Skip to content

Conversation

@github-actions
Copy link
Contributor

@github-actions github-actions bot commented Nov 18, 2025

Merging 70434f6 into releases/v4.

Conductor for this PR is @henrymercer.

Contains the following pull requests:

Please do the following:

  • Ensure the CHANGELOG displays the correct version and date.
  • Ensure the CHANGELOG includes all relevant, user-facing changes since the last release.
  • Check that there are not any unexpected commits being merged into the releases/v4 branch.
  • Ensure the docs team is aware of any documentation changes that need to be released.
  • Mark the PR as ready for review to trigger the full set of PR checks.
  • Approve and merge this PR. Make sure Create a merge commit is selected rather than Squash and merge or Rebase and merge.
  • Merge the mergeback PR that will automatically be created once this PR is merged.
  • Merge all backport PRs to older release branches, that will automatically be created once this PR is merged.

kaspersv and others added 20 commits November 13, 2025 10:48
Mergeback v4.31.3 refs/heads/releases/v4 into main
…riction

Overlay: Remove repository owner restriction
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.0 to 4.1.1.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@4.1.0...4.1.1)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.1.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps the actions-minor group with 1 update in the /.github/workflows directory: [ruby/setup-ruby](https://github.com/ruby/setup-ruby).


Updates `ruby/setup-ruby` from 1.267.0 to 1.268.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](ruby/setup-ruby@d5126b9...8aeb6ff)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-version: 1.268.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Change v3 deprecation message to warning.
…thub/workflows/actions-minor-761b22fa12

Bump ruby/setup-ruby from 1.267.0 to 1.268.0 in /.github/workflows in the actions-minor group across 1 directory
Add additional options to PR template and clarify some
Bump `glob` to at least `11.1.0`
@henrymercer henrymercer marked this pull request as ready for review November 18, 2025 15:25
@henrymercer henrymercer requested a review from a team as a code owner November 18, 2025 15:25
Copilot AI review requested due to automatic review settings November 18, 2025 15:25
@github-actions github-actions bot added the size/S Should be easy to review label Nov 18, 2025
Copilot finished reviewing on behalf of henrymercer November 18, 2025 15:26
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This is a release PR merging main into releases/v4 for version 4.31.4 of the CodeQL Action.

Summary: The PR contains dependency updates and bug fixes, including changing a deprecation message from core.error to core.warning, removing repository owner restrictions for overlay analysis, and updating various dependencies.

Key Changes:

  • Changed deprecation warning for CodeQL Action v3 from error to warning
  • Removed repository owner restrictions for overlay analysis feature
  • Updated dependencies: js-yaml (4.1.0→4.1.1), glob (11.0.3→11.1.0), ruby/setup-ruby action (v1.267.0→v1.268.0)

Reviewed Changes

Copilot reviewed 16 out of 22 changed files in this pull request and generated 44 comments.

Show a summary per file
File Description
CHANGELOG.md Added release notes for version 4.31.4 with release date
package.json Updated version to 4.31.4 and dependency versions for js-yaml and glob
package-lock.json Updated lockfile with new dependency versions
src/util.ts Changed deprecation message from error to warning
src/util.test.ts Updated test to use warning spy instead of error spy
src/config-utils.ts Removed repository owner check for overlay analysis feature
src/config-utils.test.ts Removed repository owner test setup and related tests
pr-checks/checks/rubocop-multi-language.yml Updated ruby/setup-ruby action version
.github/workflows/__rubocop-multi-language.yml Updated ruby/setup-ruby action version (generated file)
.github/pull_request_template.md Enhanced PR template with more detailed categorization options
lib/*.js Generated JavaScript files reflecting TypeScript source changes

return error4 instanceof ConfigurationError ? "user-error" : "failure";
function getActionsStatus(error3, otherFailureCause) {
if (error3 || otherFailureCause) {
return error3 instanceof ConfigurationError ? "user-error" : "failure";
Copy link

Copilot AI Nov 18, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This expression will be implicitly converted from undefined to object.

Copilot uses AI. Check for mistakes.
const flatResponse = (0, utils_js_1.flattenResponse)(rawResponse, operationSpec.responses[error4.statusCode] || operationSpec.responses["default"]);
error4.details = flatResponse;
} catch (error3) {
if (typeof error3 === "object" && (error3 === null || error3 === void 0 ? void 0 : error3.response)) {
Copy link

Copilot AI Nov 18, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This guard always evaluates to false.

Copilot uses AI. Check for mistakes.
const flatResponse = (0, utils_js_1.flattenResponse)(rawResponse, operationSpec.responses[error4.statusCode] || operationSpec.responses["default"]);
error4.details = flatResponse;
} catch (error3) {
if (typeof error3 === "object" && (error3 === null || error3 === void 0 ? void 0 : error3.response)) {
Copy link

Copilot AI Nov 18, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This guard always evaluates to false.

Copilot uses AI. Check for mistakes.
const flatResponse = (0, utils_js_1.flattenResponse)(rawResponse, operationSpec.responses[error4.statusCode] || operationSpec.responses["default"]);
error4.details = flatResponse;
} catch (error3) {
if (typeof error3 === "object" && (error3 === null || error3 === void 0 ? void 0 : error3.response)) {
Copy link

Copilot AI Nov 18, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This guard always evaluates to false.

Copilot uses AI. Check for mistakes.
}
}
if ((error4 === null || error4 === void 0 ? void 0 : error4.code) === "PARSE_ERROR" && (error4 === null || error4 === void 0 ? void 0 : error4.message.startsWith(`Error "Error: Unclosed root tag`))) {
if ((error3 === null || error3 === void 0 ? void 0 : error3.code) === "PARSE_ERROR" && (error3 === null || error3 === void 0 ? void 0 : error3.message.startsWith(`Error "Error: Unclosed root tag`))) {
Copy link

Copilot AI Nov 18, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This guard always evaluates to false.

Copilot uses AI. Check for mistakes.
logger.info(`RetryPolicy: Network error ${retriableError} found, will retry.`);
return true;
}
}
if ((error4 === null || error4 === void 0 ? void 0 : error4.code) === "PARSE_ERROR" && (error4 === null || error4 === void 0 ? void 0 : error4.message.startsWith(`Error "Error: Unclosed root tag`))) {
if ((error3 === null || error3 === void 0 ? void 0 : error3.code) === "PARSE_ERROR" && (error3 === null || error3 === void 0 ? void 0 : error3.message.startsWith(`Error "Error: Unclosed root tag`))) {
Copy link

Copilot AI Nov 18, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This guard always evaluates to false.

Copilot uses AI. Check for mistakes.
logger.info(`RetryPolicy: Network error ${retriableError} found, will retry.`);
return true;
}
}
if ((error4 === null || error4 === void 0 ? void 0 : error4.code) === "PARSE_ERROR" && (error4 === null || error4 === void 0 ? void 0 : error4.message.startsWith(`Error "Error: Unclosed root tag`))) {
if ((error3 === null || error3 === void 0 ? void 0 : error3.code) === "PARSE_ERROR" && (error3 === null || error3 === void 0 ? void 0 : error3.message.startsWith(`Error "Error: Unclosed root tag`))) {
Copy link

Copilot AI Nov 18, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This guard always evaluates to false.

Copilot uses AI. Check for mistakes.
@@ -48838,24 +48839,24 @@ var require_dist_node15 = __commonJS({
});
module2.exports = __toCommonJS2(dist_src_exports);
var import_core = require_dist_node11();
Copy link

Copilot AI Nov 18, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Unused variable import_core.

Copilot uses AI. Check for mistakes.
} else {
object[key] = value;
}
}
var simpleEscapeCheck = new Array(256);
var simpleEscapeMap = new Array(256);
for (i = 0; i < 256; i++) {
Copy link

Copilot AI Nov 18, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Variable 'i' is used before its declaration.

Copilot uses AI. Check for mistakes.
if (error4 || otherFailureCause) {
return error4 instanceof ConfigurationError ? "user-error" : "failure";
function getActionsStatus(error3, otherFailureCause) {
if (error3 || otherFailureCause) {
Copy link

Copilot AI Nov 18, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This expression always evaluates to false.

Copilot uses AI. Check for mistakes.
@mbg mbg merged commit e12f017 into releases/v4 Nov 18, 2025
245 of 246 checks passed
@mbg mbg deleted the update-v4.31.4-70434f6dd branch November 18, 2025 16:12
@github-actions github-actions bot mentioned this pull request Nov 18, 2025
8 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size/S Should be easy to review

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants