github/codeql-action
0
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2026-04-02 09:42:16 +00:00
Code Issues Packages Projects Releases Wiki Activity
9,119 Commits 331 Branches 535 Tags
ecd1c77ffa0e72bca4ecccb7ada7067acf52b67a
Commit Graph

9119 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
dependabot[bot]
ecd1c77ffa Bump the npm-minor group with 2 updates 
Bumps the npm-minor group with 2 updates: [@eslint/compat](https://github.com/eslint/rewrite/tree/HEAD/packages/compat) and [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint).


Updates `@eslint/compat` from 2.0.2 to 2.0.3
- [Release notes](https://github.com/eslint/rewrite/releases)
- [Changelog](https://github.com/eslint/rewrite/blob/main/packages/compat/CHANGELOG.md)
- [Commits](https://github.com/eslint/rewrite/commits/compat-v2.0.3/packages/compat)

Updates `typescript-eslint` from 8.56.1 to 8.57.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.57.0/packages/typescript-eslint)

---
updated-dependencies:
- dependency-name: "@eslint/compat"
  dependency-version: 2.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: typescript-eslint
  dependency-version: 8.57.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-18 17:53:32 +00:00
Henry Mercer
7da6361ba5 Merge pull request #3580 from github/dependabot/npm_and_yarn/fast-xml-parser-5.5.6 
Bump fast-xml-parser from 5.4.1 to 5.5.6
 2026-03-18 11:50:18 +00:00
Sam Robson
08d1198b01 Merge pull request #3248 from github/kaspersv/move-diff-range-absolute-path-conversion 
Move conversion of PR diff-range paths to absolute paths
 2026-03-18 11:41:58 +00:00
Sam Robson
5e54629286 Merge branch 'main' into kaspersv/move-diff-range-absolute-path-conversion 
* main: (112 commits)
  Rebuild
  Update changelog and version after v4.33.0
  Add changelog entry for #3570
  Bump minor version
  Update changelog for v4.32.7
  Only emit one message with accumulated property names
  Remove `cache-dependency-path` options as well
  Remove `package-lock.json` that's no longer needed
  Add step (in root directory) to install dependencies
  Add explicit cache dependency paths in `pr-checks.yml`
  Fix linter errors in `sync-back.test.ts`
  Fix linter errors in `sync-back.ts`
  Rename `sync_back` to `sync-back`
  Fix linter errors in `sync.ts`
  Add eslint configuration for `pr-checks`
  Add minimal `Step` type
  Add `workspaces` to root `package.json`
  Avoid bundling `package.json`
  Move `ava` config out of `package.json`
  Emit warning for unrecognised repo properties with our common prefix
  ...

# Conflicts:
#	lib/init-action-post.js
 2026-03-18 10:47:46 +00:00
github-actions[bot]
f254006ed7 Rebuild 2026-03-18 01:38:11 +00:00
dependabot[bot]
573e7dd341 Bump fast-xml-parser from 5.4.1 to 5.5.6 
Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) from 5.4.1 to 5.5.6.
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.4.1...v5.5.6)

---
updated-dependencies:
- dependency-name: fast-xml-parser
  dependency-version: 5.5.6
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-18 01:36:15 +00:00
Michael B. Gale
fd1ca02d0d Merge pull request #3576 from github/mergeback/v4.33.0-to-main-b1bff819 
Mergeback v4.33.0 refs/heads/releases/v4 into main
 2026-03-16 12:22:52 +00:00
github-actions[bot]
a0e3ed6555 Rebuild 2026-03-16 09:08:32 +00:00
github-actions[bot]
fbb2eb9556 Update changelog and version after v4.33.0 2026-03-16 09:03:58 +00:00
Michael B. Gale
b1bff81932 Merge pull request #3574 from github/update-v4.32.7-7dd76e6bf 
Merge main into releases/v4
v4.33.0 		2026-03-16 09:01:14 +00:00
Michael B. Gale
e682234222 Add changelog entry for #3570 2026-03-16 08:43:35 +00:00
Michael B. Gale
95be291f41 Bump minor version 2026-03-16 08:38:13 +00:00
github-actions[bot]
59bcb6025e Update changelog for v4.32.7 2026-03-16 08:20:09 +00:00
Michael B. Gale
7dd76e6bf7 Merge pull request #3572 from github/mbg/pr-checks/eslint 
Add eslint for `pr-checks`
 2026-03-13 18:51:29 +00:00
Michael B. Gale
e3200e331b Merge pull request #3563 from github/mbg/private-registry/oidc 
Accept OIDC configurations in `start-proxy`
 2026-03-13 11:58:36 +00:00
Michael B. Gale
4c356c71a2 Merge pull request #3570 from github/mbg/repo-props/warn-on-unexpected-props 
Emit warning for unrecognised repo properties with our common prefix
 2026-03-13 11:13:21 +00:00
Michael B. Gale
b4937c19e5 Only emit one message with accumulated property names 2026-03-13 10:56:36 +00:00
Michael B. Gale
136b8ab377 Remove cache-dependency-path options as well 2026-03-13 10:46:40 +00:00
Michael B. Gale
a5aba5952c Remove package-lock.json that's no longer needed 
Since `pr-checks` is now a workspace of the main `package.json`
 2026-03-13 10:43:43 +00:00
Michael B. Gale
dafe74070a Merge pull request #3573 from github/mbg/esbuild/no-package-json 
Avoid bundling `package.json` in JavaScript files
 2026-03-13 10:38:58 +00:00
Michael B. Gale
fc8d303906 Add step (in root directory) to install dependencies 2026-03-12 22:39:45 +00:00
Michael B. Gale
3bc3228be2 Add explicit cache dependency paths in pr-checks.yml 2026-03-12 22:39:45 +00:00
Michael B. Gale
b4cb1049fb Fix linter errors in sync-back.test.ts 2026-03-12 22:39:45 +00:00
Michael B. Gale
b171c1c6d9 Fix linter errors in sync-back.ts 2026-03-12 22:39:44 +00:00
Michael B. Gale
967ca853e1 Rename sync_back to sync-back 2026-03-12 22:39:44 +00:00
Michael B. Gale
7950e47b7f Fix linter errors in sync.ts 2026-03-12 22:39:44 +00:00
Michael B. Gale
e608db4784 Add eslint configuration for pr-checks 2026-03-12 22:39:44 +00:00
Michael B. Gale
7df3db2b6f Add minimal Step type 2026-03-12 22:39:44 +00:00
Michael B. Gale
b5e1fb009d Add workspaces to root package.json 2026-03-12 22:39:44 +00:00
Michael B. Gale
ea703668e0 Avoid bundling package.json 
- `package.json` is bundled by `esbuild` because we depend on it in `actions-util.ts`
- That is so we can access the `version` property
- We now use `build.mjs` to define a constant for it instead
- We also set this constant in `ava.setup.mjs` for tests
- This reduces the size of the generated `.js` files and avoids changing them entirely in some cases
 2026-03-12 18:55:03 +00:00
Michael B. Gale
c183dca871 Move ava config out of package.json 2026-03-12 18:43:14 +00:00
Michael B. Gale
a717db1a90 Emit warning for unrecognised repo properties with our common prefix 2026-03-12 11:49:17 +00:00
Henry Mercer
1dbebad653 Merge pull request #3566 from github/dependabot/npm_and_yarn/npm-minor-aebc49e072 
Bump the npm-minor group with 2 updates
 2026-03-11 20:49:27 +00:00
Henry Mercer
82d7a77abc Merge pull request #3567 from github/dependabot/npm_and_yarn/ava-7.0.0 
Bump ava from 6.4.1 to 7.0.0
 2026-03-11 20:47:14 +00:00
github-actions[bot]
0d0df94d93 Rebuild 2026-03-11 19:51:54 +00:00
github-actions[bot]
373dec9f22 Rebuild 2026-03-11 19:51:53 +00:00
Henry Mercer
9771a765ac Merge branch 'main' into dependabot/npm_and_yarn/npm-minor-aebc49e072 2026-03-11 19:49:56 +00:00
Henry Mercer
363219d88d Merge branch 'main' into dependabot/npm_and_yarn/ava-7.0.0 2026-03-11 19:49:53 +00:00
Henry Mercer
378e4b367d Merge pull request #3568 from github/henrymercer/fix-rebuild 
Fix rebuild Action
 2026-03-11 19:18:28 +00:00
Henry Mercer
309fd2aac7 Merge pull request #3565 from github/henrymercer/go-macos-checks 
PR checks: Only run Go macOS tests on latest CodeQL versions
 2026-03-11 19:11:16 +00:00
Henry Mercer
567ca73ff8 Address review comments 2026-03-11 18:40:22 +00:00
Henry Mercer
5f3f250f83 Fix finishing up in progress merge 2026-03-11 18:24:00 +00:00
Henry Mercer
6fb1c2a300 Fix merge in progress detection 2026-03-11 18:23:04 +00:00
Henry Mercer
44720043ea CI: Set up Node.js 24 in rebuild workflow 2026-03-11 18:18:30 +00:00
dependabot[bot]
f9f5edb76f Bump ava from 6.4.1 to 7.0.0 
Bumps [ava](https://github.com/avajs/ava) from 6.4.1 to 7.0.0.
- [Release notes](https://github.com/avajs/ava/releases)
- [Commits](https://github.com/avajs/ava/compare/v6.4.1...v7.0.0)

---
updated-dependencies:
- dependency-name: ava
  dependency-version: 7.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-11 17:53:48 +00:00
dependabot[bot]
de2997a8c8 Bump the npm-minor group with 2 updates 
Bumps the npm-minor group with 2 updates: [globals](https://github.com/sindresorhus/globals) and [sinon](https://github.com/sinonjs/sinon).


Updates `globals` from 17.3.0 to 17.4.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](https://github.com/sindresorhus/globals/compare/v17.3.0...v17.4.0)

Updates `sinon` from 21.0.1 to 21.0.2
- [Release notes](https://github.com/sinonjs/sinon/releases)
- [Changelog](https://github.com/sinonjs/sinon/blob/main/docs/changelog.md)
- [Commits](https://github.com/sinonjs/sinon/compare/v21.0.1...v21.0.2)

---
updated-dependencies:
- dependency-name: globals
  dependency-version: 17.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: sinon
  dependency-version: 21.0.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-11 17:53:18 +00:00
Henry Mercer
117bf916af Sort OS list and versions consistently 2026-03-11 17:11:07 +00:00
Henry Mercer
30ecc82e64 PR checks: Replace inline arrays 
Lists are easier to modify
 2026-03-11 17:11:07 +00:00
Henry Mercer
4174779474 PR checks: Only run Go macOS tests on latest CodeQL versions 2026-03-11 17:10:56 +00:00
Henry Mercer
2bc06587aa PR checks: Add support for per-OS CodeQL version 2026-03-11 17:10:45 +00:00