github/codeql-action
0
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2026-04-26 16:58:47 +00:00
Code Issues Packages Projects Releases Wiki Activity
8,378 Commits 341 Branches 538 Tags
9c3f69d7a39b0af2d5c0907cdc54bed571039527
Commit Graph

8378 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Michael B. Gale 9c3f69d7a3 Add some logging 2026-01-19 14:04:41 +00:00
Michael B. Gale 5f5c095469 Add docs comments for listFiles and getGeneratedFiles 2026-01-19 13:49:42 +00:00
Michael B. Gale c7d0b92094 Drop isDynamic check from isCCR 
The analysis key already tells us this under normal conditions
 2026-01-19 13:47:50 +00:00
Michael B. Gale 055e6b6f36 Add EnvVar constant for analysis key 2026-01-19 13:41:38 +00:00
Michael B. Gale 644e2b9bd7 Restore condition for enablement 2026-01-19 13:19:48 +00:00
Michael B. Gale 02b2c55c51 Use stdin for files to query attributes of 2026-01-19 13:18:48 +00:00
Michael B. Gale 1782089bde Merge branch 'main' into mbg/ignore-generated 2026-01-19 13:09:15 +00:00
Michael B. Gale c99e493099 Merge pull request #3399 from github/dependabot/npm_and_yarn/eslint-plugin-jsdoc-62.0.0 
Bump eslint-plugin-jsdoc from 61.5.0 to 62.0.0
 2026-01-19 13:04:30 +00:00
Michael B. Gale f687ebf1c9 Merge pull request #3397 from github/dependabot/npm_and_yarn/npm-minor-70139cb906 
Bump the npm-minor group with 7 updates
 2026-01-19 11:46:30 +00:00
Michael B. Gale 070e2a5f21 Merge pull request #3400 from github/dependabot/npm_and_yarn/actions/tool-cache-3.0.0 
Bump @actions/tool-cache from 2.0.2 to 3.0.0
 2026-01-19 10:49:50 +00:00
Michael B. Gale fb650c22f9 Merge pull request #3401 from github/dependabot/github_actions/dot-github/workflows/actions-minor-c79fd65a81 
Bump ruby/setup-ruby from 1.278.0 to 1.281.0 in /.github/workflows in the actions-minor group across 1 directory
 2026-01-16 18:03:34 +00:00
github-actions[bot] 21c5dc0f33 Rebuild 2026-01-12 22:02:32 +00:00
dependabot[bot] bdabb8f1bc Bump ruby/setup-ruby 
Bumps the actions-minor group with 1 update in the /.github/workflows directory: [ruby/setup-ruby](https://github.com/ruby/setup-ruby).


Updates `ruby/setup-ruby` from 1.278.0 to 1.281.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](https://github.com/ruby/setup-ruby/compare/4c24fa5ec04b2e79eb40571b1cee2a0d2b705771...675dd7ba1b06c8786a1480d89c384f5620a42647)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-version: 1.281.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-01-12 21:59:39 +00:00
github-actions[bot] 39105f35da Rebuild 2026-01-12 21:55:29 +00:00
github-actions[bot] dc7e2ff87d Rebuild 2026-01-12 21:55:24 +00:00
github-actions[bot] 642eca368e Rebuild 2026-01-12 21:54:58 +00:00
dependabot[bot] e20d24fb28 Bump @actions/tool-cache from 2.0.2 to 3.0.0 
Bumps [@actions/tool-cache](https://github.com/actions/toolkit/tree/HEAD/packages/tool-cache) from 2.0.2 to 3.0.0.
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/tool-cache/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/tool-cache)

---
updated-dependencies:
- dependency-name: "@actions/tool-cache"
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-01-12 21:53:57 +00:00
dependabot[bot] f301585a01 Bump eslint-plugin-jsdoc from 61.5.0 to 62.0.0 
Bumps [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc) from 61.5.0 to 62.0.0.
- [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases)
- [Commits](https://github.com/gajus/eslint-plugin-jsdoc/compare/v61.5.0...v62.0.0)

---
updated-dependencies:
- dependency-name: eslint-plugin-jsdoc
  dependency-version: 62.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-01-12 21:53:52 +00:00
dependabot[bot] c8914af920 Bump the npm-minor group with 7 updates 
Bumps the npm-minor group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [@actions/artifact](https://github.com/actions/toolkit/tree/HEAD/packages/artifact) | `5.0.1` | `5.0.2` |
| [@actions/cache](https://github.com/actions/toolkit/tree/HEAD/packages/cache) | `5.0.1` | `5.0.2` |
| [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) | `2.0.1` | `2.0.2` |
| [@actions/http-client](https://github.com/actions/toolkit/tree/HEAD/packages/http-client) | `3.0.0` | `3.0.1` |
| [@eslint/compat](https://github.com/eslint/rewrite/tree/HEAD/packages/compat) | `2.0.0` | `2.0.1` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.52.0` | `8.53.0` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.52.0` | `8.53.0` |


Updates `@actions/artifact` from 5.0.1 to 5.0.2
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/artifact/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/artifact)

Updates `@actions/cache` from 5.0.1 to 5.0.2
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/cache/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/cache)

Updates `@actions/core` from 2.0.1 to 2.0.2
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core)

Updates `@actions/http-client` from 3.0.0 to 3.0.1
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/http-client/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/http-client)

Updates `@eslint/compat` from 2.0.0 to 2.0.1
- [Release notes](https://github.com/eslint/rewrite/releases)
- [Changelog](https://github.com/eslint/rewrite/blob/main/packages/compat/CHANGELOG.md)
- [Commits](https://github.com/eslint/rewrite/commits/compat-v2.0.1/packages/compat)

Updates `@typescript-eslint/eslint-plugin` from 8.52.0 to 8.53.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.53.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.52.0 to 8.53.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.53.0/packages/parser)

---
updated-dependencies:
- dependency-name: "@actions/artifact"
  dependency-version: 5.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: "@actions/cache"
  dependency-version: 5.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: "@actions/core"
  dependency-version: 2.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: "@actions/http-client"
  dependency-version: 3.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: "@eslint/compat"
  dependency-version: 2.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.53.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.53.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-01-12 21:53:28 +00:00
Ian Lynagh a2d9de63c2 Merge pull request #3395 from github/mergeback/v4.31.10-to-main-cdefb33c 
Mergeback v4.31.10 refs/heads/releases/v4 into main
 2026-01-12 15:23:02 +00:00
github-actions[bot] 4672d7807f Rebuild 2026-01-12 14:39:48 +00:00
github-actions[bot] be6e3c4480 Update changelog and version after v4.31.10 2026-01-12 14:34:39 +00:00
Ian Lynagh cdefb33c0f Merge pull request #3394 from github/update-v4.31.10-0fa411efd 
Merge main into releases/v4
v4.31.10 		2026-01-12 14:32:55 +00:00
github-actions[bot] cfa77c6b13 Update changelog for v4.31.10 2026-01-12 12:24:26 +00:00
Ian Lynagh 0fa411efd0 Merge pull request #3393 from github/update-bundle/codeql-bundle-v2.23.9 
Update default bundle to 2.23.9
 2026-01-09 17:24:49 +00:00
github-actions[bot] c284324212 Add changelog note 2026-01-09 16:41:42 +00:00
github-actions[bot] 83e7d0046c Update default bundle to codeql-bundle-v2.23.9 2026-01-09 16:41:33 +00:00
Henry Mercer f6a16bef8e Merge pull request #3391 from github/dependabot/npm_and_yarn/npm-minor-f1cdf520b2 
Bump the npm-minor group with 2 updates
codeql-bundle-v2.23.9 		2026-01-08 15:36:24 +00:00
github-actions[bot] c1f5f1a8b5 Rebuild 2026-01-07 16:07:35 +00:00
dependabot[bot] 1805d8d0a4 Bump the npm-minor group with 2 updates 
Bumps the npm-minor group with 2 updates: [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) and [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser).


Updates `@typescript-eslint/eslint-plugin` from 8.51.0 to 8.52.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.52.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.51.0 to 8.52.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.52.0/packages/parser)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.52.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.52.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-01-07 16:05:56 +00:00
Henry Mercer b2951d2a1e Merge pull request #3353 from github/kaspersv/bump-min-cli-v-for-overlay 
Overlay: Bump minimum CLI version for overlay
 2026-01-06 16:44:27 +00:00
Henry Mercer 41448d92b9 Merge pull request #3287 from github/henrymercer/generate-mergeback-last 
Open mergeback PR last
 2026-01-06 12:16:00 +00:00
Michael B. Gale a7fe4ffe40 Merge pull request #3387 from github/dependabot/npm_and_yarn/npm-minor-59ea988ea1 
Bump the npm-minor group with 2 updates
 2026-01-06 11:29:09 +00:00
Michael B. Gale fd448f79eb Merge pull request #3388 from github/dependabot/github_actions/dot-github/workflows/actions-minor-a0e46cd791 
Bump ruby/setup-ruby from 1.275.0 to 1.278.0 in /.github/workflows in the actions-minor group across 1 directory
 2026-01-05 21:28:14 +00:00
github-actions[bot] 079ca18961 Rebuild 2026-01-05 17:16:59 +00:00
github-actions[bot] 80dbba139d Merge remote-tracking branch 'origin/main' into dependabot/github_actions/dot-github/workflows/actions-minor-a0e46cd791 2026-01-05 17:16:09 +00:00
dependabot[bot] 7edf2bd491 Bump ruby/setup-ruby 
Bumps the actions-minor group with 1 update in the /.github/workflows directory: [ruby/setup-ruby](https://github.com/ruby/setup-ruby).


Updates `ruby/setup-ruby` from 1.275.0 to 1.278.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](https://github.com/ruby/setup-ruby/compare/d354de180d0c9e813cfddfcbdc079945d4be589b...4c24fa5ec04b2e79eb40571b1cee2a0d2b705771)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-version: 1.278.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-01-05 17:15:28 +00:00
Henry Mercer db726913e9 Merge pull request #3386 from github/henrymercer/codeql-ff-improve-safety 
Introduce a type-level check that CodeQL is passed during feature flag lookup if it is needed
 2026-01-05 17:13:26 +00:00
github-actions[bot] c327260b2b Rebuild 2026-01-05 17:03:30 +00:00
dependabot[bot] ce7b1f8663 Bump the npm-minor group with 2 updates 
Bumps the npm-minor group with 2 updates: [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) and [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser).


Updates `@typescript-eslint/eslint-plugin` from 8.50.0 to 8.51.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.51.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.50.0 to 8.51.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.51.0/packages/parser)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.51.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.51.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-01-05 17:01:55 +00:00
Henry Mercer 855c0888b6 Improve test for throwing when no CodeQL provided 2026-01-05 16:38:04 +00:00
Henry Mercer ec1705eb43 Rebuild now type error fixed in main 2026-01-05 16:23:16 +00:00
Henry Mercer 29ee0e040d Merge branch 'main' into henrymercer/codeql-ff-improve-safety 2026-01-05 16:22:46 +00:00
Henry Mercer 35d39dfdb3 Introduce type error when CodeQL is needed 2026-01-05 16:22:40 +00:00
Henry Mercer 66bcc86d07 Merge pull request #3385 from github/henrymercer/fix-ff-lookup 
Fix feature flag lookup when uploading DB
 2026-01-05 14:28:10 +00:00
Henry Mercer 44e589b637 Fix feature flag lookup when uploading DB 2026-01-05 14:07:03 +00:00
Henry Mercer 0d648eb4d1 Merge pull request #3380 from github/dependabot/github_actions/dot-github/workflows/actions-minor-b4688f1603 
Bump ruby/setup-ruby from 1.270.0 to 1.275.0 in /.github/workflows in the actions-minor group across 1 directory
 2026-01-05 13:44:11 +00:00
Henry Mercer 3fd7db80f0 Merge pull request #3379 from github/dependabot/npm_and_yarn/npm-minor-1607f6c1cd 
Bump the npm-minor group with 4 updates
 2026-01-05 13:41:32 +00:00
github-actions[bot] 6b11018e07 Rebuild 2025-12-22 17:18:17 +00:00
dependabot[bot] d0d445f91c Bump ruby/setup-ruby 
Bumps the actions-minor group with 1 update in the /.github/workflows directory: [ruby/setup-ruby](https://github.com/ruby/setup-ruby).


Updates `ruby/setup-ruby` from 1.270.0 to 1.275.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](https://github.com/ruby/setup-ruby/compare/ac793fdd38cc468a4dd57246fa9d0e868aba9085...d354de180d0c9e813cfddfcbdc079945d4be589b)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-version: 1.275.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-12-22 17:16:43 +00:00