Merge releases/v4 into releases/v3 by github-actions[bot] · Pull Request #3338 · github/codeql-action

github-actions · 2025-12-01T09:53:36Z

Merging fe4161a into releases/v3.

Conductor for this PR is @mbg.

Contains the following pull requests:

Please do the following:

Ensure the CHANGELOG displays the correct version and date.
Ensure the CHANGELOG includes all relevant, user-facing changes since the last release.
Check that there are not any unexpected commits being merged into the releases/v3 branch.
Ensure the docs team is aware of any documentation changes that need to be released.
Remove and re-add the "Rebuild" label to the PR to trigger just this workflow.
Wait for the "Rebuild" workflow to push a commit updating the distribution files.
Mark the PR as ready for review to trigger the full set of PR checks.
Approve and merge this PR. Make sure Create a merge commit is selected rather than Squash and merge or Rebase and merge.

And also clean it up.

Mergeback v4.31.5 refs/heads/releases/v4 into main

Bumps the npm-minor group with 3 updates: [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin), [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) and [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc). Updates `@typescript-eslint/eslint-plugin` from 8.46.4 to 8.48.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.48.0/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 8.46.4 to 8.48.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.48.0/packages/parser) Updates `eslint-plugin-jsdoc` from 61.2.1 to 61.4.1 - [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases) - [Changelog](https://github.com/gajus/eslint-plugin-jsdoc/blob/main/.releaserc) - [Commits](gajus/eslint-plugin-jsdoc@v61.2.1...v61.4.1) --- updated-dependencies: - dependency-name: "@typescript-eslint/eslint-plugin" dependency-version: 8.48.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor - dependency-name: "@typescript-eslint/parser" dependency-version: 8.48.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor - dependency-name: eslint-plugin-jsdoc dependency-version: 61.4.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps the actions-minor group with 1 update in the /.github/workflows directory: [actions/create-github-app-token](https://github.com/actions/create-github-app-token). Updates `actions/create-github-app-token` from 2.1.4 to 2.2.0 - [Release notes](https://github.com/actions/create-github-app-token/releases) - [Commits](actions/create-github-app-token@v2.1.4...v2.2.0) --- updated-dependencies: - dependency-name: actions/create-github-app-token dependency-version: 2.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-minor ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 6. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v5...v6) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

…thub/workflows/actions/checkout-6 Bump actions/checkout from 5 to 6 in /.github/workflows

…thub/workflows/actions-minor-8ee81fe642 Bump actions/create-github-app-token from 2.1.4 to 2.2.0 in /.github/workflows in the actions-minor group across 1 directory

…er-versions Update supported GitHub Enterprise Server versions

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

…rn/npm-minor-45ea8d913b

…r-45ea8d913b Bump the npm-minor group with 3 updates

Remove `push` triggers from workflow collections

C#: Cache temporary dependency directory for BMN

Bumps [node-forge](https://github.com/digitalbazaar/forge) from 1.3.1 to 1.3.2. - [Changelog](https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md) - [Commits](digitalbazaar/forge@v1.3.1...v1.3.2) --- updated-dependencies: - dependency-name: node-forge dependency-version: 1.3.2 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

…cks-option Overlay: Add feature flag to skip resource checks

Overlay: Small code improvements

Remove branch filter for PR event in CodeQL workflow

Merge main into releases/v4

This reverts commit 2e2a1cf.

This reverts commit c12d7c1.

….6-fe4161a26

github-actions · 2025-12-01T09:59:39Z

Pushed a commit to rebuild the Action. Please mark the PR as ready for review to trigger PR checks.

Copilot

Pull request overview

This PR merges changes from releases/v4 into releases/v3, bringing version 3.31.6 to the v3 release branch. The release contains internal improvements without user-facing changes.

Key changes:

Version bump to 3.31.6
Dependency updates (node-forge, TypeScript ESLint packages, eslint-plugin-jsdoc)
Internal feature additions for C# caching and overlay analysis resource checks
Updates to GitHub Actions workflows (actions/checkout v5→v6, actions/create-github-app-token v2.1.4→v2.2.0)

Reviewed changes

Copilot reviewed 103 out of 104 changed files in this pull request and generated 7 comments.

File	Description
CHANGELOG.md	Added version 3.31.6 entry with date and no user facing changes note
package.json	Updated version to 3.31.6 and dependencies (node-forge, eslint packages)

lib/resolve-environment-action.js

lib/autobuild-action.js

lib/analyze-action.js

lib/setup-codeql-action.js

lib/upload-lib.js

lib/upload-sarif-action.js

lib/start-proxy-action.js

mbg and others added 30 commits November 13, 2025 13:40

Refactor C# cache content paths into a function

cf8b7a6

Pass FeatureEnablement to getDependencyPaths

d854ba6

Add FF for extra C# cache contents

a47d04c

Include getCsharpTempDependencyDir in C# caches if FF is enabled

ecaa6db

Configure temp dependency dir for C# extractor when FF is enabled

f5f9571

And also clean it up.

Update changelog and version after v4.31.5

29e11fd

Rebuild

4783501

Merge pull request #3323 from github/mergeback/v4.31.5-to-main-fdbfb4d2

52f930e

Mergeback v4.31.5 refs/heads/releases/v4 into main

Rebuild

5142791

Rebuild

8484f54

Merge pull request #3327 from github/dependabot/github_actions/dot-gi…

62e9052

…thub/workflows/actions/checkout-6 Bump actions/checkout from 5 to 6 in /.github/workflows

Merge pull request #3326 from github/dependabot/github_actions/dot-gi…

0e52774

…thub/workflows/actions-minor-8ee81fe642 Bump actions/create-github-app-token from 2.1.4 to 2.2.0 in /.github/workflows in the actions-minor group across 1 directory

Update supported GitHub Enterprise Server versions

6b7e963

Merge branch 'main' into mbg/csharp/more-cache-locations

0155561

Merge pull request #3328 from github/update-supported-enterprise-serv…

99d80b4

…er-versions Update supported GitHub Enterprise Server versions

Update version in package.json too

d8e497a

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Merge remote-tracking branch 'origin/main' into dependabot/npm_and_ya…

85fd3e5

…rn/npm-minor-45ea8d913b

Rebuild

510d25f

Remove push triggers from workflow collections

a690945

Merge pull request #3325 from github/dependabot/npm_and_yarn/npm-mino…

c370017

…r-45ea8d913b Bump the npm-minor group with 3 updates

Merge pull request #3330 from github/mbg/ci/remove-push-from-groups

7850b1c

Remove `push` triggers from workflow collections

Merge branch 'main' into mbg/csharp/more-cache-locations

3e93966

Merge pull request #3286 from github/mbg/csharp/more-cache-locations

59ce4c1

C#: Cache temporary dependency directory for BMN

Rebuild

4822f93

Simplify getOverlayDatabaseMode

bd30e75

Overlay: Fall back to full analysis if memory flag is low

bd8d26b

kaspersv and others added 13 commits November 27, 2025 15:56

Add comment to runnerSupportsOverlayAnalysis

58c5954

Merge branch 'main' into kaspersv/overlay-no-resource-checks-option

f036b1c

Merge pull request #3333 from github/kaspersv/overlay-no-resource-che…

75b2f49

…cks-option Overlay: Add feature flag to skip resource checks

Merge branch 'main' into kaspersv/overlay-minor-comments

32ada5e

Remove branch filter for PR event in CodeQL workflow

f7abc74

Merge pull request #3334 from github/kaspersv/overlay-minor-comments

23da732

Overlay: Small code improvements

Merge pull request #3335 from github/mbg/ci/run-codeql-on-all-prs

ecec1f8

Remove branch filter for PR event in CodeQL workflow

Update changelog for v4.31.6

88c2ab5

Merge pull request #3336 from github/update-v4.31.6-ecec1f887

fe4161a

Merge main into releases/v4

Revert "Update version and changelog for v3.31.5"

249860e

This reverts commit 2e2a1cf.

Revert "Rebuild"

e439418

This reverts commit c12d7c1.

Merge remote-tracking branch 'origin/releases/v4' into backport-v3.31…

5af51f4

….6-fe4161a26

Update version and changelog for v3.31.6

dbf6819

github-actions bot added the Rebuild Re-transpile JS & re-generate workflows label Dec 1, 2025

github-actions bot assigned mbg Dec 1, 2025

github-actions bot added the size/L May be hard to review label Dec 1, 2025

mbg added Rebuild Re-transpile JS & re-generate workflows and removed Rebuild Re-transpile JS & re-generate workflows labels Dec 1, 2025

github-actions bot removed the Rebuild Re-transpile JS & re-generate workflows label Dec 1, 2025

Rebuild

89cb79a

mbg marked this pull request as ready for review December 1, 2025 09:59

mbg requested a review from a team as a code owner December 1, 2025 10:00

Copilot AI review requested due to automatic review settings December 1, 2025 10:00

Copilot started reviewing on behalf of mbg December 1, 2025 10:00 View session

mbg approved these changes Dec 1, 2025

View reviewed changes

Copilot finished reviewing on behalf of mbg December 1, 2025 10:01

Copilot AI reviewed Dec 1, 2025

View reviewed changes

mbg merged commit 497990d into releases/v3 Dec 1, 2025
245 checks passed

mbg deleted the backport-v3.31.6-fe4161a26 branch December 1, 2025 10:24

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Merge releases/v4 into releases/v3#3338

Merge releases/v4 into releases/v3#3338
mbg merged 50 commits intoreleases/v3from
backport-v3.31.6-fe4161a26

github-actions bot commented Dec 1, 2025 •

edited by mbg

Loading

Uh oh!

github-actions bot commented Dec 1, 2025

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

Conversation

github-actions bot commented Dec 1, 2025 • edited by mbg Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Dec 1, 2025

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

github-actions bot commented Dec 1, 2025 •

edited by mbg

Loading