github/codeql-action
0
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2026-04-27 17:39:15 +00:00
Code Issues Packages Projects Releases Wiki Activity
8,548 Commits 342 Branches 538 Tags
d38ad563582439802f64f6002db86ea626d12f1b
Commit Graph

8548 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
github-actions[bot] d38ad56358 Rebuild 2026-02-03 19:49:21 +00:00
dependabot[bot] bc9796e2e0 Bump @isaacs/brace-expansion from 5.0.0 to 5.0.1 
Bumps @isaacs/brace-expansion from 5.0.0 to 5.0.1.

---
updated-dependencies:
- dependency-name: "@isaacs/brace-expansion"
  dependency-version: 5.0.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-02-03 19:47:47 +00:00
Henry Mercer ab5b0e3aab Merge pull request #3450 from github/henrymercer/add-requires-auth 
Add "Requires authentication" to `wrapApiConfigurationError`
 2026-02-02 10:22:51 -08:00
Henry Mercer 6d4cd5d744 Add "Requires authentication" to wrapApiConfigurationError 2026-02-02 18:02:11 +00:00
Henry Mercer 8aac4e47ac Merge pull request #3448 from github/mergeback/v4.32.1-to-main-6bc82e05 
Mergeback v4.32.1 refs/heads/releases/v4 into main
 2026-02-02 07:46:51 -08:00
github-actions[bot] e8d7df4f04 Rebuild 2026-02-02 15:21:41 +00:00
github-actions[bot] c1bba77db0 Update changelog and version after v4.32.1 2026-02-02 15:11:38 +00:00
Henry Mercer 6bc82e05fd Merge pull request #3447 from github/update-v4.32.1-f52cbc830 
Merge main into releases/v4
v4.32.1 		2026-02-02 07:09:16 -08:00
Michael B. Gale 42f00f2d33 Add a couple of change notes 2026-02-02 14:32:28 +00:00
github-actions[bot] cedee6de9f Update changelog for v4.32.1 2026-02-02 12:13:48 +00:00
Henry Mercer f52cbc8309 Merge pull request #3445 from github/dependabot/npm_and_yarn/fast-xml-parser-5.3.4 
Bump fast-xml-parser from 5.3.3 to 5.3.4
 2026-02-02 03:49:48 -08:00
Michael B. Gale c5aaca4bb9 Merge pull request #3446 from github/mbg/ci/pin-node-packages 2026-02-02 10:51:35 +00:00
Michael B. Gale 3e58739c65 Pin @actions/tool-cache@3 in workflows to avoid failures with github-script 2026-02-02 08:18:36 +00:00
github-actions[bot] a6ccefb47c Rebuild 2026-01-30 23:00:12 +00:00
dependabot[bot] 0e64858573 Bump fast-xml-parser from 5.3.3 to 5.3.4 
Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) from 5.3.3 to 5.3.4.
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.3.3...v5.3.4)

---
updated-dependencies:
- dependency-name: fast-xml-parser
  dependency-version: 5.3.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-01-30 22:58:35 +00:00
Henry Mercer f985be5b50 Merge pull request #3443 from github/dependabot/npm_and_yarn/tar-7.5.7 
Bump tar from 7.5.6 to 7.5.7
 2026-01-29 03:00:35 -08:00
dependabot[bot] 0c8e06dfb2 Bump tar from 7.5.6 to 7.5.7 
Bumps [tar](https://github.com/isaacs/node-tar) from 7.5.6 to 7.5.7.
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](https://github.com/isaacs/node-tar/compare/v7.5.6...v7.5.7)

---
updated-dependencies:
- dependency-name: tar
  dependency-version: 7.5.7
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-01-28 19:01:18 +00:00
Henry Mercer b2ff80ddac Merge pull request #3440 from github/dependabot/npm_and_yarn/npm-minor-6271c457c1 
Bump the npm-minor group with 7 updates
 2026-01-28 10:59:57 -08:00
github-actions[bot] 48f3548141 Rebuild 2026-01-28 17:55:06 +00:00
dependabot[bot] 800dfbe5e1 Bump the npm-minor group with 7 updates 
Bumps the npm-minor group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [@actions/artifact](https://github.com/actions/toolkit/tree/HEAD/packages/artifact) | `5.0.2` | `5.0.3` |
| [@actions/cache](https://github.com/actions/toolkit/tree/HEAD/packages/cache) | `5.0.3` | `5.0.5` |
| [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) | `2.0.2` | `2.0.3` |
| [@actions/glob](https://github.com/actions/toolkit/tree/HEAD/packages/glob) | `0.5.0` | `0.5.1` |
| [@actions/http-client](https://github.com/actions/toolkit/tree/HEAD/packages/http-client) | `3.0.1` | `3.0.2` |
| [@actions/tool-cache](https://github.com/actions/toolkit/tree/HEAD/packages/tool-cache) | `3.0.0` | `3.0.1` |
| [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc) | `62.2.0` | `62.3.0` |


Updates `@actions/artifact` from 5.0.2 to 5.0.3
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/artifact/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/artifact)

Updates `@actions/cache` from 5.0.3 to 5.0.5
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/cache/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/cache)

Updates `@actions/core` from 2.0.2 to 2.0.3
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core)

Updates `@actions/glob` from 0.5.0 to 0.5.1
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/glob/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/glob)

Updates `@actions/http-client` from 3.0.1 to 3.0.2
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/http-client/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/http-client)

Updates `@actions/tool-cache` from 3.0.0 to 3.0.1
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/tool-cache/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/tool-cache)

Updates `eslint-plugin-jsdoc` from 62.2.0 to 62.3.0
- [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases)
- [Commits](https://github.com/gajus/eslint-plugin-jsdoc/compare/v62.2.0...v62.3.0)

---
updated-dependencies:
- dependency-name: "@actions/artifact"
  dependency-version: 5.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: "@actions/cache"
  dependency-version: 5.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: "@actions/core"
  dependency-version: 2.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: "@actions/glob"
  dependency-version: 0.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: "@actions/http-client"
  dependency-version: 3.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: "@actions/tool-cache"
  dependency-version: 3.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: eslint-plugin-jsdoc
  dependency-version: 62.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-01-28 17:53:24 +00:00
Michael B. Gale 1314d3d17e Merge pull request #3439 from github/mbg/fix-proxy-test 
Remove `gh` setup from global proxy test
 2026-01-28 13:58:28 +00:00
Michael B. Gale f7f9d3f341 Remove gh setup from global proxy test 2026-01-28 13:35:59 +00:00
Henry Mercer eb5bd2d0b9 Merge pull request #3421 from github/henrymercer/only-request-properties-for-orgs 
Tolerate errors loading repository properties
 2026-01-28 04:00:31 -08:00
Henry Mercer 9aa0515f67 Update comments 2026-01-28 11:33:06 +00:00
Henry Mercer 0720e13f0b Log repository owner type explicitly 2026-01-28 11:30:35 +00:00
Henry Mercer 38ba96d2aa Merge branch 'main' into henrymercer/only-request-properties-for-orgs 2026-01-27 18:28:33 +00:00
Henry Mercer 679da45cc3 Add basic unit tests for Result class 2026-01-27 15:19:17 +00:00
Henry Mercer d5dd165f8b Ensure default value is assignable if we have a Failure 2026-01-27 15:18:50 +00:00
Henry Mercer fbf75ebd7b Merge branch 'main' into henrymercer/only-request-properties-for-orgs 2026-01-27 15:17:20 +00:00
Henry Mercer 6a50972d16 Introduce addNoLanguageDiagnostic 2026-01-27 15:14:32 +00:00
Henry Mercer 5cb12c41c2 Include "Result" in name 2026-01-27 15:11:48 +00:00
Henry Mercer e8f487178f Add some doc for loadRepositoryProperties 2026-01-27 15:11:01 +00:00
Henry Mercer a0671be58e Add doc for Result 2026-01-27 15:07:46 +00:00
Henry Mercer 9ea34c5169 Result: Make use of type hint 2026-01-27 15:05:03 +00:00
Henry Mercer 9fda641d8d Prefer accessing context via @actions/github 2026-01-27 15:00:52 +00:00
Henry Mercer b126facd4e Merge pull request #3434 from github/mbg/dependabot/cooldown 
Add `cooldown` settings for Dependabot
 2026-01-27 06:57:30 -08:00
Henry Mercer 835dadecbf Merge pull request #3420 from github/henrymercer/compute-job-status-if-no-config 
Simplify computation of job status
 2026-01-27 06:51:55 -08:00
Henry Mercer a02edfe319 Merge pull request #3424 from github/henrymercer/feature-skip-file-coverage-info-prs 
Add feature flag to skip computing baseline file coverage information on PRs
 2026-01-27 06:49:29 -08:00
Michael B. Gale 173919c9d5 Merge pull request #3436 from github/mbg/rebuild-js-es2022 
Update JS for ES2022
 2026-01-27 14:46:54 +00:00
Henry Mercer 6095dc4d51 Merge branch 'main' into henrymercer/compute-job-status-if-no-config 2026-01-27 14:31:51 +00:00
Henry Mercer b333fc6f5b Split up getFinalJobStatus 2026-01-27 14:30:42 +00:00
Henry Mercer 60b658ed10 Update comment 2026-01-27 14:26:31 +00:00
Michael B. Gale e4e324705e Update JS 2026-01-27 14:13:28 +00:00
github-actions[bot] faf7a50b01 Rebuild 2026-01-27 14:13:05 +00:00
Michael B. Gale 2591c2031f Add cooldown settings for Dependabot 2026-01-27 14:08:27 +00:00
Michael B. Gale 34cae51104 Merge pull request #3422 from github/mbg/start-proxy/warn-if-pat-without-username 
Warn if a private registry configuration uses a PAT, but has no username
 2026-01-27 14:07:06 +00:00
Henry Mercer 9308bcd6bb Add unit tests for file coverage enablement 2026-01-27 13:55:22 +00:00
Michael B. Gale fa9b76ac37 Merge pull request #3432 from github/dependabot/npm_and_yarn/actions/github-8.0.0 
Bump @actions/github from 7.0.0 to 8.0.0
 2026-01-27 13:49:13 +00:00
Michael B. Gale 6059a66dec Remove @octokit/plugin-retry from Dependabot ignore list 2026-01-27 13:22:57 +00:00
Michael B. Gale cb4fc9e8db Update @octokit/plugin-retry 2026-01-27 13:10:33 +00:00