Merge main into releases/v3 #3090
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
…st in the event of future changes
This commit adds automation ID to the overlay-base database cache key so that we properly distinguish different analyses in the same repo for the same language. Since I am changing the cache key format, I also moved the CodeQL bundle version to the end of the cache restore key, in case we want to remove it from the restore key sometime in the future. Note that I chose to leave CACHE_VERSION unchanged because the old and the new cache keys are sufficiently different that there should be no risk of confusion.
Mergeback v3.30.1 refs/heads/releases/v3 into main
This commit updates componentsJson computation to call JSON.stringify() without the replacer array and documents why the result is stable.
Fix `hasActionsWorkflows` throwing an exception if the workflows folder doesn't exist
Overlay: add automation ID to cache key
Allow Code Quality only analysis
Bumps the npm group with 5 updates: | Package | From | To | | --- | --- | --- | | [uuid](https://github.com/uuidjs/uuid) | `11.1.0` | `12.0.0` | | [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) | `9.34.0` | `9.35.0` | | [@types/semver](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/semver) | `7.7.0` | `7.7.1` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.41.0` | `8.43.0` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.41.0` | `8.43.0` | Updates `uuid` from 11.1.0 to 12.0.0 - [Release notes](https://github.com/uuidjs/uuid/releases) - [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md) - [Commits](uuidjs/uuid@v11.1.0...v12.0.0) Updates `@eslint/js` from 9.34.0 to 9.35.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md) - [Commits](https://github.com/eslint/eslint/commits/v9.35.0/packages/js) Updates `@types/semver` from 7.7.0 to 7.7.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/semver) Updates `@typescript-eslint/eslint-plugin` from 8.41.0 to 8.43.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.43.0/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 8.41.0 to 8.43.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.43.0/packages/parser) --- updated-dependencies: - dependency-name: uuid dependency-version: 12.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm - dependency-name: "@eslint/js" dependency-version: 9.35.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: "@types/semver" dependency-version: 7.7.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm - dependency-name: "@typescript-eslint/eslint-plugin" dependency-version: 8.43.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: "@typescript-eslint/parser" dependency-version: 8.43.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm ... Signed-off-by: dependabot[bot] <support@github.com>
Clarify instructions for updating PR checks to avoid emphasis on `main`
…fedfcf Bump the npm group with 5 updates
Add C# artifacts to `.gitignore` for `multi-language-repo`
There was a problem hiding this comment.
Pull Request Overview
This is a release-PR merging main into the releases/v3 branch for CodeQL Action version 3.30.2. The primary purpose is to consolidate bug fixes and experimental feature enhancements made since the last release.
Key changes include:
- Fixed a language autodetection bug that could cause failures
- Deprecated the experimental
quality-queriesinput in favor of a newanalysis-kindsinput - Enhanced overlay database caching with automation ID integration for better cache key management
Reviewed Changes
Copilot reviewed 34 out of 36 changed files in this pull request and generated no comments.
Show a summary per file
| File | Description |
|---|---|
| CHANGELOG.md | Documents the new release with bug fixes and experimental feature changes |
| package.json | Version bump to 3.30.2 and dependency updates |
| src/overlay-database-utils.ts | Enhanced cache key generation with automation ID and improved function naming |
| src/config-utils.ts | Added Code Quality analysis configuration and improved error handling |
| src/analyze.ts | Refactored SARIF file generation for multiple analysis types |
| src/analyses.ts | New analysis configuration framework with dedicated endpoints |
| pr-checks/ files | Updated test configurations to use new analysis-kinds input |
| CONTRIBUTING.md | Minor documentation formatting improvements |
| .github/workflows/ files | Generated workflow updates reflecting PR check changes |
Files not reviewed (1)
- package-lock.json: Language not supported
mbg
approved these changes
Sep 9, 2025
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Merging d7a501d into
releases/v3.Conductor for this PR is @mbg.
Contains the following pull requests:
hasActionsWorkflowsthrowing an exception if the workflows folder doesn't exist #3084 (@mbg).gitignoreformulti-language-repo#3085 (@mbg)main#3086 (@mbg)Please do the following:
releases/v3branch.Create a merge commitis selected rather thanSquash and mergeorRebase and merge.