- Notifications
You must be signed in to change notification settings - Fork907
Commita07298a
authored
ci: bump github/codeql-action from 3.28.17 to 3.28.18 in the github-actions group (#17907)
Bumps the github-actions group with 1 update:[github/codeql-action](https://github.com/github/codeql-action).Updates `github/codeql-action` from 3.28.17 to 3.28.18<details><summary>Release notes</summary><p><em>Sourced from <ahref="https://github.com/github/codeql-action/releases">github/codeql-action'sreleases</a>.</em></p><blockquote><h2>v3.28.18</h2><h1>CodeQL Action Changelog</h1><p>See the <ahref="https://github.com/github/codeql-action/releases">releasespage</a> for the relevant changes to the CodeQL CLI and languagepacks.</p><h2>3.28.18 - 16 May 2025</h2><ul><li>Update default CodeQL bundle version to 2.21.3. <ahref="https://redirect.github.com/github/codeql-action/pull/2893">#2893</a></li><li>Skip validating SARIF produced by CodeQL for improved performance.<ahref="https://redirect.github.com/github/codeql-action/pull/2894">#2894</a></li><li>The number of threads and amount of RAM used by CodeQL can now beset via the <code>CODEQL_THREADS</code> and <code>CODEQL_RAM</code>runner environment variables. If set, these environment variablesoverride the <code>threads</code> and <code>ram</code> inputsrespectively. <ahref="https://redirect.github.com/github/codeql-action/pull/2891">#2891</a></li></ul><p>See the full <ahref="https://github.com/github/codeql-action/blob/v3.28.18/CHANGELOG.md">CHANGELOG.md</a>for more information.</p></blockquote></details><details><summary>Changelog</summary><p><em>Sourced from <ahref="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action'schangelog</a>.</em></p><blockquote><h1>CodeQL Action Changelog</h1><p>See the <ahref="https://github.com/github/codeql-action/releases">releasespage</a> for the relevant changes to the CodeQL CLI and languagepacks.</p><h2>[UNRELEASED]</h2><p>No user facing changes.</p><h2>3.28.18 - 16 May 2025</h2><ul><li>Update default CodeQL bundle version to 2.21.3. <ahref="https://redirect.github.com/github/codeql-action/pull/2893">#2893</a></li><li>Skip validating SARIF produced by CodeQL for improved performance.<ahref="https://redirect.github.com/github/codeql-action/pull/2894">#2894</a></li><li>The number of threads and amount of RAM used by CodeQL can now beset via the <code>CODEQL_THREADS</code> and <code>CODEQL_RAM</code>runner environment variables. If set, these environment variablesoverride the <code>threads</code> and <code>ram</code> inputsrespectively. <ahref="https://redirect.github.com/github/codeql-action/pull/2891">#2891</a></li></ul><h2>3.28.17 - 02 May 2025</h2><ul><li>Update default CodeQL bundle version to 2.21.2. <ahref="https://redirect.github.com/github/codeql-action/pull/2872">#2872</a></li></ul><h2>3.28.16 - 23 Apr 2025</h2><ul><li>Update default CodeQL bundle version to 2.21.1. <ahref="https://redirect.github.com/github/codeql-action/pull/2863">#2863</a></li></ul><h2>3.28.15 - 07 Apr 2025</h2><ul><li>Fix bug where the action would fail if it tried to produce a debugartifact with more than 65535 files. <ahref="https://redirect.github.com/github/codeql-action/pull/2842">#2842</a></li></ul><h2>3.28.14 - 07 Apr 2025</h2><ul><li>Update default CodeQL bundle version to 2.21.0. <ahref="https://redirect.github.com/github/codeql-action/pull/2838">#2838</a></li></ul><h2>3.28.13 - 24 Mar 2025</h2><p>No user facing changes.</p><h2>3.28.12 - 19 Mar 2025</h2><ul><li>Dependency caching should now cache more dependencies for Java<code>build-mode: none</code> extractions. This should speed upworkflows and avoid inconsistent alerts in some cases.</li><li>Update default CodeQL bundle version to 2.20.7. <ahref="https://redirect.github.com/github/codeql-action/pull/2810">#2810</a></li></ul><h2>3.28.11 - 07 Mar 2025</h2><ul><li>Update default CodeQL bundle version to 2.20.6. <ahref="https://redirect.github.com/github/codeql-action/pull/2793">#2793</a></li></ul><h2>3.28.10 - 21 Feb 2025</h2><ul><li>Update default CodeQL bundle version to 2.20.5. <ahref="https://redirect.github.com/github/codeql-action/pull/2772">#2772</a></li><li>Address an issue where the CodeQL Bundle would occasionally fail todecompress on macOS. <ahref="https://redirect.github.com/github/codeql-action/pull/2768">#2768</a></li></ul><h2>3.28.9 - 07 Feb 2025</h2><!-- raw HTML omitted --></blockquote><p>... (truncated)</p></details><details><summary>Commits</summary><ul><li><ahref="https://github.com/github/codeql-action/commit/ff0a06e83cb2de871e5a09832bc6a81e7276941f"><code>ff0a06e</code></a>Merge pull request <ahref="https://redirect.github.com/github/codeql-action/issues/2896">#2896</a>from github/update-v3.28.18-b86edfc27</li><li><ahref="https://github.com/github/codeql-action/commit/a41e0844be4d25fcef7ce7fa536f3e30275a9a1c"><code>a41e084</code></a>Update changelog for v3.28.18</li><li><ahref="https://github.com/github/codeql-action/commit/b86edfc27a1e0d3b55127a7496a1c770a02b2f84"><code>b86edfc</code></a>Merge pull request <ahref="https://redirect.github.com/github/codeql-action/issues/2893">#2893</a>from github/update-bundle/codeql-bundle-v2.21.3</li><li><ahref="https://github.com/github/codeql-action/commit/e93b90025f7c49dccc3ee640c4155b63eb9a6b39"><code>e93b900</code></a>Merge branch 'main' into update-bundle/codeql-bundle-v2.21.3</li><li><ahref="https://github.com/github/codeql-action/commit/510dfa3460b15b34a807ab5609b4691aed5ebbee"><code>510dfa3</code></a>Merge pull request <ahref="https://redirect.github.com/github/codeql-action/issues/2894">#2894</a>from github/henrymercer/skip-validating-codeql-sarif</li><li><ahref="https://github.com/github/codeql-action/commit/492d7832457da825a964331d860789f3f19d105b"><code>492d783</code></a>Merge branch 'main' into henrymercer/skip-validating-codeql-sarif</li><li><ahref="https://github.com/github/codeql-action/commit/83bdf3b7f92061d2f6d74e2a4555ecf719adad68"><code>83bdf3b</code></a>Merge pull request <ahref="https://redirect.github.com/github/codeql-action/issues/2859">#2859</a>from github/update-supported-enterprise-server-versions</li><li><ahref="https://github.com/github/codeql-action/commit/cffc916774454a5ead1c8fb7925abad20cda85e4"><code>cffc916</code></a>Merge pull request <ahref="https://redirect.github.com/github/codeql-action/issues/2891">#2891</a>from austinpray-mixpanel/patch-1</li><li><ahref="https://github.com/github/codeql-action/commit/4420887272f1c68c7c58ca2970bdfb5eb657cf08"><code>4420887</code></a>Add deprecation warning for CodeQL 2.16.5 and earlier</li><li><ahref="https://github.com/github/codeql-action/commit/4e178c584157c51ff3d6fb87c764e7ed0715f82a"><code>4e178c5</code></a>Update supported versions table in README</li><li>Additional commits viewable in <ahref="https://github.com/github/codeql-action/compare/60168efe1c415ce0f5521ea06d5c2062adbeed1b...ff0a06e83cb2de871e5a09832bc6a81e7276941f">compareview</a></li></ul></details><br />[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)Dependabot will resolve any conflicts with this PR as long as you don'talter it yourself. You can also trigger a rebase manually by commenting`@dependabot rebase`.[//]: # (dependabot-automerge-start)[//]: # (dependabot-automerge-end)---<details><summary>Dependabot commands and options</summary><br />You can trigger Dependabot actions by commenting on this PR:- `@dependabot rebase` will rebase this PR- `@dependabot recreate` will recreate this PR, overwriting any editsthat have been made to it- `@dependabot merge` will merge this PR after your CI passes on it- `@dependabot squash and merge` will squash and merge this PR afteryour CI passes on it- `@dependabot cancel merge` will cancel a previously requested mergeand block automerging- `@dependabot reopen` will reopen this PR if it is closed- `@dependabot close` will close this PR and stop Dependabot recreatingit. You can achieve the same result by closing it manually- `@dependabot show <dependency name> ignore conditions` will show allof the ignore conditions of the specified dependency- `@dependabot ignore <dependency name> major version` will close thisgroup update PR and stop Dependabot creating any more for the specificdependency's major version (unless you unignore this specificdependency's major version or upgrade to it yourself)- `@dependabot ignore <dependency name> minor version` will close thisgroup update PR and stop Dependabot creating any more for the specificdependency's minor version (unless you unignore this specificdependency's minor version or upgrade to it yourself)- `@dependabot ignore <dependency name>` will close this group update PRand stop Dependabot creating any more for the specific dependency(unless you unignore this specific dependency or upgrade to it yourself)- `@dependabot unignore <dependency name>` will remove all of the ignoreconditions of the specified dependency- `@dependabot unignore <dependency name> <ignore condition>` willremove the ignore condition of the specified dependency and ignoreconditions</details>Signed-off-by: dependabot[bot] <support@github.com>Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>1 parent84478bd commita07298a
2 files changed
+4
-4
lines changedLines changed: 1 addition & 1 deletion
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
47 | 47 | | |
48 | 48 | | |
49 | 49 | | |
50 | | - | |
| 50 | + | |
51 | 51 | | |
52 | 52 | | |
Lines changed: 3 additions & 3 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
38 | 38 | | |
39 | 39 | | |
40 | 40 | | |
41 | | - | |
| 41 | + | |
42 | 42 | | |
43 | 43 | | |
44 | 44 | | |
| |||
48 | 48 | | |
49 | 49 | | |
50 | 50 | | |
51 | | - | |
| 51 | + | |
52 | 52 | | |
53 | 53 | | |
54 | 54 | | |
| |||
150 | 150 | | |
151 | 151 | | |
152 | 152 | | |
153 | | - | |
| 153 | + | |
154 | 154 | | |
155 | 155 | | |
156 | 156 | | |
| |||
0 commit comments
Comments
(0)