FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

Merge releases/v4 into releases/v3 by github-actions[bot] · Pull Request #3237 · github/codeql-action · GitHub

Merge releases/v4 into releases/v3 - #3237

Merged
mbg merged 90 commits into
releases/v3from
backport-v3.31.0-4e94bd11f
Oct 24, 2025
Merged

Merge releases/v4 into releases/v3#3237
mbg merged 90 commits into
releases/v3from
backport-v3.31.0-4e94bd11f

Conversation

github-actions Bot commented Oct 24, 2025
edited by mbg
Loading

Copy link
Copy Markdown
Contributor

Merging 4e94bd1 into releases/v3.

Conductor for this PR is @mbg.

Contains the following pull requests:

Please do the following:

  • Ensure the CHANGELOG displays the correct version and date.
  • Ensure the CHANGELOG includes all relevant, user-facing changes since the last release.
  • Check that there are not any unexpected commits being merged into the releases/v3 branch.
  • Ensure the docs team is aware of any documentation changes that need to be released.
  • Remove and re-add the "Rebuild" label to the PR to trigger just this workflow.
  • Wait for the "Rebuild" workflow to push a commit updating the distribution files.
  • Mark the PR as ready for review to trigger the full set of PR checks.
  • Approve and merge this PR. Make sure Create a merge commit is selected rather than Squash and merge or Rebase and merge.

mbg and others added 30 commits October 14, 2025 19:49
- Throws a `ConfigurationError` if parsing the YAML fails
- Add a couple of tests for it
Mergeback v4.30.9 refs/heads/releases/v4 into main
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Michael B. Gale <mbg@github.com>
Add experimental functionality for labelling PRs by their size
Bumps the npm-minor group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [octokit](https://github.com/octokit/octokit.js) | `5.0.3` | `5.0.4` |
| [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) | `9.37.0` | `9.38.0` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.46.0` | `8.46.1` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.46.0` | `8.46.1` |
| [esbuild](https://github.com/evanw/esbuild) | `0.25.10` | `0.25.11` |


Updates `octokit` from 5.0.3 to 5.0.4
- [Release notes](https://github.com/octokit/octokit.js/releases)
- [Commits](octokit/octokit.js@v5.0.3...v5.0.4)

Updates `@eslint/js` from 9.37.0 to 9.38.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](https://github.com/eslint/eslint/commits/v9.38.0/packages/js)

Updates `@typescript-eslint/eslint-plugin` from 8.46.0 to 8.46.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.46.1/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.46.0 to 8.46.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.46.1/packages/parser)

Updates `esbuild` from 0.25.10 to 0.25.11
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](evanw/esbuild@v0.25.10...v0.25.11)

---
updated-dependencies:
- dependency-name: octokit
  dependency-version: 5.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: "@eslint/js"
  dependency-version: 9.38.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.46.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.46.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: esbuild
  dependency-version: 0.25.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 5 to 6.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v5...v6)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
…thub/workflows/actions/setup-node-6

Bump actions/setup-node from 5 to 6 in /.github/workflows
…r-5ed6ededba

Bump the npm-minor group with 5 updates
Handle user errors for invalid `UserConfig`s and missing query files
github-actions Bot added the Rebuild Re-transpile JS & re-generate workflows label Oct 24, 2025
github-actions Bot added the size/XXL May be extremely hard to review label Oct 24, 2025
mbg added Rebuild Re-transpile JS & re-generate workflows and removed Rebuild Re-transpile JS & re-generate workflows size/XXL May be extremely hard to review labels Oct 24, 2025
github-actions Bot added size/XXL May be extremely hard to review and removed Rebuild Re-transpile JS & re-generate workflows labels Oct 24, 2025

Copy link
Copy Markdown
Contributor Author

Pushed a commit to rebuild the Action. Please mark the PR as ready for review to trigger PR checks.

mbg marked this pull request as ready for review October 24, 2025 18:12
mbg requested a review from a team as a code owner October 24, 2025 18:12
Copilot AI review requested due to automatic review settings October 24, 2025 18:12

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Choose a reason Spam Abuse Off Topic Outdated Duplicate Resolved Low Quality

Pull Request Overview

This is a release-PR merging changes from releases/v4 into releases/v3. The primary purpose is to backport changes from version 4 to version 3, including bumping the minimum CodeQL version to 2.17.6 and modifying the SARIF file post-processing behavior to always occur regardless of upload settings.

Key changes:

  • Minimum CodeQL bundle version increased from 2.16.6 to 2.17.6
  • SARIF post-processing now always occurs, not just when uploading
  • New post-processed-sarif-path input added to the analyze action to optionally save post-processed SARIF files

Reviewed Changes

Copilot reviewed 63 out of 66 changed files in this pull request and generated no comments.

Show a summary per file
File Description
CHANGELOG.md Documents the new 3.31.0 release with key changes
package.json Version bump to 3.31.0 and dependency updates
src/codeql.ts Updates minimum CodeQL version constant and error handling improvements
src/upload-lib.ts Refactors upload logic to separate post-processing from uploading
src/upload-sarif.ts Renames function and adds support for conditional uploading
src/util.ts Adds new utility functions for environment variables and HTTP error handling
analyze/action.yml Adds new post-processed-sarif-path input parameter
lib/*.js Generated JavaScript files from TypeScript sources

mbg merged commit d198d2f into releases/v3 Oct 24, 2025
238 checks passed
mbg deleted the backport-v3.31.0-4e94bd11f branch October 24, 2025 18:30
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size/XXL May be extremely hard to review

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants


Back | FazBrowse Home | New Git URL