github/codeql-action
0
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2026-04-28 01:48:48 +00:00
Code Issues Packages Projects Releases Wiki Activity
7,849 Commits 342 Branches 538 Tags
30db5fee08fa0be23eee96b4496f7352d9f29f86
Commit Graph

7849 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
github-actions[bot] 30db5fee08 Update changelog for v4.30.9 2025-10-17 14:54:08 +00:00
Michael B. Gale 70205d3d12 Merge pull request #3211 from github/mbg/init/starting-partial-config 
Make analysis kinds available for `starting` status report
 2025-10-17 14:46:51 +01:00
Michael B. Gale 697c209bfc Merge remote-tracking branch 'origin/main' into mbg/init/starting-partial-config 2025-10-17 14:21:44 +01:00
Henry Mercer 1bd53ba38c Merge pull request #3205 from github/update-bundle/codeql-bundle-v2.23.3 
Update default bundle to 2.23.3
 2025-10-17 14:18:19 +01:00
github-actions[bot] cac4df0c79 Rebuild 2025-10-17 12:59:18 +00:00
Henry Mercer 77e5c0d0a2 Merge branch 'main' into update-bundle/codeql-bundle-v2.23.3 2025-10-17 13:53:02 +01:00
Michael B. Gale 97a4f751be Merge pull request #3204 from github/mbg/setup-codeql 
Add `setup-codeql` action
 2025-10-17 13:47:42 +01:00
Michael B. Gale 2d5512b361 Merge remote-tracking branch 'origin/main' into mbg/init/starting-partial-config 2025-10-17 13:44:28 +01:00
Michael B. Gale fa7bdf0559 Call getAnalysisKinds a second time, and ignore exceptions thrown during the first call 2025-10-17 13:40:18 +01:00
Michael B. Gale 57c7b0a884 Rename initAnalysisKinds to getAnalysisKinds and cache results 2025-10-17 13:33:55 +01:00
Michael B. Gale 4874f90a8d Merge branch 'main' into mbg/setup-codeql 2025-10-17 13:32:40 +01:00
Michael B. Gale 5a9e92afca Merge pull request #3212 from github/mbg/ci/pin-python 
Install Python 3.13 to fix failing PR checks with older CLI versions
 2025-10-17 13:31:26 +01:00
Michael B. Gale 9bd9b03572 Remove now unused qualityQueriesInput from InitConfigInputs 2025-10-17 13:22:41 +01:00
Michael B. Gale 3569065d7e Install Python 3.13, except for nightly-latest 2025-10-17 12:51:50 +01:00
Michael B. Gale c0e8887d5a Throw a ConfigurationError if setup-codeql has run before init 2025-10-17 12:17:47 +01:00
Michael B. Gale 3c8d00aea0 Initialise analysis kinds before starting status report 2025-10-17 11:46:35 +01:00
Michael B. Gale bc93b04b0c Add initAnalysisKinds for analysis-kinds enablement logic 2025-10-17 11:43:00 +01:00
Michael B. Gale adf39dd33f Add function for starting status report 2025-10-17 11:16:00 +01:00
Michael B. Gale 000295122d Use failure instead of aborted 2025-10-16 19:05:03 +01:00
Michael B. Gale 2611d033d7 De-duplicate InitToolsDownloadFIelds definition 2025-10-16 19:03:46 +01:00
Michael B. Gale ee753b4724 Merge pull request #3209 from github/mbg/code-quality/skip-failed-upload 
Skip failed SARIF upload if Code Quality is the only analysis kind
 2025-10-16 15:22:01 +01:00
Michael B. Gale db6938a4d0 Change check to be restrictive by default 2025-10-16 15:06:19 +01:00
Michael B. Gale d02f50ee62 Update changelog for setup-codeql 2025-10-16 14:50:16 +01:00
Michael B. Gale f4237b7e76 Add setup-codeql to README 2025-10-16 14:48:35 +01:00
Michael B. Gale 302fc5e00d Update docs 2025-10-16 14:46:35 +01:00
Michael B. Gale c77b3fb96e Skip failed SARIF upload if analysis-kinds: code-quality 2025-10-16 14:27:17 +01:00
Michael B. Gale 2a54ab5016 Fix init-action-post-helper tests using broken Configs 2025-10-16 14:18:51 +01:00
github-actions[bot] a60e5ce8ec Add changelog note 2025-10-14 12:53:29 +00:00
github-actions[bot] 8d0251c1f7 Update default bundle to codeql-bundle-v2.23.3 2025-10-14 12:53:17 +00:00
Michael B. Gale 80220dcd46 Use setup-codeql action in bundle-from-toolcache check 2025-10-12 14:14:07 +01:00
Michael B. Gale e72fd9acb1 Add initial setup-codeql action 2025-10-12 14:14:06 +01:00
Michael B. Gale 17783bfb99 Merge pull request #3199 from github/mergeback/v4.30.8-to-main-f443b600 
Mergeback v4.30.8 refs/heads/releases/v4 into main
codeql-bundle-v2.23.3 		2025-10-10 18:16:14 +01:00
Henry Mercer 3c764cd93a Only create GitHub release if it doesn't already exist 2025-10-10 17:54:08 +01:00
Henry Mercer e1968324ff Merge branch 'releases/v4' into mergeback/v4.30.8-to-main-f443b600 2025-10-10 17:53:24 +01:00
Henry Mercer 2a6736cca7 Merge pull request #3200 from github/henrymercer/backport-hotfix 
Revert "Rebuild" commit rather than "Update dependencies"
 2025-10-10 17:47:40 +01:00
Henry Mercer c8765c966b Revert "Rebuild" commit rather than "Update dependencies" 2025-10-10 17:23:02 +01:00
github-actions[bot] 61789e2fdb Rebuild 2025-10-10 15:59:22 +00:00
github-actions[bot] 5cd2d139cb Update changelog and version after v4.30.8 2025-10-10 15:55:20 +00:00
Michael B. Gale f443b600d9 Merge pull request #3198 from github/update-v4.30.8-527f0f324 
Merge main into releases/v4
v4.30.8 		2025-10-10 16:54:36 +01:00
github-actions[bot] 7a2cb623ed Update changelog for v4.30.8 2025-10-10 14:34:56 +00:00
Henry Mercer 527f0f324a Merge pull request #3195 from github/dependabot/npm_and_yarn/npm-minor-37415c9066 
Bump the npm-minor group with 3 updates
 2025-10-10 15:22:52 +01:00
Henry Mercer f402506f0f Merge pull request #3196 from github/dependabot/github_actions/dot-github/workflows/actions-minor-945aab589d 
Bump ruby/setup-ruby from 1.263.0 to 1.265.0 in /.github/workflows in the actions-minor group across 1 directory
 2025-10-10 15:20:16 +01:00
Henry Mercer f5e53f9476 Merge pull request #3197 from github/dependabot/github_actions/dot-github/workflows/github/codeql-action-4 
Bump github/codeql-action from 3 to 4 in /.github/workflows
 2025-10-10 15:13:23 +01:00
Michael B. Gale 4e90a42a3e Merge pull request #3193 from github/mbg/ff/tools-toolcache 
Gate `tools: toolcache` behind FF
 2025-10-10 15:09:00 +01:00
github-actions[bot] 413a4a4df1 Rebuild 2025-10-10 13:49:43 +00:00
dependabot[bot] 452186448a Bump github/codeql-action from 3 to 4 in /.github/workflows 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3 to 4.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v3...v4)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-10-10 13:48:11 +00:00
dependabot[bot] eadf14bf6e Bump ruby/setup-ruby 
Bumps the actions-minor group with 1 update in the /.github/workflows directory: [ruby/setup-ruby](https://github.com/ruby/setup-ruby).


Updates `ruby/setup-ruby` from 1.263.0 to 1.265.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](https://github.com/ruby/setup-ruby/compare/0481980f17b760ef6bca5e8c55809102a0af1e5a...ab177d40ee5483edb974554986f56b33477e21d0)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-version: 1.265.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-10-10 13:48:07 +00:00
github-actions[bot] e1257b6fda Rebuild 2025-10-10 13:47:47 +00:00
dependabot[bot] b516b1d4bc Bump the npm-minor group with 3 updates 
Bumps the npm-minor group with 3 updates: [semver](https://github.com/npm/node-semver), [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) and [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser).


Updates `semver` from 7.7.2 to 7.7.3
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](https://github.com/npm/node-semver/compare/v7.7.2...v7.7.3)

Updates `@typescript-eslint/eslint-plugin` from 8.45.0 to 8.46.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.46.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.45.0 to 8.46.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.46.0/packages/parser)

---
updated-dependencies:
- dependency-name: semver
  dependency-version: 7.7.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.46.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.46.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-10-10 13:46:16 +00:00
Henry Mercer 168b2dee16 Merge pull request #3194 from github/henrymercer-patch-1 
Dependabot: Only group minor and patch updates
 2025-10-10 14:44:22 +01:00