11.md (7852B)
1 # PR #11 Bump github/codeql-action from 1.0.26 to 1.0.28 2 3 - **Status:** merged 4 - **Author:** @dependabot[bot] 5 - **Created:** 2022-01-20T19:13:40Z 6 - **Branch:** dependabot/github_actions/github/codeql-action-1.0.28 → main 7 - **Merged:** 2022-01-20T19:23:25Z 8 - **Labels:** dependencies, github_actions 9 - **Diff:** [11.diff](./11.diff) 10 11 --- 12 13 Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1.0.26 to 1.0.28. 14 <details> 15 <summary>Changelog</summary> 16 <p><em>Sourced from <a href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's changelog</a>.</em></p> 17 <blockquote> 18 <h1>CodeQL Action and CodeQL Runner Changelog</h1> 19 <h2>[UNRELEASED]</h2> 20 <p>No user facing changes.</p> 21 <h2>1.0.28 - 18 Jan 2022</h2> 22 <ul> 23 <li>Update default CodeQL bundle version to 2.7.5. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/866">#866</a></li> 24 <li>Fix a bug where SARIF files were failing upload due to an invalid test for unique categories. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/872">#872</a></li> 25 </ul> 26 <h2>1.0.27 - 11 Jan 2022</h2> 27 <ul> 28 <li>The <code>analyze</code> and <code>upload-sarif</code> actions will now wait up to 2 minutes for processing to complete after they have uploaded the results so they can report any processing errors that occurred. This behavior can be disabled by setting the <code>wait-for-processing</code> action input to <code>"false"</code>.</li> 29 </ul> 30 <h2>1.0.26 - 10 Dec 2021</h2> 31 <ul> 32 <li>Update default CodeQL bundle version to 2.7.3. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/842">#842</a></li> 33 </ul> 34 <h2>1.0.25 - 06 Dec 2021</h2> 35 <p>No user facing changes.</p> 36 <h2>1.0.24 - 23 Nov 2021</h2> 37 <ul> 38 <li>Update default CodeQL bundle version to 2.7.2. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/827">#827</a></li> 39 </ul> 40 <h2>1.0.23 - 16 Nov 2021</h2> 41 <ul> 42 <li>The <code>upload-sarif</code> action now allows multiple uploads in a single job, as long as they have different categories. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/801">#801</a></li> 43 <li>Update default CodeQL bundle version to 2.7.1. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/816">#816</a></li> 44 </ul> 45 <h2>1.0.22 - 04 Nov 2021</h2> 46 <ul> 47 <li>The <code>init</code> step of the Action now supports <code>ram</code> and <code>threads</code> inputs to limit resource use of CodeQL extractors. These inputs also serve as defaults to the subsequent <code>analyze</code> step, which finalizes the database and executes queries. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/738">#738</a></li> 48 <li>When used with CodeQL 2.7.1 or above, the Action now includes custom query help in the analysis results uploaded to GitHub code scanning, if available. To add help text for a custom query, create a Markdown file next to the <code>.ql</code> file containing the query, using the same base name but the file extension <code>.md</code>. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/804">#804</a></li> 49 </ul> 50 <h2>1.0.21 - 28 Oct 2021</h2> 51 <ul> 52 <li>Update default CodeQL bundle version to 2.7.0. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/795">#795</a></li> 53 </ul> 54 <h2>1.0.20 - 25 Oct 2021</h2> 55 <p>No user facing changes.</p> 56 <h2>1.0.19 - 18 Oct 2021</h2> 57 <p>No user facing changes.</p> 58 <h2>1.0.18 - 08 Oct 2021</h2> 59 <!-- raw HTML omitted --> 60 </blockquote> 61 <p>... (truncated)</p> 62 </details> 63 <details> 64 <summary>Commits</summary> 65 <ul> 66 <li><a href="https://github.com/github/codeql-action/commit/8a4b243fbf9a03a93e93a71c1ec257347041f9c4"><code>8a4b243</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/github/codeql-action/issues/874">#874</a> from github/update-v1.0.28-b31df3ff</li> 67 <li><a href="https://github.com/github/codeql-action/commit/19970ae6b5db9890adc5f73914262c35d2b31b03"><code>19970ae</code></a> Update changelog</li> 68 <li><a href="https://github.com/github/codeql-action/commit/ec1b16574e9137b0e2f1a1008923b9d7329dc3c0"><code>ec1b165</code></a> 1.0.28</li> 69 <li><a href="https://github.com/github/codeql-action/commit/b31df3ff95d309b347219707e1a7514e46b4cc99"><code>b31df3f</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/github/codeql-action/issues/866">#866</a> from github/hmakholm/pr/2.7.5</li> 70 <li><a href="https://github.com/github/codeql-action/commit/776db51d2eab21ecc9fc51b15d1ab3034ca6fd21"><code>776db51</code></a> Merge remote-tracking branch 'origin/main' into hmakholm/pr/2.7.5</li> 71 <li><a href="https://github.com/github/codeql-action/commit/b8862346379d0d782f562a049f7a91f6db053a55"><code>b886234</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/github/codeql-action/issues/872">#872</a> from github/aeisenberg/category-with-tool</li> 72 <li><a href="https://github.com/github/codeql-action/commit/9913c9bfa54c03ad58ebe8ab57f887307491a691"><code>9913c9b</code></a> Merge remote-tracking branch 'origin/main' into hmakholm/pr/2.7.5</li> 73 <li><a href="https://github.com/github/codeql-action/commit/8de62beb507f9b58cb49fdeffe9507b7e9e8ac6a"><code>8de62be</code></a> Merge branch 'main' into aeisenberg/category-with-tool</li> 74 <li><a href="https://github.com/github/codeql-action/commit/b6fbccaba1a76c1884bd978e119bf5aa7479d866"><code>b6fbcca</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/github/codeql-action/issues/873">#873</a> from github/nickrolfe/ruby</li> 75 <li><a href="https://github.com/github/codeql-action/commit/df0c306daf3b5bd4fe564fb7c4e5ab259b944627"><code>df0c306</code></a> Update warning about interpreted languages to mention Ruby</li> 76 <li>Additional commits viewable in <a href="https://github.com/github/codeql-action/compare/5f532563584d71fdef14ee64d17bafb34f751ce5...8a4b243fbf9a03a93e93a71c1ec257347041f9c4">compare view</a></li> 77 </ul> 78 </details> 79 <br /> 80 81 82 [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) 83 84 Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. 85 86 [//]: # (dependabot-automerge-start) 87 [//]: # (dependabot-automerge-end) 88 89 --- 90 91 <details> 92 <summary>Dependabot commands and options</summary> 93 <br /> 94 95 You can trigger Dependabot actions by commenting on this PR: 96 - `@dependabot rebase` will rebase this PR 97 - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it 98 - `@dependabot merge` will merge this PR after your CI passes on it 99 - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it 100 - `@dependabot cancel merge` will cancel a previously requested merge and block automerging 101 - `@dependabot reopen` will reopen this PR if it is closed 102 - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually 103 - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) 104 - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) 105 - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) 106 107 108 </details> 109