github/codeql-action
0
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2026-04-21 06:18:50 +00:00
Code Issues Packages Projects Releases Wiki Activity
6,519 Commits 342 Branches 538 Tags
v3.28.10
Commit Graph

6519 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Henry Mercer 3da852e107 Capture stderr from extracting .tar.zst 2024-10-02 15:32:34 +01:00
Andrew Eisenberg c4d433c562 Merge pull request #2510 from github/dependabot/npm_and_yarn/npm-13baf58ce8 
Bump the npm group with 3 updates
 2024-10-01 19:31:40 -07:00
Andrew Eisenberg 2f6cf481fd Undo eslint-plugin-import bump 
This package must stay at 2.29.1 until a version of the
package is released that supports eslint v9.
 2024-10-01 19:18:59 -07:00
Angela P Wen 3c13be0632 Add breaking change label to changenote (#2512) 2024-10-01 15:30:15 -07:00
Angela P Wen a196a714b8 Bump artifact dependencies if CODEQL_ACTION_ARTIFACT_V2_UPGRADE enabled (#2482) 
Co-authored-by: Andrew Eisenberg <aeisenberg@github.com>
Co-authored-by: Henry Mercer <henrymercer@github.com>
 2024-10-01 09:59:05 -07:00
Henry Mercer 1aa7f6f05d Refactor: Pull out generic tool invocation functionality 2024-10-01 14:39:04 +01:00
github-actions[bot] 931cd264c2 Update checked-in dependencies 2024-09-30 17:13:32 +00:00
dependabot[bot] 3fe5410805 Bump the npm group with 3 updates 
Bumps the npm group with 3 updates: [@octokit/types](https://github.com/octokit/types.ts), [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) and [eslint-plugin-import](https://github.com/import-js/eslint-plugin-import).


Updates `@octokit/types` from 13.5.0 to 13.6.0
- [Release notes](https://github.com/octokit/types.ts/releases)
- [Commits](https://github.com/octokit/types.ts/compare/v13.5.0...v13.6.0)

Updates `@eslint/js` from 9.11.0 to 9.11.1
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/commits/v9.11.1/packages/js)

Updates `eslint-plugin-import` from 2.29.1 to 2.30.0
- [Release notes](https://github.com/import-js/eslint-plugin-import/releases)
- [Changelog](https://github.com/import-js/eslint-plugin-import/blob/main/CHANGELOG.md)
- [Commits](https://github.com/import-js/eslint-plugin-import/compare/v2.29.1...v2.30.0)

---
updated-dependencies:
- dependency-name: "@octokit/types"
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@eslint/js"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: eslint-plugin-import
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-09-30 17:12:23 +00:00
Henry Mercer cf5b0a9041 Merge pull request #2508 from github/mergeback/v3.26.10-to-main-e2b3eafc 
Mergeback v3.26.10 refs/heads/releases/v3 into main
codeql-bundle-v2.19.1 		2024-09-30 14:31:45 +01:00
github-actions[bot] 5f2a79b975 Update checked-in dependencies 2024-09-30 13:06:38 +00:00
github-actions[bot] e3889114a4 Update changelog and version after v3.26.10 2024-09-30 12:59:48 +00:00
Henry Mercer e2b3eafc8d Merge pull request #2507 from github/update-v3.26.10-2617ff2d3 
Merge main into releases/v3
v3.26.10 		2024-09-30 13:58:47 +01:00
github-actions[bot] 7dbbf6d542 Update changelog for v3.26.10 2024-09-30 12:38:54 +00:00
Henry Mercer 2617ff2d3f Merge pull request #2502 from github/henrymercer/zstd-experiment 
Add a feature flag to use a bundle compressed using Zstandard when setting up the default tools
 2024-09-27 14:48:49 +01:00
Henry Mercer 46e0c78da9 Merge pull request #2504 from github/mergeback/v3.26.9-to-main-461ef6c7 
Mergeback v3.26.9 refs/heads/releases/v3 into main
 2024-09-24 18:48:12 +01:00
github-actions[bot] da7be78a1e Update checked-in dependencies 2024-09-24 17:31:06 +00:00
github-actions[bot] ae1c6a2b12 Update changelog and version after v3.26.9 2024-09-24 17:25:26 +00:00
Henry Mercer 461ef6c76d Merge pull request #2503 from github/update-v3.26.9-f861efb2b 
Merge main into releases/v3
v3.26.9 		2024-09-24 18:23:56 +01:00
github-actions[bot] 00b1146c45 Update changelog for v3.26.9 2024-09-24 17:05:10 +00:00
Henry Mercer f861efb2b3 Merge pull request #2498 from github/dependabot/npm_and_yarn/npm-9874b37b58 
Bump the npm group with 4 updates
 2024-09-24 18:02:34 +01:00
Henry Mercer 6b2f7e7c28 Run PR checks using JS only 2024-09-24 17:54:33 +01:00
Henry Mercer af8e2bc4a1 Use Node script to remove CodeQL cross-platform 2024-09-24 17:43:32 +01:00
Henry Mercer bc68dc9d95 Extract constant for first std-compressed version 2024-09-24 17:39:33 +01:00
Henry Mercer 67b30f7c39 Tweak description 
Co-authored-by: Andrew Eisenberg <aeisenberg@github.com>
 2024-09-24 17:22:11 +01:00
Henry Mercer fa91789e81 Run zstd checks against all operating systems 2024-09-24 17:21:26 +01:00
Henry Mercer 426821d803 Merge pull request #2485 from github/dependabot/github_actions/actions-a88a8c5a24 
Bump actions/create-github-app-token from 1.10.3 to 1.11.0 in the actions group
 2024-09-23 23:12:34 +01:00
Henry Mercer 37309b9318 Add changelog note 2024-09-23 23:07:21 +01:00
Henry Mercer 20bd6feb0b Merge branch 'main' into henrymercer/zstd-experiment 2024-09-23 23:06:24 +01:00
Henry Mercer 0abc1ec90b Capture reason if zstd fails unexpectedly 2024-09-23 22:53:13 +01:00
Henry Mercer 4d015b8cba Fall back to gzip if zstd fails 2024-09-23 22:53:13 +01:00
Henry Mercer 07e8133971 Merge pull request #2501 from github/henrymercer/missing-autobuild-config-error 
Fix inconsistency in autobuild error tracking
 2024-09-23 22:50:02 +01:00
Henry Mercer 662c71aa9e Check telemetry in PR check to ensure .tar.zst downloaded 2024-09-23 22:39:47 +01:00
Henry Mercer a7a6a6951e Determine zstd availability earlier on to simplify log 2024-09-23 22:39:47 +01:00
Henry Mercer db98c27941 Gate zstd enablement on tar version 2024-09-23 22:39:47 +01:00
Henry Mercer b1ca017eae Add PR check for zstd bundle 2024-09-23 22:39:47 +01:00
Henry Mercer 990feb59a4 Catch gotcha in PR check workflow generator 2024-09-23 22:39:47 +01:00
Henry Mercer ac3fca3e9f Use zstd bundle by default when feature flag enabled 2024-09-23 22:39:46 +01:00
Henry Mercer e7309d2b5c Add feature flag for using zstd bundle 2024-09-23 22:39:46 +01:00
Henry Mercer e0a151e64e Fix inconsistency in autobuild error tracking 2024-09-23 22:34:32 +01:00
nickfyson 6b0ce4e274 revert eslint-plugin-import to 2.29.1 2024-09-23 22:22:15 +01:00
Andrew Eisenberg 07fd497921 Merge branch 'main' into dependabot/github_actions/actions-a88a8c5a24 2024-09-23 14:16:06 -07:00
Andrew Eisenberg 2cddcb1990 Merge pull request #2499 from github/aeisenberg/no-upload-sarif 
Avoid uploading eslint sarif for dependabot PR
 2024-09-23 13:18:07 -07:00
Andrew Eisenberg 6225a95822 Don't upload during cancelled jobs 2024-09-23 12:20:21 -07:00
Andrew Eisenberg 9580b7e6d5 Avoid uploading eslint sarif for dependabot PR 
Dependabot does not have `security-events: write` permission.s
 2024-09-23 12:12:10 -07:00
dependabot[bot] b436a5fca7 Bump actions/create-github-app-token in the actions group 
Bumps the actions group with 1 update: [actions/create-github-app-token](https://github.com/actions/create-github-app-token).


Updates `actions/create-github-app-token` from 1.10.3 to 1.11.0
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Commits](https://github.com/actions/create-github-app-token/compare/31c86eb3b33c9b601a1f60f98dcbfd1d70f379b4...5d869da34e18e7287c1daad50e0b8ea0f506ce69)

---
updated-dependencies:
- dependency-name: actions/create-github-app-token
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-09-23 17:57:11 +00:00
github-actions[bot] 7a2719db05 Update checked-in dependencies 2024-09-23 17:29:51 +00:00
dependabot[bot] 65e62c7ee1 Bump the npm group with 4 updates 
Bumps the npm group with 4 updates: [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js), [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin), [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) and [eslint-plugin-import](https://github.com/import-js/eslint-plugin-import).


Updates `@eslint/js` from 9.10.0 to 9.11.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/commits/v9.11.0/packages/js)

Updates `@typescript-eslint/eslint-plugin` from 8.6.0 to 8.7.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.7.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.6.0 to 8.7.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.7.0/packages/parser)

Updates `eslint-plugin-import` from 2.29.1 to 2.30.0
- [Release notes](https://github.com/import-js/eslint-plugin-import/releases)
- [Changelog](https://github.com/import-js/eslint-plugin-import/blob/main/CHANGELOG.md)
- [Commits](https://github.com/import-js/eslint-plugin-import/compare/v2.29.1...v2.30.0)

---
updated-dependencies:
- dependency-name: "@eslint/js"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@typescript-eslint/parser"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: eslint-plugin-import
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-09-23 17:28:39 +00:00
Angela P Wen ef130516b1 Merge pull request #2484 from github/dependabot/npm_and_yarn/npm-f8fb634f66 
Bump the npm group across 1 directory with 8 updates
 2024-09-23 10:09:36 -07:00
Henry Mercer 132b18f2f0 Merge pull request #2497 from github/henrymercer/rebuild-add-new-files 
CI: Check in new files when rebuilding
 2024-09-23 17:57:24 +01:00
Henry Mercer edf2ee9ac8 Merge pull request #2496 from github/henrymercer/reduce-pr-check-load 
Run some tests against only `latest` and `nightly-latest` CLIs
 2024-09-23 17:56:12 +01:00