github/codeql-action
0
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2026-04-27 01:08:46 +00:00
Code Issues Packages Projects Releases Wiki Activity
8,182 Commits 341 Branches 538 Tags
1ffb7dd0c8bcb456c8ba5e69af148cacf2dbdd5a
Commit Graph

8182 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Michael B. Gale e12f017898 Merge pull request #3312 from github/update-v4.31.4-70434f6dd 
Merge main into releases/v4
v4.31.4 		2025-11-18 16:12:25 +00:00
Michael B. Gale 249458aab2 Merge pull request #3296 from github/mbg/dependency-caching/skip-uploads-for-exact-matches 
Skip uploading dependency caches if we know they exist
 2025-11-18 15:44:06 +00:00
github-actions[bot] c9cb6f9c13 Update changelog for v4.31.4 2025-11-18 15:18:43 +00:00
Kasper Svendsen 726a2a01b8 Overlay: Increase disk storage threshold to 20GB 2025-11-18 15:37:27 +01:00
Michael B. Gale 70434f6dd2 Merge pull request #3311 from github/mbg/deps/bump-glob 
Bump `glob` to at least `11.1.0`
 2025-11-18 12:39:21 +00:00
Michael B. Gale 528362a7c1 Bump glob to at least 11.1.0 2025-11-18 12:20:00 +00:00
Michael B. Gale de12435376 Merge pull request #3308 from github/mbg/pr-template/nov25 
Add additional options to PR template and clarify some
 2025-11-18 11:52:08 +00:00
Kasper Svendsen 4f746e4a60 Overlay: Fall back to full analysis if runner disk space is low 2025-11-18 08:19:13 +01:00
Michael B. Gale ffa63f0dac Merge pull request #3307 from github/dependabot/github_actions/dot-github/workflows/actions-minor-761b22fa12 
Bump ruby/setup-ruby from 1.267.0 to 1.268.0 in /.github/workflows in the actions-minor group across 1 directory
 2025-11-17 18:06:59 +00:00
Michael B. Gale 7bcdb4bc66 Add additional options to PR template and clarify some 2025-11-17 17:48:39 +00:00
Mario Campos 07eae6420a Merge pull request #3303 from github/mario-campos/v3-core-warning 
Change v3 deprecation message to warning.
 2025-11-17 11:35:30 -06:00
github-actions[bot] e546fff076 Rebuild 2025-11-17 17:18:36 +00:00
dependabot[bot] c418a0fc93 Bump ruby/setup-ruby 
Bumps the actions-minor group with 1 update in the /.github/workflows directory: [ruby/setup-ruby](https://github.com/ruby/setup-ruby).


Updates `ruby/setup-ruby` from 1.267.0 to 1.268.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](https://github.com/ruby/setup-ruby/compare/d5126b9b3579e429dd52e51e68624dda2e05be25...8aeb6ff8030dd539317f8e1769a044873b56ea71)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-version: 1.268.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-11-17 17:17:07 +00:00
Mario Campos fc329e3bb5 Revert "Add CHANGELOG.md entry for "v3 deprecation" to warning change." 
This reverts commit 023fd08cc9.
 2025-11-17 11:08:58 -06:00
github-actions[bot] b595847fa5 Rebuild 2025-11-17 17:04:50 +00:00
github-actions[bot] 4f39cef4c6 Rebuild 2025-11-17 17:03:39 +00:00
github-actions[bot] d4a7ccd1f0 Rebuild 2025-11-17 17:03:22 +00:00
dependabot[bot] cd808e1260 Bump @types/sinon from 17.0.4 to 21.0.0 
Bumps [@types/sinon](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/sinon) from 17.0.4 to 21.0.0.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/sinon)

---
updated-dependencies:
- dependency-name: "@types/sinon"
  dependency-version: 21.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-11-17 17:02:13 +00:00
dependabot[bot] 01577d4797 Bump @eslint/compat from 1.4.1 to 2.0.0 
Bumps [@eslint/compat](https://github.com/eslint/rewrite/tree/HEAD/packages/compat) from 1.4.1 to 2.0.0.
- [Release notes](https://github.com/eslint/rewrite/releases)
- [Changelog](https://github.com/eslint/rewrite/blob/main/packages/compat/CHANGELOG.md)
- [Commits](https://github.com/eslint/rewrite/commits/compat-v2.0.0/packages/compat)

---
updated-dependencies:
- dependency-name: "@eslint/compat"
  dependency-version: 2.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-11-17 17:01:53 +00:00
dependabot[bot] 3b635815d6 Bump the npm-minor group with 2 updates 
Bumps the npm-minor group with 2 updates: [@octokit/request-error](https://github.com/octokit/request-error.js) and [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc).


Updates `@octokit/request-error` from 7.0.2 to 7.1.0
- [Release notes](https://github.com/octokit/request-error.js/releases)
- [Commits](https://github.com/octokit/request-error.js/compare/v7.0.2...v7.1.0)

Updates `eslint-plugin-jsdoc` from 61.1.12 to 61.2.1
- [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases)
- [Changelog](https://github.com/gajus/eslint-plugin-jsdoc/blob/main/.releaserc)
- [Commits](https://github.com/gajus/eslint-plugin-jsdoc/compare/v61.1.12...v61.2.1)

---
updated-dependencies:
- dependency-name: "@octokit/request-error"
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: eslint-plugin-jsdoc
  dependency-version: 61.2.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-11-17 17:01:47 +00:00
Mario Campos 023fd08cc9 Add CHANGELOG.md entry for "v3 deprecation" to warning change. 2025-11-17 09:04:58 -06:00
Mario Campos ed3a01336f Change v3 deprecation message to warning. 2025-11-17 08:59:44 -06:00
Michael B. Gale c1a2b73420 Merge pull request #3301 from github/dependabot/npm_and_yarn/js-yaml-4.1.1 
Bump js-yaml from 4.1.0 to 4.1.1
 2025-11-16 17:54:05 +00:00
github-actions[bot] 8c254d05f3 Rebuild 2025-11-15 10:57:22 +00:00
dependabot[bot] b9620e1249 Bump js-yaml from 4.1.0 to 4.1.1 
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.0 to 4.1.1.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/compare/4.1.0...4.1.1)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.1.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-11-15 10:55:57 +00:00
Michael B. Gale 1ed85b4501 Add test coverage for uploadDependencyCaches 2025-11-14 14:30:54 +00:00
Michael B. Gale 51c9af3a3b Don't try to upload cache if we have restored a cache with the same key 2025-11-14 14:30:54 +00:00
Michael B. Gale 594c0cc369 Store restored keys in action state 2025-11-14 14:30:54 +00:00
Michael B. Gale 11889c27fd Return keys of restored caches from downloadDependencyCaches 2025-11-14 14:30:54 +00:00
Kasper Svendsen 85f1517bb4 Merge pull request #3285 from github/kaspersv/remove-overlay-org-restriction 
Overlay: Remove repository owner restriction
 2025-11-14 08:28:09 +01:00
Michael B. Gale 86b7d4fc36 Merge pull request #3294 from github/mergeback/v4.31.3-to-main-014f16e7 
Mergeback v4.31.3 refs/heads/releases/v4 into main
 2025-11-13 22:22:18 +00:00
github-actions[bot] 246edb9b1d Rebuild 2025-11-13 21:59:57 +00:00
github-actions[bot] 497c7f627a Update changelog and version after v4.31.3 2025-11-13 21:54:56 +00:00
Michael B. Gale 014f16e7ab Merge pull request #3293 from github/update-v4.31.3-8c10e89c7 
Merge main into releases/v4
v4.31.3 		2025-11-13 21:53:12 +00:00
github-actions[bot] 14d898ef09 Update changelog for v4.31.3 2025-11-13 21:18:01 +00:00
Michael B. Gale 8c10e89c78 Merge pull request #3288 from github/update-bundle/codeql-bundle-v2.23.5 
Update default bundle to 2.23.5
 2025-11-13 20:50:51 +00:00
Michael B. Gale 9777b01a49 Merge branch 'main' into update-bundle/codeql-bundle-v2.23.5 2025-11-13 20:11:59 +00:00
Henry Mercer 456a74a6fa Merge pull request #3289 from github/mbg/ci/setup-dotnet 
Add support for adding `setup-dotnet` steps to `sync.sh`
 2025-11-13 20:11:33 +00:00
Michael B. Gale 3fac49c140 Update remaining workflows 2025-11-13 19:53:24 +00:00
Michael B. Gale 38a3a7258f Enable installDotNet in all workflows that analyse C# 2025-11-13 19:48:37 +00:00
Michael B. Gale 58c9eb6c03 Add global.json 2025-11-13 19:48:37 +00:00
Michael B. Gale f20e02164a Add support for adding setup-dotnet steps to sync.sh 2025-11-13 18:58:54 +00:00
github-actions[bot] 8d3d4001e3 Add changelog note 2025-11-13 18:40:00 +00:00
github-actions[bot] 362f8d1d2d Update default bundle to codeql-bundle-v2.23.5 2025-11-13 18:39:52 +00:00
Michael B. Gale f5f9571d61 Configure temp dependency dir for C# extractor when FF is enabled 
And also clean it up.
 2025-11-13 14:03:44 +00:00
Michael B. Gale ecaa6db95a Include getCsharpTempDependencyDir in C# caches if FF is enabled 2025-11-13 13:40:58 +00:00
Michael B. Gale a47d04cf9b Add FF for extra C# cache contents 2025-11-13 13:40:57 +00:00
Michael B. Gale d854ba6ec0 Pass FeatureEnablement to getDependencyPaths 2025-11-13 13:40:57 +00:00
Michael B. Gale cf8b7a6e14 Refactor C# cache content paths into a function 2025-11-13 13:40:56 +00:00
Kasper Svendsen 5091e42a03 Overlay: Remove repository owner restriction 2025-11-13 10:48:25 +01:00