In scope of this release, we update node version runtime from node16 to node20 (actions/setup-python#772). Besides, we update dependencies to the latest versions.
Improve the ease of debugging extraction issues by increasing the verbosity of the extractor logs when running in debug mode. #2195
3.24.7 - 12 Mar 2024
Update default CodeQL bundle version to 2.16.4. #2185
3.24.6 - 29 Feb 2024
No user facing changes.
3.24.5 - 23 Feb 2024
Update default CodeQL bundle version to 2.16.3. #2156
3.24.4 - 21 Feb 2024
Fix an issue where an existing, but empty, /sys/fs/cgroup/cpuset.cpus file always resulted in a single-threaded run. #2151
3.24.3 - 15 Feb 2024
Fix an issue where the CodeQL Action would fail to load a configuration specified by the config input to the init Action. #2147
3.24.2 - 15 Feb 2024
Enable improved multi-threaded performance on larger runners for GitHub Enterprise Server users. This feature is already available to GitHub.com users. #2141
3.24.1 - 13 Feb 2024
Update default CodeQL bundle version to 2.16.2. #2124
The CodeQL action no longer fails if it can't write to the telemetry api endpoint. #2121
3.24.0 - 02 Feb 2024
CodeQL Python analysis will no longer install dependencies on GitHub Enterprise Server, as is already the case for GitHub.com. See release notes for 3.23.0 for more details. #2106
3.23.2 - 26 Jan 2024
On Linux, the maximum possible value for the --threads option now respects the CPU count as specified in cgroup files to more accurately reflect the number of available cores when running in containers. #2083
Update default CodeQL bundle version to 2.16.1. #2096
3.23.1 - 17 Jan 2024
Update default CodeQL bundle version to 2.16.0. #2073
Change the retention period for uploaded debug artifacts to 7 days. Previously, this was whatever the repository default was. #2079
3.23.0 - 08 Jan 2024
We are rolling out a feature in January 2024 that will disable Python dependency installation by default for all users. This improves the speed of analysis while having only a very minor impact on results. You can override this behavior by setting CODEQL_ACTION_DISABLE_PYTHON_DEPENDENCY_INSTALLATION=false in your workflow, however we plan to remove this ability in future versions of the CodeQL Action. #2031
... (truncated)
Commits
4355270 Merge pull request #2226 from github/update-v3.24.10-7df281f2f
This release contains the following breaking changes:
The ability to apply labels based on the names of base and/or head branches was added (#186 and #54). The match object for changed files was expanded with new combinations in order to make it more intuitive and flexible (#423 and #101). As a result, the configuration file structure was significantly redesigned and is not compatible with the structure of the previous version. Please read the action documentation to find out how to adapt your configuration files for use with the new action version.
The bug related to the sync-labels input was fixed (#112). Now the input value is read correctly.
By default, dot input is set to true. Now, paths starting with a dot (e.g. .github) are matched by default.
Version 5 of this action updated the runtime to Node.js 20. All scripts are now run with Node.js 20 instead of Node.js 16 and are affected by any breaking changes between Node.js 16 and 20.
Nothing changed feature-wise. The only notable update is that the underlying container runtime now uses Python 3.12 and pip has been updated to v24.0 there.
This is should go unnoticed in terms of behavior. It's just a bit of maintenance burden to be done occasionally by @webknjaz💰.
Enjoy!
This action is now able to consume and publish distribution packages with Metadata-Version: 2.3 embedded.
🛠️ Internal Dependencies
@SigureMo💰 sent us a bump of pkginfo version to version 1.10.0 in #219. It's a transitive dependency for us and is not an API-level change but upgrading it has a side effect of letting Twine recognize distribution packages declaring Metadata-Version: 2.3. In particular, it is known to affect distributions built with Maturin >= 1.5.0.
Following that, @webknjaz💰 upgraded other transitive and direct dependency pins, including, among others, the following notable bumps:
@woodruffw💰 replaced the notice annotations with simplified debug messages related to authentication methanism selection via #196. The also improved the error clarity during OIDC exchange on PRs from forks via #203.
📝 What's Documented
@virtuald💰 updated the docs and pointer messages were updated to mention that reusable workflows aren't supported right now in #186 and @xuanzhi33💰 later corrected the markdown syntax there via #216.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will sq...
_Description has been truncated_
Bumps the actions group with 7 updates:
0.8.0
0.12.1
2
4
2
5
3
7
1
3
3
5
1.4.2
1.8.14
Updates
styfle/cancel-workflow-action
from 0.8.0 to 0.12.1Release notes
Sourced from styfle/cancel-workflow-action's releases.
... (truncated)
Commits
85880fa
0.12.100326b1
fix: bump to node20 (#212)01ce38b
0.12.09c78c20
chore(deps-dev): bump prettier from 2.8.2 to 2.8.3 (#203)96c8030
Add optiononly_status
(#210)c6a48d7
chore(deps-dev): bump@vercel/ncc
from 0.36.0 to 0.36.1 (#204)5c8fe64
chore(deps-dev): bump typescript from 4.9.4 to 4.9.5 (#205)034d0e9
chore: remove dependabot (#206)25b1072
chore(docs): simplify readme warning3b7e3bd
chore(docs): document the native behavior (#201)Updates
actions/checkout
from 2 to 4Release notes
Sourced from actions/checkout's releases.
... (truncated)
Changelog
Sourced from actions/checkout's changelog.
... (truncated)
Commits
b4ffde6
Link to release page from what's new section (#1514)8530928
Correct link to GitHub Docs (#1511)7cdaf2f
Update CODEOWNERS to Launch team (#1510)8ade135
Prepare 4.1.0 release (#1496)c533a0a
Add support for partial checkout filters (#1396)72f2cec
Update README.md for V4 (#1452)3df4ab1
Release 4.0.0 (#1447)8b5e8b7
Support fetching without the --progress option (#1067)97a652b
Update default runtime to node20 (#1436)f43a0e5
Release 3.6.0 (#1437)Updates
actions/setup-python
from 2 to 5Release notes
Sourced from actions/setup-python's releases.
... (truncated)
Commits
82c7e63
Documentation changes for avoiding rate limit issues on GHES (#835)10aa35a
feat: fallback to raw endpoint for manifest when rate limit is reached (#766)9a7ac94
Bump undici from 5.27.2 to 5.28.3 (#817)871daa9
Fix the "Specifying multiple Python/PyPy versions" link (#782)2f07895
Fix broken README.md link (#793)e9d6f99
Replace setup-python@v4 by setup-python@v5 in README (#776)0a5c615
Update action to node20 (#772)0ae5836
Add example of GraalPy to docs (#773)b64ffca
update actions/checkout to v4 (#761)8d28961
Examples now use checkout@v4 (#738)Updates
actions/github-script
from 3 to 7Release notes
Sourced from actions/github-script's releases.
... (truncated)
Commits
60a0d83
Merge pull request #440 from actions/joshmgross/v7.0.1b7fb200
Update version to 7.0.112e22ed
Merge pull request #439 from actions/joshmgross/avoid-setting-base-urld319f8f
Avoid settingbaseUrl
to undefined when input is not providede69ef54
Merge pull request #425 from actions/joshmgross/node-20ee0914b
Update licensesd6fc56f
Use@types/node
for Node 20384d6cf
Fix quotations in tests8472492
Only validate GraphQLpreviews
84903f5
Removenode-fetch
from typeUpdates
github/codeql-action
from 1 to 3Release notes
Sourced from github/codeql-action's releases.
... (truncated)
Changelog
Sourced from github/codeql-action's changelog.
... (truncated)
Commits
4355270
Merge pull request #2226 from github/update-v3.24.10-7df281f2f3f041c5
Update changelog for v3.24.107df281f
Gracefully continue ifcreateStatusReportBase
throws (#2225)f421cda
Run integration test PR checks nightly (#2222)5f535de
Merge pull request #2221 from github/nickfyson/upload-logging278465c
Merge pull request #2219 from github/update-bundle/codeql-bundle-v2.17.065e69c8
Merge branch 'main' into update-bundle/codeql-bundle-v2.17.0c037115
clarify logging in response to pr review commentsd3c32a8
fix test to respect updated logging behaviour2654062
Merge branch 'main' into nickfyson/upload-loggingUpdates
actions/labeler
from 3 to 5Release notes
Sourced from actions/labeler's releases.
... (truncated)
Commits
8558fd7
Merge pull request #709 from actions/v5.0.0-beta000ca75
Merge pull request #700 from MaksimZhukov/apply-suggestions-and-update-docume...cb66c2f
Update dist9181355
Apply suggestions for the beta vesrion and update the documentationefe4c1c
Merge pull request #699 from MaksimZhukov/update-node-runtime-and-dependenciesc0957ad
Run Prettier8dc8d18
Update Node.js version in reusable workflowsd0d0bbe
Update documentation1375c42
5.0.0ab7411e
Change version of Node.js runtime to node20Updates
pypa/gh-action-pypi-publish
from 1.4.2 to 1.8.14Release notes
Sourced from pypa/gh-action-pypi-publish's releases.
... (truncated)
Commits
81e9d93
Bumppip
to v24.0 in runtime prerequisites lock91527c4
Regenerate lockfiles with pip-tools v7.4.13a817c6
Bump action runtime to CPython 3.12741947b
Add a config file forpip-tools
d7af439
Mass-bump transitive dependencies of runtimee90ddca
Bumpreadme-renderer
to v43.0dae7fa3
Bump Twine to v5.0.00fe04ae
Bumpid
to v1.3.0444e179
Bump cryptography to v42.0.5820be4e
Normalize pip-tools' header comment @runtime.txt
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will sq... _Description has been truncated_