9ed0d758ce
Rebuild
2026-03-16 11:10:08 +00:00
95be291f41
Bump minor version
2026-03-16 08:38:13 +00:00
e3200e331b
Merge pull request #3563 from github/mbg/private-registry/oidc
...
Accept OIDC configurations in `start-proxy`
2026-03-13 11:58:36 +00:00
ea703668e0
Avoid bundling package.json
...
- `package.json` is bundled by `esbuild` because we depend on it in `actions-util.ts`
- That is so we can access the `version` property
- We now use `build.mjs` to define a constant for it instead
- We also set this constant in `ava.setup.mjs` for tests
- This reduces the size of the generated `.js` files and avoids changing them entirely in some cases
2026-03-12 18:55:03 +00:00
1dbebad653
Merge pull request #3566 from github/dependabot/npm_and_yarn/npm-minor-aebc49e072
...
Bump the npm-minor group with 2 updates
2026-03-11 20:49:27 +00:00
0d0df94d93
Rebuild
2026-03-11 19:51:54 +00:00
373dec9f22
Rebuild
2026-03-11 19:51:53 +00:00
6c99ca514e
Merge remote-tracking branch 'origin/main' into mbg/private-registry/oidc
2026-03-11 16:15:07 +00:00
997acaf7eb
Merge pull request #3562 from github/henrymercer/skip-file-coverage-rollout
...
Prepare for rolling out skipping computing file coverage information on PRs
2026-03-11 11:33:21 +00:00
2e7e91fd63
Merge pull request #3550 from github/sam-robson/overlay-per-lang-min-bundle-version
...
feat: add minimumVersion values for language overlay flags
2026-03-11 10:28:14 +00:00
5cb13d6ab8
Merge pull request #3564 from github/henrymercer/fix-database-upload-retries
...
Fix retries when uploading databases
2026-03-10 16:56:27 +00:00
a11c6cbbc8
Merge branch 'main' into henrymercer/skip-file-coverage-rollout
2026-03-10 16:25:21 +00:00
048d0ea295
Address review comments
2026-03-10 15:54:58 +00:00
55a0f2b2aa
Add environment variable override
2026-03-10 15:41:40 +00:00
79ea59d97e
Merge branch 'main' into sam-robson/overlay-per-lang-min-bundle-version
2026-03-10 14:13:22 +00:00
13c548978d
Fix retries when uploading databases
2026-03-10 12:34:18 +00:00
87c3b7b6a1
Merge pull request #3519 from github/mbg/csra/upload-failed-sarif-artifact
...
Upload failed SARIF for risk assessments in `init-post` step
2026-03-10 11:53:12 +00:00
ce321daddb
Merge branch 'main' into henrymercer/skip-file-coverage-rollout
2026-03-10 11:46:08 +00:00
8bddab0644
Merge branch 'main' into sam-robson/overlay-per-lang-min-bundle-version
2026-03-09 20:23:29 +00:00
746f940d10
Merge remote-tracking branch 'origin/main' into mbg/csra/upload-failed-sarif-artifact
2026-03-09 18:32:36 +00:00
0ad7d7be2f
Merge pull request #3560 from github/henrymercer/ghes-3.13-cleanup
...
Clean up pre GHES 3.14 code paths
2026-03-09 18:00:31 +00:00
9e8c05933f
Add ability to override via repository property
2026-03-09 17:08:13 +00:00
c102a6d8cd
Require tools feature flag
...
And now that we have this, drop the restriction to `github` org.
2026-03-09 17:07:10 +00:00
867f2b0e0a
test: verify overlay analysis is disabled for languages without per-language feature flags
2026-03-09 16:46:38 +00:00
e04697664c
feat: add minimumVersion values for existing language-specific overlay feature flags
2026-03-09 16:45:20 +00:00
ab180c9eeb
Clean up pre GHES 3.14 code paths
2026-03-09 16:35:29 +00:00
b35c0d37b1
Clean up repository properties feature flag
2026-03-09 16:15:04 +00:00
0ccdcb8c0a
Rebuild
2026-03-05 19:44:36 +00:00
f2669dd916
Update default bundle to codeql-bundle-v2.24.3
2026-03-05 15:34:19 +00:00
77f9a86c60
Rebuild
2026-03-05 13:19:28 +00:00
8e17ec94b4
Merge branch 'main' into henrymercer/parallel-unit-tests
2026-03-04 13:25:01 +01:00
a5b959e10d
Merge pull request #3537 from github/henrymercer/overlay-status-record-job
...
Record the job that published an overlay status
2026-03-04 11:49:52 +00:00
d1ac77f26d
Merge pull request #3527 from github/mbg/start-proxy/remove-unused
...
Remove unused registry types from `LANGUAGE_TO_REGISTRY_TYPE`
2026-03-04 11:48:08 +00:00
675af55c60
Run some unit tests in parallel
2026-03-04 12:40:22 +01:00
281b265245
Address review comments
2026-03-04 12:16:54 +01:00
4593dc2f8f
Update supported GitHub Enterprise Server versions
2026-03-04 00:23:29 +00:00
129d771399
Add check run ID
2026-03-03 19:04:04 +01:00
a05f541a6e
Record the job that published an overlay status
...
This makes it easier to find the job that produced the status.
2026-03-03 16:56:18 +01:00
9bf973324f
Merge pull request #3528 from github/mbg/refactor/sarif
...
Refactor SARIF-related types and functions into a separate module
2026-03-03 12:10:30 +00:00
6d060bbaa1
Return Partial<Log> from readSarifFile
...
Our previous definition had `tools` as a mandatory field, so this
also makes some changes to deal with the case where that may
be `undefined` by treating it as equivalent to `[]`.
2026-03-03 11:34:01 +00:00
28b449d8c7
Improve version handling in combineSarifFiles
2026-03-03 11:18:47 +00:00
1721ce7afd
Address minor review comments
2026-03-03 11:05:37 +00:00
b43d146e37
Do not alias types
2026-03-02 20:47:19 +00:00
9a31859f78
Use @types/sarif
2026-03-02 18:04:11 +00:00
6059d3ceb5
Rebuild
2026-03-02 11:35:32 +00:00
06cd615ad8
Soften language re overlay failures
2026-03-02 11:48:45 +01:00
8a1cd7656d
Put change behind a FF
2026-03-01 15:07:47 +00:00
40aec383a1
Move more SARIF helpers to sarif module
2026-03-01 14:22:49 +00:00
2fce45b8e6
Add wrapper around JSON.parse to sarif module
2026-03-01 14:10:25 +00:00
d7cfd19fb8
Move SARIF types out of util.ts
2026-03-01 13:42:46 +00:00
github-actions[bot]
Michael B. Gale
Henry Mercer
Henry Mercer
Sam Robson