github/codeql-action
0
0
Fork 0
mirror of https://github.com/github/codeql-action.git synced 2026-04-03 10:12:17 +00:00
Code Issues Packages Projects Releases Wiki Activity
9,238 Commits 334 Branches 535 Tags
v4.35.1
Commit Graph

3362 Commits

Author SHA1 Message Date
Henry Mercer
d6d1743b8e Merge pull request #3781 from github/henrymercer/update-git-minimum-version 
Update minimum Git version for overlay to 2.36.0
 2026-03-27 14:59:36 +00:00
Henry Mercer
2437b20ab3 Update minimum git version for overlay to 2.36.0 2026-03-27 14:00:17 +00:00
Michael B. Gale
ea5f71947c Merge pull request #3775 from github/dependabot/npm_and_yarn/node-forge-1.4.0 
Bump node-forge from 1.3.3 to 1.4.0
 2026-03-27 13:47:55 +00:00
github-actions[bot]
24448c9843 Rebuild 2026-03-27 12:23:25 +00:00
github-actions[bot]
36791d8d66 Rebuild 2026-03-27 10:27:12 +00:00
github-actions[bot]
8c29faa7ab Update default bundle to codeql-bundle-v2.25.1 2026-03-27 09:43:12 +00:00
Michael B. Gale
3ff82aacd0 Merge pull request #3575 from github/mbg/ts/sync-checks 
Convert `release-branches.py` and `update-required-checks.sh` to TypeScript
 2026-03-26 15:47:43 +00:00
Sam Robson
23a0098b57 fix: improve error handling and logging for diff range path resolution 2026-03-25 19:53:21 +00:00
Sam Robson
d5bb39fa0b refactor: single source of truth for getDiffRangesJsonFilePath and simplified getDiffRangeFilePaths 2026-03-25 15:51:51 +00:00
Sam Robson
521c3536d3 feat: always include files from diff in overlay changed files 2026-03-25 15:51:51 +00:00
Michael B. Gale
cfc18781e0 Rebuild 2026-03-25 13:16:34 +00:00
Michael B. Gale
137e0dec2b Merge remote-tracking branch 'origin/main' into mbg/start-proxy/token-check-fixes 2026-03-25 12:39:48 +00:00
Henry Mercer
28f56f2bed Update minimum Git version required for overlay 2026-03-23 18:36:25 +00:00
Henry Mercer
d48d054533 Use --stage instead of --format in git ls-files 2026-03-23 18:33:59 +00:00
Henry Mercer
72c0b0efb7 Merge pull request #3587 from github/dependabot/npm_and_yarn/fast-xml-parser-5.5.7 
Bump fast-xml-parser from 5.5.6 to 5.5.7
 2026-03-23 14:22:53 +00:00
github-actions[bot]
8dc2e5d9d2 Rebuild 2026-03-20 18:19:40 +00:00
Henry Mercer
51a1d6917f Downgrade default bundle to codeql-bundle-v2.24.3 2026-03-20 16:45:20 +00:00
github-actions[bot]
89f0c86efa Rebuild 2026-03-20 12:03:59 +00:00
github-actions[bot]
64507ed148 Rebuild 2026-03-20 01:40:06 +00:00
Idriss Riouak
39191bd27f Merge branch 'main' into idrissrio/cpp/overlay 2026-03-19 15:42:47 +01:00
idrissrio
ab3b6fd199 Feature flag: address copilot comment 
Wire C/C++ overlay feature flags into overlay mapping
 2026-03-19 14:11:00 +01:00
idrissrio
ce4a1feb6a Feature flag: update generated lib after build 2026-03-19 14:10:57 +01:00
github-actions[bot]
0bc1b6f632 Update default bundle to codeql-bundle-v2.25.0 2026-03-19 12:01:20 +00:00
Henry Mercer
582d08c553 Explicitly set C/C++ trap caching env var to false 2026-03-18 17:10:13 +00:00
Henry Mercer
60a0dce0ad Merge branch 'main' into henrymercer/overlay-no-trap-caching 
# Conflicts:
#	lib/start-proxy-action.js
 2026-03-18 16:35:51 +00:00
Henry Mercer
7da6361ba5 Merge pull request #3580 from github/dependabot/npm_and_yarn/fast-xml-parser-5.5.6 
Bump fast-xml-parser from 5.4.1 to 5.5.6
 2026-03-18 11:50:18 +00:00
Sam Robson
5e54629286 Merge branch 'main' into kaspersv/move-diff-range-absolute-path-conversion 
* main: (112 commits)
  Rebuild
  Update changelog and version after v4.33.0
  Add changelog entry for #3570
  Bump minor version
  Update changelog for v4.32.7
  Only emit one message with accumulated property names
  Remove `cache-dependency-path` options as well
  Remove `package-lock.json` that's no longer needed
  Add step (in root directory) to install dependencies
  Add explicit cache dependency paths in `pr-checks.yml`
  Fix linter errors in `sync-back.test.ts`
  Fix linter errors in `sync-back.ts`
  Rename `sync_back` to `sync-back`
  Fix linter errors in `sync.ts`
  Add eslint configuration for `pr-checks`
  Add minimal `Step` type
  Add `workspaces` to root `package.json`
  Avoid bundling `package.json`
  Move `ava` config out of `package.json`
  Emit warning for unrecognised repo properties with our common prefix
  ...

# Conflicts:
#	lib/init-action-post.js
 2026-03-18 10:47:46 +00:00
github-actions[bot]
f254006ed7 Rebuild 2026-03-18 01:38:11 +00:00
Michael B. Gale
f88d49ee5d Fix warning for PAT-like token with username 2026-03-16 19:34:33 +00:00
github-actions[bot]
a0e3ed6555 Rebuild 2026-03-16 09:08:32 +00:00
Michael B. Gale
95be291f41 Bump minor version 2026-03-16 08:38:13 +00:00
Michael B. Gale
e3200e331b Merge pull request #3563 from github/mbg/private-registry/oidc 
Accept OIDC configurations in `start-proxy`
 2026-03-13 11:58:36 +00:00
Michael B. Gale
4c356c71a2 Merge pull request #3570 from github/mbg/repo-props/warn-on-unexpected-props 
Emit warning for unrecognised repo properties with our common prefix
 2026-03-13 11:13:21 +00:00
Michael B. Gale
b4937c19e5 Only emit one message with accumulated property names 2026-03-13 10:56:36 +00:00
Michael B. Gale
ea703668e0 Avoid bundling package.json 
- `package.json` is bundled by `esbuild` because we depend on it in `actions-util.ts`
- That is so we can access the `version` property
- We now use `build.mjs` to define a constant for it instead
- We also set this constant in `ava.setup.mjs` for tests
- This reduces the size of the generated `.js` files and avoids changing them entirely in some cases
 2026-03-12 18:55:03 +00:00
Michael B. Gale
a717db1a90 Emit warning for unrecognised repo properties with our common prefix 2026-03-12 11:49:17 +00:00
Henry Mercer
1dbebad653 Merge pull request #3566 from github/dependabot/npm_and_yarn/npm-minor-aebc49e072 
Bump the npm-minor group with 2 updates
 2026-03-11 20:49:27 +00:00
github-actions[bot]
0d0df94d93 Rebuild 2026-03-11 19:51:54 +00:00
github-actions[bot]
373dec9f22 Rebuild 2026-03-11 19:51:53 +00:00
Henry Mercer
19544bb9b4 Remove dead Python library extraction code 2026-03-11 19:32:36 +00:00
Henry Mercer
d74701caa1 Drive-by cleanup: Always use --cache-cleanup 2026-03-11 19:31:03 +00:00
Henry Mercer
d05b50b13f Clean up: Remove unneeded CodeQL version guard 2026-03-11 19:30:13 +00:00
Henry Mercer
70d5cccce1 Disable TRAP caching when conditions met 2026-03-11 19:25:29 +00:00
Henry Mercer
b04e63ffdf Enablement: Move TRAP caching check after overlay 2026-03-11 19:21:17 +00:00
Henry Mercer
b0f877255d Add FF for disabling TRAP caching when overlay enabled 2026-03-11 18:44:41 +00:00
Michael B. Gale
6c99ca514e Merge remote-tracking branch 'origin/main' into mbg/private-registry/oidc 2026-03-11 16:15:07 +00:00
Henry Mercer
997acaf7eb Merge pull request #3562 from github/henrymercer/skip-file-coverage-rollout 
Prepare for rolling out skipping computing file coverage information on PRs
 2026-03-11 11:33:21 +00:00
Henry Mercer
2e7e91fd63 Merge pull request #3550 from github/sam-robson/overlay-per-lang-min-bundle-version 
feat: add minimumVersion values for language overlay flags
 2026-03-11 10:28:14 +00:00
Henry Mercer
5cb13d6ab8 Merge pull request #3564 from github/henrymercer/fix-database-upload-retries 
Fix retries when uploading databases
 2026-03-10 16:56:27 +00:00
Henry Mercer
a63886bff5 Refactor: Extract separate function for uploadBundledDatabase 2026-03-10 16:36:02 +00:00