github-actions[bot]
commented
7 months ago [puLL-Merge] - github/codeql-action@v2.24.9..v2.24.10
Here is a summary of the PR:
Description
This PR makes various updates and improvements to the CodeQL Action codebase. The changes include:
- Updating dependencies like typescript-eslint and typescript to newer versions
- Refactoring some code logic in the action steps
- Adding better logging and error handling in many places
- Adding a new post step to the upload-sarif action to upload debug artifacts
- Adding the ability to merge SARIF files using the CodeQL CLI in certain cases
Changes
### Changes .github/workflows/ - Updated all the test workflow files to: - Add a `schedule` trigger to run at 5am daily - Fix some indentation and formatting lib/, src/ - Multiple code changes and refactorings in the core action logic: - Improve status reporting and add more null checks - Enhance SARIF file handling to use CodeQL CLI to merge in some cases - Update some CodeQL feature checks - Add a new upload-sarif post step - Updated a few test files upload-sarif/action.yml - Add a `post` step to run the new upload-sarif post action node_modules/, package.json - Update typescript-eslint dependencies to 7.4.0 - Update typescript to 5.4.3 CHANGELOG.md - Add entry for new 2.24.10 releaseSecurity Hotspots
None identified. The changes are mostly refactoring existing code and bumping dependency versions. Adding more logging, error handling and null safety checks likely improves the overall reliability and security of the codebase.
This PR contains the following updates:
v2.24.9->v2.24.10Release Notes
github/codeql-action (github/codeql-action)
### [`v2.24.10`](https://togithub.com/github/codeql-action/compare/v2.24.9...v2.24.10) [Compare Source](https://togithub.com/github/codeql-action/compare/v2.24.9...v2.24.10)Configuration
📅 Schedule: Branch creation - " 0-4 * 3" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
â™» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.