Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 2, 2024

Bumps github/codeql-action from 3.25.11 to 3.26.10.

Changelog

Sourced from github/codeql-action's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

[UNRELEASED]

  • Upcoming breaking change: Add support for using actions/download-artifact@v4 to programmatically consume CodeQL Action debug artifacts.

    Starting November 30, 2024, GitHub.com customers will no longer be able to use actions/download-artifact@v3. Therefore, to avoid breakage, customers who programmatically download the CodeQL Action debug artifacts should set the CODEQL_ACTION_ARTIFACT_V4_UPGRADE environment variable to true and bump actions/download-artifact@v3 to actions/download-artifact@v4 in their workflows. The CodeQL Action will enable this behavior by default in early November and workflows that have not yet bumped to actions/download-artifact@v3 to actions/download-artifact@v4 will begin failing then.

    This change is currently unavailable for GitHub Enterprise Server customers, as actions/upload-artifact@v4 and actions/download-artifact@v4 are not yet compatible with GHES.

3.26.10 - 30 Sep 2024

  • We are rolling out a feature in September/October 2024 that sets up CodeQL using a bundle compressed with Zstandard. Our aim is to improve the performance of setting up CodeQL. #2502

3.26.9 - 24 Sep 2024

No user facing changes.

3.26.8 - 19 Sep 2024

  • Update default CodeQL bundle version to 2.19.0. #2483

3.26.7 - 13 Sep 2024

  • Update default CodeQL bundle version to 2.18.4. #2471

3.26.6 - 29 Aug 2024

  • Update default CodeQL bundle version to 2.18.3. #2449

3.26.5 - 23 Aug 2024

  • Fix an issue where the csrutil system call used for telemetry would fail on MacOS ARM machines with System Integrity Protection disabled. #2441

3.26.4 - 21 Aug 2024

  • Deprecation: The add-snippets input on the analyze Action is deprecated and will be removed in the first release in August 2025. #2436
  • Fix an issue where the disk usage system call used for telemetry would fail on MacOS ARM machines with System Integrity Protection disabled, and then surface a warning. The system call is now disabled for these machines. #2434

3.26.3 - 19 Aug 2024

  • Fix an issue where the CodeQL Action could not write diagnostic messages on Windows. This issue did not impact analysis quality. #2430

3.26.2 - 14 Aug 2024

  • Update default CodeQL bundle version to 2.18.2. #2417

... (truncated)

Commits
  • e2b3eaf Merge pull request #2507 from github/update-v3.26.10-2617ff2d3
  • 7dbbf6d Update changelog for v3.26.10
  • 2617ff2 Merge pull request #2502 from github/henrymercer/zstd-experiment
  • 46e0c78 Merge pull request #2504 from github/mergeback/v3.26.9-to-main-461ef6c7
  • da7be78 Update checked-in dependencies
  • ae1c6a2 Update changelog and version after v3.26.9
  • 461ef6c Merge pull request #2503 from github/update-v3.26.9-f861efb2b
  • 00b1146 Update changelog for v3.26.9
  • f861efb Merge pull request #2498 from github/dependabot/npm_and_yarn/npm-9874b37b58
  • 6b2f7e7 Run PR checks using JS only
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.25.11 to 3.26.10.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@b611370...e2b3eaf)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@github-actions
Copy link
Contributor

github-actions bot commented Oct 3, 2024

iOS (legacy) Performance metrics 🚀

  Plain With Sentry Diff
Startup time 1233.02 ms 1236.24 ms 3.22 ms
Size 2.36 MiB 3.08 MiB 734.19 KiB

Baseline results on branch: main

Startup times

Revision Plain With Sentry Diff
d7401ac+dirty 1252.38 ms 1275.04 ms 22.66 ms
4a6664f+dirty 1209.49 ms 1208.63 ms -0.86 ms
52a8031+dirty 1280.88 ms 1289.78 ms 8.90 ms
d361d38+dirty 1246.04 ms 1267.12 ms 21.08 ms
15c80ab+dirty 1223.74 ms 1228.96 ms 5.22 ms
9433f35+dirty 1246.94 ms 1271.45 ms 24.52 ms
0ebca77+dirty 1220.75 ms 1222.81 ms 2.06 ms
d43a46b+dirty 1219.24 ms 1219.65 ms 0.41 ms
86d6d2c+dirty 1267.55 ms 1286.21 ms 18.66 ms
b1e8712+dirty 1256.02 ms 1265.14 ms 9.12 ms

App size

Revision Plain With Sentry Diff
d7401ac+dirty 2.36 MiB 2.83 MiB 481.14 KiB
4a6664f+dirty 2.36 MiB 3.04 MiB 696.39 KiB
52a8031+dirty 2.36 MiB 2.82 MiB 469.44 KiB
d361d38+dirty 2.36 MiB 2.85 MiB 499.84 KiB
15c80ab+dirty 2.36 MiB 2.83 MiB 474.49 KiB
9433f35+dirty 2.36 MiB 2.85 MiB 499.80 KiB
0ebca77+dirty 2.36 MiB 3.04 MiB 698.33 KiB
d43a46b+dirty 2.36 MiB 3.08 MiB 734.25 KiB
86d6d2c+dirty 2.36 MiB 2.82 MiB 462.82 KiB
b1e8712+dirty 2.36 MiB 2.84 MiB 488.84 KiB

@github-actions
Copy link
Contributor

github-actions bot commented Oct 3, 2024

iOS (new) Performance metrics 🚀

  Plain With Sentry Diff
Startup time 1235.45 ms 1231.47 ms -3.98 ms
Size 2.92 MiB 3.64 MiB 740.58 KiB

Baseline results on branch: main

Startup times

Revision Plain With Sentry Diff
d7401ac+dirty 1288.10 ms 1289.54 ms 1.44 ms
4a6664f+dirty 1218.77 ms 1221.07 ms 2.30 ms
52a8031+dirty 1255.96 ms 1273.00 ms 17.04 ms
d361d38+dirty 1272.96 ms 1291.70 ms 18.74 ms
15c80ab+dirty 1248.41 ms 1251.24 ms 2.83 ms
9433f35+dirty 1232.24 ms 1232.74 ms 0.50 ms
0ebca77+dirty 1209.30 ms 1220.33 ms 11.03 ms
d43a46b+dirty 1223.31 ms 1230.92 ms 7.61 ms
86d6d2c+dirty 1291.62 ms 1296.80 ms 5.18 ms
b1e8712+dirty 1284.11 ms 1297.82 ms 13.71 ms

App size

Revision Plain With Sentry Diff
d7401ac+dirty 2.92 MiB 3.40 MiB 488.06 KiB
4a6664f+dirty 2.92 MiB 3.60 MiB 702.09 KiB
52a8031+dirty 2.92 MiB 3.38 MiB 475.71 KiB
d361d38+dirty 2.92 MiB 3.41 MiB 503.57 KiB
15c80ab+dirty 2.92 MiB 3.39 MiB 481.56 KiB
9433f35+dirty 2.92 MiB 3.41 MiB 503.55 KiB
0ebca77+dirty 2.92 MiB 3.61 MiB 705.12 KiB
d43a46b+dirty 2.92 MiB 3.64 MiB 740.29 KiB
86d6d2c+dirty 2.92 MiB 3.37 MiB 464.31 KiB
b1e8712+dirty 2.92 MiB 3.40 MiB 494.15 KiB

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 7, 2024

A newer version of github/codeql-action exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.

@krystofwoldrich krystofwoldrich merged commit 48d577d into main Oct 21, 2024
@krystofwoldrich krystofwoldrich deleted the dependabot/github_actions/github/codeql-action-3.26.10 branch October 21, 2024 10:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants