Repository navigation

Merge releases/v4 into releases/v3 - #4291

Merged

henrymercer merged 238 commits into

releases/v3from

backport-v3.39.2-1fc58d04a

Nov 3, 2026

Merged

Merge releases/v4 into releases/v3#4291
henrymercer merged 238 commits into
releases/v3from
backport-v3.39.2-1fc58d04a

Commits on Oct 14, 2026
- Allow logging functions to accept `string[]` directly
  mbg
  committed
  4a2ca5c
- Move `getCodeQLForTesting` to `testing-utils.ts`
  mbg
  committed
  924990a
- Remove `getRunnerLogger`
  mbg
  committed
  23d418c
- Ensure consistent output formatting in `addMessage`
  mbg
  committed
  7d7a550
Commits on Oct 15, 2026
- Merge branch 'main' into mbg/deprecate-getRunnerLogger
  mbg
  committed
  2b128fe
Commits on Oct 16, 2026
- Prepare per-language bundle graduation checks
  
  henrymercer
  and
  Copilot
  committed
  64e5c62
- Use per-language bundles by default
  
  henrymercer
  and
  Copilot
  committed
  9bf78d1
- Remove TRAP cache cleanup
  
  henrymercer
  and
  Copilot
  committed
  1a7b87e
- Remove per-language bundle rollout flag
  
  henrymercer
  and
  Copilot
  committed
  2d68850
- Warn when `CODEQL_ACTION_CLEANUP_TRAP_CACHES` is set
  
  henrymercer
  and
  Copilot
  committed
  9b5d335
- Remove overlay version matching dry run
  
  henrymercer
  and
  Copilot
  committed
  0e72543
- Use overlay-aware CodeQL versions by default
  
  henrymercer
  and
  Copilot
  committed
  6d82d4f
- Add change note
  
  henrymercer
  and
  Copilot
  committed
  ba6f821
- Merge branch 'main' into mbg/deprecate-getRunnerLogger
  mbg
  committed
  6cf1931
- Remove redundant empty-list check
  
  henrymercer
  and
  Copilot
  committed
  9127084
- Improve changelog note
  
  henrymercer
  and
  mbg
  authored
  734778a
- Add JSDocs for `Logger` logging functions
  mbg
  committed
  8bb7f8f
- Move `ConfigurationError` out of `util.ts`
  mbg
  committed
  8bdea82
- Move `HTTPError` out of `util.ts`
  mbg
  committed
  071544a
- Move `wrapError` and `getErrorMessage` out of `util.ts`
  mbg
  committed
  a76419a
- Move `isDiskConfigurationError` out of `codeql.ts`
  mbg
  committed
  929f5c0
- Move `codeQlVersionAtLeast` out of `util.ts` and into `CodeQL`
  mbg
  committed
  9c72af5
- Mark additional imports in `util.ts` as `type`-only
  mbg
  committed
  86bc444
- Move more GitHub-related definitions from `util.ts` to `github.ts`
  mbg
  committed
  02283e9
- Remove `InstanceURL` from `util.ts`
  mbg
  committed
  dc2ed81
Commits on Oct 20, 2026
- Add `toolcache.ts` script for `bundle-toolcache.yml`
  mbg
  committed
  297dec9
- Use `toolcache.ts` in `bundle-from-toolcache.yml`
  mbg
  committed
  24408cc
- Add `@actions/tool-cache` as an explicit dependency
  mbg
  committed
  57804e9
- Replace `rmdir` with `rmSync`
  mbg
  committed
  d0ab717
- Make comparison strict
  mbg
  committed
  596ae5c
- Refactor `writeDiagnosticFile` out of `writeDiagnostic`
  mbg
  authored
  56e0d42
- Write diagnostics to temporary location when database isn't ready
  mbg
  authored
  f422d8a
- Make diagnostics less dependent on global state
  mbg
  authored
  67f2591
- Use temporary diagnostic dir in `generateFailedSarif`
  mbg
  authored
  64723df
- Refactor `writeTemporaryDiagnosticFile` out of `add[NoLanguage]Diagnostic`
  mbg
  authored
  581a0e1
- Omit `--sarif-codescanning-config` if the config file doesn't exist
  mbg
  authored
  ba569ac
- Add e2e test
  mbg
  authored
  b963054
Commits on Oct 21, 2026
- Use same sub-path in `getDiagnosticsPath` for no language case
  mbg
  committed
  8357829
- Merge remote-tracking branch 'origin/main' into mbg/diagnostics/failed-sarif
  mbg
  committed
  d7bad7d
- Always check whether config file exists
  mbg
  committed
  98b8e51
- Don't include diagnostics if FF is off
  mbg
  committed
  4707994
- Merge remote-tracking branch 'origin/main' into henrymercer/graduate-overlay-version-match
  
  henrymercer
  and
  Copilot
  committed
  961c840
- Rename env var to `DIAGNOSTICS_DIR`
  mbg
  committed
  67cd8c1
- Update skipped `analyze` step comment
  mbg
  committed
  a83f6f5
- Clarify comment that explains how the test works
  mbg
  committed
  c3f2a34
- Update changelog and version after v4.39.1
  github-actions[bot]
  committed
  33f58aa
- Rebuild
  github-actions[bot]
  committed
  4cf3224
- Remove unused type parameters from `Env` classes
  mbg
  committed
  774bc19
- Move `initializeEnvironment` out of `util.ts`
  mbg
  committed
  7def528
- Fix `resolveFunction` call
  mbg
  committed
  44f1c73
- Improve typing of `resolveFunction`
  mbg
  committed
  c29909a
- Merge branch 'main' into mbg/refactor-util/errors
  mbg
  committed
  5c1005e
- Merge branch 'main' into mbg/deprecate-getRunnerLogger
  mbg
  committed
  16aecb7
- Merge pull request #4243 from github/henrymercer/remove-trap-cache-cleanup
  henrymercer
  authored
  0b9cddc
- Trigger workflows
  mario-campos
  committed
  0fcd0ab
- Merge pull request #4258 from github/mergeback/v4.39.1-to-main-9b325408
  mario-campos
  authored
  4e7f1a8
- Bump the npm-minor group across 1 directory with 3 updates
  dependabot[bot]
  authored
  d1db36d
- Bump the actions-minor group across 1 directory with 3 updates
  dependabot[bot]
  authored
  ec3f865
- Rebuild
  github-actions[bot]
  committed
  fb5d868
- Merge branch 'main' into mbg/deprecate-getRunnerLogger
  mbg
  committed
  487ba2e
- Rename argument
  mbg
  committed
  34f75b5
- Log versions if there are some
  mbg
  committed
  6b34430
- Rename `noCodeQLInToolcache`
  mbg
  committed
  0a00d0c
Commits on Oct 22, 2026
- Trigger workflows
  mbg
  committed
  c758339
- Trigger workflows
  mbg
  committed
  347d5ce
- Improve logging and error handling in `logTemporaryDiagnostics`
  mbg
  committed
  26f5c5e
- Only warn for missing config if `init` was successful
  mbg
  committed
  308d941
- Merge pull request #4255 from github/mbg/npm-versions
  mbg
  authored
  d04fe60
- Merge pull request #4235 from github/mbg/deprecate-getRunnerLogger
  mbg
  authored
  a50b39a
- Simplify the condition for overlay-aware version selection
  
  henrymercer
  and
  Copilot
  committed
  54af742
- Clean up path functions in `diagnostics.ts` and add some tests
  mbg
  committed
  b79966a
- Merge pull request #4261 from github/dependabot/github_actions/dot-github/workflows/actions-minor-4a8da92e94
  mbg
  authored
  e0b72fe
- Merge branch 'main' into mbg/diagnostics/failed-sarif
  mbg
  committed
  2d0d1c1
- Merge pull request #4260 from github/dependabot/npm_and_yarn/npm-minor-74c39c9262
  mbg
  authored
  b484113
- Merge branch 'main' into mbg/diagnostics/failed-sarif
  mbg
  committed
  ac509b6
- Merge remote-tracking branch 'origin/main' into henrymercer/graduate-per-language-bundles
  
  henrymercer
  and
  Copilot
  committed
  922e2ff
- Use `toolcache.ts` in `per-language-bundle-validation.yml`
  
  henrymercer
  and
  Copilot
  committed
  626d8b9
- Take a single `ActionState` parameter in `getPerLanguageBundleLanguage`
  
  henrymercer
  and
  Copilot
  committed
  0171a2b
- Clarify why the file baseline check uses a custom configuration
  
  henrymercer
  and
  Copilot
  committed
  f033e23
- Merge remote-tracking branch 'origin/main' into henrymercer/graduate-overlay-version-match
  
  henrymercer
  and
  Copilot
  committed
  6aa7e65
- Improve wording to address review feedback
  mbg
  committed
  87da5f3
- Merge pull request #4246 from github/henrymercer/graduate-overlay-version-match
  henrymercer
  authored
  bdadc03
- Merge remote-tracking branch 'origin/main' into mbg/diagnostics/failed-sarif
  mbg
  committed
  5196bae
- Make `getCodeQLForCmd` use `Env`
  mbg
  committed
  7e3e4f2
- Merge pull request #4223 from github/mbg/diagnostics/failed-sarif
  mbg
  authored
  0acb923
- Refactor swift check out of `init-action.ts`
  mbg
  committed
  1b037de
- Use `ActionConfig` in `diagnostics.ts`
  mbg
  committed
  bc1b5da
- Refactor top-level code into `checkSarif`
  mbg
  committed
  00d7ef8
- Allow `check-diagnostics.ts` to check multiple SARIF files
  mbg
  committed
  5a54684
- Improve `globSync` call
  mbg
  committed
  7a0df8f
- Merge pull request #4244 from github/henrymercer/graduate-per-language-bundles
  henrymercer
  authored
  c2293b3
- Don't require github-advanced-security or License compliance check
  
  henrymercer
  and
  Copilot
  committed
  c1ab1b4
- Add workflow to comment on a PR when it was dequeued
  mbg
  committed
  0408904
- Merge branch 'main' into mbg/cherry-picks/macos-deprecation
  mbg
  authored
  0c057be
- Merge branch 'main' into mbg/pr-dequeue-notify
  mbg
  authored
  54b2801
Commits on Oct 23, 2026
- Rename `isSwiftCompatible`
  mbg
  committed
  fbf3125
- Check that a `ConfigurationError` is thrown
  mbg
  committed
  2d3b6d4
- Switch to `pull_request.user.login`
  mbg
  committed
  37a5faf
- Merge pull request #4264 from github/henrymercer/exclude-pr-only-checks-from-sync-checks
  henrymercer
  authored
  562acf5
- Merge remote-tracking branch 'origin/main' into mbg/cherry-picks/macos-deprecation
  mbg
  committed
  5a097f3
- Remove unused type parameters from `Env` classes
  mbg
  committed
  d7e4421
- Use `env.export` in `getCodeQLForCmd`
  mbg
  committed
  7cd2203
- Merge pull request #4263 from github/mbg/pr-dequeue-notify
  mbg
  authored
  3306ba4
- Allow `runTool` to inherit `env`
  mbg
  committed
  6d448e0
- Ping the user who enqueued a PR when it's removed from the merge queue
  
  henrymercer
  and
  Copilot
  committed
  49bbf2b
Commits on Oct 24, 2026
- Update supported GitHub Enterprise Server versions
  github-actions[bot]
  committed
  fc9487d
Commits on Oct 26, 2026
- Fix JSDoc
  mbg
  committed
  49de083
- Pass `env` to all `ToolRunner`s in `codeql.ts`
  mbg
  committed
  516bd7c
- Update `setup-kotlin` to the latest version
  mbg
  committed
  b63386c
- Point Dependabot at subdirectories in `.github/actions`
  mbg
  committed
  b913bf6
- Bump `undici` override to the latest `7.x` version
  mbg
  committed
  3911965
- Configure Dependabot to ignore `undici` for the moment
  mbg
  committed
  515fac0
- Install newer Kotlin version
  mbg
  committed
  ce7d3f7
- Install a newer Ruby version
  mbg
  committed
  dd68f13
- Temporarily switch old CLI checks to older Ubuntu runner
  mbg
  committed
  eac0005
- Install newer version of `code-scanning-rubocop`
  mbg
  committed
  ab743b6
- Remove Rubocop workflow
  mbg
  committed
  171607b
- Add comment to `sync.ts`
  mbg
  committed
  34b4917
- Improve `sync.ts` version typing so that check constant becomes an error once removed
  mbg
  committed
  63b184d
- Update CodeQL deprecation warning for GHES 3.18
  
  henrymercer
  and
  Copilot
  committed
  bfac910
- Remove GHES 3.18 from compatibility table
  
  henrymercer
  and
  Copilot
  committed
  4a890e4
Commits on Oct 27, 2026
Commits on Oct 28, 2026
- Merge pull request #4262 from github/mbg/cherry-picks/macos-deprecation
  mbg
  authored
  354d3a2
- Replace `Env` with `ReadOnlyEnv` in the `runTool` chain
  mbg
  committed
  0d77461
- Add `osRelease` to `BaseState`
  mbg
  committed
  f364105
- Add `macOSVersion` helper
  mbg
  committed
  570e438
- Use `macOSVersion` in `isSwiftCompatible`
  mbg
  committed
  e022017
- Add `swiftSupportsAllPlatforms` to `ToolsFeature`
  mbg
  committed
  9271dd2
- Skip Swift checks if tools feature is enabled
  mbg
  committed
  a962304
- Check if macOS version is unsupported
  mbg
  committed
  45b8586
- Add FF to fail if macOS version is unsupported
  mbg
  committed
  5f65e35
- Add function to determine Xcode version based on symlink
  mbg
  committed
  242ea52
- Check if Xcode version is unsupported
  mbg
  committed
  7121af2
- Don't perform check for non-traced analyses
  mbg
  committed
  86bb853
- Include URL to announcement in diagnostic and log messages
  mbg
  committed
  156dc2c
- Accept paths containing only major version
  mbg
  committed
  7e5643a
- Use `lstat` instead of `stat`
  mbg
  committed
  fe45268
- Clarify that we are looking at the Darwin version
  mbg
  committed
  97b9023
- Make Xcode regex more flexible
  mbg
  committed
  eff66e8
- Only create diagnostics for traced languages
  mbg
  committed
  5547a35
- Avoid producing the same-ish message twice
  mbg
  committed
  84e80ce
- Return early if we are not on macOS to avoid unnecessary work
  mbg
  committed
  87ef6f5
- Add e2e test
  mbg
  committed
  17685f3
- Add `CheckUnsupportedTracedAnalysis` FF
  mbg
  committed
  202d9f1
- Gate checks behind FF
  mbg
  committed
  99971dd
- Use new FF in e2e test
  mbg
  committed
  ad2b30b
- Refactor `defaultRunnerImages` into `DEFAULT_RUNNER_IMAGES` map
  mbg
  committed
  2d85855
- Replace floating occurrences of `ubuntu-latest`
  mbg
  committed
  4b0f575
- Replace `-latest` with current, corresponding labels in `DEFAULT_RUNNER_IMAGES`
  mbg
  committed
  b8e6367
- Bump the npm-minor group across 1 directory with 2 updates
  dependabot[bot]
  authored
  1965df5
- Bump actions/setup-python
  dependabot[bot]
  authored
  1b863a0
- Rebuild
  github-actions[bot]
  committed
  931fefa
Commits on Oct 29, 2026
- Merge pull request #4276 from github/dependabot/npm_and_yarn/npm-minor-7af0a5998a
  henrymercer
  authored
  2d7aead
- Update hard-coded `latest` runner labels
  mbg
  committed
  c8bf9ad
- Skip checks on self-hosted runners
  mbg
  committed
  8cafec0
- Change log level of messages in `xcodeVersion`
  mbg
  committed
  019a5ca
- Add debug-level log messages when checks are skipped
  mbg
  committed
  3da9738
Commits on Oct 30, 2026
- Improve comment/log message wording
  mbg
  committed
  d37c313
- Only skip Xcode check on self-hosted runners
  mbg
  committed
  239b078
- Set `tempDir` in all `createTestConfig` calls in `traced.test.ts`
  mbg
  committed
  b2bb71b
- Rename FF to include "Abort" instead of "Skip"
  mbg
  committed
  5bdb913
- Remove `if` option for validation jobs
  mbg
  committed
  688c04a
- Use correct version constant in `handleUnsupportedVersion` `baseMessage`
  mbg
  committed
  251f480
- Fix assertions and features for tests
  mbg
  committed
  c6cc137
- Remove unnecessary `lstatSync` call
  mbg
  committed
  f583e03
- Replace `macos-latest-xlarge` with `macos-26-xlarge`
  mbg
  committed
  690197d
- Merge pull request #4277 from github/dependabot/github_actions/dot-github/workflows/actions-minor-d87422eef0
  mbg
  authored
  99441b4
- Seperate checks in `pr-checks.yml`
  mbg
  committed
  0aaf198
- Add change note
  mbg
  committed
  3ecc7a9
- Fix Xcode skip on `self-hosted` runner test
  mbg
  committed
  b5b3ef7
- Fix checks if FF is disabled test using the wrong predicate
  mbg
  committed
  c56bb9b
- Merge pull request #4221 from github/mbg/macos27/warn
  mbg
  authored
  b46c2ee
- Merge branch 'main' into mbg/avoid-latest
  mbg
  authored
  ea41ba5
- Update workflows
  mbg
  committed
  104d238
- Rename `xcodeVersion` to `xcodeVersionFromLink`
  mbg
  committed
  4a6767c
- Merge pull request #4275 from github/mbg/avoid-latest
  mbg
  authored
  255c50d
- Add `xcrun`-based fallback for Xcode version detection
  mbg
  committed
  be54d79
- Fix test name
  mbg
  committed
  1fb9308
- Remove `xcodeVersion` and inline fallback logic in `checkRunnerSupportsTracedAnalysis`
  mbg
  committed
  8f2596e
- Add `xcodeVersionFromXcodeBuild`
  mbg
  committed
  efea044
- Rename `xcodeVersionFromSdk` and improve comments/log messages
  mbg
  committed
  80d7b74
- Merge remote-tracking branch 'origin/main' into mbg/macos27/xcode-detection
  mbg
  committed
  9410c4a
- Merge remote-tracking branch 'origin/main' into mbg/ci/typecheck
  mbg
  committed
  8e175f3
- Exclude more unused files in `tsconfig.json`
  mbg
  committed
  a189728
- Run Xcode check on self-hosted runners
  mbg
  committed
  ce1de8d
- Merge remote-tracking branch 'origin/main' into mbg/refactor-util/errors
  mbg
  committed
  fb9d453
- Combine product name and version into `ProductVersion` type
  mbg
  committed
  410d706
- Distinguish between Xcode and SDK version in messages
  mbg
  committed
  8d18caa
- Extract zstd bundles using the tar path found by getTarVersion
  
  henrymercer
  and
  Copilot
  committed
  0b97d53
- Fix stdout and stderr being swapped in tar extraction errors
  
  henrymercer
  and
  Copilot
  committed
  8512f45
- Merge pull request #4272 from github/mbg/ci/typecheck
  mbg
  authored
  5e9db0e
- Fix incorrect `xcodeVer` check
  mbg
  committed
  f1396bd
- Merge pull request #4281 from github/henrymercer/tar-path-in-extracttarzst
  henrymercer
  authored
  4f900f4
- Convert diagnostic ID to kebab case
  mbg
  committed
  120993f
Commits on Nov 2, 2026
- Fix new test not providing typical input
  mbg
  committed
  95dd6bf
- Merge pull request #4278 from github/mbg/macos27/xcode-detection
  mbg
  authored
  52cf185
- Merge remote-tracking branch 'origin/main' into mbg/refactor-util/errors
  mbg
  committed
  ac9f257
- Merge pull request #4251 from github/mbg/refactor-util/errors
  mbg
  authored
  b35c6c6
- Update default bundle to codeql-bundle-v2.27.4
  github-actions[bot]
  committed
  2ef3b62
- Add changelog note
  github-actions[bot]
  committed
  adfcd5f
- Merge branch 'main' into update-bundle/codeql-bundle-v2.27.4
  henrymercer
  authored
  750fe8f
- Merge pull request #4284 from github/update-bundle/codeql-bundle-v2.27.4
  henrymercer
  authored
  c050421
Commits on Nov 3, 2026
- Update changelog for v4.39.2
  github-actions[bot]
  committed
  d998481
- Merge pull request #4286 from github/update-v4.39.2-c05042115
  henrymercer
  authored
  1fc58d0
- Revert "Update version and changelog for v3.39.1"
  github-actions[bot]
  committed
  8acbf73
- Revert "Rebuild"
  github-actions[bot]
  committed
  733fb50
- Merge remote-tracking branch 'origin/releases/v4' into backport-v3.39.2-1fc58d04a
  github-actions[bot]
  committed
  cbf5ab6
- Update version and changelog for v3.39.2
  github-actions[bot]
  committed
  4c53ff5
- Rebuild
  github-actions[bot]
  committed
  d94ff1d

Commits

Commits on Oct 14, 2026

Commits on Oct 15, 2026

Commits on Oct 16, 2026

Commits on Oct 20, 2026

Commits on Oct 21, 2026

Commits on Oct 22, 2026

Commits on Oct 23, 2026

Commits on Oct 24, 2026

Commits on Oct 26, 2026

Commits on Oct 27, 2026