Merge releases/v4 into releases/v3 by github-actions[bot] · Pull Request #3496 · github/codeql-action · GitHub

Merging 89a39a4 into releases/v3.

Conductor for this PR is @mbg.

Contains the following pull requests:

Please do the following:

Ensure the CHANGELOG displays the correct version and date.
Ensure the CHANGELOG includes all relevant, user-facing changes since the last release.
Check that there are not any unexpected commits being merged into the releases/v3 branch.
Ensure the docs team is aware of any documentation changes that need to be released.
Remove and re-add the "Rebuild" label to the PR to trigger just this workflow.
Wait for the "Rebuild" workflow to push a commit updating the distribution files.
Mark the PR as ready for review to trigger the full set of PR checks.
Approve and merge this PR. Make sure Create a merge commit is selected rather than Squash and merge or Rebase and merge.

Mergeback v4.32.3 refs/heads/releases/v4 into main

Co-authored-by: Henry Mercer <henrymercer@github.com> Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

This reverts commit 676a1ce.

This reverts commit 70a71a5.

….4-89a39a4e5

Pushed a commit to rebuild the Action. Please mark the PR as ready for review to trigger PR checks.

Pull request overview

This is a release PR merging changes from releases/v4 into releases/v3 to create version 3.32.4. The release includes updates to the default CodeQL bundle, improvements to certificate generation for authentication proxies, additional diagnostic logging, and new internal settings for managing nightly builds and Java network debugging.

Changes:

Update version to 3.32.4 with release date of February 20, 2026
Update default CodeQL bundle from 2.24.1 to 2.24.2
Add experimental certificate improvements for authentication proxy
Add diagnostic logging for proxy environment inspection
Add internal settings for nightly CLI and Java network debugging

Reviewed changes

Copilot reviewed 39 out of 45 changed files in this pull request and generated no comments.

File	Description
CHANGELOG.md	Documents version 3.32.4 with appropriate user-facing changes from PRs #3493, #3473, #3486, #3485, and #3484
package.json	Updates version to 3.32.4
package-lock.json	Contains critical version mismatch - shows 4.32.4 instead of 3.32.4

As Copilot points out in its summary, it seems that package-lock.json doesn't contain the expected version. That already seems to be the case in the release/v3 branch as well, so it seems to be an existing issue. Probably not critical, since that branch only really exists for the JS files and they get the correct version.

I'll proceed with this PR as-is and we can make a change to the workflow/release branch later if needed.

mbg and others added 30 commits February 11, 2026 19:23

Set keyUsage

713a293

Explicitly sign certificate with SHA256

e8f0116

Set more extensions

d155ebf

Move certificate code to its own file

d636fb3

Gate updated cert gen behind FF

b1d963e

Add some basic unit tests

7801eda

Fix typo in test

bc1164e

Add csra analysis kind

9267d8d

Enforce that only compatible kinds can be enabled concurrently

5b3261b

Fix CodeScanning config's sarifPredicate and add test

5132eb5

Update upload-lib tests for CSRA

406bbfc

Remove redundant analysis kind check

8cc4d25

Update getPrimaryAnalysis* and add test

6a17f4e

Update PR check for csra

2de76b6

Add csra case to addSarifExtension test

db93462

Type the upload payload object

cbb92e7

Add transformPayload to AnalysisConfig

0cfcceb

Add assessment_id to CSRA payload

c48cd24

Change assessment_id to be a number

da67096

Add BasePayload type and derive AssessmentPayload from it

2adcb64

Validate CODEQL_ACTION_CSRA_ASSESSMENT_ID value

0ce6420

CSRA category does not need to be adjusted

9835994

Extend uploadPayload tests to all analysis kinds

15a3d32

Add RecordingLogger that keeps track of groups

edf3609

Find all missing messages in checkExpectedLogMessages

e1933c6

Update changelog and version after v4.32.3

01fcdce

Rebuild

6bddc79

Merge pull request #3480 from github/mergeback/v4.32.3-to-main-9e907b5e

ef618fe

Mergeback v4.32.3 refs/heads/releases/v4 into main

Use author if they are GitHub staff

64940fa

Remove superfluous try/catch

248d797

mbg and others added 9 commits February 20, 2026 13:07

Add changelog entries

cdda72d

Fix typo

314172e

Apply suggestions from code review

0c20209

Co-authored-by: Henry Mercer <henrymercer@github.com> Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Apply remaining review suggestions

e5d84c8

Merge pull request #3494 from github/update-v4.32.4-39ba80c47

89a39a4

Revert "Update version and changelog for v3.32.3"

72edeaa

This reverts commit 676a1ce.

Revert "Rebuild"

88d9aba

This reverts commit 70a71a5.

Merge remote-tracking branch 'origin/releases/v4' into backport-v3.32…

acb91bd

….4-89a39a4e5

Update version and changelog for v3.32.4

147ec67

github-actions Bot added the Rebuild Re-transpile JS & re-generate workflows label Feb 20, 2026

github-actions Bot assigned mbg Feb 20, 2026

github-actions Bot added the size/XXL May be extremely hard to review label Feb 20, 2026

mbg removed Rebuild Re-transpile JS & re-generate workflows size/XXL May be extremely hard to review labels Feb 20, 2026

github-actions Bot added the size/XXL May be extremely hard to review label Feb 20, 2026

mbg added Rebuild Re-transpile JS & re-generate workflows and removed size/XXL May be extremely hard to review labels Feb 20, 2026

github-actions Bot removed the Rebuild Re-transpile JS & re-generate workflows label Feb 20, 2026

Rebuild

a3696cd

mbg marked this pull request as ready for review February 20, 2026 14:53

Copilot AI review requested due to automatic review settings February 20, 2026 14:53

mbg requested a review from a team as a code owner February 20, 2026 14:53

github-actions Bot added the size/XXL May be extremely hard to review label Feb 20, 2026

mbg approved these changes Feb 20, 2026

View reviewed changes

Copilot started reviewing on behalf of mbg February 20, 2026 14:54 View session

Copilot AI reviewed Feb 20, 2026

View reviewed changes

mbg merged commit 4558047 into releases/v3 Feb 20, 2026
254 checks passed

mbg deleted the backport-v3.32.4-89a39a4e5 branch February 20, 2026 15:34

Merge releases/v4 into releases/v3 by github-actions[bot] · Pull Request #3496 · github/codeql-action · GitHub

Uh oh!

Merge releases/v4 into releases/v3 - #3496

Merge releases/v4 into releases/v3#3496
mbg merged 90 commits into
releases/v3from
backport-v3.32.4-89a39a4e5

github-actions Bot commented Feb 20, 2026 •
edited by mbg
Loading

Uh oh!

Uh oh!

github-actions Bot commented Feb 20, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

mbg commented Feb 20, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

Merge releases/v4 into releases/v3 by github-actions[bot] · Pull Request #3496 · github/codeql-action · GitHub

Uh oh!

Merge releases/v4 into releases/v3 - #3496

Merge releases/v4 into releases/v3#3496mbg merged 90 commits intoreleases/v3github/codeql-action:releases/v3from backport-v3.32.4-89a39a4e5github/codeql-action:backport-v3.32.4-89a39a4e5Copy head branch name to clipboard

Conversation

github-actions Bot commented Feb 20, 2026 • edited by mbg Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Feb 20, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

mbg commented Feb 20, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

Merge releases/v4 into releases/v3#3496
mbg merged 90 commits into
releases/v3from
backport-v3.32.4-89a39a4e5

github-actions Bot commented Feb 20, 2026 •
edited by mbg
Loading