FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

Merge main into releases/v4 by github-actions[bot] · Pull Request #3235 · github/codeql-action · GitHub

Merge main into releases/v4 - #3235

Merged
mbg merged 84 commits into
releases/v4from
update-v4.31.0-1d36546c1
Oct 24, 2025
Merged

Merge main into releases/v4#3235
mbg merged 84 commits into
releases/v4from
update-v4.31.0-1d36546c1

Conversation

github-actions Bot commented Oct 24, 2025
edited by mbg
Loading

Copy link
Copy Markdown
Contributor

Merging 1d36546 into releases/v4.

Conductor for this PR is @mbg.

Contains the following pull requests:

Please do the following:

  • Ensure the CHANGELOG displays the correct version and date.
  • Ensure the CHANGELOG includes all relevant, user-facing changes since the last release.
  • Check that there are not any unexpected commits being merged into the releases/v4 branch.
  • Ensure the docs team is aware of any documentation changes that need to be released.
  • Mark the PR as ready for review to trigger the full set of PR checks.
  • Approve and merge this PR. Make sure Create a merge commit is selected rather than Squash and merge or Rebase and merge.
  • Merge the mergeback PR that will automatically be created once this PR is merged.
  • Merge all backport PRs to older release branches, that will automatically be created once this PR is merged.

mbg and others added 30 commits October 14, 2025 19:49
- Throws a `ConfigurationError` if parsing the YAML fails
- Add a couple of tests for it
Mergeback v4.30.9 refs/heads/releases/v4 into main
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Michael B. Gale <mbg@github.com>
Add experimental functionality for labelling PRs by their size
Bumps the npm-minor group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [octokit](https://github.com/octokit/octokit.js) | `5.0.3` | `5.0.4` |
| [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) | `9.37.0` | `9.38.0` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.46.0` | `8.46.1` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.46.0` | `8.46.1` |
| [esbuild](https://github.com/evanw/esbuild) | `0.25.10` | `0.25.11` |


Updates `octokit` from 5.0.3 to 5.0.4
- [Release notes](https://github.com/octokit/octokit.js/releases)
- [Commits](octokit/octokit.js@v5.0.3...v5.0.4)

Updates `@eslint/js` from 9.37.0 to 9.38.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](https://github.com/eslint/eslint/commits/v9.38.0/packages/js)

Updates `@typescript-eslint/eslint-plugin` from 8.46.0 to 8.46.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.46.1/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.46.0 to 8.46.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.46.1/packages/parser)

Updates `esbuild` from 0.25.10 to 0.25.11
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](evanw/esbuild@v0.25.10...v0.25.11)

---
updated-dependencies:
- dependency-name: octokit
  dependency-version: 5.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: "@eslint/js"
  dependency-version: 9.38.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.46.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.46.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: esbuild
  dependency-version: 0.25.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 5 to 6.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v5...v6)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
…thub/workflows/actions/setup-node-6

Bump actions/setup-node from 5 to 6 in /.github/workflows
…r-5ed6ededba

Bump the npm-minor group with 5 updates
Handle user errors for invalid `UserConfig`s and missing query files
mbg and others added 19 commits October 23, 2025 13:34
Bump timeout for `analyze-action-env` test
…-limit

Overlay: Lower size limit for overlay base databases
Perform SARIF post-processing independently of upload
Also add tests for it and `getRequiredEnvParam`
Bump minimum CodeQL Bundle version to 2.17.6
Add changelog entry for post-processing change
github-actions Bot added the size/XXL May be extremely hard to review label Oct 24, 2025
mbg marked this pull request as ready for review October 24, 2025 16:51
mbg requested a review from a team as a code owner October 24, 2025 16:51
Copilot AI review requested due to automatic review settings October 24, 2025 16:51

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Choose a reason Spam Abuse Off Topic Outdated Duplicate Resolved Low Quality

Pull Request Overview

This is a release PR merging changes from main into releases/v4 for version 4.31.0. The PR includes multiple merged pull requests that implement improvements to SARIF file processing, error handling, dependency updates, and various code quality enhancements.

Key changes:

  • Bumped minimum CodeQL bundle version from 2.16.6 to 2.17.6
  • Refactored SARIF upload logic to always perform post-processing, even when uploads are disabled
  • Added new post-processed-sarif-path input to the analyze action for saving post-processed SARIF files

Reviewed Changes

Copilot reviewed 63 out of 66 changed files in this pull request and generated no comments.

Show a summary per file
File Description
package.json Version bump to 4.31.0 and dependency updates
CHANGELOG.md Release notes for version 4.31.0
src/upload-sarif.ts Renamed function and added post-processing support with upload kind parameter
src/upload-lib.ts Refactored to separate post-processing from upload logic
src/analyze-action.ts Updated to use new upload architecture with conditional upload
src/util.ts Added asHTTPError helper and getOptionalEnvVar function
src/codeql.ts Bumped minimum CodeQL version constant
src/workflow.ts, src/tar.ts, etc. Applied optional chaining improvements
analyze/action.yml Added new post-processed-sarif-path input
.github/workflows/*.yml Updated setup-node action from v5 to v6
lib/*.js Generated JavaScript from TypeScript sources

mbg enabled auto-merge October 24, 2025 17:05
mbg merged commit 4e94bd1 into releases/v4 Oct 24, 2025
242 checks passed
mbg deleted the update-v4.31.0-1d36546c1 branch October 24, 2025 17:08
github-actions Bot mentioned this pull request Oct 24, 2025
8 tasks
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size/XXL May be extremely hard to review

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants


Back | FazBrowse Home | New Git URL