build(deps): bump github/codeql-action from 2.21.9 to 2.22.3 #1661

dependabot · 2023-10-13T17:12:05Z

Bumps github/codeql-action from 2.21.9 to 2.22.3.

Changelog

Sourced from github/codeql-action's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

2.22.3 - 13 Oct 2023

Provide an authentication token when downloading the CodeQL Bundle from the API of a GitHub Enterprise Server instance. #1945

2.22.2 - 12 Oct 2023

Update default CodeQL bundle version to 2.15.0. #1938

Improve the log output when an error occurs in an invocation of the CodeQL CLI. #1927

2.22.1 - 09 Oct 2023

Add a workaround for Python 3.12, which is not supported in CodeQL CLI version 2.14.6 or earlier. If you are running an analysis on Windows and using Python 3.12 or later, the CodeQL Action will switch to running Python 3.11. In this case, if Python 3.11 is not found, then the workflow will fail. #1928

2.22.0 - 06 Oct 2023

The CodeQL Action now requires CodeQL version 2.10.5 or later. For more information, see the corresponding changelog entry for CodeQL Action version 2.21.8. #1907

The CodeQL Action no longer runs ML-powered queries. For more information, including details on our investment in AI-powered security technology, see "CodeQL code scanning deprecates ML-powered alerts." #1910

Fix a bug which prevented tracing of projects using Go 1.21 and above on Linux. #1909

2.21.9 - 27 Sep 2023

Update default CodeQL bundle version to 2.14.6. #1897

We are rolling out a feature in October 2023 that will improve the success rate of C/C++ autobuild. #1889

We are rolling out a feature in October 2023 that will provide specific file coverage information for C and C++, Java and Kotlin, and JavaScript and TypeScript. Currently file coverage information for each of these pairs of languages is grouped together. #1903

Add a warning to help customers avoid inadvertently analyzing the same CodeQL language in multiple matrix jobs. #1901

2.21.8 - 19 Sep 2023

Add a deprecation warning for customers using CodeQL version 2.10.4 and earlier. These versions of CodeQL were discontinued on 12 September 2023 alongside GitHub Enterprise Server 3.6, and will be unsupported by the next minor release of the CodeQL Action. #1884

If you are using one of these versions, please update to CodeQL CLI version 2.10.5 or later. For instance, if you have specified a custom version of the CLI using the 'tools' input to the 'init' Action, you can remove this input to use the default version.

Alternatively, if you want to continue using a version of the CodeQL CLI between 2.9.5 and 2.10.4, you can replace github/codeql-action/*@v2 by github/codeql-action/*@v2.21.7 in your code scanning workflow to ensure you continue using this version of the CodeQL Action.

Enable the following language aliases when using CodeQL 2.14.4 and later: c-cpp for C/C++ analysis, java-kotlin for Java/Kotlin analysis, and javascript-typescript for JavaScript/TypeScript analysis. #1883

2.21.7 - 14 Sep 2023

Update default CodeQL bundle version to 2.14.5. #1882

2.21.6 - 13 Sep 2023

Better error message when there is a failure to determine the merge base of the code to analysis. #1860

Improve the calculation of default amount of RAM used for query execution on GitHub Enterprise Server. This now reduces in proportion to the runner's total memory to better account for system memory usage, helping to avoid out-of-memory failures on larger runners. This feature is already available to GitHub.com users. #1866

Enable improved file coverage information for GitHub Enterprise Server users. This feature is already available to GitHub.com users. #1867

... (truncated)

Commits

0116bc2 Merge pull request #1947 from github/update-v2.22.3-82ba90b1d
f5a984b Update changelog for v2.22.3
82ba90b Merge pull request #1945 from github/henrymercer/authenticate-api-url
34f97d7 Merge pull request #1944 from github/henrymercer/sublanguage-file-coverage-fixes
74442e0 Add changelog note
bd32fab Provide token when downloading from GHES API
b584cf8 Merge pull request #1922 from github/nora/add-commit-sha-to-database-upload
761255a Merge pull request #1943 from github/mergeback/v2.22.2-to-main-d90b8d79
346d5c4 Test sub-language file coverage in file baseline information check
5950d13 Enable sub-language file coverage in interpret-results too
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.21.9 to 2.22.3. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@ddccb87...0116bc2) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2023-10-13T17:12:19Z

👋 Thanks for contributing to Viper! You are awesome! 🎉

A maintainer will take a look at your pull request shortly. 👀

In the meantime: We are working on Viper v2 and we would love to hear your thoughts about what you like or don't like about Viper, so we can improve or fix those issues.

⏰ If you have a couple minutes, please take some time and share your thoughts: https://forms.gle/R6faU74qPRPAzchZ9

📣 If you've already given us your feedback, you can still help by spreading the news,
either by sharing the above link or telling people about this on Twitter:

https://twitter.com/sagikazarmark/status/1306904078967074816

Thank you! ❤️

[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/spf13/viper](https://togithub.com/spf13/viper) | require | minor | `v1.17.0` -> `v1.18.0` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>spf13/viper (github.com/spf13/viper)</summary> ### [`v1.18.0`](https://togithub.com/spf13/viper/releases/tag/v1.18.0) [Compare Source](https://togithub.com/spf13/viper/compare/v1.17.0...v1.18.0) #### Major changes Highlighting some of the changes for better visibility. Please share your feedback in the Discussion forum. Thanks! ❤️ ##### `AutomaticEnv` works with `Unmarshal` Previously, environment variables that weren't bound manually or had no defaults could not be mapped by `Unmarshal`. (The problem is explained in details in this issue: [#761](https://togithub.com/spf13/viper/issues/761)) [#1429](https://togithub.com/spf13/viper/issues/1429) introduced a solution that solves that issue. #### What's Changed ##### Enhancements 🚀 - chore: rename files according to enabled build tags by [@alexandear](https://togithub.com/alexandear) in [https://github.com/spf13/viper/pull/1642](https://togithub.com/spf13/viper/pull/1642) - test: replace ifs with asserts to simplify tests by [@alexandear](https://togithub.com/alexandear) in [https://github.com/spf13/viper/pull/1656](https://togithub.com/spf13/viper/pull/1656) - ci: enable test shuffle and fix tests by [@alexandear](https://togithub.com/alexandear) in [https://github.com/spf13/viper/pull/1643](https://togithub.com/spf13/viper/pull/1643) - fix: gocritic lint issues by [@alexandear](https://togithub.com/alexandear) in [https://github.com/spf13/viper/pull/1696](https://togithub.com/spf13/viper/pull/1696) ##### Bug Fixes 🐛 - Implement viper.BindStruct for automatic unmarshalling from environment variables by [@krakowski](https://togithub.com/krakowski) in [https://github.com/spf13/viper/pull/1429](https://togithub.com/spf13/viper/pull/1429) - fix isPathShadowedInFlatMap type cast bug by [@linuxsong](https://togithub.com/linuxsong) in [https://github.com/spf13/viper/pull/1585](https://togithub.com/spf13/viper/pull/1585) ##### Dependency Updates ⬆️ - build(deps): bump github/codeql-action from 2.21.9 to 2.22.3 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/spf13/viper/pull/1661](https://togithub.com/spf13/viper/pull/1661) - build(deps): bump golang.org/x/net from 0.15.0 to 0.17.0 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/spf13/viper/pull/1659](https://togithub.com/spf13/viper/pull/1659) - build(deps): bump actions/checkout from 4.1.0 to 4.1.1 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/spf13/viper/pull/1663](https://togithub.com/spf13/viper/pull/1663) - build(deps): bump actions/github-script from 6.4.1 to 7.0.1 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/spf13/viper/pull/1686](https://togithub.com/spf13/viper/pull/1686) - build(deps): bump github/codeql-action from 2.22.3 to 2.22.8 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/spf13/viper/pull/1688](https://togithub.com/spf13/viper/pull/1688) - build(deps): bump github.com/spf13/afero from 1.10.0 to 1.11.0 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/spf13/viper/pull/1692](https://togithub.com/spf13/viper/pull/1692) - build(deps): bump actions/dependency-review-action from 3.1.0 to 3.1.4 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/spf13/viper/pull/1690](https://togithub.com/spf13/viper/pull/1690) - build(deps): bump cachix/install-nix-action from 23 to 24 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/spf13/viper/pull/1689](https://togithub.com/spf13/viper/pull/1689) - build(deps): bump github.com/nats-io/nkeys from 0.4.5 to 0.4.6 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/spf13/viper/pull/1672](https://togithub.com/spf13/viper/pull/1672) - build(deps): bump github.com/spf13/cast from 1.5.1 to 1.6.0 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/spf13/viper/pull/1691](https://togithub.com/spf13/viper/pull/1691) - build(deps): bump github.com/fsnotify/fsnotify from 1.6.0 to 1.7.0 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/spf13/viper/pull/1668](https://togithub.com/spf13/viper/pull/1668) - chore: update dependencies by [@sagikazarmark](https://togithub.com/sagikazarmark) in [https://github.com/spf13/viper/pull/1694](https://togithub.com/spf13/viper/pull/1694) - chore: update crypt by [@sagikazarmark](https://togithub.com/sagikazarmark) in [https://github.com/spf13/viper/pull/1701](https://togithub.com/spf13/viper/pull/1701) ##### Other Changes - Add info about multiple hosts for remote config by [@KaymeKaydex](https://togithub.com/KaymeKaydex) in [https://github.com/spf13/viper/pull/1684](https://togithub.com/spf13/viper/pull/1684) - refactor: drop fsonitfy wrapper by [@sagikazarmark](https://togithub.com/sagikazarmark) in [https://github.com/spf13/viper/pull/1693](https://togithub.com/spf13/viper/pull/1693) - Note Get\* behavior on parse failure by [@scop](https://togithub.com/scop) in [https://github.com/spf13/viper/pull/1687](https://togithub.com/spf13/viper/pull/1687) - fix: godot lint issues by [@alexandear](https://togithub.com/alexandear) in [https://github.com/spf13/viper/pull/1657](https://togithub.com/spf13/viper/pull/1657) #### New Contributors - [@KaymeKaydex](https://togithub.com/KaymeKaydex) made their first contribution in [https://github.com/spf13/viper/pull/1684](https://togithub.com/spf13/viper/pull/1684) - [@krakowski](https://togithub.com/krakowski) made their first contribution in [https://github.com/spf13/viper/pull/1429](https://togithub.com/spf13/viper/pull/1429) - [@linuxsong](https://togithub.com/linuxsong) made their first contribution in [https://github.com/spf13/viper/pull/1585](https://togithub.com/spf13/viper/pull/1585) **Full Changelog**: spf13/viper@v1.17.0...v1.18.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - "every weekday,after 9am and before 5pm" in timezone America/Los_Angeles, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/trussworks/setup-new-aws-user).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/spf13/viper](https://togithub.com/spf13/viper) | require | minor | `v1.17.0` -> `v1.18.0` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>spf13/viper (github.com/spf13/viper)</summary> ### [`v1.18.0`](https://togithub.com/spf13/viper/releases/tag/v1.18.0) [Compare Source](https://togithub.com/spf13/viper/compare/v1.17.0...v1.18.0) #### Major changes Highlighting some of the changes for better visibility. Please share your feedback in the Discussion forum. Thanks! ❤️ ##### `AutomaticEnv` works with `Unmarshal` Previously, environment variables that weren't bound manually or had no defaults could not be mapped by `Unmarshal`. (The problem is explained in details in this issue: [#761](https://togithub.com/spf13/viper/issues/761)) [#1429](https://togithub.com/spf13/viper/issues/1429) introduced a solution that solves that issue. #### What's Changed ##### Enhancements 🚀 - chore: rename files according to enabled build tags by [@alexandear](https://togithub.com/alexandear) in [https://github.com/spf13/viper/pull/1642](https://togithub.com/spf13/viper/pull/1642) - test: replace ifs with asserts to simplify tests by [@alexandear](https://togithub.com/alexandear) in [https://github.com/spf13/viper/pull/1656](https://togithub.com/spf13/viper/pull/1656) - ci: enable test shuffle and fix tests by [@alexandear](https://togithub.com/alexandear) in [https://github.com/spf13/viper/pull/1643](https://togithub.com/spf13/viper/pull/1643) - fix: gocritic lint issues by [@alexandear](https://togithub.com/alexandear) in [https://github.com/spf13/viper/pull/1696](https://togithub.com/spf13/viper/pull/1696) ##### Bug Fixes 🐛 - Implement viper.BindStruct for automatic unmarshalling from environment variables by [@krakowski](https://togithub.com/krakowski) in [https://github.com/spf13/viper/pull/1429](https://togithub.com/spf13/viper/pull/1429) - fix isPathShadowedInFlatMap type cast bug by [@linuxsong](https://togithub.com/linuxsong) in [https://github.com/spf13/viper/pull/1585](https://togithub.com/spf13/viper/pull/1585) ##### Dependency Updates ⬆️ - build(deps): bump github/codeql-action from 2.21.9 to 2.22.3 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/spf13/viper/pull/1661](https://togithub.com/spf13/viper/pull/1661) - build(deps): bump golang.org/x/net from 0.15.0 to 0.17.0 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/spf13/viper/pull/1659](https://togithub.com/spf13/viper/pull/1659) - build(deps): bump actions/checkout from 4.1.0 to 4.1.1 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/spf13/viper/pull/1663](https://togithub.com/spf13/viper/pull/1663) - build(deps): bump actions/github-script from 6.4.1 to 7.0.1 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/spf13/viper/pull/1686](https://togithub.com/spf13/viper/pull/1686) - build(deps): bump github/codeql-action from 2.22.3 to 2.22.8 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/spf13/viper/pull/1688](https://togithub.com/spf13/viper/pull/1688) - build(deps): bump github.com/spf13/afero from 1.10.0 to 1.11.0 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/spf13/viper/pull/1692](https://togithub.com/spf13/viper/pull/1692) - build(deps): bump actions/dependency-review-action from 3.1.0 to 3.1.4 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/spf13/viper/pull/1690](https://togithub.com/spf13/viper/pull/1690) - build(deps): bump cachix/install-nix-action from 23 to 24 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/spf13/viper/pull/1689](https://togithub.com/spf13/viper/pull/1689) - build(deps): bump github.com/nats-io/nkeys from 0.4.5 to 0.4.6 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/spf13/viper/pull/1672](https://togithub.com/spf13/viper/pull/1672) - build(deps): bump github.com/spf13/cast from 1.5.1 to 1.6.0 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/spf13/viper/pull/1691](https://togithub.com/spf13/viper/pull/1691) - build(deps): bump github.com/fsnotify/fsnotify from 1.6.0 to 1.7.0 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/spf13/viper/pull/1668](https://togithub.com/spf13/viper/pull/1668) - chore: update dependencies by [@sagikazarmark](https://togithub.com/sagikazarmark) in [https://github.com/spf13/viper/pull/1694](https://togithub.com/spf13/viper/pull/1694) - chore: update crypt by [@sagikazarmark](https://togithub.com/sagikazarmark) in [https://github.com/spf13/viper/pull/1701](https://togithub.com/spf13/viper/pull/1701) ##### Other Changes - Add info about multiple hosts for remote config by [@KaymeKaydex](https://togithub.com/KaymeKaydex) in [https://github.com/spf13/viper/pull/1684](https://togithub.com/spf13/viper/pull/1684) - refactor: drop fsonitfy wrapper by [@sagikazarmark](https://togithub.com/sagikazarmark) in [https://github.com/spf13/viper/pull/1693](https://togithub.com/spf13/viper/pull/1693) - Note Get\* behavior on parse failure by [@scop](https://togithub.com/scop) in [https://github.com/spf13/viper/pull/1687](https://togithub.com/spf13/viper/pull/1687) - fix: godot lint issues by [@alexandear](https://togithub.com/alexandear) in [https://github.com/spf13/viper/pull/1657](https://togithub.com/spf13/viper/pull/1657) #### New Contributors - [@KaymeKaydex](https://togithub.com/KaymeKaydex) made their first contribution in [https://github.com/spf13/viper/pull/1684](https://togithub.com/spf13/viper/pull/1684) - [@krakowski](https://togithub.com/krakowski) made their first contribution in [https://github.com/spf13/viper/pull/1429](https://togithub.com/spf13/viper/pull/1429) - [@linuxsong](https://togithub.com/linuxsong) made their first contribution in [https://github.com/spf13/viper/pull/1585](https://togithub.com/spf13/viper/pull/1585) **Full Changelog**: spf13/viper@v1.17.0...v1.18.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/open-feature/flagd).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

dependabot bot added the area/dependencies Dependency updates label Oct 13, 2023

dependabot bot mentioned this pull request Oct 13, 2023

build(deps): bump github/codeql-action from 2.21.9 to 2.22.2 #1660

Closed

sagikazarmark approved these changes Oct 14, 2023

View reviewed changes

sagikazarmark merged commit 4b59dd6 into master Oct 14, 2023
29 checks passed

sagikazarmark deleted the dependabot/github_actions/github/codeql-action-2.22.3 branch October 14, 2023 00:11

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): bump github/codeql-action from 2.21.9 to 2.22.3 #1661

build(deps): bump github/codeql-action from 2.21.9 to 2.22.3 #1661

dependabot bot commented on behalf of github Oct 13, 2023

github-actions bot commented Oct 13, 2023

build(deps): bump github/codeql-action from 2.21.9 to 2.22.3 #1661

build(deps): bump github/codeql-action from 2.21.9 to 2.22.3 #1661

Conversation

dependabot bot commented on behalf of github Oct 13, 2023

CodeQL Action Changelog

[UNRELEASED]

2.22.3 - 13 Oct 2023

2.22.2 - 12 Oct 2023

2.22.1 - 09 Oct 2023

2.22.0 - 06 Oct 2023

2.21.9 - 27 Sep 2023

2.21.8 - 19 Sep 2023

2.21.7 - 14 Sep 2023

2.21.6 - 13 Sep 2023

github-actions bot commented Oct 13, 2023