Skip to content

Commit 9e8d078

Browse files
aibaarsaibaars
authored
Merge pull request #2757 from github/update-v3.28.9-24e1c2d33
Merge main into releases/v3
2 parents dd74661 + 43d9be6 commit 9e8d078

File tree

1,005 files changed

+66067
-51480
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

1,005 files changed

+66067
-51480
lines changed

‎.github/codeql/codeql-actions-config.yml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
# Configuration for the CodeQL Actions Queries
2+
name: "CodeQL Actions Queries config"
3+
queries:
4+
- uses: security-and-quality

‎.github/workflows/__rubocop-multi-language.yml

Lines changed: 1 addition & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎.github/workflows/codeql.yml

Lines changed: 26 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -70,7 +70,7 @@ jobs:
7070
echo "Suggested matrix config for analysis job: $VERSIONS_JSON"
7171
echo "versions=${VERSIONS_JSON}" >> $GITHUB_OUTPUT
7272
73-
build:
73+
analyze-javascript:
7474
needs: [check-codeql-versions]
7575
strategy:
7676
fail-fast: false
@@ -81,7 +81,7 @@ jobs:
8181

8282
permissions:
8383
contents: read
84-
security-events: write # needed to upload results
84+
security-events: write
8585

8686
steps:
8787
- name: Checkout
@@ -100,3 +100,27 @@ jobs:
100100
uses: ./analyze
101101
with:
102102
category: "/language:javascript"
103+
104+
105+
analyze-actions:
106+
runs-on: ubuntu-latest
107+
108+
strategy:
109+
fail-fast: false
110+
111+
permissions:
112+
contents: read
113+
security-events: write
114+
115+
steps:
116+
- name: Checkout
117+
uses: actions/checkout@v4
118+
- name: Initialize CodeQL
119+
uses: ./init
120+
with:
121+
languages: actions
122+
config-file: ./.github/codeql/codeql-actions-config.yml
123+
- name: Perform CodeQL Analysis
124+
uses: ./analyze
125+
with:
126+
category: "/language:actions"

‎.github/workflows/post-release-mergeback.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -168,7 +168,7 @@ jobs:
168168
--draft
169169
170170
- name: Generate token
171-
uses: actions/create-github-app-token@c1a285145b9d317df6ced56c09f525b5c2b6f755
171+
uses: actions/create-github-app-token@136412a57a7081aa63c935a2cc2918f76c34f514
172172
id: app-token
173173
with:
174174
app-id: ${{ vars.AUTOMATION_APP_ID }}

‎.github/workflows/update-release-branch.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -124,7 +124,7 @@ jobs:
124124
pull-requests: write # needed to create pull request
125125
steps:
126126
- name: Generate token
127-
uses: actions/create-github-app-token@c1a285145b9d317df6ced56c09f525b5c2b6f755
127+
uses: actions/create-github-app-token@136412a57a7081aa63c935a2cc2918f76c34f514
128128
id: app-token
129129
with:
130130
app-id: ${{ vars.AUTOMATION_APP_ID }}

‎.github/workflows/update-supported-enterprise-server-versions.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -19,14 +19,14 @@ jobs:
1919
- name: Setup Python
2020
uses: actions/setup-python@v5
2121
with:
22-
python-version: "3.7"
22+
python-version: "3.13"
2323
- name: Checkout CodeQL Action
2424
uses: actions/checkout@v4
2525
- name: Checkout Enterprise Releases
2626
uses: actions/checkout@v4
2727
with:
2828
repository: github/enterprise-releases
29-
ssh-key: ${{ secrets.ENTERPRISE_RELEASES_SSH_KEY }}
29+
token: ${{ secrets.ENTERPRISE_RELEASE_TOKEN }}
3030
path: ${{ github.workspace }}/enterprise-releases/
3131
- name: Update Supported Enterprise Server Versions
3232
run: |

‎CHANGELOG.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,10 @@
22

33
See the [releases page](https://github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs.
44

5+
## 3.28.9 - 07 Feb 2025
6+
7+
- Update default CodeQL bundle version to 2.20.4. [#2753](https://github.com/github/codeql-action/pull/2753)
8+
59
## 3.28.8 - 29 Jan 2025
610

711
- Enable support for Kotlin 2.1.10 when running with CodeQL CLI v2.20.3. [#2744](https://github.com/github/codeql-action/pull/2744)

‎lib/defaults.json

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
2-
"bundleVersion": "codeql-bundle-v2.20.3",
3-
"cliVersion": "2.20.3",
4-
"priorBundleVersion": "codeql-bundle-v2.20.2",
5-
"priorCliVersion": "2.20.2"
2+
"bundleVersion": "codeql-bundle-v2.20.4",
3+
"cliVersion": "2.20.4",
4+
"priorBundleVersion": "codeql-bundle-v2.20.3",
5+
"priorCliVersion": "2.20.3"
66
}

‎lib/init-action-post.js

Lines changed: 3 additions & 2 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎lib/init-action-post.js.map

Lines changed: 1 addition & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)
pFad - Phonifier reborn

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy