github/codeql-action
0
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2026-04-29 18:30:14 +00:00
Code Issues Packages Projects Releases Wiki Activity
6,879 Commits 350 Branches 538 Tags
83de9b082b4e05307e853a1dfbf1e4828286ec2e
Commit Graph

6879 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Andrew Eisenberg 7254660adc Merge pull request #2804 from github/dependabot/github_actions/actions-96d25c356e 
build(deps): bump ruby/setup-ruby from 1.221.0 to 1.222.0 in the actions group
 2025-03-11 08:53:45 -07:00
Chuan-kai Lin 13f2f96cdd Merge pull request #2801 from github/cklin/overlay-databases 
Basic support for overlay databases
 2025-03-11 08:33:33 -07:00
Chuan-kai Lin 0efe12d12c build: refresh js files 2025-03-10 13:31:46 -07:00
Chuan-kai Lin ff5f0b9efd Support overlay database creation 
This commit adds support for creating overlay-base and overlay
databases, controlled via the CODEQL_OVERLAY_DATABASE_MODE environment
variable.
 2025-03-10 13:25:46 -07:00
Chuan-kai Lin 270886f805 Pass overlay mode into databaseInitCluster() 
This commit adds a OverlayDatabaseMode parameter to
databaseInitCluster(). The parameter controls the "codeql database init"
flags concerning overlay database creation.

There is no behavior change in this commit because we always pass
OverlayDatabaseMode.None to databaseInitCluster(). That will change in
the next commit.
 2025-03-10 13:22:24 -07:00
Andrew Eisenberg d3762699d1 Update pr-check 2025-03-10 11:22:58 -07:00
Henry Mercer b46b37a8a3 Merge pull request #2803 from github/dependabot/npm_and_yarn/npm-129f0c3752 
build(deps-dev): bump the npm group with 3 updates
 2025-03-10 18:01:08 +00:00
dependabot[bot] aecf01557d build(deps): bump ruby/setup-ruby in the actions group 
Bumps the actions group with 1 update: [ruby/setup-ruby](https://github.com/ruby/setup-ruby).


Updates `ruby/setup-ruby` from 1.221.0 to 1.222.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](https://github.com/ruby/setup-ruby/compare/32110d4e311bd8996b2a82bf2a43b714ccc91777...277ba2a127aba66d45bad0fa2dc56f80dbfedffa)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-03-10 17:57:35 +00:00
github-actions[bot] 053e2184a0 Update checked-in dependencies 2025-03-10 17:42:57 +00:00
dependabot[bot] 248ab9b811 build(deps-dev): bump the npm group with 3 updates 
Bumps the npm group with 3 updates: [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js), [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) and [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser).


Updates `@eslint/js` from 9.21.0 to 9.22.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/commits/v9.22.0/packages/js)

Updates `@typescript-eslint/eslint-plugin` from 8.26.0 to 8.26.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.26.1/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.26.0 to 8.26.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.26.1/packages/parser)

---
updated-dependencies:
- dependency-name: "@eslint/js"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@typescript-eslint/parser"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-03-10 17:42:05 +00:00
Chuan-kai Lin d76f393713 Do not set --expect-discarded-cache on "cleanup-level: overlay" 
When a user specifies "cleanup-level: overlay", it suggests that the
user wishes to preserve the evaluation cache for future use. So in this
case we should not set --expect-discarded-cache when running queries.
 2025-03-10 10:32:13 -07:00
Andrew Eisenberg 88676f2b14 Minimally remove micromatch 2025-03-07 10:07:08 -08:00
Chuan-kai Lin b2e6519679 Merge pull request #2799 from github/mergeback/v3.28.11-to-main-6bb031af 
Mergeback v3.28.11 refs/heads/releases/v3 into main
 2025-03-07 08:34:57 -08:00
github-actions[bot] ff91c9db25 Update checked-in dependencies 2025-03-07 16:12:00 +00:00
github-actions[bot] d1b3f740d8 Update changelog and version after v3.28.11 2025-03-07 16:09:54 +00:00
Chuan-kai Lin 6bb031afdd Merge pull request #2798 from github/update-v3.28.11-56b25d5d5 
Merge main into releases/v3
v3.28.11 		2025-03-07 08:09:23 -08:00
github-actions[bot] 6bca7dd940 Update changelog for v3.28.11 2025-03-07 14:28:04 +00:00
Chuan-kai Lin 56b25d5d52 Merge pull request #2793 from github/update-bundle/codeql-bundle-v2.20.6 
Update default bundle to 2.20.6
 2025-03-06 07:12:12 -08:00
Chuan-kai Lin 256aa16582 Merge branch 'main' into update-bundle/codeql-bundle-v2.20.6 2025-03-06 06:59:38 -08:00
Nick Fyson 911d845ab6 Merge pull request #2796 from github/nickfyson/adjust-rate-error-string 
adjust string for handling rate limit error
 2025-03-06 10:45:00 +00:00
nickfyson 7b7ed63503 adjust string for handling rate limit error 2025-03-06 10:33:25 +00:00
Henry Mercer 608ccd6cd9 Merge pull request #2794 from github/update-supported-enterprise-server-versions 
Update supported GitHub Enterprise Server versions
 2025-03-05 14:41:52 +00:00
github-actions[bot] 35d04d3627 Update supported GitHub Enterprise Server versions 2025-03-05 00:15:30 +00:00
Chuan-kai Lin ec3b22164b Update supported GitHub Enterprise Server versions 2025-03-03 13:06:35 -08:00
github-actions[bot] 8dc01f6342 Add changelog note 2025-03-03 20:54:07 +00:00
github-actions[bot] b378daf0bc Update default bundle to codeql-bundle-v2.20.6 2025-03-03 20:54:03 +00:00
Dave Bartolomeo 80f9930395 Merge pull request #2788 from github/dbartol/use-real-actions-extractor 
Use embedded `actions` extractor only for old CLI versions
codeql-bundle-v2.20.6 		2025-03-03 13:59:30 -05:00
Angela P Wen f544ec5e4a Merge pull request #2791 from github/dependabot/npm_and_yarn/npm-24c237cb71 
build(deps): bump the npm group with 9 updates
 2025-03-03 10:56:56 -08:00
Dave Bartolomeo d37931ae65 Merge remote-tracking branch 'origin/main' into dbartol/use-real-actions-extractor 2025-03-03 13:01:21 -05:00
Angela P Wen 4b35b04661 Merge pull request #2792 from github/dependabot/github_actions/actions-f0e7f3112e 
build(deps): bump actions/create-github-app-token from 1.11.5 to 1.11.6 in the actions group
 2025-03-03 09:40:10 -08:00
dependabot[bot] 1a69221aeb build(deps): bump actions/create-github-app-token in the actions group 
Bumps the actions group with 1 update: [actions/create-github-app-token](https://github.com/actions/create-github-app-token).


Updates `actions/create-github-app-token` from 1.11.5 to 1.11.6
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Commits](https://github.com/actions/create-github-app-token/compare/v1.11.5...v1.11.6)

---
updated-dependencies:
- dependency-name: actions/create-github-app-token
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-03-03 17:26:51 +00:00
github-actions[bot] 452ffd6e8e Update checked-in dependencies 2025-03-03 17:25:47 +00:00
dependabot[bot] a8ade63a2f build(deps): bump the npm group with 9 updates 
Bumps the npm group with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [@actions/cache](https://github.com/actions/toolkit/tree/HEAD/packages/cache) | `4.0.1` | `4.0.2` |
| [uuid](https://github.com/uuidjs/uuid) | `11.0.5` | `11.1.0` |
| [@eslint/eslintrc](https://github.com/eslint/eslintrc) | `3.2.0` | `3.3.0` |
| [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) | `9.20.0` | `9.21.0` |
| [@types/sinon](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/sinon) | `17.0.3` | `17.0.4` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.24.1` | `8.26.0` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.24.1` | `8.26.0` |
| [eslint-import-resolver-typescript](https://github.com/import-js/eslint-import-resolver-typescript) | `3.8.1` | `3.8.3` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.7.3` | `5.8.2` |


Updates `@actions/cache` from 4.0.1 to 4.0.2
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/cache/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/cache)

Updates `uuid` from 11.0.5 to 11.1.0
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](https://github.com/uuidjs/uuid/compare/v11.0.5...v11.1.0)

Updates `@eslint/eslintrc` from 3.2.0 to 3.3.0
- [Release notes](https://github.com/eslint/eslintrc/releases)
- [Changelog](https://github.com/eslint/eslintrc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslintrc/compare/v3.2.0...v3.3.0)

Updates `@eslint/js` from 9.20.0 to 9.21.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/commits/v9.21.0/packages/js)

Updates `@types/sinon` from 17.0.3 to 17.0.4
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/sinon)

Updates `@typescript-eslint/eslint-plugin` from 8.24.1 to 8.26.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.26.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.24.1 to 8.26.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.26.0/packages/parser)

Updates `eslint-import-resolver-typescript` from 3.8.1 to 3.8.3
- [Release notes](https://github.com/import-js/eslint-import-resolver-typescript/releases)
- [Changelog](https://github.com/import-js/eslint-import-resolver-typescript/blob/master/CHANGELOG.md)
- [Commits](https://github.com/import-js/eslint-import-resolver-typescript/compare/v3.8.1...v3.8.3)

Updates `typescript` from 5.7.3 to 5.8.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release.yml)
- [Commits](https://github.com/microsoft/TypeScript/compare/v5.7.3...v5.8.2)

---
updated-dependencies:
- dependency-name: "@actions/cache"
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: uuid
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@eslint/eslintrc"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@eslint/js"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@types/sinon"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@typescript-eslint/parser"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: eslint-import-resolver-typescript
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: typescript
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-03-03 17:24:56 +00:00
Henry Mercer 2db5b5a35f Merge pull request #2786 from github/henrymercer/more-config-errors 
Add some more configuration errors
 2025-03-03 12:21:31 +00:00
Dave Bartolomeo 85e30fe57a Use embedded actions extractor only for old CLI versions 2025-02-27 15:42:11 -05:00
Dave Bartolomeo c7c9a57be6 Add changelog entry 2025-02-27 13:18:18 -05:00
Dave Bartolomeo c29cab9aac Remove bundled copy of actions extractor 2025-02-27 12:46:11 -05:00
Paolo Tranquilli 83923549f6 Merge pull request #2776 from github/redsun82/just 
Do some just+pre-commit tweaking
 2025-02-27 12:40:34 +01:00
Paolo Tranquilli 96632630a9 Do some just+pre-commit tweaking 
* pre-commit: move the linting check ahead of the compiling one, as a
  typescript lint can change the compilaed javascript, so you can end up
  in a situation where the pre-commit check fails twice in a row
* just: add linting and make the default to run all
 2025-02-27 08:10:04 +01:00
Ian Lynagh 97aac9bb56 Merge pull request #2785 from github/igfoo/mb 
Warn about small amounts of MB, not GB
 2025-02-26 16:56:30 +00:00
Henry Mercer d59d0eb99a Add CLI error for failure to create temp directory 2025-02-26 16:52:50 +00:00
Henry Mercer 0ae74e1ae0 Check for running out of disk space 2025-02-26 16:52:50 +00:00
Ian Lynagh 146dd5cfb0 npm run build 2025-02-26 15:12:53 +00:00
Ian Lynagh 32505c6f2d Warn about small amounts of MB, not GB 
The number of GB is at most 2, and can be tiny. MB gives a more
comprehensible range of values.
 2025-02-26 15:11:14 +00:00
Angela P Wen 8c69433c34 Merge pull request #2782 from github/angelapwen/fix-unversioned-immutable-action 
PR Checks: use semantic versioning for `create-github-app-token`
 2025-02-25 08:49:25 -08:00
Angela P Wen c4f2a076e5 PR Checks: use semantic versioning for create-github-app-token 2025-02-24 17:06:31 -08:00
Angela P Wen a8849fbe63 Merge pull request #2781 from github/angelapwen/fix-code-injection-warning 
Fix code injection warnings in `check-codescanning-config` internal Action
 2025-02-24 16:53:51 -08:00
Angela P Wen 628c1e669a Remove print debugging 2025-02-24 13:29:47 -08:00
Angela P Wen e12eb8d7c1 Set environment variable in the correct step 2025-02-24 13:24:22 -08:00
Angela P Wen 3b348d9a54 Debug only: print environment variable 2025-02-24 13:18:08 -08:00