db84cb5ccb
Remove outdated comments for analyze-action tests
2026-05-15 11:22:17 +01:00
127de8117f
Merge remote-tracking branch 'origin/main' into mbg/esbuild/split
2026-05-14 19:14:01 +01:00
7fde13f26a
Use src + basename in header to avoid issues on Windows
2026-05-14 19:10:19 +01:00
dfa61e7305
Improve pattern matching and error handling
2026-05-14 18:36:41 +01:00
52aafec073
Import and call runWrapper normally in analyze tests
2026-05-14 18:32:40 +01:00
0d08c01f78
Auto-generate shared bundle
2026-05-14 18:27:46 +01:00
14085a675c
Auto-generate entry points
2026-05-14 18:13:01 +01:00
eb17ca4f4d
Merge pull request #3791 from github/sam-robson/overlay-fallback
...
Fall back to non-overlay analysis when diff-informed analysis is unavailable
2026-05-14 15:41:25 +00:00
a41c444cd9
Merge branch 'main' into sam-robson/overlay-fallback
2026-05-14 15:51:24 +01:00
d7e50c23fe
Fix linter errors
2026-05-14 15:24:33 +01:00
bb30f3132d
Avoid top-level promise in analyze-action
2026-05-14 15:14:03 +01:00
336884853e
Merge pull request #3901 from github/henrymercer/minify-test-debug-artifacts
...
Minify test debug artifacts
2026-05-14 14:09:36 +00:00
2f137c9dc6
Add remaining new entry points
2026-05-14 14:55:33 +01:00
4795ef8153
Remove now unnecessary test skipping
2026-05-14 14:47:33 +01:00
f0489abddd
Update action specs for new entry points
2026-05-14 14:47:23 +01:00
2e202367c7
Reduce size of test debug artifacts
2026-05-14 14:47:13 +01:00
9d7243005b
Merge remote-tracking branch 'origin/main' into sam-robson/overlay-fallback
...
* origin/main: (40 commits)
Bump the npm-minor group across 1 directory with 3 updates
Bump actions/create-github-app-token
Nit: Tweak JSDoc for `getRawLanguagesNoAutodetect`
Enable only `code-scanning`
Use overlay-aware version for code scanning exclusively
Add changelog entry
Rebuild
Bump five transitive dependencies
Throw error if multiple analysis kinds are specified
Bump fast-xml-builder from 1.1.5 to 1.2.0
Improve tests
Improve error message
Remove dead code
Remove `makeOverlayMatchFeatures` indirection
Add JSDoc for `getRawLanguagesNoAutodetect`
Enable overlay-aware version selection in `setup-codeql`
Minor: Introduce constant to avoid duplication
Improve changelog note
Rebuild
Update changelog and version after v4.35.4
...
# Conflicts:
# lib/init-action.js
# src/diff-informed-analysis-utils.test.ts
2026-05-14 13:39:44 +01:00
237b03b3c3
WIP: Reduce bundle duplication
2026-05-14 12:47:34 +01:00
ea37b337cd
Merge pull request #3897 from github/dependabot/npm_and_yarn/npm-minor-afb85bbff8
...
Bump the npm-minor group across 1 directory with 3 updates
2026-05-14 10:09:31 +00:00
ba0a2f91b7
Merge pull request #3896 from github/dependabot/github_actions/dot-github/workflows/actions-minor-9f1c31c749
...
Bump actions/create-github-app-token from 3.1.1 to 3.2.0 in /.github/workflows in the actions-minor group across 1 directory
2026-05-14 10:06:09 +00:00
4041a11865
Bump the npm-minor group across 1 directory with 3 updates
...
Bumps the npm-minor group with 3 updates in the / directory: [globals](https://github.com/sindresorhus/globals ), [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint ) and [yaml](https://github.com/eemeli/yaml ).
Updates `globals` from 17.5.0 to 17.6.0
- [Release notes](https://github.com/sindresorhus/globals/releases )
- [Commits](https://github.com/sindresorhus/globals/compare/v17.5.0...v17.6.0 )
Updates `typescript-eslint` from 8.59.1 to 8.59.2
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases )
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md )
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.59.2/packages/typescript-eslint )
Updates `yaml` from 2.8.3 to 2.8.4
- [Release notes](https://github.com/eemeli/yaml/releases )
- [Commits](https://github.com/eemeli/yaml/compare/v2.8.3...v2.8.4 )
---
updated-dependencies:
- dependency-name: globals
dependency-version: 17.6.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: npm-minor
- dependency-name: typescript-eslint
dependency-version: 8.59.2
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: npm-minor
- dependency-name: yaml
dependency-version: 2.8.4
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: npm-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-13 18:29:17 +00:00
2a6fe1608c
Bump actions/create-github-app-token
...
Bumps the actions-minor group with 1 update in the /.github/workflows directory: [actions/create-github-app-token](https://github.com/actions/create-github-app-token ).
Updates `actions/create-github-app-token` from 3.1.1 to 3.2.0
- [Release notes](https://github.com/actions/create-github-app-token/releases )
- [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/create-github-app-token/compare/v3.1.1...v3.2.0 )
---
updated-dependencies:
- dependency-name: actions/create-github-app-token
dependency-version: 3.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-13 18:28:51 +00:00
3d6ea97f26
Merge pull request #3891 from github/navntoft/dep/remove-brace-expansion-override
...
Bump brace-expansion and 4 dev dependencies
2026-05-13 15:46:57 +00:00
7d25a3e590
Merge pull request #3892 from github/mbg/analysis-kinds/warn-on-multiple
...
Log error and only enable `code-scanning` if multiple analysis kinds are specified
2026-05-13 15:44:21 +00:00
4dc72761a6
Merge remote-tracking branch 'origin/main' into mbg/analysis-kinds/warn-on-multiple
2026-05-13 16:20:45 +01:00
c559992c9e
Merge pull request #3880 from github/henrymercer/overlay-match-codeql-version
...
Overlay: Use overlay-aware CLI version when analyzing PRs
2026-05-12 17:36:31 +00:00
8d217609b0
Nit: Tweak JSDoc for getRawLanguagesNoAutodetect
2026-05-12 16:21:44 +01:00
257b3d3fc8
Enable only code-scanning
2026-05-12 15:46:28 +01:00
201a96b541
Use overlay-aware version for code scanning exclusively
2026-05-12 15:25:40 +01:00
312a2fee96
Add changelog entry
2026-05-12 15:03:58 +01:00
2ca0fbdca8
Rebuild
2026-05-12 15:59:34 +02:00
12c1d88854
Bump five transitive dependencies
...
Bumps the following to their latest patched versions:
brace-expansion (under readdir-glob): 2.0.2 → 2.1.0
picomatch (under micromatch): 2.3.1 → 2.3.2
picomatch (top level): 4.0.3 → 4.0.4
flatted: 3.3.3 → 3.4.2
js-yaml (under supertap): 3.14.1 → 3.14.2
The brace-expansion bump requires removing the brace-expansion override
in package.json, which had been pinning resolution below the existing
^2.0.1 constraint declared by readdir-glob.
2026-05-12 15:59:34 +02:00
70419e3273
Throw error if multiple analysis kinds are specified
2026-05-12 14:54:11 +01:00
b62aaa99a5
Merge pull request #3889 from github/dependabot/npm_and_yarn/fast-xml-builder-1.2.0
...
Bump fast-xml-builder from 1.1.5 to 1.2.0
2026-05-11 14:59:28 +00:00
2f2dbd2e78
Bump fast-xml-builder from 1.1.5 to 1.2.0
...
Bumps [fast-xml-builder](https://github.com/NaturalIntelligence/fast-xml-builder ) from 1.1.5 to 1.2.0.
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-builder/blob/main/CHANGELOG.md )
- [Commits](https://github.com/NaturalIntelligence/fast-xml-builder/compare/v1.1.5...v1.2.0 )
---
updated-dependencies:
- dependency-name: fast-xml-builder
dependency-version: 1.2.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-08 19:05:11 +00:00
b4ea7aa65a
Improve tests
2026-05-08 19:16:48 +01:00
87ac48dae6
Improve error message
2026-05-08 19:16:47 +01:00
42d7f62579
Remove dead code
2026-05-08 19:16:46 +01:00
540699dcca
Remove makeOverlayMatchFeatures indirection
2026-05-08 19:14:05 +01:00
9a85234875
Add JSDoc for getRawLanguagesNoAutodetect
2026-05-08 19:14:05 +01:00
2a950b930c
Enable overlay-aware version selection in setup-codeql
2026-05-08 19:14:05 +01:00
4f815a68d3
Minor: Introduce constant to avoid duplication
2026-05-08 19:14:04 +01:00
0aedbb71d8
Merge branch 'main' into henrymercer/overlay-match-codeql-version
2026-05-08 19:10:45 +01:00
868e2ea564
Merge pull request #3886 from github/mergeback/v4.35.4-to-main-68bde559
...
Mergeback v4.35.4 refs/heads/releases/v4 into main
2026-05-08 14:25:20 +00:00
792c223bc1
Merge pull request #3875 from github/dependabot/npm_and_yarn/npm-minor-c8e071f5f8
...
Bump the npm-minor group across 1 directory with 4 updates
2026-05-08 14:25:05 +00:00
efc9b0a9e3
Improve changelog note
...
Co-authored-by: Michael B. Gale <mbg@github.com >
2026-05-07 18:44:08 +01:00
272ada693f
Rebuild
2026-05-07 15:58:38 +00:00
610a6682b6
Merge remote-tracking branch 'origin/main' into mergeback/v4.35.4-to-main-68bde559
2026-05-07 15:57:56 +00:00
1627096569
Update changelog and version after v4.35.4
2026-05-07 15:54:04 +00:00
68bde559de
Merge pull request #3885 from github/update-v4.35.4-803d9e8c3
...
Merge main into releases/v4
2026-05-07 17:52:37 +02:00
Michael B. Gale
Sam Robson
Sam Robson
Henry Mercer
Henry Mercer
dependabot[bot]
Mads Navntoft
github-actions[bot]
Paolo Tranquilli