Compare commits

..

1 Commits

Author SHA1 Message Date
Esben Sparre Andreasen 28e47ba26d XXX 2025-10-25 07:32:38 +02:00
205 changed files with 540820 additions and 816721 deletions
@@ -16,9 +16,9 @@ runs:
shell: bash shell: bash
- name: Set up Python - name: Set up Python
uses: actions/setup-python@v6 uses: actions/setup-python@v5
with: with:
python-version: '3.12' python-version: 3.12
- name: Install dependencies - name: Install dependencies
run: | run: |
@@ -1,6 +0,0 @@
name: Verify that the best-effort debug artifact scan completed
description: Verifies that the best-effort debug artifact scan completed successfully during tests
runs:
using: node24
main: index.js
post: post.js
@@ -1,2 +0,0 @@
// The main step is a no-op, since we can only verify artifact scan completion in the post step.
console.log("Will verify artifact scan completion in the post step.");
@@ -1,11 +0,0 @@
// Post step - runs after the workflow completes, when artifact scan has finished
const process = require("process");
const scanFinished = process.env.CODEQL_ACTION_ARTIFACT_SCAN_FINISHED;
if (scanFinished !== "true") {
console.error("Error: Best-effort artifact scan did not complete. Expected CODEQL_ACTION_ARTIFACT_SCAN_FINISHED=true");
process.exit(1);
}
console.log("✓ Best-effort artifact scan completed successfully");
+3 -8
View File
@@ -4,14 +4,13 @@ updates:
directory: "/" directory: "/"
schedule: schedule:
interval: weekly interval: weekly
cooldown:
default-days: 7
exclude:
- "@actions/*"
labels: labels:
- Rebuild - Rebuild
# Ignore incompatible dependency updates # Ignore incompatible dependency updates
ignore: ignore:
# There is a type incompatibility issue between v0.0.9 and our other dependencies.
- dependency-name: "@octokit/plugin-retry"
versions: ["~6.0.0"]
# This is broken due to the way configuration files have changed. # This is broken due to the way configuration files have changed.
# This might be fixed when we move to eslint v9. # This might be fixed when we move to eslint v9.
- dependency-name: "eslint-plugin-import" - dependency-name: "eslint-plugin-import"
@@ -29,10 +28,6 @@ updates:
- "/.github/actions" - "/.github/actions"
schedule: schedule:
interval: weekly interval: weekly
cooldown:
default-days: 7
exclude:
- "actions/*"
labels: labels:
- Rebuild - Rebuild
groups: groups:
+7 -27
View File
@@ -18,25 +18,14 @@ For internal use only. Please select the risk level of this change:
#### Which use cases does this change impact? #### Which use cases does this change impact?
<!-- Delete options that don't apply. If in doubt, do not delete an option. --> <!-- Delete options that don't apply. -->
Workflow types: - **Advanced setup** - Impacts users who have custom workflows.
- **Default setup** - Impacts users who use default setup.
- **Advanced setup** - Impacts users who have custom CodeQL workflows. - **Code Scanning** - Impacts Code Scanning (i.e. `analysis-kinds: code-scanning`).
- **Managed** - Impacts users with `dynamic` workflows (Default Setup, CCR, ...). - **Code Quality** - Impacts Code Quality (i.e. `analysis-kinds: code-quality`).
- **Third-party analyses** - Impacts third-party analyses (i.e. `upload-sarif`).
Products: - **GHES** - Impacts GitHub Enterprise Server.
- **Code Scanning** - The changes impact analyses when `analysis-kinds: code-scanning`.
- **Code Quality** - The changes impact analyses when `analysis-kinds: code-quality`.
- **CCR** - The changes impact analyses for Copilot Code Reviews.
- **Third-party analyses** - The changes affect the `upload-sarif` action.
Environments:
- **Dotcom** - Impacts CodeQL workflows on `github.com` and/or GitHub Enterprise Cloud with Data Residency.
- **GHES** - Impacts CodeQL workflows on GitHub Enterprise Server.
- **Testing/None** - This change does not impact any CodeQL workflows in production.
#### How did/will you validate this change? #### How did/will you validate this change?
@@ -65,15 +54,6 @@ Environments:
- **Alerts** - New or existing monitors will trip if something goes wrong with this change. - **Alerts** - New or existing monitors will trip if something goes wrong with this change.
- **Other** - Please provide details. - **Other** - Please provide details.
#### Are there any special considerations for merging or releasing this change?
<!--
Consider whether this change depends on a different change in another repository that should be released first.
-->
- **No special considerations** - This change can be merged at any time.
- **Special considerations** - This change should only be merged once certain preconditions are met. Please provide details of those or link to this PR from an internal issue.
### Merge / deployment checklist ### Merge / deployment checklist
- Confirm this change is backwards compatible with existing workflows. - Confirm this change is backwards compatible with existing workflows.
+3 -18
View File
@@ -27,11 +27,6 @@ on:
description: The version of Go to install description: The version of Go to install
required: false required: false
default: '>=1.21.0' default: '>=1.21.0'
dotnet-version:
type: string
description: The version of .NET to install
required: false
default: 9.x
workflow_call: workflow_call:
inputs: inputs:
go-version: go-version:
@@ -39,18 +34,12 @@ on:
description: The version of Go to install description: The version of Go to install
required: false required: false
default: '>=1.21.0' default: '>=1.21.0'
dotnet-version:
type: string
description: The version of .NET to install
required: false
default: 9.x
defaults: defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: group: ${{ github.workflow }}-${{ github.ref }}
all-platform-bundle-${{github.ref}}-${{inputs.go-version}}-${{inputs.dotnet-version}}
jobs: jobs:
all-platform-bundle: all-platform-bundle:
strategy: strategy:
@@ -72,7 +61,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
@@ -85,10 +74,6 @@ jobs:
with: with:
go-version: ${{ inputs.go-version || '>=1.21.0' }} go-version: ${{ inputs.go-version || '>=1.21.0' }}
cache: false cache: false
- name: Install .NET
uses: actions/setup-dotnet@v5
with:
dotnet-version: ${{ inputs.dotnet-version || '9.x' }}
- id: init - id: init
uses: ./../action/init uses: ./../action/init
with: with:
+3 -18
View File
@@ -32,11 +32,6 @@ on:
description: The version of Python to install description: The version of Python to install
required: false required: false
default: '3.13' default: '3.13'
dotnet-version:
type: string
description: The version of .NET to install
required: false
default: 9.x
workflow_call: workflow_call:
inputs: inputs:
go-version: go-version:
@@ -49,18 +44,12 @@ on:
description: The version of Python to install description: The version of Python to install
required: false required: false
default: '3.13' default: '3.13'
dotnet-version:
type: string
description: The version of .NET to install
required: false
default: 9.x
defaults: defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: group: ${{ github.workflow }}-${{ github.ref }}
analyze-ref-input-${{github.ref}}-${{inputs.go-version}}-${{inputs.python-version}}-${{inputs.dotnet-version}}
jobs: jobs:
analyze-ref-input: analyze-ref-input:
strategy: strategy:
@@ -78,7 +67,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
@@ -96,10 +85,6 @@ jobs:
uses: actions/setup-python@v6 uses: actions/setup-python@v6
with: with:
python-version: ${{ inputs.python-version || '3.13' }} python-version: ${{ inputs.python-version || '3.13' }}
- name: Install .NET
uses: actions/setup-dotnet@v5
with:
dotnet-version: ${{ inputs.dotnet-version || '9.x' }}
- uses: ./../action/init - uses: ./../action/init
with: with:
tools: ${{ steps.prepare-test.outputs.tools-url }} tools: ${{ steps.prepare-test.outputs.tools-url }}
+5 -19
View File
@@ -21,25 +21,15 @@ on:
schedule: schedule:
- cron: '0 5 * * *' - cron: '0 5 * * *'
workflow_dispatch: workflow_dispatch:
inputs: inputs: {}
dotnet-version:
type: string
description: The version of .NET to install
required: false
default: 9.x
workflow_call: workflow_call:
inputs: inputs: {}
dotnet-version:
type: string
description: The version of .NET to install
required: false
default: 9.x
defaults: defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: autobuild-action-${{github.ref}}-${{inputs.dotnet-version}} group: ${{ github.workflow }}-${{ github.ref }}
jobs: jobs:
autobuild-action: autobuild-action:
strategy: strategy:
@@ -61,7 +51,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
@@ -69,10 +59,6 @@ jobs:
version: ${{ matrix.version }} version: ${{ matrix.version }}
use-all-platform-bundle: 'false' use-all-platform-bundle: 'false'
setup-kotlin: 'true' setup-kotlin: 'true'
- name: Install .NET
uses: actions/setup-dotnet@v5
with:
dotnet-version: ${{ inputs.dotnet-version || '9.x' }}
- uses: ./../action/init - uses: ./../action/init
with: with:
languages: csharp languages: csharp
@@ -38,9 +38,8 @@ defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: group: ${{ github.workflow }}-${{ github.ref }}
autobuild-direct-tracing-with-working-dir-${{github.ref}}-${{inputs.java-version}}
jobs: jobs:
autobuild-direct-tracing-with-working-dir: autobuild-direct-tracing-with-working-dir:
strategy: strategy:
@@ -64,7 +63,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
+3 -3
View File
@@ -28,8 +28,8 @@ defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: autobuild-working-dir-${{github.ref}} group: ${{ github.workflow }}-${{ github.ref }}
jobs: jobs:
autobuild-working-dir: autobuild-working-dir:
strategy: strategy:
@@ -47,7 +47,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
+8 -11
View File
@@ -38,8 +38,8 @@ defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: build-mode-autobuild-${{github.ref}}-${{inputs.java-version}} group: ${{ github.workflow }}-${{ github.ref }}
jobs: jobs:
build-mode-autobuild: build-mode-autobuild:
strategy: strategy:
@@ -63,7 +63,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
@@ -76,14 +76,6 @@ jobs:
with: with:
java-version: ${{ inputs.java-version || '17' }} java-version: ${{ inputs.java-version || '17' }}
distribution: temurin distribution: temurin
- name: Install yq
if: runner.os == 'Windows'
env:
YQ_PATH: ${{ runner.temp }}/yq
YQ_VERSION: v4.50.1
run: |-
gh release download --repo mikefarah/yq --pattern "yq_windows_amd64.exe" "$YQ_VERSION" -O "$YQ_PATH/yq.exe"
echo "$YQ_PATH" >> "$GITHUB_PATH"
- name: Set up Java test repo configuration - name: Set up Java test repo configuration
run: | run: |
mv * .github ../action/tests/multi-language-repo/ mv * .github ../action/tests/multi-language-repo/
@@ -98,6 +90,11 @@ jobs:
languages: java languages: java
tools: ${{ steps.prepare-test.outputs.tools-url }} tools: ${{ steps.prepare-test.outputs.tools-url }}
- name: Install yq
if: runner.os == 'Windows'
run: |
choco install yq -y
- name: Validate database build mode - name: Validate database build mode
run: | run: |
metadata_path="$RUNNER_TEMP/customDbLocation/java/codeql-database.yml" metadata_path="$RUNNER_TEMP/customDbLocation/java/codeql-database.yml"
+3 -18
View File
@@ -27,11 +27,6 @@ on:
description: The version of Go to install description: The version of Go to install
required: false required: false
default: '>=1.21.0' default: '>=1.21.0'
dotnet-version:
type: string
description: The version of .NET to install
required: false
default: 9.x
workflow_call: workflow_call:
inputs: inputs:
go-version: go-version:
@@ -39,18 +34,12 @@ on:
description: The version of Go to install description: The version of Go to install
required: false required: false
default: '>=1.21.0' default: '>=1.21.0'
dotnet-version:
type: string
description: The version of .NET to install
required: false
default: 9.x
defaults: defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: group: ${{ github.workflow }}-${{ github.ref }}
build-mode-manual-${{github.ref}}-${{inputs.go-version}}-${{inputs.dotnet-version}}
jobs: jobs:
build-mode-manual: build-mode-manual:
strategy: strategy:
@@ -68,7 +57,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
@@ -81,10 +70,6 @@ jobs:
with: with:
go-version: ${{ inputs.go-version || '>=1.21.0' }} go-version: ${{ inputs.go-version || '>=1.21.0' }}
cache: false cache: false
- name: Install .NET
uses: actions/setup-dotnet@v5
with:
dotnet-version: ${{ inputs.dotnet-version || '9.x' }}
- uses: ./../action/init - uses: ./../action/init
id: init id: init
with: with:
+3 -3
View File
@@ -28,8 +28,8 @@ defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: build-mode-none-${{github.ref}} group: ${{ github.workflow }}-${{ github.ref }}
jobs: jobs:
build-mode-none: build-mode-none:
strategy: strategy:
@@ -49,7 +49,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
+3 -3
View File
@@ -28,8 +28,8 @@ defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: build-mode-rollback-${{github.ref}} group: ${{ github.workflow }}-${{ github.ref }}
jobs: jobs:
build-mode-rollback: build-mode-rollback:
strategy: strategy:
@@ -47,7 +47,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
+3 -3
View File
@@ -28,8 +28,8 @@ defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: bundle-from-toolcache-${{github.ref}} group: ${{ github.workflow }}-${{ github.ref }}
jobs: jobs:
bundle-from-toolcache: bundle-from-toolcache:
strategy: strategy:
@@ -47,7 +47,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
+3 -3
View File
@@ -28,8 +28,8 @@ defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: bundle-toolcache-${{github.ref}} group: ${{ github.workflow }}-${{ github.ref }}
jobs: jobs:
bundle-toolcache: bundle-toolcache:
strategy: strategy:
@@ -51,7 +51,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
+4 -4
View File
@@ -28,8 +28,8 @@ defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: bundle-zstd-${{github.ref}} group: ${{ github.workflow }}-${{ github.ref }}
jobs: jobs:
bundle-zstd: bundle-zstd:
strategy: strategy:
@@ -51,7 +51,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
@@ -79,7 +79,7 @@ jobs:
output: ${{ runner.temp }}/results output: ${{ runner.temp }}/results
upload-database: false upload-database: false
- name: Upload SARIF - name: Upload SARIF
uses: actions/upload-artifact@v6 uses: actions/upload-artifact@v4
with: with:
name: ${{ matrix.os }}-zstd-bundle.sarif name: ${{ matrix.os }}-zstd-bundle.sarif
path: ${{ runner.temp }}/results/javascript.sarif path: ${{ runner.temp }}/results/javascript.sarif
-87
View File
@@ -1,87 +0,0 @@
# Warning: This file is generated automatically, and should not be modified.
# Instead, please modify the template in the pr-checks directory and run:
# pr-checks/sync.sh
# to regenerate this file.
name: PR Check - CCR
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
GO111MODULE: auto
on:
push:
branches:
- main
- releases/v*
pull_request:
types:
- opened
- synchronize
- reopened
- ready_for_review
schedule:
- cron: '0 5 * * *'
workflow_dispatch:
inputs: {}
workflow_call:
inputs: {}
defaults:
run:
shell: bash
concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }}
group: ccr-${{github.ref}}
jobs:
ccr:
strategy:
fail-fast: false
matrix:
include:
- os: ubuntu-latest
version: stable-v2.17.6
- os: ubuntu-latest
version: stable-v2.18.4
- os: ubuntu-latest
version: stable-v2.19.4
- os: ubuntu-latest
version: stable-v2.20.7
- os: ubuntu-latest
version: stable-v2.21.4
- os: ubuntu-latest
version: stable-v2.22.4
- os: ubuntu-latest
version: default
- os: ubuntu-latest
version: linked
- os: ubuntu-latest
version: nightly-latest
name: CCR
if: github.triggering_actor != 'dependabot[bot]'
permissions:
contents: read
security-events: read
timeout-minutes: 45
runs-on: ${{ matrix.os }}
steps:
- name: Check out repository
uses: actions/checkout@v6
- name: Prepare test
id: prepare-test
uses: ./.github/actions/prepare-test
with:
version: ${{ matrix.version }}
use-all-platform-bundle: 'false'
setup-kotlin: 'true'
- uses: ./../action/init
id: init
with:
languages: javascript
tools: ${{ steps.prepare-test.outputs.tools-url }}
- uses: ./../action/analyze
id: analysis
with:
upload-database: false
env:
CODEQL_ACTION_ANALYSIS_KEY: dynamic/copilot-pull-request-reviewer/codeql-action-test
CODEQL_ACTION_TEST_MODE: true
+3 -3
View File
@@ -28,8 +28,8 @@ defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: cleanup-db-cluster-dir-${{github.ref}} group: ${{ github.workflow }}-${{ github.ref }}
jobs: jobs:
cleanup-db-cluster-dir: cleanup-db-cluster-dir:
strategy: strategy:
@@ -47,7 +47,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
+4 -4
View File
@@ -28,8 +28,8 @@ defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: config-export-${{github.ref}} group: ${{ github.workflow }}-${{ github.ref }}
jobs: jobs:
config-export: config-export:
strategy: strategy:
@@ -49,7 +49,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
@@ -67,7 +67,7 @@ jobs:
output: ${{ runner.temp }}/results output: ${{ runner.temp }}/results
upload-database: false upload-database: false
- name: Upload SARIF - name: Upload SARIF
uses: actions/upload-artifact@v6 uses: actions/upload-artifact@v4
with: with:
name: config-export-${{ matrix.os }}-${{ matrix.version }}.sarif.json name: config-export-${{ matrix.os }}-${{ matrix.version }}.sarif.json
path: ${{ runner.temp }}/results/javascript.sarif path: ${{ runner.temp }}/results/javascript.sarif
+3 -3
View File
@@ -28,8 +28,8 @@ defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: config-input-${{github.ref}} group: ${{ github.workflow }}-${{ github.ref }}
jobs: jobs:
config-input: config-input:
strategy: strategy:
@@ -47,7 +47,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Install Node.js - name: Install Node.js
uses: actions/setup-node@v6 uses: actions/setup-node@v6
with: with:
+3 -3
View File
@@ -28,8 +28,8 @@ defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: cpp-deptrace-disabled-${{github.ref}} group: ${{ github.workflow }}-${{ github.ref }}
jobs: jobs:
cpp-deptrace-disabled: cpp-deptrace-disabled:
strategy: strategy:
@@ -51,7 +51,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
+3 -3
View File
@@ -28,8 +28,8 @@ defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: cpp-deptrace-enabled-on-macos-${{github.ref}} group: ${{ github.workflow }}-${{ github.ref }}
jobs: jobs:
cpp-deptrace-enabled-on-macos: cpp-deptrace-enabled-on-macos:
strategy: strategy:
@@ -49,7 +49,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
+3 -3
View File
@@ -28,8 +28,8 @@ defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: cpp-deptrace-enabled-${{github.ref}} group: ${{ github.workflow }}-${{ github.ref }}
jobs: jobs:
cpp-deptrace-enabled: cpp-deptrace-enabled:
strategy: strategy:
@@ -51,7 +51,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
+4 -4
View File
@@ -28,8 +28,8 @@ defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: diagnostics-export-${{github.ref}} group: ${{ github.workflow }}-${{ github.ref }}
jobs: jobs:
diagnostics-export: diagnostics-export:
strategy: strategy:
@@ -49,7 +49,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
@@ -78,7 +78,7 @@ jobs:
output: ${{ runner.temp }}/results output: ${{ runner.temp }}/results
upload-database: false upload-database: false
- name: Upload SARIF - name: Upload SARIF
uses: actions/upload-artifact@v6 uses: actions/upload-artifact@v4
with: with:
name: diagnostics-export-${{ matrix.os }}-${{ matrix.version }}.sarif.json name: diagnostics-export-${{ matrix.os }}-${{ matrix.version }}.sarif.json
path: ${{ runner.temp }}/results/javascript.sarif path: ${{ runner.temp }}/results/javascript.sarif
+4 -20
View File
@@ -27,11 +27,6 @@ on:
description: The version of Go to install description: The version of Go to install
required: false required: false
default: '>=1.21.0' default: '>=1.21.0'
dotnet-version:
type: string
description: The version of .NET to install
required: false
default: 9.x
workflow_call: workflow_call:
inputs: inputs:
go-version: go-version:
@@ -39,18 +34,12 @@ on:
description: The version of Go to install description: The version of Go to install
required: false required: false
default: '>=1.21.0' default: '>=1.21.0'
dotnet-version:
type: string
description: The version of .NET to install
required: false
default: 9.x
defaults: defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: group: ${{ github.workflow }}-${{ github.ref }}
export-file-baseline-information-${{github.ref}}-${{inputs.go-version}}-${{inputs.dotnet-version}}
jobs: jobs:
export-file-baseline-information: export-file-baseline-information:
strategy: strategy:
@@ -72,7 +61,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
@@ -85,10 +74,6 @@ jobs:
with: with:
go-version: ${{ inputs.go-version || '>=1.21.0' }} go-version: ${{ inputs.go-version || '>=1.21.0' }}
cache: false cache: false
- name: Install .NET
uses: actions/setup-dotnet@v5
with:
dotnet-version: ${{ inputs.dotnet-version || '9.x' }}
- uses: ./../action/init - uses: ./../action/init
id: init id: init
with: with:
@@ -100,7 +85,7 @@ jobs:
with: with:
output: ${{ runner.temp }}/results output: ${{ runner.temp }}/results
- name: Upload SARIF - name: Upload SARIF
uses: actions/upload-artifact@v6 uses: actions/upload-artifact@v4
with: with:
name: with-baseline-information-${{ matrix.os }}-${{ matrix.version }}.sarif.json name: with-baseline-information-${{ matrix.os }}-${{ matrix.version }}.sarif.json
path: ${{ runner.temp }}/results/javascript.sarif path: ${{ runner.temp }}/results/javascript.sarif
@@ -125,6 +110,5 @@ jobs:
fi fi
done done
env: env:
CODEQL_ACTION_SKIP_FILE_COVERAGE_ON_PRS: false
CODEQL_ACTION_SUBLANGUAGE_FILE_COVERAGE: true CODEQL_ACTION_SUBLANGUAGE_FILE_COVERAGE: true
CODEQL_ACTION_TEST_MODE: true CODEQL_ACTION_TEST_MODE: true
+3 -3
View File
@@ -28,8 +28,8 @@ defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: extractor-ram-threads-${{github.ref}} group: ${{ github.workflow }}-${{ github.ref }}
jobs: jobs:
extractor-ram-threads: extractor-ram-threads:
strategy: strategy:
@@ -47,7 +47,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
+15 -4
View File
@@ -28,8 +28,8 @@ defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: global-proxy-${{github.ref}} group: ${{ github.workflow }}-${{ github.ref }}
jobs: jobs:
global-proxy: global-proxy:
strategy: strategy:
@@ -48,8 +48,20 @@ jobs:
timeout-minutes: 45 timeout-minutes: 45
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
# These steps are required to initialise the `gh` cli in a container that doesn't
# come pre-installed with it. The reason for that is that this is later
# needed by the `prepare-test` workflow to find the latest release of CodeQL.
- name: Set up GitHub CLI
run: |
apt update
apt install -y curl libreadline8 gnupg2 software-properties-common zstd
curl -fsSL https://cli.github.com/packages/githubcli-archive-keyring.gpg | dd of=/usr/share/keyrings/githubcli-archive-keyring.gpg
apt-key add /usr/share/keyrings/githubcli-archive-keyring.gpg
apt-add-repository https://cli.github.com/packages
apt install -y gh
env: {}
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
@@ -64,7 +76,6 @@ jobs:
- uses: ./../action/analyze - uses: ./../action/analyze
env: env:
https_proxy: http://squid-proxy:3128 https_proxy: http://squid-proxy:3128
CODEQL_ACTION_TOLERATE_MISSING_GIT_VERSION: true
CODEQL_ACTION_TEST_MODE: true CODEQL_ACTION_TEST_MODE: true
container: container:
image: ubuntu:22.04 image: ubuntu:22.04
+3 -18
View File
@@ -27,11 +27,6 @@ on:
description: The version of Go to install description: The version of Go to install
required: false required: false
default: '>=1.21.0' default: '>=1.21.0'
dotnet-version:
type: string
description: The version of .NET to install
required: false
default: 9.x
workflow_call: workflow_call:
inputs: inputs:
go-version: go-version:
@@ -39,18 +34,12 @@ on:
description: The version of Go to install description: The version of Go to install
required: false required: false
default: '>=1.21.0' default: '>=1.21.0'
dotnet-version:
type: string
description: The version of .NET to install
required: false
default: 9.x
defaults: defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: group: ${{ github.workflow }}-${{ github.ref }}
go-custom-queries-${{github.ref}}-${{inputs.go-version}}-${{inputs.dotnet-version}}
jobs: jobs:
go-custom-queries: go-custom-queries:
strategy: strategy:
@@ -70,7 +59,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
@@ -83,10 +72,6 @@ jobs:
with: with:
go-version: ${{ inputs.go-version || '>=1.21.0' }} go-version: ${{ inputs.go-version || '>=1.21.0' }}
cache: false cache: false
- name: Install .NET
uses: actions/setup-dotnet@v5
with:
dotnet-version: ${{ inputs.dotnet-version || '9.x' }}
- uses: ./../action/init - uses: ./../action/init
with: with:
languages: go languages: go
@@ -38,8 +38,8 @@ defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: go-indirect-tracing-workaround-diagnostic-${{github.ref}}-${{inputs.go-version}} group: ${{ github.workflow }}-${{ github.ref }}
jobs: jobs:
go-indirect-tracing-workaround-diagnostic: go-indirect-tracing-workaround-diagnostic:
strategy: strategy:
@@ -57,7 +57,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
@@ -38,9 +38,8 @@ defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: group: ${{ github.workflow }}-${{ github.ref }}
go-indirect-tracing-workaround-no-file-program-${{github.ref}}-${{inputs.go-version}}
jobs: jobs:
go-indirect-tracing-workaround-no-file-program: go-indirect-tracing-workaround-no-file-program:
strategy: strategy:
@@ -58,7 +57,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
+3 -3
View File
@@ -38,8 +38,8 @@ defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: go-indirect-tracing-workaround-${{github.ref}}-${{inputs.go-version}} group: ${{ github.workflow }}-${{ github.ref }}
jobs: jobs:
go-indirect-tracing-workaround: go-indirect-tracing-workaround:
strategy: strategy:
@@ -57,7 +57,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
+3 -3
View File
@@ -38,8 +38,8 @@ defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: go-tracing-autobuilder-${{github.ref}}-${{inputs.go-version}} group: ${{ github.workflow }}-${{ github.ref }}
jobs: jobs:
go-tracing-autobuilder: go-tracing-autobuilder:
strategy: strategy:
@@ -91,7 +91,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
+3 -3
View File
@@ -38,8 +38,8 @@ defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: go-tracing-custom-build-steps-${{github.ref}}-${{inputs.go-version}} group: ${{ github.workflow }}-${{ github.ref }}
jobs: jobs:
go-tracing-custom-build-steps: go-tracing-custom-build-steps:
strategy: strategy:
@@ -91,7 +91,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
+3 -3
View File
@@ -38,8 +38,8 @@ defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: go-tracing-legacy-workflow-${{github.ref}}-${{inputs.go-version}} group: ${{ github.workflow }}-${{ github.ref }}
jobs: jobs:
go-tracing-legacy-workflow: go-tracing-legacy-workflow:
strategy: strategy:
@@ -91,7 +91,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
+3 -6
View File
@@ -8,6 +8,9 @@ env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
GO111MODULE: auto GO111MODULE: auto
on: on:
push:
paths:
- .github/workflows/__go.yml
workflow_dispatch: workflow_dispatch:
inputs: inputs:
go-version: go-version:
@@ -15,11 +18,6 @@ on:
description: The version of Go to install description: The version of Go to install
required: false required: false
default: '>=1.21.0' default: '>=1.21.0'
dotnet-version:
type: string
description: The version of .NET to install
required: false
default: 9.x
jobs: jobs:
go-custom-queries: go-custom-queries:
name: 'Go: Custom queries' name: 'Go: Custom queries'
@@ -29,7 +27,6 @@ jobs:
uses: ./.github/workflows/__go-custom-queries.yml uses: ./.github/workflows/__go-custom-queries.yml
with: with:
go-version: ${{ inputs.go-version }} go-version: ${{ inputs.go-version }}
dotnet-version: ${{ inputs.dotnet-version }}
go-indirect-tracing-workaround-diagnostic: go-indirect-tracing-workaround-diagnostic:
name: 'Go: diagnostic when Go is changed after init step' name: 'Go: diagnostic when Go is changed after init step'
permissions: permissions:
+3 -3
View File
@@ -28,8 +28,8 @@ defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: init-with-registries-${{github.ref}} group: ${{ github.workflow }}-${{ github.ref }}
jobs: jobs:
init-with-registries: init-with-registries:
strategy: strategy:
@@ -52,7 +52,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
+3 -3
View File
@@ -28,8 +28,8 @@ defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: javascript-source-root-${{github.ref}} group: ${{ github.workflow }}-${{ github.ref }}
jobs: jobs:
javascript-source-root: javascript-source-root:
strategy: strategy:
@@ -51,7 +51,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
+4 -4
View File
@@ -28,8 +28,8 @@ defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: job-run-uuid-sarif-${{github.ref}} group: ${{ github.workflow }}-${{ github.ref }}
jobs: jobs:
job-run-uuid-sarif: job-run-uuid-sarif:
strategy: strategy:
@@ -47,7 +47,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
@@ -64,7 +64,7 @@ jobs:
with: with:
output: ${{ runner.temp }}/results output: ${{ runner.temp }}/results
- name: Upload SARIF - name: Upload SARIF
uses: actions/upload-artifact@v6 uses: actions/upload-artifact@v4
with: with:
name: ${{ matrix.os }}-${{ matrix.version }}.sarif.json name: ${{ matrix.os }}-${{ matrix.version }}.sarif.json
path: ${{ runner.temp }}/results/javascript.sarif path: ${{ runner.temp }}/results/javascript.sarif
+3 -3
View File
@@ -28,8 +28,8 @@ defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: language-aliases-${{github.ref}} group: ${{ github.workflow }}-${{ github.ref }}
jobs: jobs:
language-aliases: language-aliases:
strategy: strategy:
@@ -47,7 +47,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
+3 -18
View File
@@ -32,11 +32,6 @@ on:
description: The version of Python to install description: The version of Python to install
required: false required: false
default: '3.13' default: '3.13'
dotnet-version:
type: string
description: The version of .NET to install
required: false
default: 9.x
workflow_call: workflow_call:
inputs: inputs:
go-version: go-version:
@@ -49,18 +44,12 @@ on:
description: The version of Python to install description: The version of Python to install
required: false required: false
default: '3.13' default: '3.13'
dotnet-version:
type: string
description: The version of .NET to install
required: false
default: 9.x
defaults: defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: group: ${{ github.workflow }}-${{ github.ref }}
local-bundle-${{github.ref}}-${{inputs.go-version}}-${{inputs.python-version}}-${{inputs.dotnet-version}}
jobs: jobs:
local-bundle: local-bundle:
strategy: strategy:
@@ -78,7 +67,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
@@ -96,10 +85,6 @@ jobs:
uses: actions/setup-python@v6 uses: actions/setup-python@v6
with: with:
python-version: ${{ inputs.python-version || '3.13' }} python-version: ${{ inputs.python-version || '3.13' }}
- name: Install .NET
uses: actions/setup-dotnet@v5
with:
dotnet-version: ${{ inputs.dotnet-version || '9.x' }}
- name: Fetch latest CodeQL bundle - name: Fetch latest CodeQL bundle
run: | run: |
wget https://github.com/github/codeql-action/releases/latest/download/codeql-bundle-linux64.tar.zst wget https://github.com/github/codeql-action/releases/latest/download/codeql-bundle-linux64.tar.zst
+3 -18
View File
@@ -32,11 +32,6 @@ on:
description: The version of Python to install description: The version of Python to install
required: false required: false
default: '3.13' default: '3.13'
dotnet-version:
type: string
description: The version of .NET to install
required: false
default: 9.x
workflow_call: workflow_call:
inputs: inputs:
go-version: go-version:
@@ -49,18 +44,12 @@ on:
description: The version of Python to install description: The version of Python to install
required: false required: false
default: '3.13' default: '3.13'
dotnet-version:
type: string
description: The version of .NET to install
required: false
default: 9.x
defaults: defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: group: ${{ github.workflow }}-${{ github.ref }}
multi-language-autodetect-${{github.ref}}-${{inputs.go-version}}-${{inputs.python-version}}-${{inputs.dotnet-version}}
jobs: jobs:
multi-language-autodetect: multi-language-autodetect:
strategy: strategy:
@@ -112,7 +101,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
@@ -130,10 +119,6 @@ jobs:
uses: actions/setup-python@v6 uses: actions/setup-python@v6
with: with:
python-version: ${{ inputs.python-version || '3.13' }} python-version: ${{ inputs.python-version || '3.13' }}
- name: Install .NET
uses: actions/setup-dotnet@v5
with:
dotnet-version: ${{ inputs.dotnet-version || '9.x' }}
- name: Use Xcode 16 - name: Use Xcode 16
if: runner.os == 'macOS' && matrix.version != 'nightly-latest' if: runner.os == 'macOS' && matrix.version != 'nightly-latest'
run: sudo xcode-select -s "/Applications/Xcode_16.app" run: sudo xcode-select -s "/Applications/Xcode_16.app"
+3 -3
View File
@@ -28,8 +28,8 @@ defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: overlay-init-fallback-${{github.ref}} group: ${{ github.workflow }}-${{ github.ref }}
jobs: jobs:
overlay-init-fallback: overlay-init-fallback:
strategy: strategy:
@@ -49,7 +49,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
@@ -32,11 +32,6 @@ on:
description: The version of Python to install description: The version of Python to install
required: false required: false
default: '3.13' default: '3.13'
dotnet-version:
type: string
description: The version of .NET to install
required: false
default: 9.x
workflow_call: workflow_call:
inputs: inputs:
go-version: go-version:
@@ -49,18 +44,12 @@ on:
description: The version of Python to install description: The version of Python to install
required: false required: false
default: '3.13' default: '3.13'
dotnet-version:
type: string
description: The version of .NET to install
required: false
default: 9.x
defaults: defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: group: ${{ github.workflow }}-${{ github.ref }}
packaging-codescanning-config-inputs-js-${{github.ref}}-${{inputs.go-version}}-${{inputs.python-version}}-${{inputs.dotnet-version}}
jobs: jobs:
packaging-codescanning-config-inputs-js: packaging-codescanning-config-inputs-js:
strategy: strategy:
@@ -82,7 +71,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Install Node.js - name: Install Node.js
uses: actions/setup-node@v6 uses: actions/setup-node@v6
with: with:
@@ -107,10 +96,6 @@ jobs:
uses: actions/setup-python@v6 uses: actions/setup-python@v6
with: with:
python-version: ${{ inputs.python-version || '3.13' }} python-version: ${{ inputs.python-version || '3.13' }}
- name: Install .NET
uses: actions/setup-dotnet@v5
with:
dotnet-version: ${{ inputs.dotnet-version || '9.x' }}
- uses: ./../action/init - uses: ./../action/init
with: with:
config-file: .github/codeql/codeql-config-packaging3.yml config-file: .github/codeql/codeql-config-packaging3.yml
+3 -18
View File
@@ -27,11 +27,6 @@ on:
description: The version of Go to install description: The version of Go to install
required: false required: false
default: '>=1.21.0' default: '>=1.21.0'
dotnet-version:
type: string
description: The version of .NET to install
required: false
default: 9.x
workflow_call: workflow_call:
inputs: inputs:
go-version: go-version:
@@ -39,18 +34,12 @@ on:
description: The version of Go to install description: The version of Go to install
required: false required: false
default: '>=1.21.0' default: '>=1.21.0'
dotnet-version:
type: string
description: The version of .NET to install
required: false
default: 9.x
defaults: defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: group: ${{ github.workflow }}-${{ github.ref }}
packaging-config-inputs-js-${{github.ref}}-${{inputs.go-version}}-${{inputs.dotnet-version}}
jobs: jobs:
packaging-config-inputs-js: packaging-config-inputs-js:
strategy: strategy:
@@ -72,7 +61,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Install Node.js - name: Install Node.js
uses: actions/setup-node@v6 uses: actions/setup-node@v6
with: with:
@@ -92,10 +81,6 @@ jobs:
with: with:
go-version: ${{ inputs.go-version || '>=1.21.0' }} go-version: ${{ inputs.go-version || '>=1.21.0' }}
cache: false cache: false
- name: Install .NET
uses: actions/setup-dotnet@v5
with:
dotnet-version: ${{ inputs.dotnet-version || '9.x' }}
- uses: ./../action/init - uses: ./../action/init
with: with:
config-file: .github/codeql/codeql-config-packaging3.yml config-file: .github/codeql/codeql-config-packaging3.yml
+3 -18
View File
@@ -27,11 +27,6 @@ on:
description: The version of Go to install description: The version of Go to install
required: false required: false
default: '>=1.21.0' default: '>=1.21.0'
dotnet-version:
type: string
description: The version of .NET to install
required: false
default: 9.x
workflow_call: workflow_call:
inputs: inputs:
go-version: go-version:
@@ -39,18 +34,12 @@ on:
description: The version of Go to install description: The version of Go to install
required: false required: false
default: '>=1.21.0' default: '>=1.21.0'
dotnet-version:
type: string
description: The version of .NET to install
required: false
default: 9.x
defaults: defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: group: ${{ github.workflow }}-${{ github.ref }}
packaging-config-js-${{github.ref}}-${{inputs.go-version}}-${{inputs.dotnet-version}}
jobs: jobs:
packaging-config-js: packaging-config-js:
strategy: strategy:
@@ -72,7 +61,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Install Node.js - name: Install Node.js
uses: actions/setup-node@v6 uses: actions/setup-node@v6
with: with:
@@ -92,10 +81,6 @@ jobs:
with: with:
go-version: ${{ inputs.go-version || '>=1.21.0' }} go-version: ${{ inputs.go-version || '>=1.21.0' }}
cache: false cache: false
- name: Install .NET
uses: actions/setup-dotnet@v5
with:
dotnet-version: ${{ inputs.dotnet-version || '9.x' }}
- uses: ./../action/init - uses: ./../action/init
with: with:
config-file: .github/codeql/codeql-config-packaging.yml config-file: .github/codeql/codeql-config-packaging.yml
+3 -18
View File
@@ -27,11 +27,6 @@ on:
description: The version of Go to install description: The version of Go to install
required: false required: false
default: '>=1.21.0' default: '>=1.21.0'
dotnet-version:
type: string
description: The version of .NET to install
required: false
default: 9.x
workflow_call: workflow_call:
inputs: inputs:
go-version: go-version:
@@ -39,18 +34,12 @@ on:
description: The version of Go to install description: The version of Go to install
required: false required: false
default: '>=1.21.0' default: '>=1.21.0'
dotnet-version:
type: string
description: The version of .NET to install
required: false
default: 9.x
defaults: defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: group: ${{ github.workflow }}-${{ github.ref }}
packaging-inputs-js-${{github.ref}}-${{inputs.go-version}}-${{inputs.dotnet-version}}
jobs: jobs:
packaging-inputs-js: packaging-inputs-js:
strategy: strategy:
@@ -72,7 +61,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Install Node.js - name: Install Node.js
uses: actions/setup-node@v6 uses: actions/setup-node@v6
with: with:
@@ -92,10 +81,6 @@ jobs:
with: with:
go-version: ${{ inputs.go-version || '>=1.21.0' }} go-version: ${{ inputs.go-version || '>=1.21.0' }}
cache: false cache: false
- name: Install .NET
uses: actions/setup-dotnet@v5
with:
dotnet-version: ${{ inputs.dotnet-version || '9.x' }}
- uses: ./../action/init - uses: ./../action/init
with: with:
config-file: .github/codeql/codeql-config-packaging2.yml config-file: .github/codeql/codeql-config-packaging2.yml
+6 -6
View File
@@ -28,8 +28,8 @@ defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: quality-queries-${{github.ref}} group: ${{ github.workflow }}-${{ github.ref }}
jobs: jobs:
quality-queries: quality-queries:
strategy: strategy:
@@ -63,7 +63,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
@@ -83,7 +83,7 @@ jobs:
post-processed-sarif-path: ${{ runner.temp }}/post-processed post-processed-sarif-path: ${{ runner.temp }}/post-processed
- name: Upload security SARIF - name: Upload security SARIF
if: contains(matrix.analysis-kinds, 'code-scanning') if: contains(matrix.analysis-kinds, 'code-scanning')
uses: actions/upload-artifact@v6 uses: actions/upload-artifact@v4
with: with:
name: | name: |
quality-queries-${{ matrix.os }}-${{ matrix.version }}-${{ matrix.analysis-kinds }}.sarif.json quality-queries-${{ matrix.os }}-${{ matrix.version }}-${{ matrix.analysis-kinds }}.sarif.json
@@ -91,14 +91,14 @@ jobs:
retention-days: 7 retention-days: 7
- name: Upload quality SARIF - name: Upload quality SARIF
if: contains(matrix.analysis-kinds, 'code-quality') if: contains(matrix.analysis-kinds, 'code-quality')
uses: actions/upload-artifact@v6 uses: actions/upload-artifact@v4
with: with:
name: | name: |
quality-queries-${{ matrix.os }}-${{ matrix.version }}-${{ matrix.analysis-kinds }}.quality.sarif.json quality-queries-${{ matrix.os }}-${{ matrix.version }}-${{ matrix.analysis-kinds }}.quality.sarif.json
path: ${{ runner.temp }}/results/javascript.quality.sarif path: ${{ runner.temp }}/results/javascript.quality.sarif
retention-days: 7 retention-days: 7
- name: Upload post-processed SARIF - name: Upload post-processed SARIF
uses: actions/upload-artifact@v6 uses: actions/upload-artifact@v4
with: with:
name: | name: |
post-processed-${{ matrix.os }}-${{ matrix.version }}-${{ matrix.analysis-kinds }}.sarif.json post-processed-${{ matrix.os }}-${{ matrix.version }}-${{ matrix.analysis-kinds }}.sarif.json
+3 -18
View File
@@ -32,11 +32,6 @@ on:
description: The version of Python to install description: The version of Python to install
required: false required: false
default: '3.13' default: '3.13'
dotnet-version:
type: string
description: The version of .NET to install
required: false
default: 9.x
workflow_call: workflow_call:
inputs: inputs:
go-version: go-version:
@@ -49,18 +44,12 @@ on:
description: The version of Python to install description: The version of Python to install
required: false required: false
default: '3.13' default: '3.13'
dotnet-version:
type: string
description: The version of .NET to install
required: false
default: 9.x
defaults: defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: group: ${{ github.workflow }}-${{ github.ref }}
remote-config-${{github.ref}}-${{inputs.go-version}}-${{inputs.python-version}}-${{inputs.dotnet-version}}
jobs: jobs:
remote-config: remote-config:
strategy: strategy:
@@ -80,7 +69,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
@@ -98,10 +87,6 @@ jobs:
uses: actions/setup-python@v6 uses: actions/setup-python@v6
with: with:
python-version: ${{ inputs.python-version || '3.13' }} python-version: ${{ inputs.python-version || '3.13' }}
- name: Install .NET
uses: actions/setup-dotnet@v5
with:
dotnet-version: ${{ inputs.dotnet-version || '9.x' }}
- uses: ./../action/init - uses: ./../action/init
with: with:
tools: ${{ steps.prepare-test.outputs.tools-url }} tools: ${{ steps.prepare-test.outputs.tools-url }}
+3 -3
View File
@@ -28,8 +28,8 @@ defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: resolve-environment-action-${{github.ref}} group: ${{ github.workflow }}-${{ github.ref }}
jobs: jobs:
resolve-environment-action: resolve-environment-action:
strategy: strategy:
@@ -51,7 +51,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
+4 -4
View File
@@ -28,8 +28,8 @@ defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: rubocop-multi-language-${{github.ref}} group: ${{ github.workflow }}-${{ github.ref }}
jobs: jobs:
rubocop-multi-language: rubocop-multi-language:
strategy: strategy:
@@ -47,7 +47,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
@@ -56,7 +56,7 @@ jobs:
use-all-platform-bundle: 'false' use-all-platform-bundle: 'false'
setup-kotlin: 'true' setup-kotlin: 'true'
- name: Set up Ruby - name: Set up Ruby
uses: ruby/setup-ruby@90be1154f987f4dc0fe0dd0feedac9e473aa4ba8 # v1.286.0 uses: ruby/setup-ruby@ab177d40ee5483edb974554986f56b33477e21d0 # v1.265.0
with: with:
ruby-version: 2.6 ruby-version: 2.6
- name: Install Code Scanning integration - name: Install Code Scanning integration
+3 -3
View File
@@ -28,8 +28,8 @@ defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: ruby-${{github.ref}} group: ${{ github.workflow }}-${{ github.ref }}
jobs: jobs:
ruby: ruby:
strategy: strategy:
@@ -57,7 +57,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
+3 -3
View File
@@ -28,8 +28,8 @@ defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: rust-${{github.ref}} group: ${{ github.workflow }}-${{ github.ref }}
jobs: jobs:
rust: rust:
strategy: strategy:
@@ -55,7 +55,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
+3 -17
View File
@@ -27,11 +27,6 @@ on:
description: The version of Go to install description: The version of Go to install
required: false required: false
default: '>=1.21.0' default: '>=1.21.0'
dotnet-version:
type: string
description: The version of .NET to install
required: false
default: 9.x
workflow_call: workflow_call:
inputs: inputs:
go-version: go-version:
@@ -39,17 +34,12 @@ on:
description: The version of Go to install description: The version of Go to install
required: false required: false
default: '>=1.21.0' default: '>=1.21.0'
dotnet-version:
type: string
description: The version of .NET to install
required: false
default: 9.x
defaults: defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: split-workflow-${{github.ref}}-${{inputs.go-version}}-${{inputs.dotnet-version}} group: ${{ github.workflow }}-${{ github.ref }}
jobs: jobs:
split-workflow: split-workflow:
strategy: strategy:
@@ -77,7 +67,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
@@ -90,10 +80,6 @@ jobs:
with: with:
go-version: ${{ inputs.go-version || '>=1.21.0' }} go-version: ${{ inputs.go-version || '>=1.21.0' }}
cache: false cache: false
- name: Install .NET
uses: actions/setup-dotnet@v5
with:
dotnet-version: ${{ inputs.dotnet-version || '9.x' }}
- uses: ./../action/init - uses: ./../action/init
with: with:
config-file: .github/codeql/codeql-config-packaging3.yml config-file: .github/codeql/codeql-config-packaging3.yml
+3 -3
View File
@@ -28,8 +28,8 @@ defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: start-proxy-${{github.ref}} group: ${{ github.workflow }}-${{ github.ref }}
jobs: jobs:
start-proxy: start-proxy:
strategy: strategy:
@@ -51,7 +51,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
+4 -4
View File
@@ -28,8 +28,8 @@ defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: submit-sarif-failure-${{github.ref}} group: ${{ github.workflow }}-${{ github.ref }}
jobs: jobs:
submit-sarif-failure: submit-sarif-failure:
strategy: strategy:
@@ -52,7 +52,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
@@ -60,7 +60,7 @@ jobs:
version: ${{ matrix.version }} version: ${{ matrix.version }}
use-all-platform-bundle: 'false' use-all-platform-bundle: 'false'
setup-kotlin: 'true' setup-kotlin: 'true'
- uses: actions/checkout@v6 - uses: actions/checkout@v5
- uses: ./init - uses: ./init
with: with:
languages: javascript languages: javascript
+3 -3
View File
@@ -28,8 +28,8 @@ defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: swift-autobuild-${{github.ref}} group: ${{ github.workflow }}-${{ github.ref }}
jobs: jobs:
swift-autobuild: swift-autobuild:
strategy: strategy:
@@ -47,7 +47,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
+3 -18
View File
@@ -27,11 +27,6 @@ on:
description: The version of Go to install description: The version of Go to install
required: false required: false
default: '>=1.21.0' default: '>=1.21.0'
dotnet-version:
type: string
description: The version of .NET to install
required: false
default: 9.x
workflow_call: workflow_call:
inputs: inputs:
go-version: go-version:
@@ -39,18 +34,12 @@ on:
description: The version of Go to install description: The version of Go to install
required: false required: false
default: '>=1.21.0' default: '>=1.21.0'
dotnet-version:
type: string
description: The version of .NET to install
required: false
default: 9.x
defaults: defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: group: ${{ github.workflow }}-${{ github.ref }}
swift-custom-build-${{github.ref}}-${{inputs.go-version}}-${{inputs.dotnet-version}}
jobs: jobs:
swift-custom-build: swift-custom-build:
strategy: strategy:
@@ -72,7 +61,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
@@ -85,10 +74,6 @@ jobs:
with: with:
go-version: ${{ inputs.go-version || '>=1.21.0' }} go-version: ${{ inputs.go-version || '>=1.21.0' }}
cache: false cache: false
- name: Install .NET
uses: actions/setup-dotnet@v5
with:
dotnet-version: ${{ inputs.dotnet-version || '9.x' }}
- name: Use Xcode 16 - name: Use Xcode 16
if: runner.os == 'macOS' && matrix.version != 'nightly-latest' if: runner.os == 'macOS' && matrix.version != 'nightly-latest'
run: sudo xcode-select -s "/Applications/Xcode_16.app" run: sudo xcode-select -s "/Applications/Xcode_16.app"
+3 -18
View File
@@ -32,11 +32,6 @@ on:
description: The version of Python to install description: The version of Python to install
required: false required: false
default: '3.13' default: '3.13'
dotnet-version:
type: string
description: The version of .NET to install
required: false
default: 9.x
workflow_call: workflow_call:
inputs: inputs:
go-version: go-version:
@@ -49,18 +44,12 @@ on:
description: The version of Python to install description: The version of Python to install
required: false required: false
default: '3.13' default: '3.13'
dotnet-version:
type: string
description: The version of .NET to install
required: false
default: 9.x
defaults: defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: group: ${{ github.workflow }}-${{ github.ref }}
unset-environment-${{github.ref}}-${{inputs.go-version}}-${{inputs.python-version}}-${{inputs.dotnet-version}}
jobs: jobs:
unset-environment: unset-environment:
strategy: strategy:
@@ -80,7 +69,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
@@ -98,10 +87,6 @@ jobs:
uses: actions/setup-python@v6 uses: actions/setup-python@v6
with: with:
python-version: ${{ inputs.python-version || '3.13' }} python-version: ${{ inputs.python-version || '3.13' }}
- name: Install .NET
uses: actions/setup-dotnet@v5
with:
dotnet-version: ${{ inputs.dotnet-version || '9.x' }}
- uses: ./../action/init - uses: ./../action/init
id: init id: init
with: with:
+3 -18
View File
@@ -32,11 +32,6 @@ on:
description: The version of Python to install description: The version of Python to install
required: false required: false
default: '3.13' default: '3.13'
dotnet-version:
type: string
description: The version of .NET to install
required: false
default: 9.x
workflow_call: workflow_call:
inputs: inputs:
go-version: go-version:
@@ -49,18 +44,12 @@ on:
description: The version of Python to install description: The version of Python to install
required: false required: false
default: '3.13' default: '3.13'
dotnet-version:
type: string
description: The version of .NET to install
required: false
default: 9.x
defaults: defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: group: ${{ github.workflow }}-${{ github.ref }}
upload-ref-sha-input-${{github.ref}}-${{inputs.go-version}}-${{inputs.python-version}}-${{inputs.dotnet-version}}
jobs: jobs:
upload-ref-sha-input: upload-ref-sha-input:
strategy: strategy:
@@ -78,7 +67,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
@@ -96,10 +85,6 @@ jobs:
uses: actions/setup-python@v6 uses: actions/setup-python@v6
with: with:
python-version: ${{ inputs.python-version || '3.13' }} python-version: ${{ inputs.python-version || '3.13' }}
- name: Install .NET
uses: actions/setup-dotnet@v5
with:
dotnet-version: ${{ inputs.dotnet-version || '9.x' }}
- uses: ./../action/init - uses: ./../action/init
with: with:
tools: ${{ steps.prepare-test.outputs.tools-url }} tools: ${{ steps.prepare-test.outputs.tools-url }}
+3 -18
View File
@@ -32,11 +32,6 @@ on:
description: The version of Python to install description: The version of Python to install
required: false required: false
default: '3.13' default: '3.13'
dotnet-version:
type: string
description: The version of .NET to install
required: false
default: 9.x
workflow_call: workflow_call:
inputs: inputs:
go-version: go-version:
@@ -49,18 +44,12 @@ on:
description: The version of Python to install description: The version of Python to install
required: false required: false
default: '3.13' default: '3.13'
dotnet-version:
type: string
description: The version of .NET to install
required: false
default: 9.x
defaults: defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: group: ${{ github.workflow }}-${{ github.ref }}
upload-sarif-${{github.ref}}-${{inputs.go-version}}-${{inputs.python-version}}-${{inputs.dotnet-version}}
jobs: jobs:
upload-sarif: upload-sarif:
strategy: strategy:
@@ -85,7 +74,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
@@ -103,10 +92,6 @@ jobs:
uses: actions/setup-python@v6 uses: actions/setup-python@v6
with: with:
python-version: ${{ inputs.python-version || '3.13' }} python-version: ${{ inputs.python-version || '3.13' }}
- name: Install .NET
uses: actions/setup-dotnet@v5
with:
dotnet-version: ${{ inputs.dotnet-version || '9.x' }}
- uses: ./../action/init - uses: ./../action/init
with: with:
tools: ${{ steps.prepare-test.outputs.tools-url }} tools: ${{ steps.prepare-test.outputs.tools-url }}
+4 -19
View File
@@ -32,11 +32,6 @@ on:
description: The version of Python to install description: The version of Python to install
required: false required: false
default: '3.13' default: '3.13'
dotnet-version:
type: string
description: The version of .NET to install
required: false
default: 9.x
workflow_call: workflow_call:
inputs: inputs:
go-version: go-version:
@@ -49,18 +44,12 @@ on:
description: The version of Python to install description: The version of Python to install
required: false required: false
default: '3.13' default: '3.13'
dotnet-version:
type: string
description: The version of .NET to install
required: false
default: 9.x
defaults: defaults:
run: run:
shell: bash shell: bash
concurrency: concurrency:
cancel-in-progress: ${{ github.event_name == 'pull_request' || false }} cancel-in-progress: ${{ github.event_name == 'pull_request' }}
group: group: ${{ github.workflow }}-${{ github.ref }}
with-checkout-path-${{github.ref}}-${{inputs.go-version}}-${{inputs.python-version}}-${{inputs.dotnet-version}}
jobs: jobs:
with-checkout-path: with-checkout-path:
strategy: strategy:
@@ -78,7 +67,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
@@ -96,10 +85,6 @@ jobs:
uses: actions/setup-python@v6 uses: actions/setup-python@v6
with: with:
python-version: ${{ inputs.python-version || '3.13' }} python-version: ${{ inputs.python-version || '3.13' }}
- name: Install .NET
uses: actions/setup-dotnet@v5
with:
dotnet-version: ${{ inputs.dotnet-version || '9.x' }}
- name: Delete original checkout - name: Delete original checkout
run: | run: |
# delete the original checkout so we don't accidentally use it. # delete the original checkout so we don't accidentally use it.
@@ -108,7 +93,7 @@ jobs:
rm -rf ./* .github .git rm -rf ./* .github .git
# Check out the actions repo again, but at a different location. # Check out the actions repo again, but at a different location.
# choose an arbitrary SHA so that we can later test that the commit_oid is not from main # choose an arbitrary SHA so that we can later test that the commit_oid is not from main
- uses: actions/checkout@v6 - uses: actions/checkout@v5
with: with:
ref: 474bbf07f9247ffe1856c6a0f94aeeb10e7afee6 ref: 474bbf07f9247ffe1856c6a0f94aeeb10e7afee6
path: x/y/z/some-path path: x/y/z/some-path
@@ -15,14 +15,14 @@ defaults:
jobs: jobs:
check-expected-release-files: check-expected-release-files:
runs-on: ubuntu-slim runs-on: ubuntu-latest
permissions: permissions:
contents: read contents: read
steps: steps:
- name: Checkout CodeQL Action - name: Checkout CodeQL Action
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Check Expected Release Files - name: Check Expected Release Files
run: | run: |
bundle_version="$(cat "./src/defaults.json" | jq -r ".bundleVersion")" bundle_version="$(cat "./src/defaults.json" | jq -r ".bundleVersion")"
+5 -4
View File
@@ -4,6 +4,7 @@ on:
push: push:
branches: [main, releases/v*] branches: [main, releases/v*]
pull_request: pull_request:
branches: [main, releases/v*]
# Run checks on reopened draft PRs to support triggering PR checks on draft PRs that were opened # Run checks on reopened draft PRs to support triggering PR checks on draft PRs that were opened
# by other workflows. # by other workflows.
types: [opened, synchronize, reopened, ready_for_review] types: [opened, synchronize, reopened, ready_for_review]
@@ -31,7 +32,7 @@ jobs:
contents: read contents: read
steps: steps:
- uses: actions/checkout@v6 - uses: actions/checkout@v5
- name: Init with default CodeQL bundle from the VM image - name: Init with default CodeQL bundle from the VM image
id: init-default id: init-default
uses: ./init uses: ./init
@@ -80,7 +81,7 @@ jobs:
strategy: strategy:
fail-fast: false fail-fast: false
matrix: matrix:
os: [ubuntu-22.04,ubuntu-24.04,windows-2022,windows-2025,macos-14,macos-15] os: [ubuntu-22.04,ubuntu-24.04,windows-2022,windows-2025,macos-13,macos-14,macos-15]
tools: ${{ fromJson(needs.check-codeql-versions.outputs.versions) }} tools: ${{ fromJson(needs.check-codeql-versions.outputs.versions) }}
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
@@ -90,7 +91,7 @@ jobs:
steps: steps:
- name: Checkout - name: Checkout
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Initialize CodeQL - name: Initialize CodeQL
uses: ./init uses: ./init
id: init id: init
@@ -127,7 +128,7 @@ jobs:
steps: steps:
- name: Checkout - name: Checkout
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Initialize CodeQL - name: Initialize CodeQL
uses: ./init uses: ./init
with: with:
+2 -27
View File
@@ -6,11 +6,6 @@ env:
# Diff informed queries add an additional query filter which is not yet # Diff informed queries add an additional query filter which is not yet
# taken into account by these tests. # taken into account by these tests.
CODEQL_ACTION_DIFF_INFORMED_QUERIES: false CODEQL_ACTION_DIFF_INFORMED_QUERIES: false
# Specify overlay enablement manually to ensure stability around the exclude-from-incremental
# query filter. Here we only enable for the default code scanning suite.
CODEQL_ACTION_OVERLAY_ANALYSIS: true
CODEQL_ACTION_OVERLAY_ANALYSIS_JAVASCRIPT: false
CODEQL_ACTION_OVERLAY_ANALYSIS_CODE_SCANNING_JAVASCRIPT: true
on: on:
push: push:
@@ -58,7 +53,7 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Set up Node.js - name: Set up Node.js
uses: actions/setup-node@v6 uses: actions/setup-node@v6
@@ -75,33 +70,13 @@ jobs:
with: with:
version: ${{ matrix.version }} version: ${{ matrix.version }}
# On PRs, overlay analysis may change the config that is passed to the CLI. - name: Empty file
# Therefore, we have two variants of the following test, one for PRs and one for other events.
- name: Empty file (non-PR)
if: github.event_name != 'pull_request'
uses: ./../action/.github/actions/check-codescanning-config uses: ./../action/.github/actions/check-codescanning-config
with: with:
expected-config-file-contents: "{}" expected-config-file-contents: "{}"
languages: javascript languages: javascript
tools: ${{ steps.prepare-test.outputs.tools-url }} tools: ${{ steps.prepare-test.outputs.tools-url }}
- name: Empty file (PR)
if: github.event_name == 'pull_request'
uses: ./../action/.github/actions/check-codescanning-config
with:
expected-config-file-contents: |
{
"query-filters": [
{
"exclude": {
"tags": "exclude-from-incremental"
}
}
]
}
languages: javascript
tools: ${{ steps.prepare-test.outputs.tools-url }}
- name: Packs from input - name: Packs from input
if: success() || failure() if: success() || failure()
uses: ./../action/.github/actions/check-codescanning-config uses: ./../action/.github/actions/check-codescanning-config
@@ -45,7 +45,7 @@ jobs:
- name: Dump GitHub event - name: Dump GitHub event
run: cat "${GITHUB_EVENT_PATH}" run: cat "${GITHUB_EVENT_PATH}"
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
@@ -54,12 +54,6 @@ jobs:
- uses: actions/setup-go@v6 - uses: actions/setup-go@v6
with: with:
go-version: ^1.13.1 go-version: ^1.13.1
- name: Install .NET
uses: actions/setup-dotnet@v5
with:
dotnet-version: '9.x'
- name: Assert best-effort artifact scan completed
uses: ./../action/.github/actions/verify-debug-artifact-scan-completed
- uses: ./../action/init - uses: ./../action/init
with: with:
tools: ${{ steps.prepare-test.outputs.tools-url }} tools: ${{ steps.prepare-test.outputs.tools-url }}
@@ -85,7 +79,7 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: Download all artifacts - name: Download all artifacts
uses: actions/download-artifact@v7 uses: actions/download-artifact@v5
- name: Check expected artifacts exist - name: Check expected artifacts exist
run: | run: |
LANGUAGES="cpp csharp go java javascript python" LANGUAGES="cpp csharp go java javascript python"
+2 -8
View File
@@ -41,7 +41,7 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
@@ -50,12 +50,6 @@ jobs:
- uses: actions/setup-go@v6 - uses: actions/setup-go@v6
with: with:
go-version: ^1.13.1 go-version: ^1.13.1
- name: Install .NET
uses: actions/setup-dotnet@v5
with:
dotnet-version: '9.x'
- name: Assert best-effort artifact scan completed
uses: ./../action/.github/actions/verify-debug-artifact-scan-completed
- uses: ./../action/init - uses: ./../action/init
id: init id: init
with: with:
@@ -79,7 +73,7 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: Download all artifacts - name: Download all artifacts
uses: actions/download-artifact@v7 uses: actions/download-artifact@v5
- name: Check expected artifacts exist - name: Check expected artifacts exist
run: | run: |
VERSIONS="stable-v2.20.3 default linked nightly-latest" VERSIONS="stable-v2.20.3 default linked nightly-latest"
+1 -1
View File
@@ -16,7 +16,7 @@ permissions:
jobs: jobs:
sizeup: sizeup:
name: Label PR with size name: Label PR with size
runs-on: ubuntu-slim runs-on: ubuntu-latest
steps: steps:
- name: Run sizeup - name: Run sizeup
+15 -17
View File
@@ -24,7 +24,7 @@ defaults:
jobs: jobs:
merge-back: merge-back:
runs-on: ubuntu-slim runs-on: ubuntu-latest
environment: Automation environment: Automation
if: github.repository == 'github/codeql-action' if: github.repository == 'github/codeql-action'
env: env:
@@ -44,13 +44,10 @@ jobs:
GITHUB_CONTEXT: '${{ toJson(github) }}' GITHUB_CONTEXT: '${{ toJson(github) }}'
run: echo "${GITHUB_CONTEXT}" run: echo "${GITHUB_CONTEXT}"
- uses: actions/checkout@v6 - uses: actions/checkout@v5
with: with:
fetch-depth: 0 # ensure we have all tags and can push commits fetch-depth: 0 # ensure we have all tags and can push commits
- uses: actions/setup-node@v6 - uses: actions/setup-node@v6
- uses: actions/setup-python@v6
with:
python-version: '3.12'
- name: Update git config - name: Update git config
run: | run: |
@@ -123,15 +120,26 @@ jobs:
- name: Prepare partial Changelog - name: Prepare partial Changelog
env: env:
PARTIAL_CHANGELOG: "${{ runner.temp }}/partial_changelog.md" PARTIAL_CHANGELOG: "${{ runner.temp }}/partial_changelog.md"
VERSION: "${{ steps.getVersion.outputs.version }}"
run: | run: |
python .github/workflows/script/prepare_changelog.py CHANGELOG.md > $PARTIAL_CHANGELOG python .github/workflows/script/prepare_changelog.py CHANGELOG.md "$VERSION" > $PARTIAL_CHANGELOG
echo "::group::Partial CHANGELOG" echo "::group::Partial CHANGELOG"
cat $PARTIAL_CHANGELOG cat $PARTIAL_CHANGELOG
echo "::endgroup::" echo "::endgroup::"
- name: Create mergeback branch and PR
if: ${{ steps.check.outputs.exists != 'true' && endsWith(github.ref_name, steps.getVersion.outputs.latest_release_branch) }}
uses: ./.github/actions/prepare-mergeback-branch
with:
base: "${{ env.BASE_BRANCH }}"
head: "${{ env.HEAD_BRANCH }}"
branch: "${{ steps.getVersion.outputs.newBranch }}"
version: "${{ steps.getVersion.outputs.version }}"
token: "${{ secrets.GITHUB_TOKEN }}"
- name: Generate token - name: Generate token
uses: actions/create-github-app-token@v2.2.1 uses: actions/create-github-app-token@v2.1.4
id: app-token id: app-token
with: with:
app-id: ${{ vars.AUTOMATION_APP_ID }} app-id: ${{ vars.AUTOMATION_APP_ID }}
@@ -150,13 +158,3 @@ jobs:
--latest=false \ --latest=false \
--title "$VERSION" \ --title "$VERSION" \
--notes-file "$PARTIAL_CHANGELOG" --notes-file "$PARTIAL_CHANGELOG"
- name: Create mergeback branch and PR
if: ${{ endsWith(github.ref_name, steps.getVersion.outputs.latest_release_branch) }}
uses: ./.github/actions/prepare-mergeback-branch
with:
base: "${{ env.BASE_BRANCH }}"
head: "${{ env.HEAD_BRANCH }}"
branch: "${{ steps.getVersion.outputs.newBranch }}"
version: "${{ steps.getVersion.outputs.version }}"
token: "${{ secrets.GITHUB_TOKEN }}"
+3 -3
View File
@@ -32,7 +32,7 @@ jobs:
if: runner.os == 'Windows' if: runner.os == 'Windows'
run: git config --global core.autocrlf false run: git config --global core.autocrlf false
- uses: actions/checkout@v6 - uses: actions/checkout@v5
- name: Set up Node.js - name: Set up Node.js
uses: actions/setup-node@v6 uses: actions/setup-node@v6
@@ -91,7 +91,7 @@ jobs:
contents: read contents: read
steps: steps:
- uses: actions/checkout@v6 - uses: actions/checkout@v5
- id: head-version - id: head-version
name: Verify all Actions use the same Node version name: Verify all Actions use the same Node version
run: | run: |
@@ -106,7 +106,7 @@ jobs:
- id: checkout-base - id: checkout-base
name: 'Backport: Check out base ref' name: 'Backport: Check out base ref'
if: ${{ startsWith(github.head_ref, 'backport-') }} if: ${{ startsWith(github.head_ref, 'backport-') }}
uses: actions/checkout@v6 uses: actions/checkout@v5
with: with:
ref: ${{ env.BASE_REF }} ref: ${{ env.BASE_REF }}
+2 -2
View File
@@ -29,7 +29,7 @@ defaults:
jobs: jobs:
prepare: prepare:
name: "Prepare release" name: "Prepare release"
runs-on: ubuntu-slim runs-on: ubuntu-latest
if: github.repository == 'github/codeql-action' if: github.repository == 'github/codeql-action'
permissions: permissions:
@@ -44,7 +44,7 @@ jobs:
steps: steps:
- name: Checkout repository - name: Checkout repository
uses: actions/checkout@v6 uses: actions/checkout@v5
with: with:
fetch-depth: 0 # Need full history for calculation of diffs fetch-depth: 0 # Need full history for calculation of diffs
+21 -9
View File
@@ -1,10 +1,8 @@
name: 'Publish Immutable Action Version' name: 'Publish Immutable Action Version'
on: on:
push: release:
tags: types: [published]
# Match version tags, but not the major version tags.
- 'v[0-9]+.**'
defaults: defaults:
run: run:
@@ -12,16 +10,30 @@ defaults:
jobs: jobs:
publish: publish:
runs-on: ubuntu-slim runs-on: ubuntu-latest
permissions: permissions:
contents: read contents: read
id-token: write id-token: write
packages: write packages: write
steps: steps:
- name: Checkout repository - name: Check release name
uses: actions/checkout@v6 id: check
env:
- name: Publish immutable release RELEASE_NAME: ${{ github.event.release.name }}
run: |
echo "Release name: ${{ github.event.release.name }}"
if [[ $RELEASE_NAME == v* ]]; then
echo "This is a CodeQL Action release. Create an Immutable Action"
echo "is-action-release=true" >> $GITHUB_OUTPUT
else
echo "This is a CodeQL Bundle release. Do not create an Immutable Action"
echo "is-action-release=false" >> $GITHUB_OUTPUT
fi
- name: Checking out
if: steps.check.outputs.is-action-release == 'true'
uses: actions/checkout@v5
- name: Publish
if: steps.check.outputs.is-action-release == 'true'
id: publish id: publish
uses: actions/publish-immutable-action@v0.0.4 uses: actions/publish-immutable-action@v0.0.4
+1 -1
View File
@@ -31,7 +31,7 @@ jobs:
with: with:
python-version: 3.12 python-version: 3.12
- uses: actions/checkout@v6 - uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
+1 -1
View File
@@ -29,7 +29,7 @@ jobs:
contents: read # This permission is needed to allow the GitHub Actions workflow to read the contents of the repository. contents: read # This permission is needed to allow the GitHub Actions workflow to read the contents of the repository.
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Install Node.js - name: Install Node.js
uses: actions/setup-node@v6 uses: actions/setup-node@v6
+1 -1
View File
@@ -24,7 +24,7 @@ jobs:
pull-requests: write # needed to comment on the PR pull-requests: write # needed to comment on the PR
steps: steps:
- name: Checkout - name: Checkout
uses: actions/checkout@v6 uses: actions/checkout@v5
with: with:
fetch-depth: 0 fetch-depth: 0
ref: ${{ env.HEAD_REF }} ref: ${{ env.HEAD_REF }}
+4 -3
View File
@@ -52,7 +52,7 @@ jobs:
steps: steps:
- name: Checkout repository - name: Checkout repository
uses: actions/checkout@v6 uses: actions/checkout@v5
with: with:
fetch-depth: 0 # Need full history for calculation of diffs fetch-depth: 0 # Need full history for calculation of diffs
@@ -127,8 +127,9 @@ jobs:
env: env:
NEW_CHANGELOG: "${{ runner.temp }}/new_changelog.md" NEW_CHANGELOG: "${{ runner.temp }}/new_changelog.md"
PARTIAL_CHANGELOG: "${{ runner.temp }}/partial_changelog.md" PARTIAL_CHANGELOG: "${{ runner.temp }}/partial_changelog.md"
VERSION: "${{ needs.prepare.outputs.version }}"
run: | run: |
python .github/workflows/script/prepare_changelog.py $NEW_CHANGELOG > $PARTIAL_CHANGELOG python .github/workflows/script/prepare_changelog.py $NEW_CHANGELOG "$VERSION" > $PARTIAL_CHANGELOG
echo "::group::Partial CHANGELOG" echo "::group::Partial CHANGELOG"
cat $PARTIAL_CHANGELOG cat $PARTIAL_CHANGELOG
@@ -136,7 +137,7 @@ jobs:
- name: Generate token - name: Generate token
if: github.event_name == 'workflow_dispatch' if: github.event_name == 'workflow_dispatch'
uses: actions/create-github-app-token@v2.2.1 uses: actions/create-github-app-token@v2.1.4
id: app-token id: app-token
with: with:
app-id: ${{ vars.AUTOMATION_APP_ID }} app-id: ${{ vars.AUTOMATION_APP_ID }}
@@ -1,23 +0,0 @@
#!/usr/bin/env python3
import os
import re
cli_version = os.environ['CLI_VERSION']
# The GitHub Release for the new bundle version.
bundle_release_url = f"https://github.com/github/codeql-action/releases/tag/codeql-bundle-v{cli_version}"
# Get the PR number from the PR URL.
pr_number = os.environ['PR_URL'].split('/')[-1]
changelog_note = f"- Update default CodeQL bundle version to [{cli_version}]({bundle_release_url}). [#{pr_number}]({os.environ['PR_URL']})"
# If the "[UNRELEASED]" section starts with "no user facing changes", remove that line.
with open('CHANGELOG.md', 'r') as f:
changelog = f.read()
changelog = changelog.replace('## [UNRELEASED]\n\nNo user facing changes.', '## [UNRELEASED]\n')
# Add the changelog note to the bottom of the "[UNRELEASED]" section.
changelog = re.sub(r'\n## (\d+\.\d+\.\d+)', f'{changelog_note}\n\n## \\1', changelog, count=1)
with open('CHANGELOG.md', 'w') as f:
f.write(changelog)
+12 -10
View File
@@ -1,4 +1,3 @@
#!/usr/bin/env python3
import os import os
import sys import sys
@@ -7,7 +6,7 @@ EMPTY_CHANGELOG = 'No changes.\n\n'
# Prepare the changelog for the new release # Prepare the changelog for the new release
# This function will extract the part of the changelog that # This function will extract the part of the changelog that
# we want to include in the new release. # we want to include in the new release.
def extract_changelog_snippet(changelog_file): def extract_changelog_snippet(changelog_file, version_tag):
output = '' output = ''
if (not os.path.exists(changelog_file)): if (not os.path.exists(changelog_file)):
output = EMPTY_CHANGELOG output = EMPTY_CHANGELOG
@@ -16,20 +15,23 @@ def extract_changelog_snippet(changelog_file):
with open(changelog_file, 'r') as f: with open(changelog_file, 'r') as f:
lines = f.readlines() lines = f.readlines()
# Include only the contents of the first section # Include everything up to, but excluding the second heading
found_first_section = False found_first_section = False
for line in lines: for i, line in enumerate(lines):
if line.startswith('## '): if line.startswith('## '):
if found_first_section: if found_first_section:
break break
found_first_section = True found_first_section = True
elif found_first_section: output += line
output += line
return output.strip() output += f"See the full [CHANGELOG.md](https://github.com/github/codeql-action/blob/{version_tag}/CHANGELOG.md) for more information."
return output
if len(sys.argv) < 2: if len(sys.argv) < 3:
raise Exception('Expecting argument: changelog_file') raise Exception('Expecting argument: changelog_file version_tag')
changelog_file = sys.argv[1] changelog_file = sys.argv[1]
print(extract_changelog_snippet(changelog_file)) version_tag = sys.argv[2]
print(extract_changelog_snippet(changelog_file, version_tag))
@@ -29,7 +29,7 @@ fi
echo "Getting checks for $GITHUB_SHA" echo "Getting checks for $GITHUB_SHA"
# Ignore any checks with "https://", CodeQL, LGTM, Update, and ESLint checks. # Ignore any checks with "https://", CodeQL, LGTM, Update, and ESLint checks.
CHECKS="$(gh api repos/github/codeql-action/commits/"${GITHUB_SHA}"/check-runs --paginate | jq --slurp --compact-output --raw-output '[.[].check_runs.[] | select(.conclusion != "skipped") | .name | select(contains("https://") or . == "CodeQL" or . == "Dependabot" or . == "check-expected-release-files" or contains("Update") or contains("ESLint") or contains("update") or contains("test-setup-python-scripts") or . == "Agent" or . == "Cleanup artifacts" or . == "Prepare" or . == "Upload results" | not)] | unique | sort')" CHECKS="$(gh api repos/github/codeql-action/commits/"${GITHUB_SHA}"/check-runs --paginate | jq --slurp --compact-output --raw-output '[.[].check_runs.[] | select(.conclusion != "skipped") | .name | select(contains("https://") or . == "CodeQL" or . == "Dependabot" or . == "check-expected-release-files" or contains("Update") or contains("ESLint") or contains("update") or contains("test-setup-python-scripts") | not)] | unique | sort')"
echo "$CHECKS" | jq echo "$CHECKS" | jq
+1 -5
View File
@@ -36,17 +36,13 @@ jobs:
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- name: Check out repository - name: Check out repository
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Prepare test - name: Prepare test
id: prepare-test id: prepare-test
uses: ./.github/actions/prepare-test uses: ./.github/actions/prepare-test
with: with:
version: ${{ matrix.version }} version: ${{ matrix.version }}
use-all-platform-bundle: true use-all-platform-bundle: true
- name: Install .NET
uses: actions/setup-dotnet@v5
with:
dotnet-version: '9.x'
- id: init - id: init
uses: ./../action/init uses: ./../action/init
with: with:
+24 -35
View File
@@ -20,7 +20,7 @@ defaults:
jobs: jobs:
update-bundle: update-bundle:
if: github.event.release.prerelease && startsWith(github.event.release.tag_name, 'codeql-bundle-') if: github.event.release.prerelease && startsWith(github.event.release.tag_name, 'codeql-bundle-')
runs-on: ubuntu-slim runs-on: ubuntu-latest
permissions: permissions:
contents: write # needed to push commits contents: write # needed to push commits
pull-requests: write # needed to create pull requests pull-requests: write # needed to create pull requests
@@ -33,18 +33,13 @@ jobs:
GITHUB_CONTEXT: '${{ toJson(github) }}' GITHUB_CONTEXT: '${{ toJson(github) }}'
run: echo "$GITHUB_CONTEXT" run: echo "$GITHUB_CONTEXT"
- uses: actions/checkout@v6 - uses: actions/checkout@v5
- name: Update git config - name: Update git config
run: | run: |
git config --global user.email "41898282+github-actions[bot]@users.noreply.github.com" git config --global user.email "41898282+github-actions[bot]@users.noreply.github.com"
git config --global user.name "github-actions[bot]" git config --global user.name "github-actions[bot]"
- name: Set up Python
uses: actions/setup-python@v6
with:
python-version: '3.12'
- name: Set up Node.js - name: Set up Node.js
uses: actions/setup-node@v6 uses: actions/setup-node@v6
with: with:
@@ -57,24 +52,6 @@ jobs:
- name: Update bundle - name: Update bundle
uses: ./.github/actions/update-bundle uses: ./.github/actions/update-bundle
- name: Bump Action minor version if new CodeQL minor version series
id: bump-action-version
run: |
prior_cli_version=$(jq -r '.priorCliVersion' src/defaults.json)
cli_version=$(jq -r '.cliVersion' src/defaults.json)
prior_minor=$(echo "$prior_cli_version" | cut -d. -f2)
current_minor=$(echo "$cli_version" | cut -d. -f2)
if [[ "$current_minor" != "$prior_minor" ]]; then
echo "New CodeQL minor version series ($prior_cli_version -> $cli_version), bumping Action minor version"
npm version minor --no-git-tag-version
echo "bumped=true" >> "$GITHUB_OUTPUT"
else
echo "Same minor version series ($prior_cli_version -> $cli_version), skipping Action version bump"
echo "bumped=false" >> "$GITHUB_OUTPUT"
fi
- name: Rebuild Action - name: Rebuild Action
run: npm run build run: npm run build
@@ -89,19 +66,11 @@ jobs:
- name: Open pull request - name: Open pull request
env: env:
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
ACTION_VERSION_BUMPED: ${{ steps.bump-action-version.outputs.bumped }}
run: | run: |
cli_version=$(jq -r '.cliVersion' src/defaults.json) cli_version=$(jq -r '.cliVersion' src/defaults.json)
action_version=$(jq -r '.version' package.json)
pr_body="This pull request updates the default CodeQL bundle, as used with \`tools: linked\` and on GHES, to $cli_version."
if [[ "$ACTION_VERSION_BUMPED" == "true" ]]; then
pr_body+=$'\n\n'"Since this is a new CodeQL minor version series, this PR also bumps the Action version to $action_version."
fi
pr_url=$(gh pr create \ pr_url=$(gh pr create \
--title "Update default bundle to $cli_version" \ --title "Update default bundle to $cli_version" \
--body "$pr_body" \ --body "This pull request updates the default CodeQL bundle, as used with \`tools: linked\` and on GHES, to $cli_version." \
--assignee "$GITHUB_ACTOR" \ --assignee "$GITHUB_ACTOR" \
--draft \ --draft \
) )
@@ -109,8 +78,28 @@ jobs:
echo "PR_URL=$pr_url" | tee -a "$GITHUB_ENV" echo "PR_URL=$pr_url" | tee -a "$GITHUB_ENV"
- name: Create changelog note - name: Create changelog note
shell: python
run: | run: |
python .github/workflows/script/bundle_changelog.py import os
import re
# Get the PR number from the PR URL.
pr_number = os.environ['PR_URL'].split('/')[-1]
changelog_note = f"- Update default CodeQL bundle version to {os.environ['CLI_VERSION']}. [#{pr_number}]({os.environ['PR_URL']})"
# If the "[UNRELEASED]" section starts with "no user facing changes", remove that line.
# Use perl to avoid having to escape the newline character.
with open('CHANGELOG.md', 'r') as f:
changelog = f.read()
changelog = changelog.replace('## [UNRELEASED]\n\nNo user facing changes.', '## [UNRELEASED]\n')
# Add the changelog note to the bottom of the "[UNRELEASED]" section.
changelog = re.sub(r'\n## (\d+\.\d+\.\d+)', f'{changelog_note}\n\n## \\1', changelog, count=1)
with open('CHANGELOG.md', 'w') as f:
f.write(changelog)
- name: Push changelog note - name: Push changelog note
run: | run: |
+5 -5
View File
@@ -26,7 +26,7 @@ jobs:
update: update:
timeout-minutes: 45 timeout-minutes: 45
runs-on: ubuntu-slim runs-on: ubuntu-latest
if: github.event_name == 'workflow_dispatch' if: github.event_name == 'workflow_dispatch'
needs: [prepare] needs: [prepare]
env: env:
@@ -38,7 +38,7 @@ jobs:
contents: write # needed to push commits contents: write # needed to push commits
pull-requests: write # needed to create pull request pull-requests: write # needed to create pull request
steps: steps:
- uses: actions/checkout@v6 - uses: actions/checkout@v5
with: with:
fetch-depth: 0 # Need full history for calculation of diffs fetch-depth: 0 # Need full history for calculation of diffs
- uses: ./.github/actions/release-initialise - uses: ./.github/actions/release-initialise
@@ -77,7 +77,7 @@ jobs:
backport: backport:
timeout-minutes: 45 timeout-minutes: 45
runs-on: ubuntu-slim runs-on: ubuntu-latest
environment: Automation environment: Automation
needs: [prepare] needs: [prepare]
if: ${{ (github.event_name == 'push') && needs.prepare.outputs.backport_target_branches != '[]' }} if: ${{ (github.event_name == 'push') && needs.prepare.outputs.backport_target_branches != '[]' }}
@@ -93,14 +93,14 @@ jobs:
pull-requests: write # needed to create pull request pull-requests: write # needed to create pull request
steps: steps:
- name: Generate token - name: Generate token
uses: actions/create-github-app-token@v2.2.1 uses: actions/create-github-app-token@v2.1.4
id: app-token id: app-token
with: with:
app-id: ${{ vars.AUTOMATION_APP_ID }} app-id: ${{ vars.AUTOMATION_APP_ID }}
private-key: ${{ secrets.AUTOMATION_PRIVATE_KEY }} private-key: ${{ secrets.AUTOMATION_PRIVATE_KEY }}
- name: Checkout - name: Checkout
uses: actions/checkout@v6 uses: actions/checkout@v5
with: with:
fetch-depth: 0 # Need full history for calculation of diffs fetch-depth: 0 # Need full history for calculation of diffs
token: ${{ steps.app-token.outputs.token }} token: ${{ steps.app-token.outputs.token }}
@@ -4,18 +4,12 @@ on:
schedule: schedule:
- cron: "0 0 * * *" - cron: "0 0 * * *"
workflow_dispatch: workflow_dispatch:
pull_request:
branches:
- main
paths:
- .github/workflows/update-supported-enterprise-server-versions.yml
- .github/workflows/update-supported-enterprise-server-versions/update.py
jobs: jobs:
update-supported-enterprise-server-versions: update-supported-enterprise-server-versions:
name: Update Supported Enterprise Server Versions name: Update Supported Enterprise Server Versions
timeout-minutes: 45 timeout-minutes: 45
runs-on: ubuntu-slim runs-on: ubuntu-latest
if: github.repository == 'github/codeql-action' if: github.repository == 'github/codeql-action'
permissions: permissions:
contents: write # needed to push commits contents: write # needed to push commits
@@ -27,14 +21,13 @@ jobs:
with: with:
python-version: "3.13" python-version: "3.13"
- name: Checkout CodeQL Action - name: Checkout CodeQL Action
uses: actions/checkout@v6 uses: actions/checkout@v5
- name: Checkout Enterprise Releases - name: Checkout Enterprise Releases
uses: actions/checkout@v6 uses: actions/checkout@v5
with: with:
repository: github/enterprise-releases repository: github/enterprise-releases
token: ${{ secrets.ENTERPRISE_RELEASE_TOKEN }} token: ${{ secrets.ENTERPRISE_RELEASE_TOKEN }}
path: ${{ github.workspace }}/enterprise-releases/ path: ${{ github.workspace }}/enterprise-releases/
sparse-checkout: releases.json
- name: Update Supported Enterprise Server Versions - name: Update Supported Enterprise Server Versions
run: | run: |
cd ./.github/workflows/update-supported-enterprise-server-versions/ cd ./.github/workflows/update-supported-enterprise-server-versions/
@@ -42,7 +35,6 @@ jobs:
pipenv install pipenv install
pipenv run ./update.py pipenv run ./update.py
rm --recursive "$ENTERPRISE_RELEASES_PATH" rm --recursive "$ENTERPRISE_RELEASES_PATH"
npm ci
npm run build npm run build
env: env:
ENTERPRISE_RELEASES_PATH: ${{ github.workspace }}/enterprise-releases/ ENTERPRISE_RELEASES_PATH: ${{ github.workspace }}/enterprise-releases/
@@ -52,33 +44,25 @@ jobs:
git config --global user.email "41898282+github-actions[bot]@users.noreply.github.com" git config --global user.email "41898282+github-actions[bot]@users.noreply.github.com"
git config --global user.name "github-actions[bot]" git config --global user.name "github-actions[bot]"
- name: Commit changes - name: Commit changes and open PR
id: prepare-commit env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
run: | run: |
if [[ -z $(git status --porcelain) ]]; then if [[ -z $(git status --porcelain) ]]; then
echo "No changes to commit" echo "No changes to commit"
echo "committed=false" >> $GITHUB_OUTPUT
else else
git checkout -b update-supported-enterprise-server-versions git checkout -b update-supported-enterprise-server-versions
git add . git add .
git commit --message "Update supported GitHub Enterprise Server versions" git commit --message "Update supported GitHub Enterprise Server versions"
git push origin update-supported-enterprise-server-versions
echo "committed=true" >> $GITHUB_OUTPUT body="This PR updates the list of supported GitHub Enterprise Server versions, either because a new "
body+="version is about to be feature frozen, or because an old release has been deprecated."
body+=$'\n\n'
body+="If an old release has been deprecated, please follow the instructions in CONTRIBUTING.md to "
body+="deprecate the corresponding version of CodeQL."
gh pr create --draft \
--title "Update supported GitHub Enterprise Server versions" \
--body "$body"
fi fi
- name: Open PR
if: github.event_name != 'pull_request' && steps.prepare-commit.outputs.committed == 'true'
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
run: |
git push origin update-supported-enterprise-server-versions
body="This PR updates the list of supported GitHub Enterprise Server versions, either because a new "
body+="version is about to be feature frozen, or because an old release has been deprecated."
body+=$'\n\n'
body+="If an old release has been deprecated, please follow the instructions in CONTRIBUTING.md to "
body+="deprecate the corresponding version of CodeQL."
gh pr create --draft \
--title "Update supported GitHub Enterprise Server versions" \
--body "$body"
-52
View File
@@ -6,58 +6,6 @@ See the [releases page](https://github.com/github/codeql-action/releases) for th
No user facing changes. No user facing changes.
## 4.32.0 - 26 Jan 2026
- Update default CodeQL bundle version to [2.24.0](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.24.0). [#3425](https://github.com/github/codeql-action/pull/3425)
## 4.31.11 - 23 Jan 2026
- When running a Default Setup workflow with [Actions debugging enabled](https://docs.github.com/en/actions/how-tos/monitor-workflows/enable-debug-logging), the CodeQL Action will now use more unique names when uploading logs from the Dependabot authentication proxy as workflow artifacts. This ensures that the artifact names do not clash between multiple jobs in a build matrix. [#3409](https://github.com/github/codeql-action/pull/3409)
- Improved error handling throughout the CodeQL Action. [#3415](https://github.com/github/codeql-action/pull/3415)
- Added experimental support for automatically excluding [generated files](https://docs.github.com/en/repositories/working-with-files/managing-files/customizing-how-changed-files-appear-on-github) from the analysis. This feature is not currently enabled for any analysis. In the future, it may be enabled by default for some GitHub-managed analyses. [#3318](https://github.com/github/codeql-action/pull/3318)
- The changelog extracts that are included with releases of the CodeQL Action are now shorter to avoid duplicated information from appearing in Dependabot PRs. [#3403](https://github.com/github/codeql-action/pull/3403)
## 4.31.10 - 12 Jan 2026
- Update default CodeQL bundle version to 2.23.9. [#3393](https://github.com/github/codeql-action/pull/3393)
## 4.31.9 - 16 Dec 2025
No user facing changes.
## 4.31.8 - 11 Dec 2025
- Update default CodeQL bundle version to 2.23.8. [#3354](https://github.com/github/codeql-action/pull/3354)
## 4.31.7 - 05 Dec 2025
- Update default CodeQL bundle version to 2.23.7. [#3343](https://github.com/github/codeql-action/pull/3343)
## 4.31.6 - 01 Dec 2025
No user facing changes.
## 4.31.5 - 24 Nov 2025
- Update default CodeQL bundle version to 2.23.6. [#3321](https://github.com/github/codeql-action/pull/3321)
## 4.31.4 - 18 Nov 2025
No user facing changes.
## 4.31.3 - 13 Nov 2025
- CodeQL Action v3 will be deprecated in December 2026. The Action now logs a warning for customers who are running v3 but could be running v4. For more information, see [Upcoming deprecation of CodeQL Action v3](https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/).
- Update default CodeQL bundle version to 2.23.5. [#3288](https://github.com/github/codeql-action/pull/3288)
## 4.31.2 - 30 Oct 2025
No user facing changes.
## 4.31.1 - 30 Oct 2025
- The `add-snippets` input has been removed from the `analyze` action. This input has been deprecated since CodeQL Action 3.26.4 in August 2024 when this removal was announced.
## 4.31.0 - 24 Oct 2025 ## 4.31.0 - 24 Oct 2025
- Bump minimum CodeQL bundle version to 2.17.6. [#3223](https://github.com/github/codeql-action/pull/3223) - Bump minimum CodeQL bundle version to 2.17.6. [#3223](https://github.com/github/codeql-action/pull/3223)
+6 -2
View File
@@ -32,10 +32,14 @@ inputs:
and 13GB for macOS). and 13GB for macOS).
required: false required: false
add-snippets: add-snippets:
description: Does not have any effect. description: Specify whether or not to add code snippets to the output sarif file.
required: false required: false
default: "false"
deprecationMessage: >- deprecationMessage: >-
The input "add-snippets" has been removed and no longer has any effect. The input "add-snippets" is deprecated and will be removed on the first release in August 2025.
When this input is set to true it is expected to add code snippets with an alert to the SARIF file.
However, since Code Scanning ignores code snippets provided as part of a SARIF file this is currently
a no operation. No alternative is available.
skip-queries: skip-queries:
description: If this option is set, the CodeQL database will be built but no queries will be run on it. Thus, no results will be produced. description: If this option is set, the CodeQL database will be built but no queries will be run on it. Thus, no results will be produced.
required: false required: false
+1 -16
View File
@@ -12,7 +12,6 @@ import filenames from "eslint-plugin-filenames";
import github from "eslint-plugin-github"; import github from "eslint-plugin-github";
import _import from "eslint-plugin-import"; import _import from "eslint-plugin-import";
import noAsyncForeach from "eslint-plugin-no-async-foreach"; import noAsyncForeach from "eslint-plugin-no-async-foreach";
import jsdoc from "eslint-plugin-jsdoc";
import globals from "globals"; import globals from "globals";
const __filename = fileURLToPath(import.meta.url); const __filename = fileURLToPath(import.meta.url);
@@ -53,7 +52,6 @@ export default [
github: fixupPluginRules(github), github: fixupPluginRules(github),
import: fixupPluginRules(_import), import: fixupPluginRules(_import),
"no-async-foreach": noAsyncForeach, "no-async-foreach": noAsyncForeach,
"jsdoc": jsdoc,
}, },
languageOptions: { languageOptions: {
@@ -78,7 +76,7 @@ export default [
typescript: {}, typescript: {},
}, },
"import/ignore": ["sinon", "uuid", "@octokit/plugin-retry", "del", "get-folder-size", "@actions/github"], "import/ignore": ["sinon", "uuid", "@octokit/plugin-retry", "del", "get-folder-size"],
}, },
rules: { rules: {
@@ -135,16 +133,6 @@ export default [
"@typescript-eslint/no-shadow": "error", "@typescript-eslint/no-shadow": "error",
"@typescript-eslint/prefer-optional-chain": "error", "@typescript-eslint/prefer-optional-chain": "error",
"one-var": ["error", "never"], "one-var": ["error", "never"],
// Check param names to ensure that we don't have outdated JSDocs.
"jsdoc/check-param-names": [
"error",
{
// We don't currently require full JSDoc coverage, so this rule
// should not error on missing @param annotations.
disableMissingParamChecks: true,
}
],
}, },
}, },
{ {
@@ -152,12 +140,9 @@ export default [
rules: { rules: {
"@typescript-eslint/no-explicit-any": "off", "@typescript-eslint/no-explicit-any": "off",
"@typescript-eslint/no-unsafe-argument": "off",
"@typescript-eslint/no-unsafe-assignment": "off", "@typescript-eslint/no-unsafe-assignment": "off",
"@typescript-eslint/no-unsafe-call": "off",
"@typescript-eslint/no-unsafe-enum-comparison": "off", "@typescript-eslint/no-unsafe-enum-comparison": "off",
"@typescript-eslint/no-unsafe-member-access": "off", "@typescript-eslint/no-unsafe-member-access": "off",
"@typescript-eslint/no-unsafe-return": "off",
"@typescript-eslint/no-var-requires": "off", "@typescript-eslint/no-var-requires": "off",
"@typescript-eslint/prefer-regexp-exec": "off", "@typescript-eslint/prefer-regexp-exec": "off",
"@typescript-eslint/require-await": "off", "@typescript-eslint/require-await": "off",
+88725 -116156
View File
File diff suppressed because one or more lines are too long
+26690 -44612
View File
File diff suppressed because one or more lines are too long
+18205 -43754
View File
File diff suppressed because one or more lines are too long
+4 -4
View File
@@ -1,6 +1,6 @@
{ {
"bundleVersion": "codeql-bundle-v2.24.0", "bundleVersion": "codeql-bundle-v2.23.3",
"cliVersion": "2.24.0", "cliVersion": "2.23.3",
"priorBundleVersion": "codeql-bundle-v2.23.9", "priorBundleVersion": "codeql-bundle-v2.23.2",
"priorCliVersion": "2.23.9" "priorCliVersion": "2.23.2"
} }
+96089 -116803
View File
File diff suppressed because one or more lines are too long
+26659 -44868
View File
File diff suppressed because one or more lines are too long
+18193 -43731
View File
File diff suppressed because one or more lines are too long
+25099 -44032
View File
File diff suppressed because one or more lines are too long
+87660 -115092
View File
File diff suppressed because one or more lines are too long
+18424 -44037
View File
File diff suppressed because one or more lines are too long
+24896 -43941
View File
File diff suppressed because one or more lines are too long
+81016 -108414
View File
File diff suppressed because one or more lines are too long
+25160 -44091
View File
File diff suppressed because one or more lines are too long

Some files were not shown because too many files have changed in this diff Show More