github/codeql-action
0
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2026-05-02 03:40:10 +00:00
Code Issues Packages Projects Releases Wiki Activity
6,594 Commits 342 Branches 541 Tags
bb59f7707d836b040802dbdf2ad1a16482d319da
Commit Graph

6594 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
github-actions[bot] bb59f7707d Update changelog for v3.28.12 2025-03-19 12:17:24 +00:00
Chris Smowton 6349095d19 Merge pull request #2810 from github/update-bundle/codeql-bundle-v2.20.7 
Update default bundle to 2.20.7
 2025-03-18 12:35:37 +00:00
github-actions[bot] d7d03fda12 Add changelog note 2025-03-18 12:21:54 +00:00
github-actions[bot] 4e3a5342c5 Update default bundle to codeql-bundle-v2.20.7 2025-03-18 12:21:54 +00:00
Michael B. Gale 55f023701c Merge pull request #2802 from github/mbg/dependency-caching/java-buildless 
Set and cache dependency directory for Java `build-mode: none`
 2025-03-18 10:28:36 +00:00
Angela P Wen 6a151cd774 Merge pull request #2811 from github/dependabot/github_actions/actions-c2c311daa1 
build(deps): bump ruby/setup-ruby from 1.222.0 to 1.226.0 in the actions group
 2025-03-17 12:15:27 -07:00
Angela P Wen 7866bcdb1b Manually bump workflow to match autogenerated file 2025-03-17 12:00:05 -07:00
dependabot[bot] 611289e0b0 build(deps): bump ruby/setup-ruby in the actions group 
Bumps the actions group with 1 update: [ruby/setup-ruby](https://github.com/ruby/setup-ruby).


Updates `ruby/setup-ruby` from 1.222.0 to 1.226.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](https://github.com/ruby/setup-ruby/compare/277ba2a127aba66d45bad0fa2dc56f80dbfedffa...922ebc4c5262cd14e07bb0e1db020984b6c064fe)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-03-17 18:11:32 +00:00
Michael B. Gale 4c409a5b66 Remove temporary dependency directory in analyze post action 2025-03-17 11:34:09 +00:00
Andrew Eisenberg 70df9def86 Merge pull request #2808 from github/aeisenberg/fix-dependabot 
Fix dependabot errors
codeql-bundle-v2.20.7 		2025-03-14 13:49:58 -07:00
Andrew Eisenberg 5f98c40063 Fix dependabot errors 
I explicitly had to downgrade "@octokit/plugin-retry" to "^6.0.0". Other
dependencies were upgraded.
 2025-03-14 13:13:56 -07:00
Chuan-kai Lin f338ec87a3 Merge pull request #2806 from github/cklin/delete-unused-git-utils 
git-utils: deleted unused functions
 2025-03-13 11:51:05 -07:00
Chuan-kai Lin c31f6c89e8 git-utils: deleted unused functions 2025-03-13 10:45:14 -07:00
Michael B. Gale 251c7fdf5d Update changelog 2025-03-13 11:50:11 +00:00
Michael B. Gale afa3ed33bb Add more documentation 2025-03-13 11:45:27 +00:00
Michael B. Gale f8367fb063 Set and cache dependency directory for Java build-mode: none 2025-03-13 11:39:39 +00:00
Andrew Eisenberg dc49dcabdb Merge pull request #2800 from github/aeisenberg/remove-minimatch 
Minimally remove micromatch
 2025-03-11 16:01:07 -07:00
Andrew Eisenberg 7254660adc Merge pull request #2804 from github/dependabot/github_actions/actions-96d25c356e 
build(deps): bump ruby/setup-ruby from 1.221.0 to 1.222.0 in the actions group
 2025-03-11 08:53:45 -07:00
Chuan-kai Lin 13f2f96cdd Merge pull request #2801 from github/cklin/overlay-databases 
Basic support for overlay databases
 2025-03-11 08:33:33 -07:00
Chuan-kai Lin 0efe12d12c build: refresh js files 2025-03-10 13:31:46 -07:00
Chuan-kai Lin ff5f0b9efd Support overlay database creation 
This commit adds support for creating overlay-base and overlay
databases, controlled via the CODEQL_OVERLAY_DATABASE_MODE environment
variable.
 2025-03-10 13:25:46 -07:00
Chuan-kai Lin 270886f805 Pass overlay mode into databaseInitCluster() 
This commit adds a OverlayDatabaseMode parameter to
databaseInitCluster(). The parameter controls the "codeql database init"
flags concerning overlay database creation.

There is no behavior change in this commit because we always pass
OverlayDatabaseMode.None to databaseInitCluster(). That will change in
the next commit.
 2025-03-10 13:22:24 -07:00
Andrew Eisenberg d3762699d1 Update pr-check 2025-03-10 11:22:58 -07:00
Henry Mercer b46b37a8a3 Merge pull request #2803 from github/dependabot/npm_and_yarn/npm-129f0c3752 
build(deps-dev): bump the npm group with 3 updates
 2025-03-10 18:01:08 +00:00
dependabot[bot] aecf01557d build(deps): bump ruby/setup-ruby in the actions group 
Bumps the actions group with 1 update: [ruby/setup-ruby](https://github.com/ruby/setup-ruby).


Updates `ruby/setup-ruby` from 1.221.0 to 1.222.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](https://github.com/ruby/setup-ruby/compare/32110d4e311bd8996b2a82bf2a43b714ccc91777...277ba2a127aba66d45bad0fa2dc56f80dbfedffa)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-03-10 17:57:35 +00:00
github-actions[bot] 053e2184a0 Update checked-in dependencies 2025-03-10 17:42:57 +00:00
dependabot[bot] 248ab9b811 build(deps-dev): bump the npm group with 3 updates 
Bumps the npm group with 3 updates: [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js), [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) and [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser).


Updates `@eslint/js` from 9.21.0 to 9.22.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/commits/v9.22.0/packages/js)

Updates `@typescript-eslint/eslint-plugin` from 8.26.0 to 8.26.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.26.1/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.26.0 to 8.26.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.26.1/packages/parser)

---
updated-dependencies:
- dependency-name: "@eslint/js"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@typescript-eslint/parser"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-03-10 17:42:05 +00:00
Chuan-kai Lin d76f393713 Do not set --expect-discarded-cache on "cleanup-level: overlay" 
When a user specifies "cleanup-level: overlay", it suggests that the
user wishes to preserve the evaluation cache for future use. So in this
case we should not set --expect-discarded-cache when running queries.
 2025-03-10 10:32:13 -07:00
Andrew Eisenberg 88676f2b14 Minimally remove micromatch 2025-03-07 10:07:08 -08:00
Chuan-kai Lin b2e6519679 Merge pull request #2799 from github/mergeback/v3.28.11-to-main-6bb031af 
Mergeback v3.28.11 refs/heads/releases/v3 into main
 2025-03-07 08:34:57 -08:00
github-actions[bot] ff91c9db25 Update checked-in dependencies 2025-03-07 16:12:00 +00:00
github-actions[bot] d1b3f740d8 Update changelog and version after v3.28.11 2025-03-07 16:09:54 +00:00
Chuan-kai Lin 6bb031afdd Merge pull request #2798 from github/update-v3.28.11-56b25d5d5 
Merge main into releases/v3
v3.28.11 		2025-03-07 08:09:23 -08:00
github-actions[bot] 6bca7dd940 Update changelog for v3.28.11 2025-03-07 14:28:04 +00:00
Chuan-kai Lin 56b25d5d52 Merge pull request #2793 from github/update-bundle/codeql-bundle-v2.20.6 
Update default bundle to 2.20.6
 2025-03-06 07:12:12 -08:00
Chuan-kai Lin 256aa16582 Merge branch 'main' into update-bundle/codeql-bundle-v2.20.6 2025-03-06 06:59:38 -08:00
Nick Fyson 911d845ab6 Merge pull request #2796 from github/nickfyson/adjust-rate-error-string 
adjust string for handling rate limit error
 2025-03-06 10:45:00 +00:00
nickfyson 7b7ed63503 adjust string for handling rate limit error 2025-03-06 10:33:25 +00:00
Henry Mercer 608ccd6cd9 Merge pull request #2794 from github/update-supported-enterprise-server-versions 
Update supported GitHub Enterprise Server versions
 2025-03-05 14:41:52 +00:00
github-actions[bot] 35d04d3627 Update supported GitHub Enterprise Server versions 2025-03-05 00:15:30 +00:00
Chuan-kai Lin ec3b22164b Update supported GitHub Enterprise Server versions 2025-03-03 13:06:35 -08:00
github-actions[bot] 8dc01f6342 Add changelog note 2025-03-03 20:54:07 +00:00
github-actions[bot] b378daf0bc Update default bundle to codeql-bundle-v2.20.6 2025-03-03 20:54:03 +00:00
Dave Bartolomeo 80f9930395 Merge pull request #2788 from github/dbartol/use-real-actions-extractor 
Use embedded `actions` extractor only for old CLI versions
codeql-bundle-v2.20.6 		2025-03-03 13:59:30 -05:00
Angela P Wen f544ec5e4a Merge pull request #2791 from github/dependabot/npm_and_yarn/npm-24c237cb71 
build(deps): bump the npm group with 9 updates
 2025-03-03 10:56:56 -08:00
Dave Bartolomeo d37931ae65 Merge remote-tracking branch 'origin/main' into dbartol/use-real-actions-extractor 2025-03-03 13:01:21 -05:00
Angela P Wen 4b35b04661 Merge pull request #2792 from github/dependabot/github_actions/actions-f0e7f3112e 
build(deps): bump actions/create-github-app-token from 1.11.5 to 1.11.6 in the actions group
 2025-03-03 09:40:10 -08:00
dependabot[bot] 1a69221aeb build(deps): bump actions/create-github-app-token in the actions group 
Bumps the actions group with 1 update: [actions/create-github-app-token](https://github.com/actions/create-github-app-token).


Updates `actions/create-github-app-token` from 1.11.5 to 1.11.6
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Commits](https://github.com/actions/create-github-app-token/compare/v1.11.5...v1.11.6)

---
updated-dependencies:
- dependency-name: actions/create-github-app-token
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-03-03 17:26:51 +00:00
github-actions[bot] 452ffd6e8e Update checked-in dependencies 2025-03-03 17:25:47 +00:00
dependabot[bot] a8ade63a2f build(deps): bump the npm group with 9 updates 
Bumps the npm group with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [@actions/cache](https://github.com/actions/toolkit/tree/HEAD/packages/cache) | `4.0.1` | `4.0.2` |
| [uuid](https://github.com/uuidjs/uuid) | `11.0.5` | `11.1.0` |
| [@eslint/eslintrc](https://github.com/eslint/eslintrc) | `3.2.0` | `3.3.0` |
| [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) | `9.20.0` | `9.21.0` |
| [@types/sinon](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/sinon) | `17.0.3` | `17.0.4` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.24.1` | `8.26.0` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.24.1` | `8.26.0` |
| [eslint-import-resolver-typescript](https://github.com/import-js/eslint-import-resolver-typescript) | `3.8.1` | `3.8.3` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.7.3` | `5.8.2` |


Updates `@actions/cache` from 4.0.1 to 4.0.2
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/cache/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/cache)

Updates `uuid` from 11.0.5 to 11.1.0
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](https://github.com/uuidjs/uuid/compare/v11.0.5...v11.1.0)

Updates `@eslint/eslintrc` from 3.2.0 to 3.3.0
- [Release notes](https://github.com/eslint/eslintrc/releases)
- [Changelog](https://github.com/eslint/eslintrc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslintrc/compare/v3.2.0...v3.3.0)

Updates `@eslint/js` from 9.20.0 to 9.21.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/commits/v9.21.0/packages/js)

Updates `@types/sinon` from 17.0.3 to 17.0.4
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/sinon)

Updates `@typescript-eslint/eslint-plugin` from 8.24.1 to 8.26.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.26.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.24.1 to 8.26.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.26.0/packages/parser)

Updates `eslint-import-resolver-typescript` from 3.8.1 to 3.8.3
- [Release notes](https://github.com/import-js/eslint-import-resolver-typescript/releases)
- [Changelog](https://github.com/import-js/eslint-import-resolver-typescript/blob/master/CHANGELOG.md)
- [Commits](https://github.com/import-js/eslint-import-resolver-typescript/compare/v3.8.1...v3.8.3)

Updates `typescript` from 5.7.3 to 5.8.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release.yml)
- [Commits](https://github.com/microsoft/TypeScript/compare/v5.7.3...v5.8.2)

---
updated-dependencies:
- dependency-name: "@actions/cache"
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: uuid
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@eslint/eslintrc"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@eslint/js"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@types/sinon"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@typescript-eslint/parser"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: eslint-import-resolver-typescript
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: typescript
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-03-03 17:24:56 +00:00