Skip to content

Commit 6db8d63

Browse files
angelapwenangelapwen
authored
Merge pull request #2522 from github/update-v3.26.11-8aba5f2c4
Merge main into releases/v3
2 parents e2b3eaf + 389647f commit 6db8d63

File tree

5,429 files changed

+2176936
-71672
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

5,429 files changed

+2176936
-71672
lines changed

‎.github/dependabot.yml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -16,6 +16,10 @@ updates:
1616
# v7 requires ESM
1717
- dependency-name: "del"
1818
versions: ["^7.0.0"]
19+
# This is broken due to the way configuration files have changed.
20+
# This might be fixed when we move to eslint v9.
21+
- dependency-name: "eslint-plugin-import"
22+
versions: [">=2.30.0"]
1923
groups:
2024
npm:
2125
patterns:

‎.github/workflows/debug-artifacts-upgrade.yml

Lines changed: 99 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,99 @@
1+
# Checks logs, SARIF, and database bundle debug artifacts exist and are accessible
2+
# with download-artifact@v4 when CODEQL_ACTION_ARTIFACT_V4_UPGRADE is set to true.
3+
name: PR Check - Debug artifact upload using artifact@v2
4+
env:
5+
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
6+
CODEQL_ACTION_ARTIFACT_V4_UPGRADE: true
7+
on:
8+
push:
9+
branches:
10+
- main
11+
- releases/v*
12+
pull_request:
13+
types:
14+
- opened
15+
- synchronize
16+
- reopened
17+
- ready_for_review
18+
schedule:
19+
- cron: '0 5 * * *'
20+
workflow_dispatch: {}
21+
jobs:
22+
upload-artifacts:
23+
strategy:
24+
fail-fast: false
25+
matrix:
26+
version:
27+
- stable-v2.13.5
28+
- stable-v2.14.6
29+
- stable-v2.15.5
30+
- stable-v2.16.6
31+
- stable-v2.17.6
32+
- default
33+
- linked
34+
- nightly-latest
35+
name: Upload debug artifacts
36+
env:
37+
CODEQL_ACTION_TEST_MODE: true
38+
timeout-minutes: 45
39+
runs-on: ubuntu-latest
40+
steps:
41+
- name: Check out repository
42+
uses: actions/checkout@v4
43+
- name: Prepare test
44+
id: prepare-test
45+
uses: ./.github/actions/prepare-test
46+
with:
47+
version: ${{ matrix.version }}
48+
- uses: actions/setup-go@v5
49+
with:
50+
go-version: ^1.13.1
51+
- uses: ./../action/init
52+
id: init
53+
with:
54+
tools: ${{ steps.prepare-test.outputs.tools-url }}
55+
debug: true
56+
debug-artifact-name: my-debug-artifacts
57+
debug-database-name: my-db
58+
# We manually exclude Swift from the languages list here, as it is not supported on Ubuntu
59+
languages: cpp,csharp,go,java,javascript,python,ruby
60+
- name: Build code
61+
shell: bash
62+
run: ./build.sh
63+
- uses: ./../action/analyze
64+
id: analysis
65+
download-and-check-artifacts:
66+
name: Download and check debug artifacts
67+
needs: upload-artifacts
68+
timeout-minutes: 45
69+
runs-on: ubuntu-latest
70+
steps:
71+
- name: Download all artifacts
72+
uses: actions/download-artifact@v4
73+
- name: Check expected artifacts exist
74+
shell: bash
75+
run: |
76+
VERSIONS="stable-v2.13.5 stable-v2.14.6 stable-v2.15.5 stable-v2.16.6 stable-v2.17.6 default linked nightly-latest"
77+
LANGUAGES="cpp csharp go java javascript python"
78+
for version in $VERSIONS; do
79+
pushd "./my-debug-artifacts-${version//./}"
80+
echo "Artifacts from version $version:"
81+
for language in $LANGUAGES; do
82+
echo "- Checking $language"
83+
if [[ ! -f "$language.sarif" ]] ; then
84+
echo "Missing a SARIF file for $language"
85+
exit 1
86+
fi
87+
if [[ ! -f "my-db-$language.zip" ]] ; then
88+
echo "Missing a database bundle for $language"
89+
exit 1
90+
fi
91+
if [[ ! -d "$language/log" ]] ; then
92+
echo "Missing logs for $language"
93+
exit 1
94+
fi
95+
done
96+
popd
97+
done
98+
env:
99+
GO111MODULE: auto

‎CHANGELOG.md

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -4,6 +4,14 @@ See the [releases page](https://github.com/github/codeql-action/releases) for th
44

55
Note that the only difference between `v2` and `v3` of the CodeQL Action is the node version they support, with `v3` running on node 20 while we continue to release `v2` to support running on node 16. For example `3.22.11` was the first `v3` release and is functionally identical to `2.22.11`. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.
66

7+
## 3.26.11 - 03 Oct 2024
8+
9+
- _Upcoming breaking change_: Add support for using `actions/download-artifact@v4` to programmatically consume CodeQL Action debug artifacts.
10+
11+
Starting November 30, 2024, GitHub.com customers will [no longer be able to use `actions/download-artifact@v3`](https://github.blog/changelog/2024-04-16-deprecation-notice-v3-of-the-artifact-actions/). Therefore, to avoid breakage, customers who programmatically download the CodeQL Action debug artifacts should set the `CODEQL_ACTION_ARTIFACT_V4_UPGRADE` environment variable to `true` and bump `actions/download-artifact@v3` to `actions/download-artifact@v4` in their workflows. The CodeQL Action will enable this behavior by default in early November and workflows that have not yet bumped to `actions/download-artifact@v3` to `actions/download-artifact@v4` will begin failing then.
12+
13+
This change is currently unavailable for GitHub Enterprise Server customers, as `actions/upload-artifact@v4` and `actions/download-artifact@v4` are not yet compatible with GHES.
14+
715
## 3.26.10 - 30 Sep 2024
816

917
- We are rolling out a feature in September/October 2024 that sets up CodeQL using a bundle compressed with [Zstandard](http://facebook.github.io/zstd/). Our aim is to improve the performance of setting up CodeQL. [#2502](https://github.com/github/codeql-action/pull/2502)

‎lib/actions-util.js

Lines changed: 77 additions & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎lib/actions-util.js.map

Lines changed: 1 addition & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎lib/analyze-action-post.js

Lines changed: 13 additions & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎lib/analyze-action-post.js.map

Lines changed: 1 addition & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎lib/cli-errors.js

Lines changed: 11 additions & 20 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)
pFad - Phonifier reborn

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy