Skip to content

Update the dependencies to CodeQL CLI 2.22.2. #210

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 4 commits into
base: main
Choose a base branch
from

Conversation

lcartey
Copy link
Contributor

@lcartey lcartey commented Jul 30, 2025

What This PR Contributes

This PR updates our CodeQL dependencies to ensure we work with 2.22.2, the latest CodeQL CLI release:

  • Updates the codeql-pack.lock.yml files to use the latest versions of the QL packs, aligned with the CodeQL CLI 2.22.2 release.
  • Relaxed the version constraints on the codeql/javascript-queries pack dependency in the javascript/frameworks/ui5/test/qlpack.yml file. This is because the pack major version increased (to 2.0.0) in CodeQL CLI 2.22.0. We now allow any version later than 1.2.0, as we only use this dependency to run the log injection queries, so we do not need to be precise about the version used.
  • Deletes the spurious lock file scripts/codeql-pack.lock.yml - there is no qlpack.yml file in this directory.
  • Updates qlt.conf.json to 2.22.2.

@lcartey lcartey requested a review from jeongsoolee09 July 30, 2025 16:03
lcartey added 2 commits July 30, 2025 17:35
SummarizedCallables appear not to work with class Configurations.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant