v3.27.6
CodeQL Action Changelog
See thereleases page for the relevant changes to the CodeQL CLI and language packs.
Note that the only difference betweenv2 andv3 of the CodeQL Action is the node version they support, withv3 running on node 20 while we continue to releasev2 to support running on node 16. For example3.22.11 was the firstv3 release and is functionally identical to2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.
3.27.6 - 03 Dec 2024
Update default CodeQL bundle version to 2.19.4.#2626
See the fullCHANGELOG.md for more information.

Changelog

Sourced fromgithub/codeql-action's changelog.

CodeQL Action Changelog
See thereleases page for the relevant changes to the CodeQL CLI and language packs.
Note that the only difference betweenv2 andv3 of the CodeQL Action is the node version they support, withv3 running on node 20 while we continue to releasev2 to support running on node 16. For example3.22.11 was the firstv3 release and is functionally identical to2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.
[UNRELEASED]
We are rolling out a change in December 2024 that will extract the CodeQL bundle directly to the toolcache to improve performance.#2631
Update default CodeQL bundle version to 2.20.0.#2636
3.27.6 - 03 Dec 2024
Update default CodeQL bundle version to 2.19.4.#2626
3.27.5 - 19 Nov 2024
No user facing changes.
3.27.4 - 14 Nov 2024
No user facing changes.
3.27.3 - 12 Nov 2024
No user facing changes.
3.27.2 - 12 Nov 2024
Fixed an issue where setting up the CodeQL tools would sometimes fail with the message "Invalid value 'undefined' for header 'authorization'".#2590
3.27.1 - 08 Nov 2024
The CodeQL Action now downloads bundles compressed using Zstandard on GitHub Enterprise Server when using Linux or macOS runners. This speeds up the installation of the CodeQL tools. This feature is already available to GitHub.com users.#2573
Update default CodeQL bundle version to 2.19.3.#2576
3.27.0 - 22 Oct 2024
Bump the minimum CodeQL bundle version to 2.14.6.#2549
Fix an issue where theupload-sarif Action would fail with "upload-sarif post-action step failed: Input required and not supplied: token" when called in a composite Action that had a different set of inputs to the ones expected by theupload-sarif Action.#2557
Update default CodeQL bundle version to 2.19.2.#2552
3.26.13 - 14 Oct 2024
No user facing changes.
3.26.12 - 07 Oct 2024
Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.14.5 and earlier. These versions of CodeQL were discontinued on 24 September 2024 alongside GitHub Enterprise Server 3.10, and will be unsupported by CodeQL Action versions 3.27.0 and later and versions 2.27.0 and later.#2520

... (truncated)

Commits

aa57810 Merge pull request#2628 from github/update-v3.27.6-af49565b8
34e77b7 Update changelog for v3.27.6
af49565 Merge pull request#2620 from github/cklin/DiffThunkRange-fix
5659f01 Merge pull request#2626 from github/update-bundle/codeql-bundle-v2.19.4
5333ff3 Add changelog note
e4fb28d Update default bundle to codeql-bundle-v2.19.4
3d3d628 Merge pull request#2617 from github/update-supported-enterprise-server-versions
2eea97e Fix DiffThunkRange access
f8e782a Merge pull request#2618 from github/mergeback/v3.27.5-to-main-f09c1c0a
49b7c97 Update checked-in dependencies
Additional commits viewable incompare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting@dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

chore(deps): bump github/codeql-action in the dependencies group

c3aa79e

Bumps the dependencies group with 1 update: [github/codeql-action](https://github.com/github/codeql-action).Updates `github/codeql-action` from 3.27.5 to 3.27.6- [Release notes](https://github.com/github/codeql-action/releases)- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)- [Commits](github/codeql-action@f09c1c0...aa57810)---updated-dependencies:- dependency-name: github/codeql-action  dependency-type: direct:production  update-type: version-update:semver-patch  dependency-group: dependencies...Signed-off-by: dependabot[bot] <support@github.com>