Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 10, 2022

Bumps github/codeql-action from 2.1.9 to 2.1.10.

Changelog

Sourced from github/codeql-action's changelog.

CodeQL Action Changelog

[UNRELEASED]

No user facing changes.

2.1.10 - 10 May 2022

  • Update default CodeQL bundle version to 2.9.5. #1056
  • When wait-for-processing is enabled, the workflow will now fail if there were any errors that occurred during processing of the analysis results.

2.1.9 - 27 Apr 2022

  • Add working-directory input to the autobuild action. #1024
  • The analyze and upload-sarif actions will now wait up to 2 minutes for processing to complete after they have uploaded the results so they can report any processing errors that occurred. This behavior can be disabled by setting the wait-for-processing action input to "false". #1007
  • Update default CodeQL bundle version to 2.9.0.
  • Fix a bug where status reporting fails on Windows. #1042

2.1.8 - 08 Apr 2022

  • Update default CodeQL bundle version to 2.8.5. #1014
  • Fix error where the init action would fail due to a GitHub API request that was taking too long to complete #1025

2.1.7 - 05 Apr 2022

  • A bug where additional queries specified in the workflow file would sometimes not be respected has been fixed. #1018

2.1.6 - 30 Mar 2022

  • [v2+ only] The CodeQL Action now runs on Node.js v16. #1000
  • Update default CodeQL bundle version to 2.8.4. #990
  • Fix a bug where an invalid commit_oid was being sent to code scanning when a custom checkout path was being used. #956

1.1.5 - 15 Mar 2022

  • Update default CodeQL bundle version to 2.8.3.
  • The CodeQL runner is now deprecated and no longer being released. For more information, see CodeQL runner deprecation.
  • Fix two bugs that cause action failures with GHES 3.3 or earlier. #978
    • Fix not a permitted key invalid requests with GHES 3.1 or earlier
    • Fix RUNNER_ARCH environment variable must be set errors with GHES 3.3 or earlier

1.1.4 - 07 Mar 2022

  • Update default CodeQL bundle version to 2.8.2. #950
  • Fix a bug where old results can be uploaded if the languages in a repository change when using a non-ephemeral self-hosted runner. #955

1.1.3 - 23 Feb 2022

  • Fix a bug where the CLR traces can continue tracing even after tracing should be stopped. #938

... (truncated)

Commits
  • 75b4f1c Merge pull request #1062 from github/update-v2.1.10-7cf0ed5e
  • f8eea91 Update changelog for v2.1.10
  • 7cf0ed5 Merge pull request #1060 from github/aeisenberg/required-checks-script
  • 827fd55 Create update-required-checks script
  • dd56e95 Merge pull request #1056 from github/alexet/update-2.9.1
  • 3c6dd30 Update codeql to 2.9.1
  • 96bc9c3 Merge pull request #1055 from github/fix-status-error-being-caught
  • 366e88c Fix processing errors being caught and logged as a warning rather than failin...
  • 7b66e72 Merge pull request #1054 from github/aeisenberg/update-checks
  • 06d4e82 Add permissions block to workflow
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added c: contributor-productivity Team-specific productivity, code health, technical debt. team-infra Owned by Infrastructure team waiting for tree to go green labels May 10, 2022
@dependabot dependabot bot requested review from Hixie and godofredoc May 10, 2022 21:32
@fluttergithubbot fluttergithubbot merged commit a9ac7fb into master May 10, 2022
@fluttergithubbot fluttergithubbot deleted the dependabot/github_actions/github/codeql-action-2.1.10 branch May 10, 2022 22:44
engine-flutter-autoroll added a commit to engine-flutter-autoroll/packages that referenced this pull request May 10, 2022
engine-flutter-autoroll added a commit to engine-flutter-autoroll/plugins that referenced this pull request May 10, 2022
engine-flutter-autoroll added a commit to engine-flutter-autoroll/packages that referenced this pull request Aug 30, 2022
engine-flutter-autoroll added a commit to engine-flutter-autoroll/plugins that referenced this pull request Aug 30, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

c: contributor-productivity Team-specific productivity, code health, technical debt. team-infra Owned by Infrastructure team

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant