You can now quickly debug a job that uses the CodeQL Action by re-running the job from the GitHub UI and selecting the "Enable debug logging" option. #1132
You can now see diagnostic messages produced by the analysis in the logs of the analyze Action by enabling debug mode. To enable debug mode, pass debug: true to the init Action, or enable step debug logging. This feature is available for CodeQL CLI version 2.10.0 and later. #1133
2.1.15 - 28 Jun 2022
CodeQL query packs listed in the packs configuration field will be skipped if their target language is not being analyzed in the current Actions job. Previously, this would throw an error. #1116
Update default CodeQL bundle version to 2.10.0. #1123
2.1.14 - 22 Jun 2022
No user facing changes.
2.1.13 - 21 Jun 2022
Update default CodeQL bundle version to 2.9.4. #1100
2.1.12 - 01 Jun 2022
Update default CodeQL bundle version to 2.9.3. #1084
2.1.11 - 17 May 2022
Update default CodeQL bundle version to 2.9.2. #1074
2.1.10 - 10 May 2022
Update default CodeQL bundle version to 2.9.1. #1056
When wait-for-processing is enabled, the workflow will now fail if there were any errors that occurred during processing of the analysis results.
2.1.9 - 27 Apr 2022
Add working-directory input to the autobuild action. #1024
The analyze and upload-sarif actions will now wait up to 2 minutes for processing to complete after they have uploaded the results so they can report any processing errors that occurred. This behavior can be disabled by setting the wait-for-processing action input to "false". #1007
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Bumps github/codeql-action from 2.1.12 to 2.1.16.
Changelog
Sourced from github/codeql-action's changelog.
... (truncated)
Commits
3e7e3b3Merge pull request #1140 from github/update-v2.1.16-548f07e3330d552Update changelog for v2.1.16548f07eMerge pull request #1139 from github/aeisenberg/concat-not-pusha844fefMerge branch 'main' into aeisenberg/concat-not-push7ce9ef9Use concat instead of push aroundlistFoldersd750c6dMerge pull request #1138 from github/henrymercer/drop-token-check4cb248bMerge branch 'main' into henrymercer/drop-token-check1e7f770Merge pull request #1132 from github/henrymercer/one-click-debug816b3e9Update failure messagefbbd1dcFix extra double quoteDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)