github/codeql-action
0
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2026-04-02 09:42:16 +00:00
Code Issues Packages Projects Releases Wiki Activity
9,157 Commits 331 Branches 535 Tags
v4.34.1
Commit Graph

9157 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Henry Mercer
3869755554 Merge pull request #3763 from github/update-v4.34.1-095e0fe50 
Merge main into releases/v4
v4.34.1 		2026-03-20 18:10:50 +00:00
github-actions[bot]
20e68ac12b Update changelog for v4.34.1 2026-03-20 17:33:39 +00:00
Henry Mercer
095e0fe505 Merge pull request #3762 from github/henrymercer/downgrade-default-bundle 
Downgrade default bundle to 2.24.3
 2026-03-20 17:06:34 +00:00
Henry Mercer
47b94fe61c Add changelog note 2026-03-20 16:46:45 +00:00
Henry Mercer
51a1d6917f Downgrade default bundle to codeql-bundle-v2.24.3 2026-03-20 16:45:20 +00:00
Óscar San José
510cf736e3 Merge pull request #3589 from github/mergeback/v4.34.0-to-main-c6f93110 
Mergeback v4.34.0 refs/heads/releases/v4 into main
 2026-03-20 15:15:34 +00:00
github-actions[bot]
89f0c86efa Rebuild 2026-03-20 12:03:59 +00:00
github-actions[bot]
c3f90ba975 Update changelog and version after v4.34.0 2026-03-20 11:56:24 +00:00
Óscar San José
c6f931105c Merge pull request #3588 from github/update-v4.34.0-30c555a52 
Merge main into releases/v4
v4.34.0 		2026-03-20 12:53:53 +01:00
github-actions[bot]
eeb9b3f424 Update changelog for v4.34.0 2026-03-20 10:35:57 +00:00
Idriss Riouak
30c555a528 Merge pull request #3584 from github/idrissrio/cpp/overlay 
Feature flag: C/C++ overlay
 2026-03-19 15:26:48 +00:00
Idriss Riouak
39191bd27f Merge branch 'main' into idrissrio/cpp/overlay 2026-03-19 15:42:47 +01:00
Óscar San José
147e93e5dc Merge pull request #3585 from github/update-bundle/codeql-bundle-v2.25.0 
Update default bundle to 2.25.0
 2026-03-19 14:14:03 +00:00
Idriss Riouak
e6d83bce6d Update CHANGELOG.md 
Co-authored-by: Henry Mercer <henrymercer@github.com>
 2026-03-19 14:58:16 +01:00
idrissrio
0d057ccbce Add changelog note for C/C++ overlay 2026-03-19 14:11:02 +01:00
idrissrio
074a0dbd16 Feature flag: update test without overlay support 2026-03-19 14:11:02 +01:00
idrissrio
ab3b6fd199 Feature flag: address copilot comment 
Wire C/C++ overlay feature flags into overlay mapping
 2026-03-19 14:11:00 +01:00
idrissrio
ce4a1feb6a Feature flag: update generated lib after build 2026-03-19 14:10:57 +01:00
idrissrio
899a672743 Feature flag: C/C++ overlay 2026-03-19 14:10:56 +01:00
github-actions[bot]
f4be604881 Add changelog note 2026-03-19 12:01:31 +00:00
github-actions[bot]
0bc1b6f632 Update default bundle to codeql-bundle-v2.25.0 2026-03-19 12:01:20 +00:00
Henry Mercer
3d8036cf7f Merge pull request #3583 from github/dependabot/github_actions/dot-github/workflows/actions/create-github-app-token-3.0.0 
Bump actions/create-github-app-token from 2.2.1 to 3.0.0 in /.github/workflows
codeql-bundle-v2.25.0 		2026-03-19 10:37:38 +00:00
Henry Mercer
9fecf32c77 Merge pull request #3581 from github/dependabot/npm_and_yarn/npm-minor-a87b0427cc 
Bump the npm-minor group with 2 updates
 2026-03-19 10:34:28 +00:00
Henry Mercer
07d509fbaf Merge pull request #3569 from github/henrymercer/overlay-no-trap-caching 
Disable TRAP caching when overlay is enabled
 2026-03-19 10:12:30 +00:00
dependabot[bot]
23674c1f2a Bump actions/create-github-app-token in /.github/workflows 
Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token) from 2.2.1 to 3.0.0.
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Commits](https://github.com/actions/create-github-app-token/compare/v2.2.1...v3.0.0)

---
updated-dependencies:
- dependency-name: actions/create-github-app-token
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-18 18:10:06 +00:00
dependabot[bot]
ecd1c77ffa Bump the npm-minor group with 2 updates 
Bumps the npm-minor group with 2 updates: [@eslint/compat](https://github.com/eslint/rewrite/tree/HEAD/packages/compat) and [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint).


Updates `@eslint/compat` from 2.0.2 to 2.0.3
- [Release notes](https://github.com/eslint/rewrite/releases)
- [Changelog](https://github.com/eslint/rewrite/blob/main/packages/compat/CHANGELOG.md)
- [Commits](https://github.com/eslint/rewrite/commits/compat-v2.0.3/packages/compat)

Updates `typescript-eslint` from 8.56.1 to 8.57.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.57.0/packages/typescript-eslint)

---
updated-dependencies:
- dependency-name: "@eslint/compat"
  dependency-version: 2.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: typescript-eslint
  dependency-version: 8.57.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-18 17:53:32 +00:00
Henry Mercer
5b630489d6 Fix changelog automerge 2026-03-18 17:10:57 +00:00
Henry Mercer
582d08c553 Explicitly set C/C++ trap caching env var to false 2026-03-18 17:10:13 +00:00
Henry Mercer
60a0dce0ad Merge branch 'main' into henrymercer/overlay-no-trap-caching 
# Conflicts:
#	lib/start-proxy-action.js
 2026-03-18 16:35:51 +00:00
Henry Mercer
7da6361ba5 Merge pull request #3580 from github/dependabot/npm_and_yarn/fast-xml-parser-5.5.6 
Bump fast-xml-parser from 5.4.1 to 5.5.6
 2026-03-18 11:50:18 +00:00
Sam Robson
08d1198b01 Merge pull request #3248 from github/kaspersv/move-diff-range-absolute-path-conversion 
Move conversion of PR diff-range paths to absolute paths
 2026-03-18 11:41:58 +00:00
Sam Robson
5e54629286 Merge branch 'main' into kaspersv/move-diff-range-absolute-path-conversion 
* main: (112 commits)
  Rebuild
  Update changelog and version after v4.33.0
  Add changelog entry for #3570
  Bump minor version
  Update changelog for v4.32.7
  Only emit one message with accumulated property names
  Remove `cache-dependency-path` options as well
  Remove `package-lock.json` that's no longer needed
  Add step (in root directory) to install dependencies
  Add explicit cache dependency paths in `pr-checks.yml`
  Fix linter errors in `sync-back.test.ts`
  Fix linter errors in `sync-back.ts`
  Rename `sync_back` to `sync-back`
  Fix linter errors in `sync.ts`
  Add eslint configuration for `pr-checks`
  Add minimal `Step` type
  Add `workspaces` to root `package.json`
  Avoid bundling `package.json`
  Move `ava` config out of `package.json`
  Emit warning for unrecognised repo properties with our common prefix
  ...

# Conflicts:
#	lib/init-action-post.js
 2026-03-18 10:47:46 +00:00
github-actions[bot]
f254006ed7 Rebuild 2026-03-18 01:38:11 +00:00
dependabot[bot]
573e7dd341 Bump fast-xml-parser from 5.4.1 to 5.5.6 
Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) from 5.4.1 to 5.5.6.
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.4.1...v5.5.6)

---
updated-dependencies:
- dependency-name: fast-xml-parser
  dependency-version: 5.5.6
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-18 01:36:15 +00:00
Michael B. Gale
fd1ca02d0d Merge pull request #3576 from github/mergeback/v4.33.0-to-main-b1bff819 
Mergeback v4.33.0 refs/heads/releases/v4 into main
 2026-03-16 12:22:52 +00:00
github-actions[bot]
a0e3ed6555 Rebuild 2026-03-16 09:08:32 +00:00
github-actions[bot]
fbb2eb9556 Update changelog and version after v4.33.0 2026-03-16 09:03:58 +00:00
Michael B. Gale
b1bff81932 Merge pull request #3574 from github/update-v4.32.7-7dd76e6bf 
Merge main into releases/v4
v4.33.0 		2026-03-16 09:01:14 +00:00
Michael B. Gale
e682234222 Add changelog entry for #3570 2026-03-16 08:43:35 +00:00
Michael B. Gale
95be291f41 Bump minor version 2026-03-16 08:38:13 +00:00
github-actions[bot]
59bcb6025e Update changelog for v4.32.7 2026-03-16 08:20:09 +00:00
Michael B. Gale
7dd76e6bf7 Merge pull request #3572 from github/mbg/pr-checks/eslint 
Add eslint for `pr-checks`
 2026-03-13 18:51:29 +00:00
Michael B. Gale
e3200e331b Merge pull request #3563 from github/mbg/private-registry/oidc 
Accept OIDC configurations in `start-proxy`
 2026-03-13 11:58:36 +00:00
Michael B. Gale
4c356c71a2 Merge pull request #3570 from github/mbg/repo-props/warn-on-unexpected-props 
Emit warning for unrecognised repo properties with our common prefix
 2026-03-13 11:13:21 +00:00
Michael B. Gale
b4937c19e5 Only emit one message with accumulated property names 2026-03-13 10:56:36 +00:00
Michael B. Gale
136b8ab377 Remove cache-dependency-path options as well 2026-03-13 10:46:40 +00:00
Michael B. Gale
a5aba5952c Remove package-lock.json that's no longer needed 
Since `pr-checks` is now a workspace of the main `package.json`
 2026-03-13 10:43:43 +00:00
Michael B. Gale
dafe74070a Merge pull request #3573 from github/mbg/esbuild/no-package-json 
Avoid bundling `package.json` in JavaScript files
 2026-03-13 10:38:58 +00:00
Michael B. Gale
fc8d303906 Add step (in root directory) to install dependencies 2026-03-12 22:39:45 +00:00
Michael B. Gale
3bc3228be2 Add explicit cache dependency paths in pr-checks.yml 2026-03-12 22:39:45 +00:00