github/codeql-action
0
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2026-04-03 02:02:17 +00:00
Code Issues Packages Projects Releases Wiki Activity
8,838 Commits 334 Branches 535 Tags
v4.32.5
Commit Graph

8838 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Henry Mercer
c793b717bc Merge pull request #3523 from github/update-v4.32.5-ca42bf226 
Merge main into releases/v4
v4.32.5 		2026-03-02 11:11:20 +00:00
Henry Mercer
06cd615ad8 Soften language re overlay failures 2026-03-02 11:48:45 +01:00
Henry Mercer
f5516c6630 Improve changelog 2026-03-02 11:45:27 +01:00
Henry Mercer
97519e197e Update release date 2026-03-02 10:03:22 +00:00
Henry Mercer
05259a1d08 Add more changelog notes 2026-02-27 17:24:17 +01:00
Henry Mercer
01ee2f785a Add changelog notes 2026-02-27 16:09:38 +01:00
github-actions[bot]
c72d9a4933 Update changelog for v4.32.5 2026-02-27 14:37:26 +00:00
Henry Mercer
ca42bf226a Merge pull request #3522 from github/henrymercer/update-supported-versions-table 
Update supported Action / Bundle / GHES version table
 2026-02-27 13:57:17 +00:00
Henry Mercer
6704d80ac6 Merge pull request #3520 from github/dependabot/npm_and_yarn/fast-xml-parser-5.4.1 
Bump fast-xml-parser from 5.3.6 to 5.4.1
 2026-02-27 13:57:12 +00:00
Henry Mercer
76348c0f12 Merge pull request #3521 from github/dependabot/npm_and_yarn/minimatch-3.1.5 
Bump minimatch from 3.1.3 to 3.1.5
 2026-02-27 13:57:06 +00:00
Henry Mercer
3a42a998ef Update supported Action / Bundle / GHES version table 2026-02-27 13:37:42 +00:00
Henry Mercer
8ab0431fc3 Merge pull request #3514 from github/dependabot/npm_and_yarn/globals-17.3.0 
Bump globals from 16.5.0 to 17.3.0
 2026-02-27 13:28:04 +00:00
Henry Mercer
2c92579346 Merge pull request #3513 from github/dependabot/npm_and_yarn/npm-minor-e1092f1102 
Bump eslint-plugin-jsdoc from 62.5.0 to 62.6.0 in the npm-minor group
 2026-02-27 13:27:19 +00:00
github-actions[bot]
2475286230 Rebuild 2026-02-27 13:23:45 +00:00
github-actions[bot]
236fbf7645 Rebuild 2026-02-27 13:23:30 +00:00
dependabot[bot]
29181f28d5 Bump minimatch from 3.1.3 to 3.1.5 
Bumps [minimatch](https://github.com/isaacs/minimatch) from 3.1.3 to 3.1.5.
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](https://github.com/isaacs/minimatch/compare/v3.1.3...v3.1.5)

---
updated-dependencies:
- dependency-name: minimatch
  dependency-version: 3.1.5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-02-27 13:21:47 +00:00
dependabot[bot]
a0735d7c2a Bump fast-xml-parser from 5.3.6 to 5.4.1 
Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) from 5.3.6 to 5.4.1.
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.3.6...v5.4.1)

---
updated-dependencies:
- dependency-name: fast-xml-parser
  dependency-version: 5.4.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-02-27 13:21:34 +00:00
Henry Mercer
b35e0349aa Merge pull request #3518 from github/mbg/ci/merge-queue-codeql 
Disable CodeQL upload for merge queue and exclude PR size workflow from required checks
 2026-02-27 12:56:04 +00:00
Michael B. Gale
4406eba03e Skip uploads in merge queue 2026-02-27 12:14:56 +00:00
Henry Mercer
1b897f3911 Fix conditions in code scanning config checks 
DIff-informed analysis isn't enabled in the merge queue.
 2026-02-27 12:10:38 +00:00
Henry Mercer
adf58cf166 Merge pull request #3515 from github/henrymercer/drop-ram-limit 
Skip overlay memory check for CodeQL 2.24.3 and later
 2026-02-27 11:17:11 +00:00
Michael B. Gale
b7d3fb98df Exclude "Label PR with size" from required checks 2026-02-26 18:25:26 +00:00
Michael B. Gale
4e8e79431d Run CodeQL with linked tools for merge queue 2026-02-26 18:25:26 +00:00
github-actions[bot]
52c2a032f3 Rebuild 2026-02-26 17:22:24 +00:00
Henry Mercer
ba1288cb3c Merge branch 'main' into dependabot/npm_and_yarn/globals-17.3.0 2026-02-26 17:20:10 +00:00
Henry Mercer
29765a3c71 Skip overlay memory check for CodeQL 2.24.3 and later 2026-02-26 16:53:26 +00:00
github-actions[bot]
068e80c14c Rebuild 2026-02-26 16:42:43 +00:00
Michael B. Gale
154969e08b Merge branch 'main' into dependabot/npm_and_yarn/npm-minor-e1092f1102 2026-02-26 16:40:19 +00:00
Michael B. Gale
b0ed4dedcb Merge pull request #3511 from github/henrymercer/merge-queue 
Add `merge_group` trigger to required checks to prepare for merge queue
 2026-02-26 16:33:14 +00:00
Michael B. Gale
3c83f578ed Merge pull request #3516 from github/mbg/start-proxy/reduce-connection-check-severity 2026-02-26 16:32:00 +00:00
Henry Mercer
20f148b36e Merge pull request #3507 from github/henrymercer/overlay-repo-property 
Add a repository property for disabling overlay
 2026-02-26 16:21:03 +00:00
Henry Mercer
4068616de4 Merge branch 'main' into henrymercer/overlay-repo-property 2026-02-26 15:27:25 +00:00
Michael B. Gale
0d5f70631a Merge branch 'main' into mbg/start-proxy/reduce-connection-check-severity 2026-02-26 15:16:23 +00:00
Michael B. Gale
ae14a1f513 Merge branch 'main' into henrymercer/merge-queue 2026-02-26 15:11:41 +00:00
Michael B. Gale
a577f702b9 Merge pull request #3512 from github/mbg/start-proxy/use-default-cli 
Use `getDefaultCliVersion` for `start-proxy`
 2026-02-26 15:11:18 +00:00
Michael B. Gale
bce0deb953 Fix log message / returned version 2026-02-26 13:55:47 +00:00
Michael B. Gale
db33d20bf4 Put change behind a FF 2026-02-26 13:10:52 +00:00
Michael B. Gale
3c911485ed Address Copilot's review comments 2026-02-26 13:07:03 +00:00
Michael B. Gale
1ec5b701fc Reduce log levels for registry connection checks 2026-02-26 11:53:26 +00:00
dependabot[bot]
9bdf640d99 Bump globals from 16.5.0 to 17.3.0 
Bumps [globals](https://github.com/sindresorhus/globals) from 16.5.0 to 17.3.0.
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](https://github.com/sindresorhus/globals/compare/v16.5.0...v17.3.0)

---
updated-dependencies:
- dependency-name: globals
  dependency-version: 17.3.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-02-25 17:53:31 +00:00
dependabot[bot]
b2beb85441 Bump eslint-plugin-jsdoc from 62.5.0 to 62.6.0 in the npm-minor group 
Bumps the npm-minor group with 1 update: [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc).


Updates `eslint-plugin-jsdoc` from 62.5.0 to 62.6.0
- [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases)
- [Commits](https://github.com/gajus/eslint-plugin-jsdoc/compare/v62.5.0...v62.6.0)

---
updated-dependencies:
- dependency-name: eslint-plugin-jsdoc
  dependency-version: 62.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-02-25 17:53:10 +00:00
Michael B. Gale
f657c4e1eb Use getDefaultCliVersion for start-proxy 2026-02-25 17:43:15 +00:00
Henry Mercer
f379c46d49 Address review comments 2026-02-25 15:26:48 +00:00
Henry Mercer
8105503f1a Add merge_group trigger to required checks to prepare for merge queue 2026-02-25 15:12:37 +00:00
Henry Mercer
056b0912cf Merge branch 'main' into henrymercer/overlay-repo-property 2026-02-25 14:43:34 +00:00
Henry Mercer
445a2a9bb2 Record overlay disablement reason 2026-02-25 14:36:03 +00:00
Henry Mercer
182427800c Add disabled reason 2026-02-25 14:22:13 +00:00
Henry Mercer
c0fc915677 Merge pull request #3509 from github/dependabot/npm_and_yarn/multi-871638c4a1 
Bump minimatch
 2026-02-25 13:43:36 +00:00
Michael B. Gale
18898a6dd3 Merge pull request #3504 from github/mbg/ff/remove-ImprovedProxyCertificates 
Remove FF gate for improved CA generation
 2026-02-25 13:25:57 +00:00
Henry Mercer
70db156dcb Add diagnostic when overlay disabled by repo property 2026-02-25 11:48:10 +00:00