github/codeql-action
0
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2026-04-29 18:30:14 +00:00
Code Issues Packages Projects Releases Wiki Activity
8,833 Commits 350 Branches 538 Tags
59245fd15994466f2d1c292d5a0eaa4687bf28ee
Commit Graph

8833 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Henry Mercer 59245fd159 Add missing permissions to access feature flags 2026-02-27 17:39:20 +01:00
Henry Mercer 389c8322d5 CI: Update CodeQL Action test to use setup-codeql 2026-02-27 17:06:16 +01:00
Henry Mercer ca42bf226a Merge pull request #3522 from github/henrymercer/update-supported-versions-table 
Update supported Action / Bundle / GHES version table
 2026-02-27 13:57:17 +00:00
Henry Mercer 6704d80ac6 Merge pull request #3520 from github/dependabot/npm_and_yarn/fast-xml-parser-5.4.1 
Bump fast-xml-parser from 5.3.6 to 5.4.1
 2026-02-27 13:57:12 +00:00
Henry Mercer 76348c0f12 Merge pull request #3521 from github/dependabot/npm_and_yarn/minimatch-3.1.5 
Bump minimatch from 3.1.3 to 3.1.5
 2026-02-27 13:57:06 +00:00
Henry Mercer 3a42a998ef Update supported Action / Bundle / GHES version table 2026-02-27 13:37:42 +00:00
Henry Mercer 8ab0431fc3 Merge pull request #3514 from github/dependabot/npm_and_yarn/globals-17.3.0 
Bump globals from 16.5.0 to 17.3.0
 2026-02-27 13:28:04 +00:00
Henry Mercer 2c92579346 Merge pull request #3513 from github/dependabot/npm_and_yarn/npm-minor-e1092f1102 
Bump eslint-plugin-jsdoc from 62.5.0 to 62.6.0 in the npm-minor group
 2026-02-27 13:27:19 +00:00
github-actions[bot] 2475286230 Rebuild 2026-02-27 13:23:45 +00:00
github-actions[bot] 236fbf7645 Rebuild 2026-02-27 13:23:30 +00:00
dependabot[bot] 29181f28d5 Bump minimatch from 3.1.3 to 3.1.5 
Bumps [minimatch](https://github.com/isaacs/minimatch) from 3.1.3 to 3.1.5.
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](https://github.com/isaacs/minimatch/compare/v3.1.3...v3.1.5)

---
updated-dependencies:
- dependency-name: minimatch
  dependency-version: 3.1.5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-02-27 13:21:47 +00:00
dependabot[bot] a0735d7c2a Bump fast-xml-parser from 5.3.6 to 5.4.1 
Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) from 5.3.6 to 5.4.1.
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.3.6...v5.4.1)

---
updated-dependencies:
- dependency-name: fast-xml-parser
  dependency-version: 5.4.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-02-27 13:21:34 +00:00
Henry Mercer b35e0349aa Merge pull request #3518 from github/mbg/ci/merge-queue-codeql 
Disable CodeQL upload for merge queue and exclude PR size workflow from required checks
 2026-02-27 12:56:04 +00:00
Michael B. Gale 4406eba03e Skip uploads in merge queue 2026-02-27 12:14:56 +00:00
Henry Mercer 1b897f3911 Fix conditions in code scanning config checks 
DIff-informed analysis isn't enabled in the merge queue.
 2026-02-27 12:10:38 +00:00
Henry Mercer adf58cf166 Merge pull request #3515 from github/henrymercer/drop-ram-limit 
Skip overlay memory check for CodeQL 2.24.3 and later
 2026-02-27 11:17:11 +00:00
Michael B. Gale b7d3fb98df Exclude "Label PR with size" from required checks 2026-02-26 18:25:26 +00:00
Michael B. Gale 4e8e79431d Run CodeQL with linked tools for merge queue 2026-02-26 18:25:26 +00:00
github-actions[bot] 52c2a032f3 Rebuild 2026-02-26 17:22:24 +00:00
Henry Mercer ba1288cb3c Merge branch 'main' into dependabot/npm_and_yarn/globals-17.3.0 2026-02-26 17:20:10 +00:00
Henry Mercer 29765a3c71 Skip overlay memory check for CodeQL 2.24.3 and later 2026-02-26 16:53:26 +00:00
github-actions[bot] 068e80c14c Rebuild 2026-02-26 16:42:43 +00:00
Michael B. Gale 154969e08b Merge branch 'main' into dependabot/npm_and_yarn/npm-minor-e1092f1102 2026-02-26 16:40:19 +00:00
Michael B. Gale b0ed4dedcb Merge pull request #3511 from github/henrymercer/merge-queue 
Add `merge_group` trigger to required checks to prepare for merge queue
 2026-02-26 16:33:14 +00:00
Michael B. Gale 3c83f578ed Merge pull request #3516 from github/mbg/start-proxy/reduce-connection-check-severity 2026-02-26 16:32:00 +00:00
Henry Mercer 20f148b36e Merge pull request #3507 from github/henrymercer/overlay-repo-property 
Add a repository property for disabling overlay
 2026-02-26 16:21:03 +00:00
Henry Mercer 4068616de4 Merge branch 'main' into henrymercer/overlay-repo-property 2026-02-26 15:27:25 +00:00
Michael B. Gale 0d5f70631a Merge branch 'main' into mbg/start-proxy/reduce-connection-check-severity 2026-02-26 15:16:23 +00:00
Michael B. Gale ae14a1f513 Merge branch 'main' into henrymercer/merge-queue 2026-02-26 15:11:41 +00:00
Michael B. Gale a577f702b9 Merge pull request #3512 from github/mbg/start-proxy/use-default-cli 
Use `getDefaultCliVersion` for `start-proxy`
 2026-02-26 15:11:18 +00:00
Michael B. Gale bce0deb953 Fix log message / returned version 2026-02-26 13:55:47 +00:00
Michael B. Gale db33d20bf4 Put change behind a FF 2026-02-26 13:10:52 +00:00
Michael B. Gale 3c911485ed Address Copilot's review comments 2026-02-26 13:07:03 +00:00
Michael B. Gale 1ec5b701fc Reduce log levels for registry connection checks 2026-02-26 11:53:26 +00:00
dependabot[bot] 9bdf640d99 Bump globals from 16.5.0 to 17.3.0 
Bumps [globals](https://github.com/sindresorhus/globals) from 16.5.0 to 17.3.0.
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](https://github.com/sindresorhus/globals/compare/v16.5.0...v17.3.0)

---
updated-dependencies:
- dependency-name: globals
  dependency-version: 17.3.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-02-25 17:53:31 +00:00
dependabot[bot] b2beb85441 Bump eslint-plugin-jsdoc from 62.5.0 to 62.6.0 in the npm-minor group 
Bumps the npm-minor group with 1 update: [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc).


Updates `eslint-plugin-jsdoc` from 62.5.0 to 62.6.0
- [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases)
- [Commits](https://github.com/gajus/eslint-plugin-jsdoc/compare/v62.5.0...v62.6.0)

---
updated-dependencies:
- dependency-name: eslint-plugin-jsdoc
  dependency-version: 62.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-02-25 17:53:10 +00:00
Michael B. Gale f657c4e1eb Use getDefaultCliVersion for start-proxy 2026-02-25 17:43:15 +00:00
Henry Mercer f379c46d49 Address review comments 2026-02-25 15:26:48 +00:00
Henry Mercer 8105503f1a Add merge_group trigger to required checks to prepare for merge queue 2026-02-25 15:12:37 +00:00
Henry Mercer 056b0912cf Merge branch 'main' into henrymercer/overlay-repo-property 2026-02-25 14:43:34 +00:00
Henry Mercer 445a2a9bb2 Record overlay disablement reason 2026-02-25 14:36:03 +00:00
Henry Mercer 182427800c Add disabled reason 2026-02-25 14:22:13 +00:00
Henry Mercer c0fc915677 Merge pull request #3509 from github/dependabot/npm_and_yarn/multi-871638c4a1 
Bump minimatch
 2026-02-25 13:43:36 +00:00
Michael B. Gale 18898a6dd3 Merge pull request #3504 from github/mbg/ff/remove-ImprovedProxyCertificates 
Remove FF gate for improved CA generation
 2026-02-25 13:25:57 +00:00
Henry Mercer 70db156dcb Add diagnostic when overlay disabled by repo property 2026-02-25 11:48:10 +00:00
Henry Mercer 9c61a2ddf4 Reorganize properties file 2026-02-25 11:35:34 +00:00
github-actions[bot] 123b3011fa Rebuild 2026-02-25 00:19:51 +00:00
dependabot[bot] 0aafb58a10 Bump minimatch 
Bumps  and [minimatch](https://github.com/isaacs/minimatch). These dependencies needed to be updated together.

Updates `minimatch` from 10.1.1 to 10.2.2
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](https://github.com/isaacs/minimatch/compare/v10.1.1...v10.2.2)

Updates `minimatch` from 5.1.6 to 5.1.7
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](https://github.com/isaacs/minimatch/compare/v10.1.1...v10.2.2)

Updates `minimatch` from 3.1.2 to 3.1.3
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](https://github.com/isaacs/minimatch/compare/v10.1.1...v10.2.2)

Updates `minimatch` from 9.0.5 to 9.0.6
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](https://github.com/isaacs/minimatch/compare/v10.1.1...v10.2.2)

---
updated-dependencies:
- dependency-name: minimatch
  dependency-version: 10.2.2
  dependency-type: indirect
- dependency-name: minimatch
  dependency-version: 5.1.7
  dependency-type: indirect
- dependency-name: minimatch
  dependency-version: 3.1.3
  dependency-type: indirect
- dependency-name: minimatch
  dependency-version: 9.0.6
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-02-25 00:17:44 +00:00
Henry Mercer 16adc4e672 Merge pull request #3506 from github/henrymercer/result-better-inference 
Improve type inference of `Result<T, E>`
 2026-02-24 20:05:34 +00:00
Henry Mercer 2808ca726e Improve validation and address review comments 2026-02-24 19:56:43 +00:00