github/codeql-action
0
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2026-04-02 01:32:17 +00:00
Code Issues Packages Projects Releases Wiki Activity
9,181 Commits 331 Branches 535 Tags
d5bb39fa0b22a80973c7598d7b60a9bec2778bef
Commit Graph

9181 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Sam Robson
d5bb39fa0b refactor: single source of truth for getDiffRangesJsonFilePath and simplified getDiffRangeFilePaths 2026-03-25 15:51:51 +00:00
Sam Robson
521c3536d3 feat: always include files from diff in overlay changed files 2026-03-25 15:51:51 +00:00
Michael B. Gale
3d564d9359 Merge pull request #3579 from github/mbg/start-proxy/token-check-fixes 
Fix warning for PAT-like token with username
 2026-03-25 13:02:47 +00:00
Michael B. Gale
137e0dec2b Merge remote-tracking branch 'origin/main' into mbg/start-proxy/token-check-fixes 2026-03-25 12:39:48 +00:00
Michael B. Gale
d128e5daa8 Fix test names 2026-03-25 12:39:42 +00:00
Henry Mercer
eedab83377 Merge pull request #3767 from github/henrymercer/overlay-reduce-minimum-git-version 
Reduce the minimum Git version required for overlay
 2026-03-24 11:26:07 +00:00
Henry Mercer
8c023a6b07 Add changelog note 2026-03-23 18:40:55 +00:00
Henry Mercer
28f56f2bed Update minimum Git version required for overlay 2026-03-23 18:36:25 +00:00
Henry Mercer
d48d054533 Use --stage instead of --format in git ls-files 2026-03-23 18:33:59 +00:00
Henry Mercer
72c0b0efb7 Merge pull request #3587 from github/dependabot/npm_and_yarn/fast-xml-parser-5.5.7 
Bump fast-xml-parser from 5.5.6 to 5.5.7
 2026-03-23 14:22:53 +00:00
Henry Mercer
05b1a5d28f Merge pull request #3764 from github/mergeback/v4.34.1-to-main-38697555 
Mergeback v4.34.1 refs/heads/releases/v4 into main
 2026-03-20 18:38:55 +00:00
github-actions[bot]
8dc2e5d9d2 Rebuild 2026-03-20 18:19:40 +00:00
github-actions[bot]
8fd6c0e573 Update changelog and version after v4.34.1 2026-03-20 18:14:55 +00:00
Henry Mercer
3869755554 Merge pull request #3763 from github/update-v4.34.1-095e0fe50 
Merge main into releases/v4
v4.34.1 		2026-03-20 18:10:50 +00:00
github-actions[bot]
20e68ac12b Update changelog for v4.34.1 2026-03-20 17:33:39 +00:00
Henry Mercer
095e0fe505 Merge pull request #3762 from github/henrymercer/downgrade-default-bundle 
Downgrade default bundle to 2.24.3
 2026-03-20 17:06:34 +00:00
Henry Mercer
47b94fe61c Add changelog note 2026-03-20 16:46:45 +00:00
Henry Mercer
51a1d6917f Downgrade default bundle to codeql-bundle-v2.24.3 2026-03-20 16:45:20 +00:00
Óscar San José
510cf736e3 Merge pull request #3589 from github/mergeback/v4.34.0-to-main-c6f93110 
Mergeback v4.34.0 refs/heads/releases/v4 into main
 2026-03-20 15:15:34 +00:00
github-actions[bot]
89f0c86efa Rebuild 2026-03-20 12:03:59 +00:00
github-actions[bot]
c3f90ba975 Update changelog and version after v4.34.0 2026-03-20 11:56:24 +00:00
Óscar San José
c6f931105c Merge pull request #3588 from github/update-v4.34.0-30c555a52 
Merge main into releases/v4
v4.34.0 		2026-03-20 12:53:53 +01:00
github-actions[bot]
eeb9b3f424 Update changelog for v4.34.0 2026-03-20 10:35:57 +00:00
github-actions[bot]
64507ed148 Rebuild 2026-03-20 01:40:06 +00:00
dependabot[bot]
1a45a9b9d0 Bump fast-xml-parser from 5.5.6 to 5.5.7 
Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) from 5.5.6 to 5.5.7.
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.5.6...v5.5.7)

---
updated-dependencies:
- dependency-name: fast-xml-parser
  dependency-version: 5.5.7
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-20 01:38:13 +00:00
Idriss Riouak
30c555a528 Merge pull request #3584 from github/idrissrio/cpp/overlay 
Feature flag: C/C++ overlay
 2026-03-19 15:26:48 +00:00
Idriss Riouak
39191bd27f Merge branch 'main' into idrissrio/cpp/overlay 2026-03-19 15:42:47 +01:00
Óscar San José
147e93e5dc Merge pull request #3585 from github/update-bundle/codeql-bundle-v2.25.0 
Update default bundle to 2.25.0
 2026-03-19 14:14:03 +00:00
Idriss Riouak
e6d83bce6d Update CHANGELOG.md 
Co-authored-by: Henry Mercer <henrymercer@github.com>
 2026-03-19 14:58:16 +01:00
idrissrio
0d057ccbce Add changelog note for C/C++ overlay 2026-03-19 14:11:02 +01:00
idrissrio
074a0dbd16 Feature flag: update test without overlay support 2026-03-19 14:11:02 +01:00
idrissrio
ab3b6fd199 Feature flag: address copilot comment 
Wire C/C++ overlay feature flags into overlay mapping
 2026-03-19 14:11:00 +01:00
idrissrio
ce4a1feb6a Feature flag: update generated lib after build 2026-03-19 14:10:57 +01:00
idrissrio
899a672743 Feature flag: C/C++ overlay 2026-03-19 14:10:56 +01:00
github-actions[bot]
f4be604881 Add changelog note 2026-03-19 12:01:31 +00:00
github-actions[bot]
0bc1b6f632 Update default bundle to codeql-bundle-v2.25.0 2026-03-19 12:01:20 +00:00
Henry Mercer
3d8036cf7f Merge pull request #3583 from github/dependabot/github_actions/dot-github/workflows/actions/create-github-app-token-3.0.0 
Bump actions/create-github-app-token from 2.2.1 to 3.0.0 in /.github/workflows
codeql-bundle-v2.25.0 		2026-03-19 10:37:38 +00:00
Henry Mercer
9fecf32c77 Merge pull request #3581 from github/dependabot/npm_and_yarn/npm-minor-a87b0427cc 
Bump the npm-minor group with 2 updates
 2026-03-19 10:34:28 +00:00
Henry Mercer
07d509fbaf Merge pull request #3569 from github/henrymercer/overlay-no-trap-caching 
Disable TRAP caching when overlay is enabled
 2026-03-19 10:12:30 +00:00
dependabot[bot]
23674c1f2a Bump actions/create-github-app-token in /.github/workflows 
Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token) from 2.2.1 to 3.0.0.
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Commits](https://github.com/actions/create-github-app-token/compare/v2.2.1...v3.0.0)

---
updated-dependencies:
- dependency-name: actions/create-github-app-token
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-18 18:10:06 +00:00
dependabot[bot]
ecd1c77ffa Bump the npm-minor group with 2 updates 
Bumps the npm-minor group with 2 updates: [@eslint/compat](https://github.com/eslint/rewrite/tree/HEAD/packages/compat) and [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint).


Updates `@eslint/compat` from 2.0.2 to 2.0.3
- [Release notes](https://github.com/eslint/rewrite/releases)
- [Changelog](https://github.com/eslint/rewrite/blob/main/packages/compat/CHANGELOG.md)
- [Commits](https://github.com/eslint/rewrite/commits/compat-v2.0.3/packages/compat)

Updates `typescript-eslint` from 8.56.1 to 8.57.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.57.0/packages/typescript-eslint)

---
updated-dependencies:
- dependency-name: "@eslint/compat"
  dependency-version: 2.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: typescript-eslint
  dependency-version: 8.57.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-18 17:53:32 +00:00
Henry Mercer
5b630489d6 Fix changelog automerge 2026-03-18 17:10:57 +00:00
Henry Mercer
582d08c553 Explicitly set C/C++ trap caching env var to false 2026-03-18 17:10:13 +00:00
Henry Mercer
60a0dce0ad Merge branch 'main' into henrymercer/overlay-no-trap-caching 
# Conflicts:
#	lib/start-proxy-action.js
 2026-03-18 16:35:51 +00:00
Henry Mercer
7da6361ba5 Merge pull request #3580 from github/dependabot/npm_and_yarn/fast-xml-parser-5.5.6 
Bump fast-xml-parser from 5.4.1 to 5.5.6
 2026-03-18 11:50:18 +00:00
Sam Robson
08d1198b01 Merge pull request #3248 from github/kaspersv/move-diff-range-absolute-path-conversion 
Move conversion of PR diff-range paths to absolute paths
 2026-03-18 11:41:58 +00:00
Sam Robson
5e54629286 Merge branch 'main' into kaspersv/move-diff-range-absolute-path-conversion 
* main: (112 commits)
  Rebuild
  Update changelog and version after v4.33.0
  Add changelog entry for #3570
  Bump minor version
  Update changelog for v4.32.7
  Only emit one message with accumulated property names
  Remove `cache-dependency-path` options as well
  Remove `package-lock.json` that's no longer needed
  Add step (in root directory) to install dependencies
  Add explicit cache dependency paths in `pr-checks.yml`
  Fix linter errors in `sync-back.test.ts`
  Fix linter errors in `sync-back.ts`
  Rename `sync_back` to `sync-back`
  Fix linter errors in `sync.ts`
  Add eslint configuration for `pr-checks`
  Add minimal `Step` type
  Add `workspaces` to root `package.json`
  Avoid bundling `package.json`
  Move `ava` config out of `package.json`
  Emit warning for unrecognised repo properties with our common prefix
  ...

# Conflicts:
#	lib/init-action-post.js
 2026-03-18 10:47:46 +00:00
github-actions[bot]
f254006ed7 Rebuild 2026-03-18 01:38:11 +00:00
dependabot[bot]
573e7dd341 Bump fast-xml-parser from 5.4.1 to 5.5.6 
Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) from 5.4.1 to 5.5.6.
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.4.1...v5.5.6)

---
updated-dependencies:
- dependency-name: fast-xml-parser
  dependency-version: 5.5.6
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-18 01:36:15 +00:00
Michael B. Gale
f88d49ee5d Fix warning for PAT-like token with username 2026-03-16 19:34:33 +00:00