8000 Merge pull request #3187 from github/backport-v3.30.7-e296a9355 · github/codeql-action@a8d1ac4 · GitHub
[go: up one dir, main page]
Skip to content

Commit a8d1ac4

Browse files
mario-camposmario-campos
authored
Merge pull request #3187 from github/backport-v3.30.7-e296a9355
Merge releases/v4 into releases/v3
2 parents 64d10c1 + c551c50 commit a8d1ac4

25 files changed

+101
-72
lines changed

‎.github/workflows/codescanning-config-cli.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -58,7 +58,7 @@ jobs:
5858
- name: Set up Node.js
5959
uses: actions/setup-node@v5
6060
with:
61-
node-version: '20'
61+
node-version: 24
6262
cache: 'npm'
6363

6464
- name: Install dependencies

‎.github/workflows/pr-checks.yml‎

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -20,6 +20,7 @@ jobs:
2020
fail-fast: false
2121
matrix:
2222
os: [ubuntu-latest, macos-latest, windows-latest]
23+
node-version: [20, 24]
2324
permissions:
2425
contents: read
2526
security-events: write # needed to upload ESLint results
@@ -36,7 +37,7 @@ jobs:
3637
- name: Set up Node.js
3738
uses: actions/setup-node@v5
3839
with:
39-
node-version: '20.x'
40+
node-version: ${{ matrix.node-version }}
4041
cache: 'npm'
4142

4243
- name: Set up Python
@@ -73,7 +74,7 @@ jobs:
7374

7475
- name: Upload sarif
7576
uses: github/codeql-action/upload-sarif@v3
76-
if: matrix.os == 'ubuntu-latest'
77+
if: matrix.os == 'ubuntu-latest' && matrix.node-version == 24
7778
with:
7879
sarif_file: eslint.sarif
7980
category: eslint

‎.github/workflows/query-filters.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -34,7 +34,7 @@ jobs:
3434
- name: Install Node.js
3535
uses: actions/setup-node@v5
3636
with:
37-
node-version: 20.x
37+
node-version: 24
3838
cache: npm
3939

4040
- name: Install dependencies

‎.github/workflows/update-bundle.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -43,7 +43,7 @@ jobs:
4343
- name: Set up Node.js
4444
uses: actions/setup-node@v5
4545
with:
46-
node-version: '20.x'
46+
node-version: 24
4747
cache: 'npm'
4848

4949
- name: Install dependencies

‎CHANGELOG.md‎

Lines changed: 4 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,10 @@
22

33
See the [releases page](https://github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs.
44

5+
## 3.30.7 - 06 Oct 2025
6+
7+
No user facing changes.
8+
59
## 3.30.6 - 02 Oct 2025
610

711
- Update default CodeQL bundle version to 2.23.2. [#3168](https://github.com/github/codeql-action/pull/3168)
@@ -236,17 +240,13 @@ No user facing changes.
236240
## 3.26.12 - 07 Oct 2024
237241

238242
- _Upcoming breaking change_: Add a deprecation warning for customers using CodeQL version 2.14.5 and earlier. These versions of CodeQL were discontinued on 24 September 2024 alongside GitHub Enterprise Server 3.10, and will be unsupported by CodeQL Action versions 3.27.0 and later and versions 2.27.0 and later. [#2520](https://github.com/github/codeql-action/pull/2520)
239-
240243
- If you are using one of these versions, please update to CodeQL CLI version 2.14.6 or later. For instance, if you have specified a custom version of the CLI using the 'tools' input to the 'init' Action, you can remove this input to use the default version.
241-
242244
- Alternatively, if you want to continue using a version of the CodeQL CLI between 2.13.5 and 2.14.5, you can replace `github/codeql-action/*@v3` by `github/codeql-action/*@v3.26.11` and `github/codeql-action/*@v2` by `github/codeql-action/*@v2.26.11` in your code scanning workflow to ensure you continue using this version of the CodeQL Action.
243245

244246
## 3.26.11 - 03 Oct 2024
245247

246248
- _Upcoming breaking change_: Add support for using `actions/download-artifact@v4` to programmatically consume CodeQL Action debug artifacts.
247-
248249
Starting November 30, 2024, GitHub.com customers will [no longer be able to use `actions/download-artifact@v3`](https://github.blog/changelog/2024-04-16-deprecation-notice-v3-of-the-artifact-actions/). Therefore, to avoid breakage, customers who programmatically download the CodeQL Action debug artifacts should set the `CODEQL_ACTION_ARTIFACT_V4_UPGRADE` environment variable to `true` and bump `actions/download-artifact@v3` to `actions/download-artifact@v4` in their workflows. The CodeQL Action will enable this behavior by default in early November and workflows that have not yet bumped `actions/download-artifact@v3` to `actions/download-artifact@v4` will begin failing then.
249-
250250
This change is currently unavailable for GitHub Enterprise Server customers, as `actions/upload-artifact@v4` and `actions/download-artifact@v4` are not yet compatible with GHES.
251251
- Update default CodeQL bundle version to 2.19.1. [#2519](https://github.com/github/codeql-action/pull/2519)
252252

@@ -369,12 +369,9 @@ No user facing changes.
369369
## 3.25.0 - 15 Apr 2024
370370

371371
- The deprecated feature for extracting dependencies for a Python analysis has been removed. [#2224](https://github.com/github/codeql-action/pull/2224)
372-
373372
As a result, the following inputs and environment variables are now ignored:
374-
375373
- The `setup-python-dependencies` input to the `init` Action
376374
- The `CODEQL_ACTION_DISABLE_PYTHON_DEPENDENCY_INSTALLATION` environment variable
377-
378375
We recommend removing any references to these from your workflows. For more information, see the release notes for CodeQL Action v3.23.0 and v2.23.0.
379376
- Automatically overwrite an existing database if found on the filesystem. [#2229](https://github.com/github/codeql-action/pull/2229)
380377
- Bump the minimum CodeQL bundle version to 2.12.6. [#2232](https://github.com/github/codeql-action/pull/2232)

‎CONTRIBUTING.md‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ Please note that this project is released with a [Contributor Code of Conduct][c
1313

1414
## Development and Testing
1515

16-
Before you start, ensure that you have a recent version of node (16 or higher) installed, along with a recent version of npm (9.2 or higher). You can see which version of node is used by the action in `init/action.yml`.
16+
Before you start, ensure that you have a recent version of node (24 or higher) installed, along with a recent version of npm (9.2 or higher). You can see which version of node is used by the action in `init/action.yml`.
1717

1818
### Common tasks
1919

‎README.md‎

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -62,7 +62,8 @@ For compiled languages:
6262

6363
The following versions of the CodeQL Action are currently supported:
6464

65-
- v3 (latest)
65+
- v4 (latest)
66+
- v3
6667

6768
## Supported versions of the CodeQL Bundle on GitHub Enterprise Server
6869

‎lib/analyze-action-post.js‎

Lines changed: 1 addition & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎lib/analyze-action.js‎

Lines changed: 4 additions & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎lib/autobuild-action.js‎

Lines changed: 4 additions & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)
0