54b1c84213
Merge pull request #2724 from github/marcogario/skip_proxy
...
start-proxy: Skip proxy setup if no credentials are available
2025-01-28 22:15:51 +01:00
76622e7fee
Merge branch 'main' into marcogario/skip_proxy
2025-01-28 19:49:45 +00:00
5f4f998a94
Merge pull request #2733 from github/marcogario/remove_proxy_password
...
start-proxy: Remove unusued proxy_password input
2025-01-28 09:59:10 +01:00
43cffee811
Merge pull request #2736 from github/mergeback/v3.28.6-to-main-17a820bf
...
Mergeback v3.28.6 refs/heads/releases/v3 into main
2025-01-27 13:25:18 -08:00
a5f217b812
Update checked-in dependencies
2025-01-27 21:06:23 +00:00
c386dcd486
Update changelog and version after v3.28.6
2025-01-27 21:04:21 +00:00
17a820bf2e
Merge pull request #2735 from github/aeisenberg/fix-permissions
...
Add extra permission to mergeback workflow
2025-01-27 13:00:25 -08:00
3a4eae00ff
Add extra permission to mergeback workflow
2025-01-27 12:45:34 -08:00
4e83f6b818
Merge pull request #2732 from github/update-v3.28.6-b49419044
...
Merge main into releases/v3
2025-01-27 12:28:00 -08:00
e2f043dee4
Remove unusued proxy_password input
2025-01-27 20:10:59 +00:00
64ad47c7c1
Update changelog for v3.28.6
2025-01-27 20:04:40 +00:00
8aa028b476
Merge branch 'main' into marcogario/skip_proxy
2025-01-27 20:24:32 +01:00
b494190443
Merge pull request #2726 from github/aeisenberg/reenable-artifact-upload
...
Ensure artifacts are only uploaded in safe situations
2025-01-27 11:10:46 -08:00
a879704805
Clarify test fail;ure message
2025-01-27 10:51:01 -08:00
62c322fad9
Add better comments around artifact upload tests
2025-01-27 10:18:03 -08:00
c6b286132e
Merge pull request #2731 from github/dependabot/npm_and_yarn/npm-e1e9e6cd15
...
build(deps-dev): bump the npm group with 4 updates
2025-01-27 10:14:25 -08:00
297e89a0d9
Merge pull request #2723 from github/marcogario/start-proxy_tests
...
start-proxy: Fix bug when language is not provided
2025-01-27 09:25:59 -08:00
357e0ceaa9
Update checked-in dependencies
2025-01-27 17:21:38 +00:00
7fdbca3ba3
build(deps-dev): bump the npm group with 4 updates
...
Bumps the npm group with 4 updates: [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js ), [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin ), [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser ) and [nock](https://github.com/nock/nock ).
Updates `@eslint/js` from 9.18.0 to 9.19.0
- [Release notes](https://github.com/eslint/eslint/releases )
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md )
- [Commits](https://github.com/eslint/eslint/commits/v9.19.0/packages/js )
Updates `@typescript-eslint/eslint-plugin` from 8.21.0 to 8.22.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases )
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md )
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.22.0/packages/eslint-plugin )
Updates `@typescript-eslint/parser` from 8.21.0 to 8.22.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases )
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md )
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.22.0/packages/parser )
Updates `nock` from 13.5.6 to 14.0.0
- [Release notes](https://github.com/nock/nock/releases )
- [Changelog](https://github.com/nock/nock/blob/main/CHANGELOG.md )
- [Commits](https://github.com/nock/nock/compare/v13.5.6...v14.0.0 )
---
updated-dependencies:
- dependency-name: "@eslint/js"
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: npm
- dependency-name: "@typescript-eslint/eslint-plugin"
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: npm
- dependency-name: "@typescript-eslint/parser"
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: npm
- dependency-name: nock
dependency-type: direct:development
update-type: version-update:semver-major
dependency-group: npm
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-01-27 17:20:44 +00:00
7c2eafa990
Use ConfigureationError for exceptions
2025-01-27 10:09:07 +00:00
a2c1b36bdf
Iterate over each version
...
Not sure why we need this now, but didn't before.
2025-01-26 19:18:07 -08:00
346d06794f
Fix CLI versions
2025-01-26 19:17:29 -08:00
f71067bd5f
Stop using feature-flag support for determining if a feature is active
...
Using the feature flag mechanism for checking if uploads are enabled was
too clunky. I'm moving the change to checking versions directly.
2025-01-26 13:42:15 -08:00
5ff24648ef
Update changelog
2025-01-25 15:34:21 -08:00
2bab9f7984
Ensure artifacts are only uploaded in safe situations
...
This commit:
Turns on uploading of artifacts again but only if CLI version is
>= 2.20.3. I implemented the check using our feature flag functionality.
I was on the fence about this since it makes the PR more complex.
However, it does give us more flexibility when controlling artifact
uploads.
Also, I renamed the two workflows that were previously disabled. This
way we will not accidentally enable the old workflows for previous
versions of the action.
2025-01-25 15:31:35 -08:00
7d7758bb24
Skip proxy if no credentials
2025-01-24 21:46:40 +00:00
f6d19ed42e
Formatting
2025-01-24 20:27:36 +00:00
ecf723239a
Sanitize inputs
2025-01-24 20:20:10 +00:00
e7c0c9d71b
Merge pull request #2722 from github/mergeback/v3.28.5-to-main-f6091c01
...
Mergeback v3.28.5 refs/heads/releases/v3 into main
2025-01-24 11:52:47 -05:00
51bb5eb99a
Fix bug in getCredentials + tests
2025-01-24 16:39:47 +00:00
4b8aeabbe4
Merge branch 'main' into mergeback/v3.28.5-to-main-f6091c01
2025-01-24 16:39:07 +00:00
336c69eec0
Update checked-in dependencies
2025-01-24 16:37:53 +00:00
da67fa0eb5
Update changelog and version after v3.28.5
2025-01-24 16:34:16 +00:00
f6091c0113
Merge pull request #2721 from github/update-v3.28.5-01f001931
...
Merge main into releases/v3
2025-01-24 11:26:18 -05:00
c22d1f36ab
Merge pull request #2720 from github/henrymercer/add-permissions
...
Restrict workflow permissions
2025-01-24 16:21:00 +00:00
064af10f0d
Update changelog for v3.28.5
2025-01-24 16:11:52 +00:00
01f0019310
Merge pull request #2717 from github/update-bundle/codeql-bundle-v2.20.3
...
Update default bundle to 2.20.3
2025-01-24 09:53:17 -05:00
3b34c672ca
Merge branch 'main' into henrymercer/add-permissions
2025-01-24 13:40:54 +00:00
9cd802ec12
Give only read-level `security-events` permission where possible
2025-01-24 13:27:33 +00:00
d39065943f
Add missing permissions
2025-01-24 13:21:05 +00:00
573ad887cd
Merge pull request #2718 from github/kaeluka/4779-1
...
Update workflow permissions
2025-01-24 14:16:12 +01:00
d7f39764f6
permissions block in query-filters.yml
2025-01-24 12:12:00 +01:00
428975ce2c
Add changelog note
2025-01-23 22:15:18 +00:00
208091da0a
Update default bundle to codeql-bundle-v2.20.3
2025-01-23 22:15:14 +00:00
7e3036b9cd
Merge pull request #2716 from github/mergeback/v3.28.4-to-main-ee117c90
...
Mergeback v3.28.4 refs/heads/releases/v3 into main
2025-01-23 17:09:33 +00:00
e32a0d62d4
Update checked-in dependencies
2025-01-23 16:48:10 +00:00
67c21e4084
Update changelog and version after v3.28.4
2025-01-23 16:44:36 +00:00
ee117c905a
Merge pull request #2715 from github/update-v3.28.4-b44b19fe8
...
Merge main into releases/v3
2025-01-23 16:43:44 +00:00
377913f015
Update changelog for v3.28.4
2025-01-23 16:28:37 +00:00
b44b19fe8d
Merge pull request #2714 from github/mergeback/v3.28.3-to-main-dd196fa9
...
Mergeback v3.28.3 refs/heads/releases/v3 into main
2025-01-22 11:34:36 -08:00
Marco Gario
Andrew Eisenberg
github-actions[bot]
dependabot[bot]
Dave Bartolomeo
Henry Mercer
Stephan Brandauer
Chris Smowton
Angela P Wen