8000 Merge main into releases/v2 by github-actions[bot] · Pull Request #2020 · github/codeql-action · GitHub
[go: up one dir, main page]

Skip to content

Merge main into releases/v2 #2020

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 25 commits into from
Dec 7, 2023
Merged
Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
25 commits
Select commit Hold shift + click to select a range
8a1e474
Update changelog and version after v2.22.8
github-actions[bot] Nov 23, 2023
3b5bd49
Update checked-in dependencies
github-actions[bot] Nov 23, 2023
2da9ad5
Merge pull request #2008 from github/mergeback/v2.22.8-to-main-407ffafa
aibaars Nov 23, 2023
4712487
Bump the npm group with 5 updates (#2010)
dependabot[bot] Nov 27, 2023
773bd9b
Exclude Dependabot updates workflow from required PR checks
henrymercer Nov 27, 2023
77605c7
Remove LGTM
henrymercer Nov 27, 2023
db40ac4
Merge pull request #2011 from github/henrymercer/exclude-dependabot-r…
henrymercer Nov 28, 2023
1d367b0
Improve error categorizations
henrymercer Dec 1, 2023
b929cca
Merge pull request #2012 from github/henrymercer/categorize-configura…
henrymercer Dec 1, 2023
cc940d7
Extract scanned languages using `--index-traceless-dbs`
henrymercer Dec 1, 2023
a16ac98
Merge pull request #2013 from github/henrymercer/index-traceless-dbs
henrymercer Dec 4, 2023
b7f289e
update release process to support multiple version
nickfyson Dec 4, 2023
bc50092
Bump the npm group with 4 updates (#2015)
dependabot[bot] Dec 4, 2023
2dbffae
add note in CONTRIBUTING.md on how to deprecate an action version
nickfyson Dec 4, 2023
65a2bb5
Merge branch 'main' into nickfyson/update-release-process
nickfyson Dec 4, 2023
784783d
Update supported GitHub Enterprise Server versions
cklin Dec 5, 2023
3675be0
Merge pull request #2017 from cklin/update-supported-enterprise-serve…
cklin Dec 5, 2023
3537bea
Apply suggestions from code review
nickfyson Dec 6, 2023
a6ea3c5
define backport commit message in constant
nickfyson Dec 6, 2023
57932be
remove unused function
nickfyson Dec 6, 2023
ee748cf
respond to more review comments
nickfyson Dec 6, 2023
47e90f2
Merge branch 'main' into nickfyson/update-release-process
nickfyson Dec 6, 2023
0e9a210
update workflows to run on all release branches
nickfyson Dec 6, 2023
e1d1fad
Merge pull request #2014 from github/nickfyson/update-release-process
nickfyson Dec 7, 2023
c6e24c9
Update changelog for v2.22.9
github-actions[bot] Dec 7, 2023
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Apply suggestions from code review
Co-authored-by: Henry Mercer <henry.mercer@me.com>
  • Loading branch information
nickfyson and henrymercer authored Dec 6, 2023
commit 3537bea5807bc605478c9ff7af7f7af948b6025e
3 changes: 2 additions & 1 deletion .github/actions/release-branches/release-branches.py
Original file line number Diff line number Diff line change
@@ -1,5 +1,6 @@
import argparse
import os, json
import json
import os
import subprocess

# Name of the remote
Expand Down
2 changes: 1 addition & 1 deletion .github/actions/release-initialise/action.yml
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
name: 'Prepare release job'
description: 'Executed preparatory steps before update a release branch'
description: 'Prepare for updating a release branch'

runs:
using: "composite"
Expand Down
2 changes: 1 addition & 1 deletion .github/update-release-branch.py
Original file line number Diff line number Diff line change
Expand Up @@ -317,7 +317,7 @@ def main():
subprocess.check_output(['npm', 'version', version, '--no-git-tag-version'])
run_git('add', 'package.json', 'package-lock.json')

# Migrate the changelog notes from v2 version numbers to v1 version numbers
# Migrate the changelog notes from vLatest version numbers to vOlder version numbers
print(f'Migrating changelog notes from v{source_branch_major_version} to v{target_branch_major_version}')
subprocess.check_output(['sed', '-i', f's/^## {source_branch_major_version}\./## {target_branch_major_version}./g', 'CHANGELOG.md'])

Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/post-release-mergeback.yml
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
# This workflow runs after a merge to any release branch of the action. It:
# 1. Tags the merge commit on the release branch that represents the new release with n `vN.x.y`
# 1. Tags the merge commit on the release branch that represents the new release with an `vN.x.y`
# tag
# 2. Updates the `vN` tag to refer to this merge commit.
# 3. Iff vN == vLatest, merges any changes from the release back into the main branch.
Expand Down
16 changes: 10 additions & 6 deletions CONTRIBUTING.md
Original file line number Diff line number Diff line change
Expand Up @@ -99,16 +99,20 @@ We typically deprecate a version of CodeQL when the GitHub Enterprise Server (GH
- Add a changelog note announcing the new minimum version of CodeQL that is now required.
- Example PR: https://github.com/github/codeql-action/pull/1907

## Deprecating a CodeQL-Action version (write access required)
## Deprecating a CodeQL Action version (write access required)

When necessary we maintain multiple versions of the CodeQL action, for example to support older version of NodeJS as required by GHES versions that are still supported. The automated release process opens backport PRs to update older versions once the primary release is merged. Deprecation of older versions of the action will generally happen once a particular older GHES version is no longer supported, and hence we can stop maintainin the action for a particular NodeJS version.
We sometimes maintain multiple versions of the CodeQL Action to enable customers on older but still supported versions of GitHub Enterprise Server (GHES) to continue to benefit from the latest CodeQL improvements. To accomplish this, the release process automation listens to updates to the release branch for the newest supported version. When this branch is updated, the release process automatically opens backport PRs to update the release branches for older versions.

The backport process is controlled by setting the minimum version number of the action that is still supported, defined at the in the [release-branches](.github/actions/release-branches/release-branches.py) action. To stop udpating an older version of the action:
We typically deprecate older versions of the Action once all supported GHES versions are compatible with the version of Node.js we are using on `main`.

1. Notify any users who are still pinned to the `vN` tag of the deprecated version of the action.
To deprecate an older version of the Action:

1. Notify any users who are still pinned to the `vN` tag of the deprecated version of the Action, giving as much notice as is practical.
- Add a changelog note announcing the deprecation.
2. Bump the `OLDEST_SUPPORTED_MAJOR_VERSION` in [release-branches.py](.github/actions/release-branches/release-branches.py)
3. Merge this change to main and the next release will not backport changes to the deprecated release version.
- Implement an Actions warning for customers using the deprecated version.
1. Wait for the deprecation period to pass.
1. Upgrade the Actions warning for customers using the deprecated version to a non-fatal error, and mention that this version of the Action is no longer supported.
1. Make a PR to bump the `OLDEST_SUPPORTED_MAJOR_VERSION` in [release-branches.py](.github/actions/release-branches/release-branches.py). Once this PR is merged, the release process will no longer backport changes to the deprecated release version.

## Resources

Expand Down
0