In scope of this release, we change Nodejs runtime from node16 to node20 (actions/setup-go#421). Moreover, we update some dependencies to the latest versions (actions/setup-go#445).
In scope of this release, slow installation on Windows was fixed by @dsame in actions/setup-go#393 and OS version was added to primaryKey for Ubuntu runners to avoid conflicts (actions/setup-go#383)
Update default CodeQL bundle version to 2.17.1. #2247
Workflows running on macos-latest using CodeQL CLI versions before v2.15.1 will need to either upgrade their CLI version to v2.15.1 or newer, or change the platform to an Intel MacOS runner, such as macos-12. ARM machines with SIP disabled, including the newest macos-latest image, are unsupported for CLI versions before 2.15.1. #2261
3.25.2 - 22 Apr 2024
No user facing changes.
3.25.1 - 17 Apr 2024
We are rolling out a feature in April/May 2024 that improves the reliability and performance of analyzing code when analyzing a compiled language with the autobuildbuild mode. #2235
Fix a bug where the init Action would fail if --overwrite was specified in CODEQL_ACTION_EXTRA_OPTIONS. #2245
3.25.0 - 15 Apr 2024
The deprecated feature for extracting dependencies for a Python analysis has been removed. #2224
As a result, the following inputs and environment variables are now ignored:
The setup-python-dependencies input to the init Action
The CODEQL_ACTION_DISABLE_PYTHON_DEPENDENCY_INSTALLATION environment variable
We recommend removing any references to these from your workflows. For more information, see the release notes for CodeQL Action v3.23.0 and v2.23.0.
Automatically overwrite an existing database if found on the filesystem. #2229
Bump the minimum CodeQL bundle version to 2.12.6. #2232
A more relevant log message and a diagnostic are now emitted when the file program is not installed on a Linux runner, but is required for Go tracing to succeed. #2234
3.24.10 - 05 Apr 2024
Update default CodeQL bundle version to 2.17.0. #2219
Add a deprecation warning for customers using CodeQL version 2.12.5 and earlier. These versions of CodeQL were discontinued on 26 March 2024 alongside GitHub Enterprise Server 3.8, and will be unsupported by CodeQL Action versions 3.25.0 and later and versions 2.25.0 and later. #2220
If you are using one of these versions, please update to CodeQL CLI version 2.12.6 or later. For instance, if you have specified a custom version of the CLI using the 'tools' input to the 'init' Action, you can remove this input to use the default version.
Alternatively, if you want to continue using a version of the CodeQL CLI between 2.11.6 and 2.12.5, you can replace github/codeql-action/*@v3 by github/codeql-action/*@v3.24.10 and github/codeql-action/*@v2 by github/codeql-action/*@v2.24.10 in your code scanning workflow to ensure you continue using this version of the CodeQL Action.
3.24.9 - 22 Mar 2024
Update default CodeQL bundle version to 2.16.5. #2203
3.24.8 - 18 Mar 2024
Improve the ease of debugging extraction issues by increasing the verbosity of the extractor logs when running in debug mode. #2195
3.24.7 - 12 Mar 2024
Update default CodeQL bundle version to 2.16.4. #2185
3.24.6 - 29 Feb 2024
No user facing changes.
... (truncated)
Commits
b5bd9be Update changelog and version after v3.25.1
c7f9125 Merge pull request #2248 from github/update-v3.25.1-c4fb45143
In scope of this release, we update node version runtime from node16 to node20 (actions/setup-python#772). Besides, we update dependencies to the latest versions.
The version of the Node.js runtime used to execute the action has been updated from 16 to 20. This could be a breaking change for certain GitHub Actions workflows.
If the workflow uses a self-hosted runner, the workflow run might fail after updating arduino/setup-task:
Error: System.ArgumentOutOfRangeException: Specified argument was out of the range of valid values. (Parameter ''using: node20' is not supported, use 'docker', 'node12' or 'node16' instead.')
at GitHub.Runner.Worker.ActionManifestManager.ConvertRuns(IExecutionContext executionContext, TemplateContext templateContext, TemplateToken inputsToken, String fileRelativePath, MappingToken outputs)
at GitHub.Runner.Worker.ActionManifestManager.Load(IExecutionContext executionContext, String manifestFile)
Error: Fail to load arduino/setup-task/v2/action.yml
This means an older runner version that does not provide Node.js 20.x is installed on the runner machine and you must update the runner version.
Changelog
Breaking
Update Node.js runtime for action from 16 to 20 (#919)
This version removes annotations option (because it was useless), and removes the default output format (github-actions).
The annotations are still produced but with another approach.
v4 of the Codecov Action uses the CLI as the underlying upload. The CLI has helped to power new features including local upload, the global upload token, and new upcoming features.
Breaking Changes
The Codecov Action runs as a node20 action due to node16 deprecation. See this post from GitHub on how to migrate.
Tokenless uploading is unsupported. However, PRs made from forks to the upstream public repos will support tokenless (e.g. contributors to OS projects do not need the upstream repo's Codecov token). This doc shows instructions on how to add the Codecov token.
OS platforms have been added, though some may not be automatically detected. To see a list of platforms, see our CLI download page
Various arguments to the Action have been changed. Please be aware that the arguments match with the CLI's needs
v3 versions and below will not have access to CLI features (e.g. global upload token, ATS).
Bumps the github-actions group with 10 updates in the / directory:
34452345123634243545Updates
actions/checkoutfrom 3 to 4Release notes
Sourced from actions/checkout's releases.
... (truncated)
Changelog
Sourced from actions/checkout's changelog.
... (truncated)
Commits
0ad4b8fPrep Release v4.1.4 (#1704)43045aeDisableextensions.worktreeConfigwhen disablingsparse-checkout(#1692)37b0821Bump the minor-actions-dependencies group with 2 updates (#1693)9839dc1Add dependabot config (#1688)9b4c13bBump word-wrap from 1.2.3 to 1.2.5 (#1643)1d96c77Add SSH user parameter (#1685)cd7d8d6Check git version before attempting to disablesparse-checkout(#1656)8410ad0Updateactions/checkoutversion inupdate-main-version.yml(#1650)9bb5618Prep for release of v4.1.2 (#1649)8eb1f6aBump@babel/traversefrom 7.20.5 to 7.24.0 (#1642)Updates
actions/setup-gofrom 4 to 5Release notes
Sourced from actions/setup-go's releases.
Commits
cdcb360Remove the description of the old go.mod specification (#458)99176a8Update README.md with V5 release notes (#459)be1aa11Bump undici from 5.28.2 to 5.28.3 (#465)6c1fd22docs: bumpactions/setup-goto v5 (#449)0c52d54Update dependencies for node20 (#445)bfd2fb3Merge pull request #421 from chenrui333/node20-runtime3d65fa5feat: bump to use actions/checkout@v48a505c9feat: bump to use node20 runtime883490dMerge pull request #417 from artemgavrilov/maind45ebbaRephrase sentenceUpdates
github/codeql-actionfrom 2 to 3Release notes
Sourced from github/codeql-action's releases.
... (truncated)
Changelog
Sourced from github/codeql-action's changelog.
... (truncated)
Commits
b5bd9beUpdate changelog and version after v3.25.1c7f9125Merge pull request #2248 from github/update-v3.25.1-c4fb451431c7e8b2Update changelog for v3.25.139e1e65Add changelog note501f5f5Update default bundle to codeql-bundle-v2.17.15d73b1bRemove incorrect log messagec4fb451Merge pull request #2245 from github/henrymercer/ignore-already-specified-flags556b3bcAdd changelog noteef66aeaMerge branch 'main' into henrymercer/ignore-already-specified-flags9b87e0aMerge pull request #2241 from github/nickfyson/speculative-script-fixUpdates
actions/setup-pythonfrom 4 to 5Release notes
Sourced from actions/setup-python's releases.
... (truncated)
Commits
82c7e63Documentation changes for avoiding rate limit issues on GHES (#835)10aa35afeat: fallback to raw endpoint for manifest when rate limit is reached (#766)9a7ac94Bump undici from 5.27.2 to 5.28.3 (#817)871daa9Fix the "Specifying multiple Python/PyPy versions" link (#782)2f07895Fix broken README.md link (#793)e9d6f99Replace setup-python@v4 by setup-python@v5 in README (#776)0a5c615Update action to node20 (#772)0ae5836Add example of GraalPy to docs (#773)b64ffcaupdate actions/checkout to v4 (#761)8d28961Examples now use checkout@v4 (#738)Updates
arduino/setup-taskfrom 1 to 2Release notes
Sourced from arduino/setup-task's releases.
... (truncated)
Commits
b91d5d2update readme (#929)f2514b0Bump node from 16 to 20 (#919)2007903Merge pull request #928 from arduino/dependabot/npm_and_yarn/prettier-3.2.53f2ef95build(deps-dev): bump prettier from 3.2.2 to 3.2.588d658bMerge pull request #927 from arduino/dependabot/npm_and_yarn/types/node-16.18.79b79a1c3build(deps-dev): bump@types/nodefrom 16.18.78 to 16.18.795abddbaMerge pull request #926 from arduino/dependabot/npm_and_yarn/types/node-16.18.78b3e99c0build(deps-dev): bump@types/nodefrom 16.18.76 to 16.18.784145542Merge pull request #924 from arduino/dependabot/npm_and_yarn/typescript-eslin...10406e6build(deps-dev): bump@typescript-eslint/parserfrom 6.19.1 to 6.20.0Updates
golangci/golangci-lint-actionfrom 3 to 6Release notes
Sourced from golangci/golangci-lint-action's releases.
... (truncated)
Commits
23faadfdoc: improve readmeb556f25doc: improve readme789f114feat: rewrite format handling (#1038)d36b91cbuild(deps-dev): bump@typescript-eslint/parserfrom 7.7.1 to 7.8.0 (#1035)a9eb115build(deps): bump@types/nodefrom 20.12.7 to 20.12.8 (#1036)bd4fa7cbuild(deps-dev): bump@typescript-eslint/eslint-pluginfrom 7.7.1 to 7.8.0 (#...38e1018feat: improve log about pwd/cwd (#1033)21e9e6bfeat: use OS and working-directory as cache key (#1032)dbe4fc2chore: use getBooleanInputdbb7ebcfeat: add option to control cache invalidation interval (#1031)Updates
codecov/codecov-actionfrom 3 to 4Release notes
Sourced from codecov/codecov-action's releases.