We are rolling out a feature in September/October 2024 that sets up CodeQL using a bundle compressed with Zstandard. Our aim is to improve the performance of setting up CodeQL. #2502
3.26.9 - 24 Sep 2024
No user facing changes.
3.26.8 - 19 Sep 2024
Update default CodeQL bundle version to 2.19.0. #2483
3.26.7 - 13 Sep 2024
Update default CodeQL bundle version to 2.18.4. #2471
3.26.6 - 29 Aug 2024
Update default CodeQL bundle version to 2.18.3. #2449
3.26.5 - 23 Aug 2024
Fix an issue where the csrutil system call used for telemetry would fail on MacOS ARM machines with System Integrity Protection disabled. #2441
3.26.4 - 21 Aug 2024
Deprecation: The add-snippets input on the analyze Action is deprecated and will be removed in the first release in August 2025. #2436
Fix an issue where the disk usage system call used for telemetry would fail on MacOS ARM machines with System Integrity Protection disabled, and then surface a warning. The system call is now disabled for these machines. #2434
3.26.3 - 19 Aug 2024
Fix an issue where the CodeQL Action could not write diagnostic messages on Windows. This issue did not impact analysis quality. #2430
3.26.2 - 14 Aug 2024
Update default CodeQL bundle version to 2.18.2. #2417
3.26.1 - 13 Aug 2024
No user facing changes.
3.26.0 - 06 Aug 2024
Deprecation: Swift analysis on Ubuntu runner images is no longer supported. Please migrate to a macOS runner if this affects you. #2403
Bump the minimum CodeQL bundle version to 2.13.5. #2408
Commits
e2b3eaf Merge pull request #2507 from github/update-v3.26.10-2617ff2d3
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Bumps github/codeql-action from 3.25.15 to 3.26.10.
Changelog
Sourced from github/codeql-action's changelog.
Commits
e2b3eaf
Merge pull request #2507 from github/update-v3.26.10-2617ff2d37dbbf6d
Update changelog for v3.26.102617ff2
Merge pull request #2502 from github/henrymercer/zstd-experiment46e0c78
Merge pull request #2504 from github/mergeback/v3.26.9-to-main-461ef6c7da7be78
Update checked-in dependenciesae1c6a2
Update changelog and version after v3.26.9461ef6c
Merge pull request #2503 from github/update-v3.26.9-f861efb2b00b1146
Update changelog for v3.26.9f861efb
Merge pull request #2498 from github/dependabot/npm_and_yarn/npm-9874b37b586b2f7e7
Run PR checks using JS onlyDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show