From 234badad2365c3675c22f8fd76ff85e38909be1e Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" Date: Mon, 1 May 2023 03:46:50 +0000 Subject: [PATCH 1/3] Update default bundle to codeql-bundle-20230428 --- lib/defaults.json | 8 ++++---- src/defaults.json | 8 ++++---- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/lib/defaults.json b/lib/defaults.json index adf9e05fca..1d0ce06686 100644 --- a/lib/defaults.json +++ b/lib/defaults.json @@ -1,6 +1,6 @@ { - "bundleVersion": "codeql-bundle-20230414", - "cliVersion": "2.13.0", - "priorBundleVersion": "codeql-bundle-20230403", - "priorCliVersion": "2.12.6" + "bundleVersion": "codeql-bundle-20230428", + "cliVersion": "2.13.1", + "priorBundleVersion": "codeql-bundle-20230414", + "priorCliVersion": "2.13.0" } diff --git a/src/defaults.json b/src/defaults.json index 86eec8d0a7..646d10bc58 100644 --- a/src/defaults.json +++ b/src/defaults.json @@ -1,6 +1,6 @@ { - "bundleVersion": "codeql-bundle-20230414", - "cliVersion": "2.13.0", - "priorBundleVersion": "codeql-bundle-20230403", - "priorCliVersion": "2.12.6" + "bundleVersion": "codeql-bundle-20230428", + "cliVersion": "2.13.1", + "priorBundleVersion": "codeql-bundle-20230414", + "priorCliVersion": "2.13.0" } From 40c95932fefc0f8bc274a5cb5a0e56719b89ea37 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" Date: Mon, 1 May 2023 03:46:54 +0000 Subject: [PATCH 2/3] Add changelog note --- CHANGELOG.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 4f504b00d0..1abfa205f6 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,7 +2,7 @@ ## [UNRELEASED] -No user facing changes. +- Update default CodeQL bundle version to 2.13.1. [#1664](https://github.com/github/codeql-action/pull/1664) ## 2.3.2 - 27 Apr 2023 From f72bf5dfb3c0ae945124443c6a1fab09272edd9b Mon Sep 17 00:00:00 2001 From: Dave Bartolomeo Date: Wed, 3 May 2023 21:43:47 -0400 Subject: [PATCH 3/3] Fix workflow formatting --- .github/workflows/__ml-powered-queries.yml | 3 ++- .../workflows/__packaging-codescanning-config-inputs-js.yml | 3 ++- .github/workflows/__packaging-config-inputs-js.yml | 3 ++- .github/workflows/__packaging-config-js.yml | 3 ++- .github/workflows/__packaging-inputs-js.yml | 3 ++- 5 files changed, 10 insertions(+), 5 deletions(-) diff --git a/.github/workflows/__ml-powered-queries.yml b/.github/workflows/__ml-powered-queries.yml index 9bb163d9a7..fc11c53bc3 100644 --- a/.github/workflows/__ml-powered-queries.yml +++ b/.github/workflows/__ml-powered-queries.yml @@ -114,7 +114,8 @@ jobs: if: "!(matrix.version == 'stable-20220401' && runner.os == 'Windows')" with: sarif-file: ${{ runner.temp }}/results/javascript.sarif - queries-run: js/ml-powered/nosql-injection,js/ml-powered/path-injection,js/ml-powered/sql-injection,js/ml-powered/xss + queries-run: + js/ml-powered/nosql-injection,js/ml-powered/path-injection,js/ml-powered/sql-injection,js/ml-powered/xss queries-not-run: foo,bar - name: Check results diff --git a/.github/workflows/__packaging-codescanning-config-inputs-js.yml b/.github/workflows/__packaging-codescanning-config-inputs-js.yml index 781b9b3d0a..adc418ea04 100644 --- a/.github/workflows/__packaging-codescanning-config-inputs-js.yml +++ b/.github/workflows/__packaging-codescanning-config-inputs-js.yml @@ -83,7 +83,8 @@ jobs: uses: ./../action/.github/actions/check-sarif with: sarif-file: ${{ runner.temp }}/results/javascript.sarif - queries-run: javascript/example/empty-or-one-block,javascript/example/empty-or-one-block,javascript/example/other-query-block,javascript/example/two-block + queries-run: + javascript/example/empty-or-one-block,javascript/example/empty-or-one-block,javascript/example/other-query-block,javascript/example/two-block queries-not-run: foo,bar - name: Assert Results diff --git a/.github/workflows/__packaging-config-inputs-js.yml b/.github/workflows/__packaging-config-inputs-js.yml index 3dc4ea923e..879fecccd3 100644 --- a/.github/workflows/__packaging-config-inputs-js.yml +++ b/.github/workflows/__packaging-config-inputs-js.yml @@ -83,7 +83,8 @@ jobs: uses: ./../action/.github/actions/check-sarif with: sarif-file: ${{ runner.temp }}/results/javascript.sarif - queries-run: javascript/example/empty-or-one-block,javascript/example/empty-or-one-block,javascript/example/other-query-block,javascript/example/two-block + queries-run: + javascript/example/empty-or-one-block,javascript/example/empty-or-one-block,javascript/example/other-query-block,javascript/example/two-block queries-not-run: foo,bar - name: Assert Results diff --git a/.github/workflows/__packaging-config-js.yml b/.github/workflows/__packaging-config-js.yml index a9aa16637f..18a03452f6 100644 --- a/.github/workflows/__packaging-config-js.yml +++ b/.github/workflows/__packaging-config-js.yml @@ -82,7 +82,8 @@ jobs: uses: ./../action/.github/actions/check-sarif with: sarif-file: ${{ runner.temp }}/results/javascript.sarif - queries-run: javascript/example/empty-or-one-block,javascript/example/empty-or-one-block,javascript/example/other-query-block,javascript/example/two-block + queries-run: + javascript/example/empty-or-one-block,javascript/example/empty-or-one-block,javascript/example/other-query-block,javascript/example/two-block queries-not-run: foo,bar - name: Assert Results diff --git a/.github/workflows/__packaging-inputs-js.yml b/.github/workflows/__packaging-inputs-js.yml index 35603d6a38..700a790079 100644 --- a/.github/workflows/__packaging-inputs-js.yml +++ b/.github/workflows/__packaging-inputs-js.yml @@ -82,7 +82,8 @@ jobs: uses: ./../action/.github/actions/check-sarif with: sarif-file: ${{ runner.temp }}/results/javascript.sarif - queries-run: javascript/example/empty-or-one-block,javascript/example/empty-or-one-block,javascript/example/other-query-block,javascript/example/two-block + queries-run: + javascript/example/empty-or-one-block,javascript/example/empty-or-one-block,javascript/example/other-query-block,javascript/example/two-block queries-not-run: foo,bar - name: Assert Results