github/codeql-action
0
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2026-04-27 01:08:46 +00:00
Code Issues Packages Projects Releases Wiki Activity
8,331 Commits 341 Branches 538 Tags
db726913e922f656f27889a7f31678f0ba00016b
Commit Graph

8331 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Henry Mercer db726913e9 Merge pull request #3386 from github/henrymercer/codeql-ff-improve-safety 
Introduce a type-level check that CodeQL is passed during feature flag lookup if it is needed
 2026-01-05 17:13:26 +00:00
Henry Mercer 855c0888b6 Improve test for throwing when no CodeQL provided 2026-01-05 16:38:04 +00:00
Henry Mercer ec1705eb43 Rebuild now type error fixed in main 2026-01-05 16:23:16 +00:00
Henry Mercer 29ee0e040d Merge branch 'main' into henrymercer/codeql-ff-improve-safety 2026-01-05 16:22:46 +00:00
Henry Mercer 35d39dfdb3 Introduce type error when CodeQL is needed 2026-01-05 16:22:40 +00:00
Henry Mercer 66bcc86d07 Merge pull request #3385 from github/henrymercer/fix-ff-lookup 
Fix feature flag lookup when uploading DB
 2026-01-05 14:28:10 +00:00
Henry Mercer 44e589b637 Fix feature flag lookup when uploading DB 2026-01-05 14:07:03 +00:00
Henry Mercer 0d648eb4d1 Merge pull request #3380 from github/dependabot/github_actions/dot-github/workflows/actions-minor-b4688f1603 
Bump ruby/setup-ruby from 1.270.0 to 1.275.0 in /.github/workflows in the actions-minor group across 1 directory
 2026-01-05 13:44:11 +00:00
Henry Mercer 3fd7db80f0 Merge pull request #3379 from github/dependabot/npm_and_yarn/npm-minor-1607f6c1cd 
Bump the npm-minor group with 4 updates
 2026-01-05 13:41:32 +00:00
github-actions[bot] 6b11018e07 Rebuild 2025-12-22 17:18:17 +00:00
dependabot[bot] d0d445f91c Bump ruby/setup-ruby 
Bumps the actions-minor group with 1 update in the /.github/workflows directory: [ruby/setup-ruby](https://github.com/ruby/setup-ruby).


Updates `ruby/setup-ruby` from 1.270.0 to 1.275.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](https://github.com/ruby/setup-ruby/compare/ac793fdd38cc468a4dd57246fa9d0e868aba9085...d354de180d0c9e813cfddfcbdc079945d4be589b)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-version: 1.275.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-12-22 17:16:43 +00:00
github-actions[bot] 60b2ba310b Rebuild 2025-12-22 17:03:28 +00:00
dependabot[bot] 709d6de5f3 Bump the npm-minor group with 4 updates 
Bumps the npm-minor group with 4 updates: [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin), [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser), [esbuild](https://github.com/evanw/esbuild) and [sinon](https://github.com/sinonjs/sinon).


Updates `@typescript-eslint/eslint-plugin` from 8.49.0 to 8.50.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.50.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.49.0 to 8.50.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.50.0/packages/parser)

Updates `esbuild` from 0.27.1 to 0.27.2
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](https://github.com/evanw/esbuild/compare/v0.27.1...v0.27.2)

Updates `sinon` from 21.0.0 to 21.0.1
- [Release notes](https://github.com/sinonjs/sinon/releases)
- [Changelog](https://github.com/sinonjs/sinon/blob/main/docs/changelog.md)
- [Commits](https://github.com/sinonjs/sinon/compare/v21.0.0...v21.0.1)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.50.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.50.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: esbuild
  dependency-version: 0.27.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: sinon
  dependency-version: 21.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-12-22 17:01:51 +00:00
Henry Mercer f67ec12472 Merge pull request #3370 from github/copilot/update-overlay-git-version-check 
Add git version check for overlay analysis enablement
 2025-12-18 15:47:40 +00:00
Henry Mercer 3b6fef64d5 Fix import order 2025-12-18 14:39:01 +00:00
Henry Mercer 8b428c0d4c Use EnvVar 2025-12-18 14:34:50 +00:00
Henry Mercer 034401b281 Merge branch 'main' into copilot/update-overlay-git-version-check 2025-12-18 14:06:01 +00:00
Henry Mercer 95246ce019 Prefer explicit env var to binary accessibility check 2025-12-18 14:05:12 +00:00
Henry Mercer 525b64847a Merge pull request #3374 from github/henrymercer/scan-debug-artifacts 
CI: Perform a best-effort scan of the debug artifacts during release validation
 2025-12-18 14:00:25 +00:00
Henry Mercer a7e88a44f8 Only enable overlay for the code scanning suite 2025-12-18 13:06:44 +00:00
Henry Mercer ff84c6f23c Improve comment 2025-12-18 13:03:52 +00:00
Henry Mercer 948c7fbf11 Test mode: Tolerate missing git binary 2025-12-18 13:01:00 +00:00
Henry Mercer cec3cc5782 Trim git version output 2025-12-18 12:52:30 +00:00
Henry Mercer 358a55e232 Throw in test mode if can't compute git version 2025-12-18 12:52:13 +00:00
Henry Mercer eb823a7a97 Merge pull request #3375 from github/henrymercer/overlay-upload-tools-feature 
Require tools feature for uploading overlay DBs
 2025-12-18 12:43:26 +00:00
Henry Mercer 003ddaeef5 Avoid non-determinism in PR checks due to overlay FFs 2025-12-18 12:35:06 +00:00
Henry Mercer a2c3c8e3e2 Bump log level for failing to parse git version 2025-12-17 17:28:13 +00:00
Henry Mercer a13b404670 Record both truncated and full git versions 2025-12-17 17:27:14 +00:00
Henry Mercer a2917b0733 Check !== undefined rather than truthiness 2025-12-17 16:27:36 +00:00
Henry Mercer 67e683bd1b Report bundled DB size in error if known 2025-12-17 16:02:55 +00:00
Henry Mercer cb26a026e5 Require tools feature for uploading overlay DBs 2025-12-17 16:02:26 +00:00
Henry Mercer ac6c41b910 Extract zstd files too 2025-12-17 15:34:12 +00:00
Henry Mercer 056581e05b Update makeTelemetryDiagnostic doc 2025-12-17 12:15:37 +00:00
Henry Mercer 9c5588d006 Remove unnecessary stub restores 2025-12-17 12:12:04 +00:00
Henry Mercer 3765106c90 Move git version logging to config utils 2025-12-17 12:06:41 +00:00
Henry Mercer e052dbd57d Remove caching mechanism 2025-12-17 11:56:23 +00:00
Henry Mercer 7673a2de65 Run testing Action using Node 24 2025-12-17 11:51:34 +00:00
Henry Mercer 32795b3c52 Merge branch 'main' into copilot/update-overlay-git-version-check 2025-12-17 11:49:32 +00:00
Henry Mercer 6b5763e5ee Skip slow test on Windows 2025-12-17 11:47:39 +00:00
Henry Mercer 3322491022 Bump timeout on Windows 2025-12-17 11:41:55 +00:00
Henry Mercer 6bc6217487 Merge branch 'main' into henrymercer/scan-debug-artifacts 2025-12-17 11:36:38 +00:00
Henry Mercer faf6d35e7b Verify using post step 2025-12-17 11:35:26 +00:00
Henry Mercer 3b94cfeb15 Avoid logging each extract call 2025-12-17 11:35:26 +00:00
Henry Mercer b88acb2f6c Merge pull request #3359 from github/dependabot/npm_and_yarn/npm-minor-b2e0062778 
Bump the npm-minor group with 3 updates
 2025-12-17 11:04:55 +00:00
Henry Mercer 241948c698 Merge branch 'main' into dependabot/npm_and_yarn/npm-minor-b2e0062778 2025-12-17 10:38:55 +00:00
Henry Mercer da77f9f638 Suppress debug logs for artifact scanner test 2025-12-17 10:25:48 +00:00
Henry Mercer de172624a1 Slim down test debug artifacts 2025-12-17 10:25:48 +00:00
Henry Mercer 488c1f1959 Add regression test for artifact scanner 2025-12-17 10:25:48 +00:00
Henry Mercer f2ccf3b4f1 Ensure .gz files are extracted too 2025-12-17 10:25:47 +00:00
Henry Mercer f28848a66a Use artifact scanner in debug artifacts PR checks 2025-12-17 10:25:47 +00:00