11.json (8190B)
1 { 2 "number": 11, 3 "title": "Bump github/codeql-action from 1.0.26 to 1.0.28", 4 "state": "merged", 5 "diff_file": "11.diff", 6 "author": "dependabot[bot]", 7 "created_at": "2022-01-20T19:13:40Z", 8 "closed_at": "2022-01-20T19:23:26Z", 9 "merged_at": "2022-01-20T19:23:25Z", 10 "base_ref": "main", 11 "head_ref": "dependabot/github_actions/github/codeql-action-1.0.28", 12 "labels": [ 13 "dependencies", 14 "github_actions" 15 ], 16 "assignees": [], 17 "requested_reviewers": [], 18 "body": "Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1.0.26 to 1.0.28.\n<details>\n<summary>Changelog</summary>\n<p><em>Sourced from <a href=\"https://github.com/github/codeql-action/blob/main/CHANGELOG.md\">github/codeql-action's changelog</a>.</em></p>\n<blockquote>\n<h1>CodeQL Action and CodeQL Runner Changelog</h1>\n<h2>[UNRELEASED]</h2>\n<p>No user facing changes.</p>\n<h2>1.0.28 - 18 Jan 2022</h2>\n<ul>\n<li>Update default CodeQL bundle version to 2.7.5. <a href=\"https://github-redirect.dependabot.com/github/codeql-action/pull/866\">#866</a></li>\n<li>Fix a bug where SARIF files were failing upload due to an invalid test for unique categories. <a href=\"https://github-redirect.dependabot.com/github/codeql-action/pull/872\">#872</a></li>\n</ul>\n<h2>1.0.27 - 11 Jan 2022</h2>\n<ul>\n<li>The <code>analyze</code> and <code>upload-sarif</code> actions will now wait up to 2 minutes for processing to complete after they have uploaded the results so they can report any processing errors that occurred. This behavior can be disabled by setting the <code>wait-for-processing</code> action input to <code>"false"</code>.</li>\n</ul>\n<h2>1.0.26 - 10 Dec 2021</h2>\n<ul>\n<li>Update default CodeQL bundle version to 2.7.3. <a href=\"https://github-redirect.dependabot.com/github/codeql-action/pull/842\">#842</a></li>\n</ul>\n<h2>1.0.25 - 06 Dec 2021</h2>\n<p>No user facing changes.</p>\n<h2>1.0.24 - 23 Nov 2021</h2>\n<ul>\n<li>Update default CodeQL bundle version to 2.7.2. <a href=\"https://github-redirect.dependabot.com/github/codeql-action/pull/827\">#827</a></li>\n</ul>\n<h2>1.0.23 - 16 Nov 2021</h2>\n<ul>\n<li>The <code>upload-sarif</code> action now allows multiple uploads in a single job, as long as they have different categories. <a href=\"https://github-redirect.dependabot.com/github/codeql-action/pull/801\">#801</a></li>\n<li>Update default CodeQL bundle version to 2.7.1. <a href=\"https://github-redirect.dependabot.com/github/codeql-action/pull/816\">#816</a></li>\n</ul>\n<h2>1.0.22 - 04 Nov 2021</h2>\n<ul>\n<li>The <code>init</code> step of the Action now supports <code>ram</code> and <code>threads</code> inputs to limit resource use of CodeQL extractors. These inputs also serve as defaults to the subsequent <code>analyze</code> step, which finalizes the database and executes queries. <a href=\"https://github-redirect.dependabot.com/github/codeql-action/pull/738\">#738</a></li>\n<li>When used with CodeQL 2.7.1 or above, the Action now includes custom query help in the analysis results uploaded to GitHub code scanning, if available. To add help text for a custom query, create a Markdown file next to the <code>.ql</code> file containing the query, using the same base name but the file extension <code>.md</code>. <a href=\"https://github-redirect.dependabot.com/github/codeql-action/pull/804\">#804</a></li>\n</ul>\n<h2>1.0.21 - 28 Oct 2021</h2>\n<ul>\n<li>Update default CodeQL bundle version to 2.7.0. <a href=\"https://github-redirect.dependabot.com/github/codeql-action/pull/795\">#795</a></li>\n</ul>\n<h2>1.0.20 - 25 Oct 2021</h2>\n<p>No user facing changes.</p>\n<h2>1.0.19 - 18 Oct 2021</h2>\n<p>No user facing changes.</p>\n<h2>1.0.18 - 08 Oct 2021</h2>\n<!-- raw HTML omitted -->\n</blockquote>\n<p>... (truncated)</p>\n</details>\n<details>\n<summary>Commits</summary>\n<ul>\n<li><a href=\"https://github.com/github/codeql-action/commit/8a4b243fbf9a03a93e93a71c1ec257347041f9c4\"><code>8a4b243</code></a> Merge pull request <a href=\"https://github-redirect.dependabot.com/github/codeql-action/issues/874\">#874</a> from github/update-v1.0.28-b31df3ff</li>\n<li><a href=\"https://github.com/github/codeql-action/commit/19970ae6b5db9890adc5f73914262c35d2b31b03\"><code>19970ae</code></a> Update changelog</li>\n<li><a href=\"https://github.com/github/codeql-action/commit/ec1b16574e9137b0e2f1a1008923b9d7329dc3c0\"><code>ec1b165</code></a> 1.0.28</li>\n<li><a href=\"https://github.com/github/codeql-action/commit/b31df3ff95d309b347219707e1a7514e46b4cc99\"><code>b31df3f</code></a> Merge pull request <a href=\"https://github-redirect.dependabot.com/github/codeql-action/issues/866\">#866</a> from github/hmakholm/pr/2.7.5</li>\n<li><a href=\"https://github.com/github/codeql-action/commit/776db51d2eab21ecc9fc51b15d1ab3034ca6fd21\"><code>776db51</code></a> Merge remote-tracking branch 'origin/main' into hmakholm/pr/2.7.5</li>\n<li><a href=\"https://github.com/github/codeql-action/commit/b8862346379d0d782f562a049f7a91f6db053a55\"><code>b886234</code></a> Merge pull request <a href=\"https://github-redirect.dependabot.com/github/codeql-action/issues/872\">#872</a> from github/aeisenberg/category-with-tool</li>\n<li><a href=\"https://github.com/github/codeql-action/commit/9913c9bfa54c03ad58ebe8ab57f887307491a691\"><code>9913c9b</code></a> Merge remote-tracking branch 'origin/main' into hmakholm/pr/2.7.5</li>\n<li><a href=\"https://github.com/github/codeql-action/commit/8de62beb507f9b58cb49fdeffe9507b7e9e8ac6a\"><code>8de62be</code></a> Merge branch 'main' into aeisenberg/category-with-tool</li>\n<li><a href=\"https://github.com/github/codeql-action/commit/b6fbccaba1a76c1884bd978e119bf5aa7479d866\"><code>b6fbcca</code></a> Merge pull request <a href=\"https://github-redirect.dependabot.com/github/codeql-action/issues/873\">#873</a> from github/nickrolfe/ruby</li>\n<li><a href=\"https://github.com/github/codeql-action/commit/df0c306daf3b5bd4fe564fb7c4e5ab259b944627\"><code>df0c306</code></a> Update warning about interpreted languages to mention Ruby</li>\n<li>Additional commits viewable in <a href=\"https://github.com/github/codeql-action/compare/5f532563584d71fdef14ee64d17bafb34f751ce5...8a4b243fbf9a03a93e93a71c1ec257347041f9c4\">compare view</a></li>\n</ul>\n</details>\n<br />\n\n\n[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n</details>", 19 "comments": [], 20 "review_comments": [] 21 }