Skip to content

Commit 81f0fef

Browse files
⬆️ Bump github/codeql-action from 3.29.1 to 3.30.2 (#119)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.29.1 to 3.30.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/releases">github/codeql-action's releases</a>.</em></p> <blockquote> <h2>v3.30.2</h2> <h1>CodeQL Action Changelog</h1> <p>See the <a href="https://github.com/github/codeql-action/releases">releases page</a> for the relevant changes to the CodeQL CLI and language packs.</p> <h2>3.30.2 - 09 Sep 2025</h2> <ul> <li>Fixed a bug which could cause language autodetection to fail. <a href="https://redirect.github.com/github/codeql-action/pull/3084">#3084</a></li> <li>Experimental: The <code>quality-queries</code> input that was added in <code>3.29.2</code> as part of an internal experiment is now deprecated and will be removed in an upcoming version of the CodeQL Action. It has been superseded by a new <code>analysis-kinds</code> input, which is part of the same internal experiment. Do not use this in production as it is subject to change at any time. <a href="https://redirect.github.com/github/codeql-action/pull/3064">#3064</a></li> </ul> <p>See the full <a href="https://github.com/github/codeql-action/blob/v3.30.2/CHANGELOG.md">CHANGELOG.md</a> for more information.</p> <h2>v3.30.1</h2> <h1>CodeQL Action Changelog</h1> <p>See the <a href="https://github.com/github/codeql-action/releases">releases page</a> for the relevant changes to the CodeQL CLI and language packs.</p> <h2>3.30.1 - 05 Sep 2025</h2> <ul> <li>Update default CodeQL bundle version to 2.23.0. <a href="https://redirect.github.com/github/codeql-action/pull/3077">#3077</a></li> </ul> <p>See the full <a href="https://github.com/github/codeql-action/blob/v3.30.1/CHANGELOG.md">CHANGELOG.md</a> for more information.</p> <h2>v3.30.0</h2> <h1>CodeQL Action Changelog</h1> <p>See the <a href="https://github.com/github/codeql-action/releases">releases page</a> for the relevant changes to the CodeQL CLI and language packs.</p> <h2>3.30.0 - 01 Sep 2025</h2> <ul> <li>Reduce the size of the CodeQL Action, speeding up workflows by approximately 4 seconds. <a href="https://redirect.github.com/github/codeql-action/pull/3054">#3054</a></li> </ul> <p>See the full <a href="https://github.com/github/codeql-action/blob/v3.30.0/CHANGELOG.md">CHANGELOG.md</a> for more information.</p> <h2>v3.29.11</h2> <h1>CodeQL Action Changelog</h1> <p>See the <a href="https://github.com/github/codeql-action/releases">releases page</a> for the relevant changes to the CodeQL CLI and language packs.</p> <h2>3.29.11 - 21 Aug 2025</h2> <ul> <li>Update default CodeQL bundle version to 2.22.4. <a href="https://redirect.github.com/github/codeql-action/pull/3044">#3044</a></li> </ul> <p>See the full <a href="https://github.com/github/codeql-action/blob/v3.29.11/CHANGELOG.md">CHANGELOG.md</a> for more information.</p> <h2>v3.29.10</h2> <h1>CodeQL Action Changelog</h1> <p>See the <a href="https://github.com/github/codeql-action/releases">releases page</a> for the relevant changes to the CodeQL CLI and language packs.</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/github/codeql-action/commit/d3678e237b9c32a6c9bffb3315c335f976f3549f"><code>d3678e2</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3090">#3090</a> from github/update-v3.30.2-d7a501da0</li> <li><a href="https://github.com/github/codeql-action/commit/14bbb6a806d8585d3ef2d8b4bfdf571e840a0d90"><code>14bbb6a</code></a> Add changelog entries</li> <li><a href="https://github.com/github/codeql-action/commit/a879d033687e011480e4d305b657b50d8f099ef1"><code>a879d03</code></a> Update changelog for v3.30.2</li> <li><a href="https://github.com/github/codeql-action/commit/d7a501da0195366a45a932783bb4b1817372bf20"><code>d7a501d</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3085">#3085</a> from github/mbg/multi-language-repo/gitignore</li> <li><a href="https://github.com/github/codeql-action/commit/c90f0747e2cb91ce3c0ea059dbaeddcb1e3fa3ab"><code>c90f074</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3087">#3087</a> from github/dependabot/npm_and_yarn/npm-1cf7fedfcf</li> <li><a href="https://github.com/github/codeql-action/commit/d8df826a796178a1efe64989b0b6cbe80e4e5291"><code>d8df826</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3086">#3086</a> from github/mbg/docs/required-checks</li> <li><a href="https://github.com/github/codeql-action/commit/23419de6bd3b79d4c9df2d3bab19a729d78c6901"><code>23419de</code></a> Rebuild</li> <li><a href="https://github.com/github/codeql-action/commit/7d8e1e924fde76f1a52162cd5e4580a5aba0ce18"><code>7d8e1e9</code></a> Bump the npm group with 5 updates</li> <li><a href="https://github.com/github/codeql-action/commit/76a3cccaa42b7fc2d93f3357903e8ea1bc7d73f9"><code>76a3ccc</code></a> Clarify instructions for updating PR checks for PRs</li> <li><a href="https://github.com/github/codeql-action/commit/01fd48d5b6f834e5d6914aff385ab88660dbbd20"><code>01fd48d</code></a> Remove comment about <code>main</code> from <code>update-required-checks.sh</code></li> <li>Additional commits viewable in <a href="https://github.com/github/codeql-action/compare/v3.29.1...v3.30.2">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=3.29.1&new-version=3.30.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) You can trigger a rebase of this PR by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --------- Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Monty Bot <[email protected]>
1 parent 1a3eb58 commit 81f0fef

File tree

4 files changed

+8
-7
lines changed

4 files changed

+8
-7
lines changed

.github/workflows/codeql-analysis.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,7 @@ jobs:
4242

4343
# Initializes the CodeQL tools for scanning.
4444
- name: Initialize CodeQL
45-
uses: github/codeql-action/init@v3.29.1
45+
uses: github/codeql-action/init@v3.30.2
4646
with:
4747
languages: ${{ matrix.language }}
4848
# If you wish to specify custom queries, you can do so here or in a config file.
@@ -53,7 +53,7 @@ jobs:
5353
# Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
5454
# If this step fails, then you should remove it and run the build manually (see below)
5555
- name: Autobuild
56-
uses: github/codeql-action/autobuild@v3.29.1
56+
uses: github/codeql-action/autobuild@v3.30.2
5757

5858
# ℹ️ Command-line programs to run using the OS shell.
5959
# 📚 https://git.io/JvXDl
@@ -67,4 +67,4 @@ jobs:
6767
# make release
6868

6969
- name: Perform CodeQL Analysis
70-
uses: github/codeql-action/analyze@v3.29.1
70+
uses: github/codeql-action/analyze@v3.30.2

.github/workflows/codeql.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -41,7 +41,7 @@ jobs:
4141

4242
# Initializes the CodeQL tools for scanning.
4343
- name: Initialize CodeQL
44-
uses: github/codeql-action/init@v3.29.1
44+
uses: github/codeql-action/init@v3.30.2
4545
with:
4646
languages: ${{ matrix.language }}
4747
# If you wish to specify custom queries, you can do so here or in a config file.
@@ -55,7 +55,7 @@ jobs:
5555
# Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
5656
# If this step fails, then you should remove it and run the build manually (see below)
5757
- name: Autobuild
58-
uses: github/codeql-action/autobuild@v3.29.1
58+
uses: github/codeql-action/autobuild@v3.30.2
5959

6060
# ℹ️ Command-line programs to run using the OS shell.
6161
# 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -68,6 +68,6 @@ jobs:
6868
# ./location_of_script_within_repo/buildscript.sh
6969

7070
- name: Perform CodeQL Analysis
71-
uses: github/codeql-action/analyze@v3.29.1
71+
uses: github/codeql-action/analyze@v3.30.2
7272
with:
7373
category: "/language:${{matrix.language}}"

.github/workflows/scorecards.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -67,6 +67,6 @@ jobs:
6767

6868
# Upload the results to GitHub's code scanning dashboard.
6969
- name: "Upload to code-scanning"
70-
uses: github/codeql-action/upload-sarif@4c57370d0304fbff638216539f81d9163f77712a # v2.28.0
70+
uses: github/codeql-action/upload-sarif@31d3ae847e3e655d6e31918ac1d8af398338a360 # v2.28.0
7171
with:
7272
sarif_file: results.sarif

news/20250910060644.bugfix

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
Dependency upgrade: codeql-action-3.30.2

0 commit comments

Comments
 (0)