github/codeql-action
0
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2026-04-27 17:39:15 +00:00
Code Issues Packages Projects Releases Wiki Activity
8,584 Commits 342 Branches 538 Tags
481be99883dbcc91938627c25d613624dc5c07ad
Commit Graph

1205 Commits

Author SHA1 Message Date
copilot-swe-agent[bot] 7a44a9db3f Fix Rebuild Action workflow by adding --no-edit flag to git merge --continue 
Co-authored-by: henrymercer <14129055+henrymercer@users.noreply.github.com>
 2026-02-04 21:50:17 +00:00
Michael B. Gale 3e58739c65 Pin @actions/tool-cache@3 in workflows to avoid failures with github-script 2026-02-02 08:18:36 +00:00
Michael B. Gale f7f9d3f341 Remove gh setup from global proxy test 2026-01-28 13:35:59 +00:00
Henry Mercer b126facd4e Merge pull request #3434 from github/mbg/dependabot/cooldown 
Add `cooldown` settings for Dependabot
 2026-01-27 06:57:30 -08:00
Henry Mercer a02edfe319 Merge pull request #3424 from github/henrymercer/feature-skip-file-coverage-info-prs 
Add feature flag to skip computing baseline file coverage information on PRs
 2026-01-27 06:49:29 -08:00
Michael B. Gale 2591c2031f Add cooldown settings for Dependabot 2026-01-27 14:08:27 +00:00
Michael B. Gale fa9b76ac37 Merge pull request #3432 from github/dependabot/npm_and_yarn/actions/github-8.0.0 
Bump @actions/github from 7.0.0 to 8.0.0
 2026-01-27 13:49:13 +00:00
Michael B. Gale 6059a66dec Remove @octokit/plugin-retry from Dependabot ignore list 2026-01-27 13:22:57 +00:00
dependabot[bot] f8cea24201 Bump ruby/setup-ruby 
Bumps the actions-minor group with 1 update in the /.github/workflows directory: [ruby/setup-ruby](https://github.com/ruby/setup-ruby).


Updates `ruby/setup-ruby` from 1.284.0 to 1.286.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](https://github.com/ruby/setup-ruby/compare/80740b3b13bf9857e28854481ca95a84e78a2bdf...90be1154f987f4dc0fe0dd0feedac9e473aa4ba8)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-version: 1.286.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-01-26 19:46:17 +00:00
Henry Mercer bf20b3e07b Exclude PR check from feature flag 2026-01-26 18:04:37 +00:00
Henry Mercer 8a01181ce2 Compare minor version number 
This deals with the case that we skip `x.y.0` and go straight to `x.y.1`.
 2026-01-26 16:50:11 +00:00
Henry Mercer b748848f27 Bump the Action minor version number on new CodeQL minor version series 2026-01-26 15:45:24 +00:00
Michael B. Gale 3657da1eac Move yq version into env var and add comment 2026-01-26 10:59:43 +00:00
Michael B. Gale 605d404db0 Install yq directly from GitHub release 2026-01-24 14:09:33 +00:00
Michael B. Gale efea9cca02 Add installYq option to sync.py and cache downloads 2026-01-24 13:43:15 +00:00
Michael B. Gale fa03060d60 Update new CCR workflow 2026-01-21 12:33:08 +00:00
Michael B. Gale 51975ff7b7 Merge branch 'main' into mbg/ci/fix-concurrency-ignores-inputs 2026-01-21 12:28:09 +00:00
Henry Mercer 32d41f36fe Merge pull request #3403 from github/henrymercer/abridge-release-notes 
Abridge release notes
 2026-01-20 06:26:19 -08:00
Michael B. Gale dce83e1c1e Merge pull request #3408 from github/mbg/add-ccr-check 
Add basic PR check with CCR-like environment
 2026-01-20 14:04:13 +00:00
Henry Mercer ec4eda1b42 Just link the release notes 2026-01-20 14:00:21 +00:00
Michael B. Gale a886c30690 Add basic PR check with CCR-like environment 2026-01-20 12:19:29 +00:00
dependabot[bot] 24f1cbdafb Bump ruby/setup-ruby 
Bumps the actions-minor group with 1 update in the /.github/workflows directory: [ruby/setup-ruby](https://github.com/ruby/setup-ruby).


Updates `ruby/setup-ruby` from 1.281.0 to 1.284.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](https://github.com/ruby/setup-ruby/compare/675dd7ba1b06c8786a1480d89c384f5620a42647...80740b3b13bf9857e28854481ca95a84e78a2bdf)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-version: 1.284.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-01-19 19:39:18 +00:00
Michael B. Gale 90f4ffcc7e Include input values in concurrency groups 2026-01-19 18:53:51 +00:00
Michael B. Gale 03e3f60d99 Explicitly set cancel-in-progress to false 2026-01-19 18:51:44 +00:00
Michael B. Gale 778f83ff16 Use hard-coded concurrency group names instead of github.workflow 
Since `github.workflow` will be the caller's name for `workflow_call` events
 2026-01-19 18:43:17 +00:00
Henry Mercer ebffc48bf5 Include /tag in bundle release URL 
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
 2026-01-19 18:00:34 +00:00
Henry Mercer d51b375a03 Drop unneeded version tag argument 2026-01-19 17:59:04 +00:00
Henry Mercer 3a7caafd73 Update comment 2026-01-19 17:57:59 +00:00
Henry Mercer 4d4ae1fbe8 Abridge release notes for Action GH release 2026-01-19 17:55:06 +00:00
Henry Mercer 064fafeb49 Link CLI/language pack notes from new bundle changelog 2026-01-19 17:51:27 +00:00
Henry Mercer a7783c507b Make bundle changelog script executable 
For local testing
 2026-01-19 17:49:14 +00:00
Henry Mercer 0d94aab48f Make prepare changelog script executable 
For local testing
 2026-01-19 17:43:45 +00:00
dependabot[bot] bdabb8f1bc Bump ruby/setup-ruby 
Bumps the actions-minor group with 1 update in the /.github/workflows directory: [ruby/setup-ruby](https://github.com/ruby/setup-ruby).


Updates `ruby/setup-ruby` from 1.278.0 to 1.281.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](https://github.com/ruby/setup-ruby/compare/4c24fa5ec04b2e79eb40571b1cee2a0d2b705771...675dd7ba1b06c8786a1480d89c384f5620a42647)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-version: 1.281.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-01-12 21:59:39 +00:00
Henry Mercer 41448d92b9 Merge pull request #3287 from github/henrymercer/generate-mergeback-last 
Open mergeback PR last
 2026-01-06 12:16:00 +00:00
dependabot[bot] 7edf2bd491 Bump ruby/setup-ruby 
Bumps the actions-minor group with 1 update in the /.github/workflows directory: [ruby/setup-ruby](https://github.com/ruby/setup-ruby).


Updates `ruby/setup-ruby` from 1.275.0 to 1.278.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](https://github.com/ruby/setup-ruby/compare/d354de180d0c9e813cfddfcbdc079945d4be589b...4c24fa5ec04b2e79eb40571b1cee2a0d2b705771)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-version: 1.278.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-01-05 17:15:28 +00:00
dependabot[bot] d0d445f91c Bump ruby/setup-ruby 
Bumps the actions-minor group with 1 update in the /.github/workflows directory: [ruby/setup-ruby](https://github.com/ruby/setup-ruby).


Updates `ruby/setup-ruby` from 1.270.0 to 1.275.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](https://github.com/ruby/setup-ruby/compare/ac793fdd38cc468a4dd57246fa9d0e868aba9085...d354de180d0c9e813cfddfcbdc079945d4be589b)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-version: 1.275.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-12-22 17:16:43 +00:00
Henry Mercer 034401b281 Merge branch 'main' into copilot/update-overlay-git-version-check 2025-12-18 14:06:01 +00:00
Henry Mercer 95246ce019 Prefer explicit env var to binary accessibility check 2025-12-18 14:05:12 +00:00
Henry Mercer a7e88a44f8 Only enable overlay for the code scanning suite 2025-12-18 13:06:44 +00:00
Henry Mercer 003ddaeef5 Avoid non-determinism in PR checks due to overlay FFs 2025-12-18 12:35:06 +00:00
Henry Mercer 7673a2de65 Run testing Action using Node 24 2025-12-17 11:51:34 +00:00
Henry Mercer faf6d35e7b Verify using post step 2025-12-17 11:35:26 +00:00
Henry Mercer f28848a66a Use artifact scanner in debug artifacts PR checks 2025-12-17 10:25:47 +00:00
Henry Mercer c07cc0d3a9 Merge pull request #3351 from github/henrymercer/ghec-dr-determine-tools-version-from-ffs 
Determine CodeQL version from feature flags on GHEC-DR
 2025-12-16 13:42:01 +00:00
Michael B. Gale c2d4383e64 Merge branch 'main' into dependabot/github_actions/dot-github/workflows/actions/download-artifact-7 2025-12-15 22:00:03 +00:00
Michael B. Gale d0ad1da72a Merge pull request #3364 from github/dependabot/github_actions/dot-github/workflows/actions-minor-8751820eb1 
Bump ruby/setup-ruby from 1.269.0 to 1.270.0 in /.github/workflows in the actions-minor group across 1 directory
 2025-12-15 21:08:40 +00:00
dependabot[bot] 034374eb3f Bump actions/upload-artifact from 5 to 6 in /.github/workflows 
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 5 to 6.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-12-15 17:18:40 +00:00
dependabot[bot] 6dbc22c93f Bump actions/download-artifact from 6 to 7 in /.github/workflows 
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 6 to 7.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v6...v7)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-12-15 17:18:32 +00:00
dependabot[bot] a539068a61 Bump ruby/setup-ruby 
Bumps the actions-minor group with 1 update in the /.github/workflows directory: [ruby/setup-ruby](https://github.com/ruby/setup-ruby).


Updates `ruby/setup-ruby` from 1.269.0 to 1.270.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](https://github.com/ruby/setup-ruby/compare/d697be2f83c6234b20877c3b5eac7a7f342f0d0c...ac793fdd38cc468a4dd57246fa9d0e868aba9085)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-version: 1.270.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-12-15 17:18:28 +00:00
Henry Mercer da501245d4 Update PR template to include GHEC-DR 2025-12-10 17:41:20 +00:00