Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 19, 2024

Bumps github/codeql-action from 3.26.2 to 3.26.3.

Changelog

Sourced from github/codeql-action's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

[UNRELEASED]

No user facing changes.

3.26.3 - 19 Aug 2024

  • Fix an issue where the CodeQL Action could not write diagnostic messages on Windows. This issue did not impact analysis quality. #2430

3.26.2 - 14 Aug 2024

  • Update default CodeQL bundle version to 2.18.2. #2417

3.26.1 - 13 Aug 2024

No user facing changes.

3.26.0 - 06 Aug 2024

  • Deprecation: Swift analysis on Ubuntu runner images is no longer supported. Please migrate to a macOS runner if this affects you. #2403
  • Bump the minimum CodeQL bundle version to 2.13.5. #2408

3.25.15 - 26 Jul 2024

  • Update default CodeQL bundle version to 2.18.1. #2385

3.25.14 - 25 Jul 2024

  • Experimental: add a new start-proxy action which starts the same HTTP proxy as used by github/dependabot-action. Do not use this in production as it is part of an internal experiment and subject to change at any time. #2376

3.25.13 - 19 Jul 2024

  • Add codeql-version to outputs. #2368
  • Add a deprecation warning for customers using CodeQL version 2.13.4 and earlier. These versions of CodeQL were discontinued on 9 July 2024 alongside GitHub Enterprise Server 3.9, and will be unsupported by CodeQL Action versions 3.26.0 and later and versions 2.26.0 and later. #2375
    • If you are using one of these versions, please update to CodeQL CLI version 2.13.5 or later. For instance, if you have specified a custom version of the CLI using the 'tools' input to the 'init' Action, you can remove this input to use the default version.
    • Alternatively, if you want to continue using a version of the CodeQL CLI between 2.12.6 and 2.13.4, you can replace github/codeql-action/*@v3 by github/codeql-action/*@v3.25.13 and github/codeql-action/*@v2 by github/codeql-action/*@v2.25.13 in your code scanning workflow to ensure you continue using this version of the CodeQL Action.

3.25.12 - 12 Jul 2024

  • Improve the reliability and performance of analyzing code when analyzing a compiled language with the autobuild build mode on GitHub Enterprise Server. This feature is already available to GitHub.com users. #2353
  • Update default CodeQL bundle version to 2.18.0. #2364

3.25.11 - 28 Jun 2024

  • Avoid failing the workflow run if there is an error while uploading debug artifacts. #2349

... (truncated)

Commits
  • 883d858 Merge pull request #2431 from github/update-v3.26.3-b187c86ce
  • e100ceb Update changelog for v3.26.3
  • b187c86 Merge pull request #2430 from github/henrymercer/windows-diagnostics-fix
  • e2bb5a2 Add changelog note
  • e5a6587 Fix writing diagnostics on Windows
  • 5c681ef Merge pull request #2426 from github/mergeback/v3.26.2-to-main-429e1977
  • 676519a Update checked-in dependencies
  • 25a5b8f Update changelog and version after v3.26.2
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added autosubmit Merge PR when tree becomes green via auto submit App c: contributor-productivity Team-specific productivity, code health, technical debt. team-infra Owned by Infrastructure team labels Aug 19, 2024
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Aug 19, 2024

Dependabot tried to add @christopherfujino, @jmagman and @keyonghan as reviewers to this PR, but received the following error from GitHub:

POST https://api.github.com/repos/flutter/flutter/pulls/153726/requested_reviewers: 422 - Reviews may only be requested from collaborators. One or more of the users or teams you specified is not a collaborator of the flutter/flutter repository. // See: https://docs.github.com/rest/pulls/review-requests#request-reviewers-for-a-pull-request

@github-actions github-actions bot removed c: contributor-productivity Team-specific productivity, code health, technical debt. team-infra Owned by Infrastructure team labels Aug 19, 2024
@auto-submit auto-submit bot merged commit c660cb8 into master Aug 19, 2024
@auto-submit auto-submit bot deleted the dependabot/github_actions/github/codeql-action-3.26.3 branch August 19, 2024 22:27
engine-flutter-autoroll added a commit to engine-flutter-autoroll/packages that referenced this pull request Aug 20, 2024
engine-flutter-autoroll added a commit to engine-flutter-autoroll/packages that referenced this pull request Aug 20, 2024
engine-flutter-autoroll added a commit to engine-flutter-autoroll/packages that referenced this pull request Aug 20, 2024
engine-flutter-autoroll added a commit to engine-flutter-autoroll/packages that referenced this pull request Aug 20, 2024
engine-flutter-autoroll added a commit to engine-flutter-autoroll/packages that referenced this pull request Aug 20, 2024
engine-flutter-autoroll added a commit to engine-flutter-autoroll/packages that referenced this pull request Aug 20, 2024
auto-submit bot pushed a commit to flutter/packages that referenced this pull request Aug 20, 2024
flutter/flutter@6a28048...e7da16d

2024-08-20 [email protected] Fixes page.onPopInvoked type mismatches (flutter/flutter#153593)
2024-08-20 [email protected] When the app enters the detached state, clear the record of the last SystemChrome style sent to the host (flutter/flutter#153586)
2024-08-20 [email protected] Handle "Service connection disposed" error from VmService disconnecting while requests are outstanding (flutter/flutter#153714)
2024-08-20 [email protected] Roll Flutter Engine from ec775a3a645e to e10b07598091 (1 revision) (flutter/flutter#153764)
2024-08-20 [email protected] Roll Packages from 7c1a05c to 4d2d2e3 (6 revisions) (flutter/flutter#153763)
2024-08-20 [email protected] Roll Flutter Engine from 0ac9e97cc1c0 to ec775a3a645e (1 revision) (flutter/flutter#153761)
2024-08-20 [email protected] Reland "Load parent package config" (flutter/flutter#153754)
2024-08-20 [email protected] Roll Flutter Engine from 48d7b04674d9 to 0ac9e97cc1c0 (2 revisions) (flutter/flutter#153753)
2024-08-20 [email protected] Revert "Load parent package config" (flutter/flutter#153752)
2024-08-20 [email protected] Roll Flutter Engine from b0284aac7b4d to 48d7b04674d9 (1 revision) (flutter/flutter#153746)
2024-08-20 [email protected] Load parent package config (flutter/flutter#150850)
2024-08-20 [email protected] Roll Flutter Engine from 20b8a5c13742 to b0284aac7b4d (1 revision) (flutter/flutter#153743)
2024-08-20 [email protected] Roll Flutter Engine from 86f269bd5261 to 20b8a5c13742 (2 revisions) (flutter/flutter#153741)
2024-08-20 [email protected] Roll Flutter Engine from 5355c0b60e6e to 86f269bd5261 (4 revisions) (flutter/flutter#153739)
2024-08-20 [email protected] Roll Flutter Engine from 7dd71ff80d23 to 5355c0b60e6e (1 revision) (flutter/flutter#153734)
2024-08-20 [email protected] Roll Flutter Engine from 9d7e3a6b97d0 to 7dd71ff80d23 (4 revisions) (flutter/flutter#153733)
2024-08-19 [email protected] refactor material banner and fix focus issue (flutter/flutter#152646)
2024-08-19 [email protected] Roll Flutter Engine from 30ffbfaf6a06 to 9d7e3a6b97d0 (3 revisions) (flutter/flutter#153724)
2024-08-19 49699333+dependabot[bot]@users.noreply.github.com Bump github/codeql-action from 3.26.2 to 3.26.3 (flutter/flutter#153726)
2024-08-19 [email protected] Roll Flutter Engine from c5d23162bb9b to 30ffbfaf6a06 (1 revision) (flutter/flutter#153721)
2024-08-19 [email protected] Roll Flutter Engine from bf538a0a98b0 to c5d23162bb9b (1 revision) (flutter/flutter#153719)
2024-08-19 [email protected] Remove android stack_size_test (flutter/flutter#153695)
2024-08-19 [email protected] Roll Flutter Engine from e29b5529080d to bf538a0a98b0 (2 revisions) (flutter/flutter#153713)

If this roll has caused a breakage, revert this CL and stop the roller
using the controls here:
https://autoroll.skia.org/r/flutter-packages
Please CC [email protected],[email protected],[email protected] on the revert to ensure that a human
is aware of the problem.

To file a bug in Packages: https://github.com/flutter/flutter/issues/new/choose

To report a problem with the AutoRoller itself, please file a bug:
https://issues.skia.org/issues/new?component=1389291&template=1850622

Documentation for the AutoRoller is here:
https://skia.googlesource.com/buildbot/+doc/main/autoroll/README.md
Buchimi pushed a commit to Buchimi/flutter that referenced this pull request Sep 2, 2024
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.26.2 to 3.26.3.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's changelog</a>.</em></p>
<blockquote>
<h1>CodeQL Action Changelog</h1>
<p>See the <a href="https://github.com/github/codeql-action/releases">releases page</a> for the relevant changes to the CodeQL CLI and language packs.</p>
<p>Note that the only difference between <code>v2</code> and <code>v3</code> of the CodeQL Action is the node version they support, with <code>v3</code> running on node 20 while we continue to release <code>v2</code> to support running on node 16. For example <code>3.22.11</code> was the first <code>v3</code> release and is functionally identical to <code>2.22.11</code>. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.</p>
<h2>[UNRELEASED]</h2>
<p>No user facing changes.</p>
<h2>3.26.3 - 19 Aug 2024</h2>
<ul>
<li>Fix an issue where the CodeQL Action could not write diagnostic messages on Windows. This issue did not impact analysis quality. <a href="https://redirect.github.com/github/codeql-action/pull/2430">#2430</a></li>
</ul>
<h2>3.26.2 - 14 Aug 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.18.2. <a href="https://redirect.github.com/github/codeql-action/pull/2417">#2417</a></li>
</ul>
<h2>3.26.1 - 13 Aug 2024</h2>
<p>No user facing changes.</p>
<h2>3.26.0 - 06 Aug 2024</h2>
<ul>
<li><em>Deprecation:</em> Swift analysis on Ubuntu runner images is no longer supported. Please migrate to a macOS runner if this affects you. <a href="https://redirect.github.com/github/codeql-action/pull/2403">#2403</a></li>
<li>Bump the minimum CodeQL bundle version to 2.13.5. <a href="https://redirect.github.com/github/codeql-action/pull/2408">#2408</a></li>
</ul>
<h2>3.25.15 - 26 Jul 2024</h2>
<ul>
<li>Update default CodeQL bundle version to 2.18.1. <a href="https://redirect.github.com/github/codeql-action/pull/2385">#2385</a></li>
</ul>
<h2>3.25.14 - 25 Jul 2024</h2>
<ul>
<li>Experimental: add a new <code>start-proxy</code> action which starts the same HTTP proxy as used by <a href="https://github.com/github/dependabot-action"><code>github/dependabot-action</code></a>. Do not use this in production as it is part of an internal experiment and subject to change at any time. <a href="https://redirect.github.com/github/codeql-action/pull/2376">#2376</a></li>
</ul>
<h2>3.25.13 - 19 Jul 2024</h2>
<ul>
<li>Add <code>codeql-version</code> to outputs. <a href="https://redirect.github.com/github/codeql-action/pull/2368">#2368</a></li>
<li>Add a deprecation warning for customers using CodeQL version 2.13.4 and earlier. These versions of CodeQL were discontinued on 9 July 2024 alongside GitHub Enterprise Server 3.9, and will be unsupported by CodeQL Action versions 3.26.0 and later and versions 2.26.0 and later. <a href="https://redirect.github.com/github/codeql-action/pull/2375">#2375</a>
<ul>
<li>If you are using one of these versions, please update to CodeQL CLI version 2.13.5 or later. For instance, if you have specified a custom version of the CLI using the 'tools' input to the 'init' Action, you can remove this input to use the default version.</li>
<li>Alternatively, if you want to continue using a version of the CodeQL CLI between 2.12.6 and 2.13.4, you can replace <code>github/codeql-action/*@V3</code> by <code>github/codeql-action/*@v3.25.13</code> and <code>github/codeql-action/*@v2</code> by <code>github/codeql-action/*@v2.25.13</code> in your code scanning workflow to ensure you continue using this version of the CodeQL Action.</li>
</ul>
</li>
</ul>
<h2>3.25.12 - 12 Jul 2024</h2>
<ul>
<li>Improve the reliability and performance of analyzing code when analyzing a compiled language with the <code>autobuild</code> <a href="https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages#codeql-build-modes">build mode</a> on GitHub Enterprise Server. This feature is already available to GitHub.com users. <a href="https://redirect.github.com/github/codeql-action/pull/2353">#2353</a></li>
<li>Update default CodeQL bundle version to 2.18.0. <a href="https://redirect.github.com/github/codeql-action/pull/2364">#2364</a></li>
</ul>
<h2>3.25.11 - 28 Jun 2024</h2>
<ul>
<li>Avoid failing the workflow run if there is an error while uploading debug artifacts. <a href="https://redirect.github.com/github/codeql-action/pull/2349">#2349</a></li>
</ul>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/github/codeql-action/commit/883d8588e56d1753a8a58c1c86e88976f0c23449"><code>883d858</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/2431">#2431</a> from github/update-v3.26.3-b187c86ce</li>
<li><a href="https://github.com/github/codeql-action/commit/e100cebbec1356794a5aaef00c9bb3bff114bdaa"><code>e100ceb</code></a> Update changelog for v3.26.3</li>
<li><a href="https://github.com/github/codeql-action/commit/b187c86ce5456b99777446fbd009ce936d2c6cf4"><code>b187c86</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/2430">#2430</a> from github/henrymercer/windows-diagnostics-fix</li>
<li><a href="https://github.com/github/codeql-action/commit/e2bb5a277705da6cf2110f35d228f5f93e694c5e"><code>e2bb5a2</code></a> Add changelog note</li>
<li><a href="https://github.com/github/codeql-action/commit/e5a65875f9a0652d275278a1802b2b7a7252b545"><code>e5a6587</code></a> Fix writing diagnostics on Windows</li>
<li><a href="https://github.com/github/codeql-action/commit/5c681efc3f71cd6b47b1c14583c9e86913966e9f"><code>5c681ef</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/2426">#2426</a> from github/mergeback/v3.26.2-to-main-429e1977</li>
<li><a href="https://github.com/github/codeql-action/commit/676519a88282d8e2d89fa38d2b61b8122b7449ad"><code>676519a</code></a> Update checked-in dependencies</li>
<li><a href="https://github.com/github/codeql-action/commit/25a5b8f08cdeeffce170bbe78f0cb651b755430e"><code>25a5b8f</code></a> Update changelog and version after v3.26.2</li>
<li>See full diff in <a href="https://github.com/github/codeql-action/compare/429e1977040da7a23b6822b13c129cd1ba93dbb2...883d8588e56d1753a8a58c1c86e88976f0c23449">compare view</a></li>
</ul>
</details>
<br />

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=3.26.2&new-version=3.26.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

</details>
engine-flutter-autoroll added a commit to engine-flutter-autoroll/packages that referenced this pull request Dec 11, 2024
engine-flutter-autoroll added a commit to engine-flutter-autoroll/packages that referenced this pull request Dec 12, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

autosubmit Merge PR when tree becomes green via auto submit App

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant