Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merge releases/v3 into releases/v2 #2180

Merged
merged 36 commits into from
Mar 1, 2024
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
36 commits
Select commit Hold shift + click to select a range
eb991df
Only warn about path filters for CLIs that don't warn
henrymercer Feb 22, 2024
a39d1d2
Update changelog and version after v3.24.5
github-actions[bot] Feb 23, 2024
4d6d2bf
Merge remote-tracking branch 'origin/releases/v3' into mergeback/v3.2…
smowton Feb 23, 2024
6dab9f2
Update checked-in dependencies
github-actions[bot] Feb 23, 2024
905ae4a
Merge pull request #2163 from github/mergeback/v3.24.5-to-main-47b3d888
smowton Feb 23, 2024
36f1104
Bump the npm group with 5 updates
dependabot[bot] Feb 26, 2024
66c3cec
Update checked-in dependencies
github-actions[bot] Feb 26, 2024
25d334f
Merge pull request #2169 from github/dependabot/npm_and_yarn/npm-4148…
henrymercer Feb 26, 2024
28b564f
Add languages to the status report for all jobs
henrymercer Feb 26, 2024
e4a5362
Add build mode to status report
henrymercer Feb 26, 2024
6046573
Add event name to status report
henrymercer Feb 26, 2024
17c5ab2
Merge pull request #2161 from github/henrymercer/path-filter-warning-cli
henrymercer Feb 27, 2024
2c235f1
Use comma-separated list
henrymercer Feb 27, 2024
166b8a7
Merge branch 'main' into henrymercer/status-report-new-fields
henrymercer Feb 27, 2024
d8595f5
Add workflow dispatch trigger to rebuild Action
henrymercer Feb 27, 2024
cc3808e
Merge pull request #2170 from github/henrymercer/status-report-new-fi…
henrymercer Feb 27, 2024
1a6bac4
Rename `considerInvalidRequestConfigError` to `isThirdPartyUpload`
angelapwen Feb 28, 2024
52f2347
Consider `SyntaxError`s configuration errors
angelapwen Feb 28, 2024
62712e9
Throw `InvalidRequestError` if JSON parsing fails
angelapwen Feb 28, 2024
db96208
README: Fix a couple of typos
henrymercer Feb 28, 2024
9330c68
Merge pull request #2171 from angelapwen/classify-syntax-errors
angelapwen Feb 28, 2024
7bde906
Merge pull request #2172 from github/henrymercer/fix-readme-typos
henrymercer Feb 28, 2024
bd56a05
Rename `InvalidRequestError` to `InvalidSarifUploadError`
henrymercer Feb 28, 2024
888ab31
Mark third-party SARIF limits errors as configuration errors
henrymercer Feb 28, 2024
e12a8cc
Use `isFirstPartyAnalysis` for a stronger check
henrymercer Feb 29, 2024
c091725
Refactoring: Convert `ActionName` to enum
henrymercer Feb 29, 2024
ccd3f02
Merge pull request #2173 from github/henrymercer/mark-third-party-lim…
henrymercer Feb 29, 2024
2307ff5
Add `languages` and `build_mode` to `init` `success` status report
henrymercer Feb 29, 2024
158d078
Merge pull request #2175 from github/henrymercer/fix-languages-init-s…
angelapwen Feb 29, 2024
d59eafb
Update changelog for v3.24.6
github-actions[bot] Feb 29, 2024
8a470fd
Merge pull request #2176 from github/update-v3.24.6-158d0780d
angelapwen Feb 29, 2024
30ad6c3
Revert "Update version and changelog for v2.24.5 - fixed"
angelapwen Feb 29, 2024
61f4d89
Revert "Update checked-in dependencies"
angelapwen Feb 29, 2024
3839e21
Merge remote-tracking branch 'origin/releases/v3' into backport-v2.24…
angelapwen Feb 29, 2024
272cd56
Update version and changelog for v2.24.6
angelapwen Feb 29, 2024
2f52385
Update checked-in dependencies
github-actions[bot] Feb 29, 2024
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
1 change: 1 addition & 0 deletions .github/workflows/rebuild.yml
Original file line number Diff line number Diff line change
Expand Up @@ -3,6 +3,7 @@ name: Rebuild Action
on:
pull_request:
types: [labeled]
workflow_dispatch:

jobs:
rebuild:
Expand Down
4 changes: 4 additions & 0 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,10 @@ See the [releases page](https://github.com/github/codeql-action/releases) for th

Note that the only difference between `v2` and `v3` of the CodeQL Action is the node version they support, with `v3` running on node 20 while we continue to release `v2` to support running on node 16. For example `3.22.11` was the first `v3` release and is functionally identical to `2.22.11`. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

## 2.24.6 - 29 Feb 2024

No user facing changes.

## 2.24.5 - 23 Feb 2024

- Update default CodeQL bundle version to 2.16.3. [#2156](https://github.com/github/codeql-action/pull/2156)
Expand Down
6 changes: 3 additions & 3 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ For a list of recent changes, see the CodeQL Action's [changelog](CHANGELOG.md).

This project is released under the [MIT License](LICENSE).

The underlying CodeQL CLI, used in this action, is licensed under the [GitHub CodeQL Terms and Conditions](https://securitylab.github.com/tools/codeql/license). As such, this action may be used on open source projects hosted on GitHub, and on private repositories that are owned by an organisation with GitHub Advanced Security enabled.
The underlying CodeQL CLI, used in this action, is licensed under the [GitHub CodeQL Terms and Conditions](https://securitylab.github.com/tools/codeql/license). As such, this action may be used on open source projects hosted on GitHub, and on private repositories that are owned by an organisation with GitHub Advanced Security enabled.

## Usage

Expand All @@ -18,7 +18,7 @@ You can also configure advanced setup for a repository to find security vulnerab

### Permissions

All advanced setup code scanning workflows must have the `security-events: write` permission. Workflows in private repositories muse additionally have the `contents: read` permission. For more information, see [Assigning permissions to jobs](https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs).
All advanced setup code scanning workflows must have the `security-events: write` permission. Workflows in private repositories must additionally have the `contents: read` permission. For more information, see "[Assigning permissions to jobs](https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs)."

## Supported versions of the CodeQL Action

Expand All @@ -31,7 +31,7 @@ The only difference between CodeQL Action v2 and v3 is the version of Node.js on

To provide the best experience to customers using older versions of GitHub Enterprise Server, we will continue to release CodeQL Action v2 so that these customers can continue to run the latest version of CodeQL as long as their version of GitHub Enterprise Server is supported. For example CodeQL Action v3.22.11 was the first release of CodeQL Action v3 and is functionally identical to v2.22.11. This approach provides an easy way to track exactly which features are included in different versions by looking at the minor and patch version numbers.

For more information, see ["Code scanning: deprecation of CodeQL Action v2."](https://github.blog/changelog/2024-01-12-code-scanning-deprecation-of-codeql-action-v2/).
For more information, see "[Code scanning: deprecation of CodeQL Action v2](https://github.blog/changelog/2024-01-12-code-scanning-deprecation-of-codeql-action-v2/)."

## Troubleshooting

Expand Down
18 changes: 1 addition & 17 deletions lib/actions-util.js

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion lib/actions-util.js.map

Large diffs are not rendered by default.

6 changes: 3 additions & 3 deletions lib/analyze-action.js

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion lib/analyze-action.js.map

Large diffs are not rendered by default.

19 changes: 10 additions & 9 deletions lib/autobuild-action.js

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion lib/autobuild-action.js.map

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

10 changes: 2 additions & 8 deletions lib/init-action-post-helper.js

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.