4 Releases published by 2 people

• codeql-bundle-v2.21.4 CodeQL Bundle v2.21.4

  published May 27, 2025

• v3.28.19

  published Jun 3, 2025

• codeql-bundle-v2.22.0 CodeQL Bundle v2.22.0

  published Jun 9, 2025

• v3.29.0

  published Jun 11, 2025

23 Pull requests merged by 7 people

• build(deps): bump ruby/setup-ruby from 1.244.0 to 1.245.0 in the actions group

  #2936 merged Jun 16, 2025

• Add new quality-queries input

  #2917 merged Jun 16, 2025

• Update README.md

  #2934 merged Jun 16, 2025

• Register credentials extracted from proxy configuration as secrets

  #2930 merged Jun 16, 2025

• Prepare action for public rust support

  #2929 merged Jun 13, 2025

• Mergeback v3.29.0 refs/heads/releases/v3 into main

  #2927 merged Jun 11, 2025

• Merge main into releases/v3

  #2926 merged Jun 11, 2025

• Update default bundle to 2.22.0

  #2925 merged Jun 11, 2025

• Bump minimum CodeQL version to 2.16.6

  #2912 merged Jun 9, 2025

• build(deps): bump the npm group with 5 updates

  #2916 merged Jun 4, 2025

• Fix backslashes being accepted by sanitizeArtifactName

  #2922 merged Jun 4, 2025

• Mergeback v3.28.19 refs/heads/releases/v3 into main

  #2919 merged Jun 3, 2025

• Merge main into releases/v3

  #2918 merged Jun 3, 2025

• Update default bundle to 2.21.4

  #2910 merged Jun 2, 2025

• Stop running CI on windows-2019

  #2913 merged Jun 2, 2025

• Update supported GitHub Enterprise Server versions

  #2911 merged May 28, 2025

• Dependabot: Remove deprecated reviewers config

  #2908 merged May 27, 2025

• build(deps): bump ruby/setup-ruby from 1.242.0 to 1.244.0 in the actions group

  #2905 merged May 27, 2025

• build(deps): bump the npm group across 1 directory with 2 updates

  #2907 merged May 27, 2025

• build(deps): bump ruby/setup-ruby from 1.230.0 to 1.242.0 in the actions group

  #2899 merged May 22, 2025

• build(deps-dev): bump @eslint/js from 9.26.0 to 9.27.0 in the npm group

  #2898 merged May 22, 2025

• Remove bundled copy of actions extractor

  #2787 merged May 22, 2025

• build(deps): bump undici from 5.28.5 to 5.29.0 in the npm_and_yarn group

  #2895 merged May 19, 2025

5 Pull requests opened by 4 people

• Allow using new CodeQL languages without updating the CodeQL Action

  #2914 opened May 30, 2025

• Update supported GitHub Enterprise Server versions

  #2928 opened Jun 12, 2025

• Fail `build.sh` if any command in it fails

  #2931 opened Jun 12, 2025

• Produce separate SARIF file for `quality-queries` alerts

  #2935 opened Jun 16, 2025

• build(deps-dev): bump the npm group across 1 directory with 5 updates

  #2937 opened Jun 16, 2025

5 Issues closed by 4 people

• ## Pull Request Overview

  #2932 closed Jun 13, 2025

• [codeql-action/init] running for language `action` fails when referencing in workflow by sha rather than version.

  #2923 closed Jun 6, 2025

• https://github.com/github/codeql-action/issues/new/choose

  #2921 closed Jun 3, 2025

• Building a go library fails due to proxy errors (Default setup)

  #2909 closed May 27, 2025

• CodeQL actions v3.28.18 fail to upload Sarif file

  #2903 closed May 21, 2025

2 Issues opened by 2 people

• upload-sarif does not handle relative paths when trivy runs on a subfolder

  #2904 opened May 23, 2025

• CodeQL action times out after six hours

  #2902 opened May 20, 2025

4 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• CODEQL_ACTION_CLEANUP_TRAP_CACHES is not working

  #2885 commented on May 23, 2025 • 0 new comments

• Upload-sarif action doesn't seem to respect "uriBaseId" in SARIF files

  #2215 commented on May 23, 2025 • 0 new comments

• CodeQL breaks iOS builds

  #2347 commented on Jun 16, 2025 • 0 new comments

• upload-sarif: token input doesn't work

  #2386 commented on Jun 16, 2025 • 0 new comments