github/codeql-action
0
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2026-04-29 02:18:47 +00:00
Code Issues Packages Projects Releases Wiki Activity
8,784 Commits 344 Branches 538 Tags
445a2a9bb2e867a25d86d1ec52fd7704f2a9a668
Commit Graph

8784 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
github-actions[bot] 79a913656c Rebuild 2026-02-18 17:55:38 +00:00
dependabot[bot] 167b47e60c Bump the npm-minor group with 6 updates 
Bumps the npm-minor group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [semver](https://github.com/npm/node-semver) | `7.7.3` | `7.7.4` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.54.0` | `8.55.0` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.54.0` | `8.56.0` |
| [esbuild](https://github.com/evanw/esbuild) | `0.27.2` | `0.27.3` |
| [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc) | `62.5.0` | `62.5.4` |
| [nock](https://github.com/nock/nock) | `14.0.10` | `14.0.11` |


Updates `semver` from 7.7.3 to 7.7.4
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](https://github.com/npm/node-semver/compare/v7.7.3...v7.7.4)

Updates `@typescript-eslint/eslint-plugin` from 8.54.0 to 8.55.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.55.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.54.0 to 8.56.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.56.0/packages/parser)

Updates `esbuild` from 0.27.2 to 0.27.3
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](https://github.com/evanw/esbuild/compare/v0.27.2...v0.27.3)

Updates `eslint-plugin-jsdoc` from 62.5.0 to 62.5.4
- [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases)
- [Commits](https://github.com/gajus/eslint-plugin-jsdoc/compare/v62.5.0...v62.5.4)

Updates `nock` from 14.0.10 to 14.0.11
- [Release notes](https://github.com/nock/nock/releases)
- [Changelog](https://github.com/nock/nock/blob/main/CHANGELOG.md)
- [Commits](https://github.com/nock/nock/compare/v14.0.10...v14.0.11)

---
updated-dependencies:
- dependency-name: semver
  dependency-version: 7.7.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.55.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.56.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: esbuild
  dependency-version: 0.27.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: eslint-plugin-jsdoc
  dependency-version: 62.5.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: nock
  dependency-version: 14.0.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-02-18 17:53:34 +00:00
Óscar San José 5e7a52feb2 Merge pull request #3488 from github/dependabot/npm_and_yarn/fast-xml-parser-5.3.6 
Bump fast-xml-parser from 5.3.4 to 5.3.6
codeql-bundle-v2.24.2 		2026-02-18 15:41:31 +01:00
github-actions[bot] 76cf404c99 Rebuild 2026-02-18 05:01:36 +00:00
dependabot[bot] 7407d38386 Bump fast-xml-parser from 5.3.4 to 5.3.6 
Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) from 5.3.4 to 5.3.6.
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.3.4...v5.3.6)

---
updated-dependencies:
- dependency-name: fast-xml-parser
  dependency-version: 5.3.6
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-02-18 04:59:37 +00:00
Michael B. Gale 015d8c7cbc Merge pull request #3486 from github/mbg/start-proxy/java-env-checks 
Log information about the runner which may affect the private registry proxy
 2026-02-17 20:48:41 +00:00
Michael B. Gale 09bd46dda5 Fix typos in comments 2026-02-17 17:18:09 +00:00
Michael B. Gale b927a69f96 Merge remote-tracking branch 'origin/main' into mbg/features/offline-features 2026-02-17 17:14:08 +00:00
Michael B. Gale 61f7dd3d0d Fix checkExpectedLogMessages not asserting anything on success 2026-02-17 16:49:01 +00:00
Michael B. Gale 64300e453b Merge branch 'main' into mbg/start-proxy/java-env-checks 2026-02-17 16:49:01 +00:00
Michael B. Gale 906dd890a5 Run java to show computed settings 2026-02-17 16:49:00 +00:00
Henry Mercer 898ae16413 Improve log message 2026-02-17 15:55:15 +00:00
Henry Mercer fa56ea8dc0 Extract status file path helper 2026-02-17 15:55:13 +00:00
Henry Mercer 657f337cd1 Add tests for shouldSkipOverlayAnalysis 2026-02-17 15:55:05 +00:00
Henry Mercer 05d4e25296 Avoid mutating languages array in overlay status functions 
Use [...languages].sort() instead of languages.sort() to avoid
mutating the caller's array as a side effect.
 2026-02-17 15:55:05 +00:00
Henry Mercer 5c583bbb19 Include diagnostics in bundle 2026-02-17 15:55:02 +00:00
Henry Mercer 554b93127b More error message improvements 2026-02-17 15:55:01 +00:00
Henry Mercer 3dd1275368 Improve error messages 2026-02-17 15:55:01 +00:00
Henry Mercer d24014a749 Tweak diagnostic message 2026-02-17 15:55:00 +00:00
Henry Mercer cc0dce044b Improve diagnostic message wording 2026-02-17 15:55:00 +00:00
Henry Mercer ef58c00dfe Only store overlay status if analysis failed 2026-02-17 15:54:59 +00:00
Henry Mercer 7b7a951e08 Add status page diagnostic when overlay skipped 2026-02-17 15:54:58 +00:00
Henry Mercer 0c47ae1c18 Sort doc URLs 2026-02-17 15:54:58 +00:00
Henry Mercer 6c405c2562 Be more explicit about attempt to build overlay DB 2026-02-17 15:54:57 +00:00
Henry Mercer 827bba691f Introduce feature flags for saving and checking status 2026-02-17 15:54:57 +00:00
Henry Mercer 96961e0ee3 Save overlay status to Actions cache 2026-02-17 15:54:53 +00:00
Henry Mercer ebad062f08 Skip overlay analysis based on cached status 2026-02-17 15:54:31 +00:00
Henry Mercer e275d63e1d Generalise status to multiple languages 2026-02-17 15:54:06 +00:00
Henry Mercer 69c2819972 Add save and restore methods 2026-02-17 15:54:06 +00:00
Henry Mercer d28d9967fe Compute cache key for overlay language status 2026-02-17 15:54:06 +00:00
Henry Mercer d1bdc0ea05 Create separate directory for overlay source code 2026-02-17 15:54:03 +00:00
Michael B. Gale b1b1e44da9 Merge pull request #3474 from github/mbg/risk-assessment-analysis 
Add `csra` analysis kind
 2026-02-17 15:39:05 +00:00
Michael B. Gale 46473e05b7 Add more interesting Java properties 2026-02-17 15:23:21 +00:00
Michael B. Gale 32ab108bfd Move interesting JRE properties out of checkJdkSettings 2026-02-17 15:22:43 +00:00
Michael B. Gale 971592501c Consistently use "\n" to split lines, then trim extra characters if needed 2026-02-17 14:58:40 +00:00
Michael B. Gale 2abec3f0c3 Replace most occurrences of CSRA 2026-02-17 14:55:31 +00:00
Michael B. Gale 6d55dfff02 Reword error message 2026-02-17 14:49:34 +00:00
Michael B. Gale 5c96b6e3db Add JSDoc comments to upload-lib types 2026-02-17 14:40:16 +00:00
Michael B. Gale 44a4bea367 Fixup: add missing .env 2026-02-17 13:54:22 +00:00
Michael B. Gale 11c6c18818 Only run when debugging or test mode is enabled 2026-02-17 13:44:18 +00:00
Michael B. Gale 99fcc7b2a1 Check whether value is a URL in checkEnvVar and clear credentials 
Note also that we run this after `getCredentials` which already instructs Actions to mask credentials that we know about in logs
 2026-02-17 13:42:51 +00:00
Michael B. Gale c1d6ee5477 Fix typos 2026-02-17 13:31:01 +00:00
Michael B. Gale ef9cfd91a8 Clear GHA JAVA_HOME_* env vars for discoverActionsJdks test 2026-02-17 13:28:56 +00:00
Michael B. Gale 4250b466b2 Wrap checkProxyEnvironment call in try/catch for good measure 2026-02-17 13:17:49 +00:00
Michael B. Gale a3d7d36aa6 Find likely JDK locations and check configurations 2026-02-17 13:17:48 +00:00
Michael B. Gale 33e2dff082 Log information about proxy-related environment variables 2026-02-17 12:38:30 +00:00
Michael B. Gale bff89dcba4 Add enum for Java-related env var names 2026-02-17 11:37:25 +00:00
Michael B. Gale d6ea6709b9 Remove unnecessary check 2026-02-17 10:56:29 +00:00
Michael B. Gale f315d82bd7 Rename csra to risk-assessment 2026-02-17 10:52:04 +00:00
Michael B. Gale ebce69a4b7 Merge pull request #3485 from github/mbg/java/network-debugging 
Add feature to enable Java network debugging
 2026-02-17 10:19:54 +00:00