.31.10 2026-01-12 14:34:39 +00:00
Ian Lynagh cdefb33c0f Merge pull request #3394 from github/update-v4.31.10-0fa411efd 
Merge main into releases/v4
v4.31.10 		2026-01-12 14:32:55 +00:00
github-actions[bot] cfa77c6b13 Update changelog for v4.31.10 2026-01-12 12:24:26 +00:00
Ian Lynagh 0fa411efd0 Merge pull request #3393 from github/update-bundle/codeql-bundle-v2.23.9 
Update default bundle to 2.23.9
 2026-01-09 17:24:49 +00:00
github-actions[bot] c284324212 Add changelog note 2026-01-09 16:41:42 +00:00
github-actions[bot] 83e7d0046c Update default bundle to codeql-bundle-v2.23.9 2026-01-09 16:41:33 +00:00
Henry Mercer f6a16bef8e Merge pull request #3391 from github/dependabot/npm_and_yarn/npm-minor-f1cdf520b2 
Bump the npm-minor group with 2 updates
codeql-bundle-v2.23.9 		2026-01-08 15:36:24 +00:00
github-actions[bot] c1f5f1a8b5 Rebuild 2026-01-07 16:07:35 +00:00
dependabot[bot] 1805d8d0a4 Bump the npm-minor group with 2 updates 
Bumps the npm-minor group with 2 updates: [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) and [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser).


Updates `@typescript-eslint/eslint-plugin` from 8.51.0 to 8.52.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.52.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.51.0 to 8.52.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.52.0/packages/parser)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.52.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.52.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-01-07 16:05:56 +00:00
Henry Mercer b2951d2a1e Merge pull request #3353 from github/kaspersv/bump-min-cli-v-for-overlay 
Overlay: Bump minimum CLI version for overlay
 2026-01-06 16:44:27 +00:00
Henry Mercer 41448d92b9 Merge pull request #3287 from github/henrymercer/generate-mergeback-last 
Open mergeback PR last
 2026-01-06 12:16:00 +00:00
Michael B. Gale a7fe4ffe40 Merge pull request #3387 from github/dependabot/npm_and_yarn/npm-minor-59ea988ea1 
Bump the npm-minor group with 2 updates
 2026-01-06 11:29:09 +00:00
Michael B. Gale fd448f79eb Merge pull request #3388 from github/dependabot/github_actions/dot-github/workflows/actions-minor-a0e46cd791 
Bump ruby/setup-ruby from 1.275.0 to 1.278.0 in /.github/workflows in the actions-minor group across 1 directory
 2026-01-05 21:28:14 +00:00
github-actions[bot] 079ca18961 Rebuild 2026-01-05 17:16:59 +00:00
github-actions[bot] 80dbba139d Merge remote-tracking branch 'origin/main' into dependabot/github_actions/dot-github/workflows/actions-minor-a0e46cd791 2026-01-05 17:16:09 +00:00
dependabot[bot] 7edf2bd491 Bump ruby/setup-ruby 
Bumps the actions-minor group with 1 update in the /.github/workflows directory: [ruby/setup-ruby](https://github.com/ruby/setup-ruby).


Updates `ruby/setup-ruby` from 1.275.0 to 1.278.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](https://github.com/ruby/setup-ruby/compare/d354de180d0c9e813cfddfcbdc079945d4be589b...4c24fa5ec04b2e79eb40571b1cee2a0d2b705771)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-version: 1.278.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-01-05 17:15:28 +00:00
Henry Mercer db726913e9 Merge pull request #3386 from github/henrymercer/codeql-ff-improve-safety 
Introduce a type-level check that CodeQL is passed during feature flag lookup if it is needed
 2026-01-05 17:13:26 +00:00
github-actions[bot] c327260b2b Rebuild 2026-01-05 17:03:30 +00:00
dependabot[bot] ce7b1f8663 Bump the npm-minor group with 2 updates 
Bumps the npm-minor group with 2 updates: [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) and [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser).


Updates `@typescript-eslint/eslint-plugin` from 8.50.0 to 8.51.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.51.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.50.0 to 8.51.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.51.0/packages/parser)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.51.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.51.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-01-05 17:01:55 +00:00
Henry Mercer 855c0888b6 Improve test for throwing when no CodeQL provided 2026-01-05 16:38:04 +00:00
Henry Mercer ec1705eb43 Rebuild now type error fixed in main 2026-01-05 16:23:16 +00:00