420.md (7779B)
1 # PR #420 Bump github/codeql-action from 2.1.39 to 2.2.11 2 3 - **Status:** closed 4 - **Author:** @dependabot[bot] 5 - **Created:** 2023-04-10T09:02:58Z 6 - **Branch:** dependabot/github_actions/github/codeql-action-2.2.11 → main 7 - **Closed:** 2023-04-17T09:03:51Z 8 - **Labels:** dependencies, github_actions 9 - **Assignees:** @MTRNord 10 - **Reviewers:** @MTRNord 11 - **Diff:** [420.diff](./420.diff) 12 13 --- 14 15 Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.39 to 2.2.11. 16 <details> 17 <summary>Changelog</summary> 18 <p><em>Sourced from <a href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's changelog</a>.</em></p> 19 <blockquote> 20 <h1>CodeQL Action Changelog</h1> 21 <h2>[UNRELEASED]</h2> 22 <p>No user facing changes.</p> 23 <h2>2.2.11 - 06 Apr 2023</h2> 24 <p>No user facing changes.</p> 25 <h2>2.2.10 - 05 Apr 2023</h2> 26 <ul> 27 <li>Update default CodeQL bundle version to 2.12.6. <a href="https://redirect.github.com/github/codeql-action/pull/1629">#1629</a></li> 28 </ul> 29 <h2>2.2.9 - 27 Mar 2023</h2> 30 <ul> 31 <li>Customers post-processing the SARIF output of the <code>analyze</code> Action before uploading it to Code Scanning will benefit from an improved debugging experience. <a href="https://redirect.github.com/github/codeql-action/pull/1598">#1598</a> 32 <ul> 33 <li>The CodeQL Action will now upload a SARIF file with debugging information to Code Scanning on failed runs for customers using <code>upload: false</code>. Previously, this was only available for customers using the default value of the <code>upload</code> input.</li> 34 <li>The <code>upload</code> input to the <code>analyze</code> Action now accepts the following values: 35 <ul> 36 <li><code>always</code> is the default value, which uploads the SARIF file to Code Scanning for successful and failed runs.</li> 37 <li><code>failure-only</code> is recommended for customers post-processing the SARIF file before uploading it to Code Scanning. This option uploads debugging information to Code Scanning for failed runs to improve the debugging experience.</li> 38 <li><code>never</code> avoids uploading the SARIF file to Code Scanning even if the code scanning run fails. This is not recommended for external users since it complicates debugging.</li> 39 <li>The legacy <code>true</code> and <code>false</code> options will be interpreted as <code>always</code> and <code>failure-only</code> respectively.</li> 40 </ul> 41 </li> 42 </ul> 43 </li> 44 </ul> 45 <h2>2.2.8 - 22 Mar 2023</h2> 46 <ul> 47 <li>Update default CodeQL bundle version to 2.12.5. <a href="https://redirect.github.com/github/codeql-action/pull/1585">#1585</a></li> 48 </ul> 49 <h2>2.2.7 - 15 Mar 2023</h2> 50 <p>No user facing changes.</p> 51 <h2>2.2.6 - 10 Mar 2023</h2> 52 <ul> 53 <li>Update default CodeQL bundle version to 2.12.4. <a href="https://redirect.github.com/github/codeql-action/pull/1561">#1561</a></li> 54 </ul> 55 <h2>2.2.5 - 24 Feb 2023</h2> 56 <ul> 57 <li>Update default CodeQL bundle version to 2.12.3. <a href="https://redirect.github.com/github/codeql-action/pull/1543">#1543</a></li> 58 </ul> 59 <h2>2.2.4 - 10 Feb 2023</h2> 60 <p>No user facing changes.</p> 61 <h2>2.2.3 - 08 Feb 2023</h2> 62 <ul> 63 <li>Update default CodeQL bundle version to 2.12.2. <a href="https://redirect.github.com/github/codeql-action/pull/1518">#1518</a></li> 64 </ul> 65 <h2>2.2.2 - 06 Feb 2023</h2> 66 <!-- raw HTML omitted --> 67 </blockquote> 68 <p>... (truncated)</p> 69 </details> 70 <details> 71 <summary>Commits</summary> 72 <ul> 73 <li><a href="https://github.com/github/codeql-action/commit/d186a2a36cc67bfa1b860e6170d37fb9634742c7"><code>d186a2a</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/1638">#1638</a> from github/update-v2.2.11-518b24fea</li> 74 <li><a href="https://github.com/github/codeql-action/commit/748f83eaabb67135a415fbeb7b80093a6e103783"><code>748f83e</code></a> Update changelog for v2.2.11</li> 75 <li><a href="https://github.com/github/codeql-action/commit/518b24fea4ba18fbafa1f2be06c594583a0966a8"><code>518b24f</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/1637">#1637</a> from github/henrymercer/fix-init-exception-reporting</li> 76 <li><a href="https://github.com/github/codeql-action/commit/69371ffa95d3dcf49f2d7bc36280b9d65d72fdb9"><code>69371ff</code></a> Merge branch 'main' into henrymercer/fix-init-exception-reporting</li> 77 <li><a href="https://github.com/github/codeql-action/commit/e5c2f32a9f6386408594e3d45f14f4f8e2df4d42"><code>e5c2f32</code></a> Consistently wrap errors</li> 78 <li><a href="https://github.com/github/codeql-action/commit/c28edf06a1d03b8250e56cb8ce4f947a55193f06"><code>c28edf0</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/1636">#1636</a> from github/henrymercer/re-enable-duplicate-sarif-wo...</li> 79 <li><a href="https://github.com/github/codeql-action/commit/555b602b2f924c3419b1eec61ad4dd717756318e"><code>555b602</code></a> Report exceptions to telemetry in init Action</li> 80 <li><a href="https://github.com/github/codeql-action/commit/7193623f40b19441a4b970ec34d09a1130440dbb"><code>7193623</code></a> Re-enable duplicate SARIF notification location workaround</li> 81 <li><a href="https://github.com/github/codeql-action/commit/f32426ba96560beecf71186b24134fb3f613f377"><code>f32426b</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/1635">#1635</a> from github/mergeback/v2.2.10-to-main-8c8d71dd</li> 82 <li><a href="https://github.com/github/codeql-action/commit/173a94ca3f87f2a4aa454c2f4165dd5b375edeb5"><code>173a94c</code></a> Update checked-in dependencies</li> 83 <li>Additional commits viewable in <a href="https://github.com/github/codeql-action/compare/a34ca99b4610d924e04c68db79e503e1f79f9f02...d186a2a36cc67bfa1b860e6170d37fb9634742c7">compare view</a></li> 84 </ul> 85 </details> 86 <br /> 87 88 89 [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) 90 91 Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. 92 93 [//]: # (dependabot-automerge-start) 94 [//]: # (dependabot-automerge-end) 95 96 --- 97 98 <details> 99 <summary>Dependabot commands and options</summary> 100 <br /> 101 102 You can trigger Dependabot actions by commenting on this PR: 103 - `@dependabot rebase` will rebase this PR 104 - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it 105 - `@dependabot merge` will merge this PR after your CI passes on it 106 - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it 107 - `@dependabot cancel merge` will cancel a previously requested merge and block automerging 108 - `@dependabot reopen` will reopen this PR if it is closed 109 - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually 110 - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) 111 - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) 112 - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) 113 114 115 </details> 116 117 <!-- Replace --> 118 ---- 119 ⌛ Deploy Preview - Build in Progress 120 <!-- Replace --> 121 122 123 124 ## Comments 125 126 ### @dependabot[bot] — 2023-04-17T09:03:50Z 127 128 Superseded by #433. 129