From a6dd8710279662a67f7c3ec0cef2f61553bb605b Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Sat, 2 Nov 2024 22:02:22 -0700 Subject: [PATCH] ci(action): update github/codeql-action action to v3.27.0 (#866) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This PR contains the following updates: | Package | Type | Update | Change | OpenSSF | |---|---|---|---|---| | [github/codeql-action](https://redirect.github.com/github/codeql-action) | action | minor | `v3.24.6` -> `v3.27.0` | [![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/github/codeql-action/badge)](https://securityscorecards.dev/viewer/?uri=github.com/github/codeql-action) | --- ### Release Notes
github/codeql-action (github/codeql-action) ### [`v3.27.0`](https://redirect.github.com/github/codeql-action/releases/tag/v3.27.0) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.26.13...v3.27.0) ##### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. Note that the only difference between `v2` and `v3` of the CodeQL Action is the node version they support, with `v3` running on node 20 while we continue to release `v2` to support running on node 16. For example `3.22.11` was the first `v3` release and is functionally identical to `2.22.11`. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers. ##### 3.27.0 - 22 Oct 2024 - Bump the minimum CodeQL bundle version to 2.14.6. [#​2549](https://redirect.github.com/github/codeql-action/pull/2549) - Fix an issue where the `upload-sarif` Action would fail with "upload-sarif post-action step failed: Input required and not supplied: token" when called in a composite Action that had a different set of inputs to the ones expected by the `upload-sarif` Action. [#​2557](https://redirect.github.com/github/codeql-action/pull/2557) - Update default CodeQL bundle version to 2.19.2. [#​2552](https://redirect.github.com/github/codeql-action/pull/2552) See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.27.0/CHANGELOG.md) for more information. ### [`v3.26.13`](https://redirect.github.com/github/codeql-action/compare/v3.26.12...v3.26.13) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.26.12...v3.26.13) ### [`v3.26.12`](https://redirect.github.com/github/codeql-action/compare/v3.26.11...v3.26.12) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.26.11...v3.26.12) ### [`v3.26.11`](https://redirect.github.com/github/codeql-action/compare/v3.26.10...v3.26.11) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.26.10...v3.26.11) ### [`v3.26.10`](https://redirect.github.com/github/codeql-action/compare/v3.26.9...v3.26.10) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.26.9...v3.26.10) ### [`v3.26.9`](https://redirect.github.com/github/codeql-action/compare/v3.26.8...v3.26.9) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.26.8...v3.26.9) ### [`v3.26.8`](https://redirect.github.com/github/codeql-action/compare/v3.26.7...v3.26.8) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.26.7...v3.26.8) ### [`v3.26.7`](https://redirect.github.com/github/codeql-action/compare/v3.26.6...v3.26.7) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.26.6...v3.26.7) ### [`v3.26.6`](https://redirect.github.com/github/codeql-action/compare/v3.26.5...v3.26.6) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.26.5...v3.26.6) ### [`v3.26.5`](https://redirect.github.com/github/codeql-action/compare/v3.26.4...v3.26.5) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.26.4...v3.26.5) ### [`v3.26.4`](https://redirect.github.com/github/codeql-action/compare/v3.26.3...v3.26.4) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.26.3...v3.26.4) ### [`v3.26.3`](https://redirect.github.com/github/codeql-action/compare/v3.26.2...v3.26.3) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.26.2...v3.26.3) ### [`v3.26.2`](https://redirect.github.com/github/codeql-action/compare/v3.26.1...v3.26.2) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.26.1...v3.26.2) ### [`v3.26.1`](https://redirect.github.com/github/codeql-action/compare/v3.26.0...v3.26.1) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.26.0...v3.26.1) ### [`v3.26.0`](https://redirect.github.com/github/codeql-action/compare/v3.25.15...v3.26.0) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.25.15...v3.26.0) ### [`v3.25.15`](https://redirect.github.com/github/codeql-action/compare/v3.25.14...v3.25.15) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.25.14...v3.25.15) ### [`v3.25.14`](https://redirect.github.com/github/codeql-action/compare/v3.25.13...v3.25.14) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.25.13...v3.25.14) ### [`v3.25.13`](https://redirect.github.com/github/codeql-action/compare/v3.25.12...v3.25.13) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.25.12...v3.25.13) ### [`v3.25.12`](https://redirect.github.com/github/codeql-action/compare/v3.25.11...v3.25.12) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.25.11...v3.25.12) ### [`v3.25.11`](https://redirect.github.com/github/codeql-action/compare/v3.25.10...v3.25.11) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.25.10...v3.25.11) ### [`v3.25.10`](https://redirect.github.com/github/codeql-action/compare/v3.25.9...v3.25.10) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.25.9...v3.25.10) ### [`v3.25.9`](https://redirect.github.com/github/codeql-action/compare/v3.25.8...v3.25.9) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.25.8...v3.25.9) ### [`v3.25.8`](https://redirect.github.com/github/codeql-action/compare/v3.25.7...v3.25.8) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.25.7...v3.25.8) ### [`v3.25.7`](https://redirect.github.com/github/codeql-action/compare/v3.25.6...v3.25.7) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.25.6...v3.25.7) ### [`v3.25.6`](https://redirect.github.com/github/codeql-action/compare/v3.25.5...v3.25.6) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.25.5...v3.25.6) ### [`v3.25.5`](https://redirect.github.com/github/codeql-action/compare/v3.25.4...v3.25.5) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.25.4...v3.25.5) ### [`v3.25.4`](https://redirect.github.com/github/codeql-action/compare/v3.25.3...v3.25.4) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.25.3...v3.25.4) ### [`v3.25.3`](https://redirect.github.com/github/codeql-action/compare/v3.25.2...v3.25.3) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.25.2...v3.25.3) ### [`v3.25.2`](https://redirect.github.com/github/codeql-action/compare/v3.25.1...v3.25.2) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.25.1...v3.25.2) ### [`v3.25.1`](https://redirect.github.com/github/codeql-action/compare/v3.25.0...v3.25.1) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.25.0...v3.25.1) ### [`v3.25.0`](https://redirect.github.com/github/codeql-action/compare/v3.24.10...v3.25.0) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.24.11...v3.25.0) ### [`v3.24.11`](https://redirect.github.com/github/codeql-action/compare/v3.24.10...v3.24.11) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.24.10...v3.24.11) ### [`v3.24.10`](https://redirect.github.com/github/codeql-action/compare/v3.24.9...v3.24.10) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.24.9...v3.24.10) ### [`v3.24.9`](https://redirect.github.com/github/codeql-action/compare/v3.24.8...v3.24.9) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.24.8...v3.24.9) ### [`v3.24.8`](https://redirect.github.com/github/codeql-action/compare/v3.24.7...v3.24.8) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.24.7...v3.24.8) ### [`v3.24.7`](https://redirect.github.com/github/codeql-action/compare/v3.24.6...v3.24.7) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.24.6...v3.24.7)
--- ### Configuration 📅 **Schedule**: Branch creation - "before 5am every weekday,every weekend" (UTC), Automerge - At any time (no schedule defined). đŸšĻ **Automerge**: Disabled by config. Please merge this manually once you are satisfied. â™ģ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/kelektiv/node-cron). Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- .github/workflows/codeql.yml | 6 +++--- .github/workflows/scorecards.yml | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 3527cb81..2c23f9dc 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -39,7 +39,7 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@8a470fddafa5cbb6266ee11b37ef4d8aae19c571 # v3.24.6 + uses: github/codeql-action/init@662472033e021d55d94146f66f6058822b0b39fd # v3.27.0 with: languages: ${{ matrix.language }} # If you wish to specify custom queries, you can do so here or in a config file. @@ -49,7 +49,7 @@ jobs: # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). # If this step fails, then you should remove it and run the build manually (see below) - name: Autobuild - uses: github/codeql-action/autobuild@8a470fddafa5cbb6266ee11b37ef4d8aae19c571 # v3.24.6 + uses: github/codeql-action/autobuild@662472033e021d55d94146f66f6058822b0b39fd # v3.27.0 # ℹī¸ Command-line programs to run using the OS shell. # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun @@ -62,6 +62,6 @@ jobs: # ./location_of_script_within_repo/buildscript.sh - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@8a470fddafa5cbb6266ee11b37ef4d8aae19c571 # v3.24.6 + uses: github/codeql-action/analyze@662472033e021d55d94146f66f6058822b0b39fd # v3.27.0 with: category: '/language:${{matrix.language}}' diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml index 831e8f75..53e5c19c 100644 --- a/.github/workflows/scorecards.yml +++ b/.github/workflows/scorecards.yml @@ -71,6 +71,6 @@ jobs: # Upload the results to GitHub's code scanning dashboard. - name: 'Upload to code-scanning' - uses: github/codeql-action/upload-sarif@8a470fddafa5cbb6266ee11b37ef4d8aae19c571 # v3.24.6 + uses: github/codeql-action/upload-sarif@662472033e021d55d94146f66f6058822b0b39fd # v3.27.0 with: sarif_file: results.sarif