Repository navigation

Merge releases/v4 into releases/v3 - #4216

Merged

navntoft merged 135 commits into

releases/v3from

backport-v3.38.3-24c54180a

Oct 8, 2026

Commits on Sep 22, 2026
- Wrap JSON parse errors in `resolveExtractor` with context
  mbg
  committed
  f042742
- Wrap JSON parse errors in `restoreInputs` with context
  mbg
  committed
  a5c2338
- Wrap JSON parse errors in `getTracerConfigForCluster` with context
  mbg
  committed
  c036972
- Wrap JSON parse errors in `parseMatrixInput` with context
  mbg
  committed
  2294a7a
- Wrap JSON parse errors in `cloneObject` with context
  mbg
  committed
  8e36092
- Wrap JSON parse errors in `readSarifFile` with context
  mbg
  committed
  fe0a932
- Fix formatting
  mbg
  committed
  660f7c5
- Restore previous `restoreInputs` behaviour
  mbg
  committed
  fa47128
Commits on Sep 24, 2026
- Move bundle types and helpers out of setup-codeql.ts
  
  henrymercer
  and
  Copilot
  committed
  f42df5b
- Remove the getCodeQLBundleName wrapper from setup-codeql.ts
  
  henrymercer
  and
  Copilot
  committed
  6aa6d55
- Name unnamed jobs in release workflow
  mbg
  committed
  477ba69
- Disambiguate "Prepare release" job naming
  mbg
  committed
  b435ce4
- Update changelog and version after v4.38.2
  github-actions[bot]
  committed
  266e866
- Rebuild
  github-actions[bot]
  committed
  73dc344
- Log error in `restoreInputs` instead of re-throwing it
  mbg
  committed
  b5f938c
- Fix formatting of mergeback checklist
  mbg
  committed
  415d925
- Merge pull request #4167 from github/henrymercer/move-bundle-helpers
  henrymercer
  authored
  9c97080
- Merge remote-tracking branch 'origin/main' into mbg/improve-json-failures
  mbg
  committed
  aa2cb99
- Merge pull request #4170 from github/mergeback/v4.38.2-to-main-2892aa5e
  mbg
  authored
  a7334dd
- Log error in `getTracerConfigForCluster` instead of re-throwing it
  mbg
  committed
  19aa55d
- Merge remote-tracking branch 'origin/main' into mbg/improve-json-failures
  mbg
  committed
  38c1d74
- Merge pull request #4161 from github/mbg/improve-json-failures
  mbg
  authored
  fa8392b
Commits on Sep 25, 2026
Commits on Sep 28, 2026
- Change `wrapApiConfigurationError` to not be `serial`
  mbg
  committed
  31252c2
- Break up `wrapApiConfigurationError` tests
  mbg
  committed
  260cb2a
- Add test for repeated `wrapApiConfigurationError`
  mbg
  committed
  503e2f6
- Merge pull request #4178 from github/mbg/use-api-error-classification-more
  mbg
  authored
  85c0c09
- Make `platform`+`arch` available in `BaseState`
  mbg
  committed
  97a91d9
- Use `getBundlePlatform` in `getDownloadUrl`
  mbg
  committed
  62a2268
- Make `ActionState` available to `getDownloadUrl`
  mbg
  committed
  fc2d2f7
Commits on Sep 29, 2026
- Fix values used in log message
  mbg
  committed
  10e476c
- Add tests
  mbg
  committed
  8e838ff
- Use test tags in `rollback-release.yml` workflow
  mbg
  committed
  cd1a7c1
- Merge pull request #4181 from github/mbg/start-proxy/linux-arm64
  mbg
  authored
  61817fa
- Disable per-language bundles in the file baseline PR check
  
  henrymercer
  and
  Copilot
  committed
  b5a476b
- Move `defaultSuites` to `config/db-config.ts`
  
  henrymercer
  and
  Copilot
  committed
  5e3132d
Commits on Sep 30, 2026
- Avoid per-language bundles when queries may need other languages' library packs
  
  henrymercer
  and
  Copilot
  committed
  1609a51
- Always use the combined bundle in `setup-codeql`
  
  henrymercer
  and
  Copilot
  committed
  d8b6f2a
- Fix the docs for the `languages` and `analysis-kinds` inputs of `setup-codeql`
  
  henrymercer
  and
  Copilot
  committed
  7816c33
- Bump the npm-minor group across 1 directory with 4 updates
  dependabot[bot]
  authored
  99522b4
- Rebuild
  github-actions[bot]
  committed
  f1b8b0f
- Bump ruby/setup-ruby
  dependabot[bot]
  authored
  cbe61e2
- Rebuild
  github-actions[bot]
  committed
  222d54a
Commits on Oct 1, 2026
- Use a new feature flag for per-language bundles
  
  henrymercer
  and
  Copilot
  committed
  87a1923
- Omit the feature flag name from the per-language bundle debug log
  
  henrymercer
  and
  Copilot
  committed
  2da0d29
- Read the `config` and `queries` inputs once in `init`
  
  henrymercer
  and
  Copilot
  committed
  a98f604
- Extract parsing of the `queries` input and the extra queries repository property
  
  henrymercer
  and
  Copilot
  committed
  a4fbe39
- Reuse the parsing of query inputs when choosing a bundle
  
  henrymercer
  and
  Copilot
  committed
  70897a7
- Explain that the `config` input can configure queries
  
  henrymercer
  and
  Copilot
  committed
  725421c
- Explain what a reason to use the combined bundle means where it's checked
  
  henrymercer
  and
  Copilot
  committed
  1bb99cb
- Check what the `config` input sets instead of exempting dynamic workflows
  
  henrymercer
  and
  Copilot
  committed
  a6cd2a5
Commits on Oct 2, 2026
- Update supported GitHub Enterprise Server versions
  github-actions[bot]
  committed
  d06baaa
- Merge pull request #4182 from github/dependabot/npm_and_yarn/npm-minor-e4df014d00
  mbg
  authored
  ffc4a0c
- Bump brace-expansion from 1.1.18 to 1.1.21
  dependabot[bot]
  authored
  f306a93
- Rebuild
  github-actions[bot]
  committed
  d036b81
- Trigger workflows
  mbg
  committed
  f45aab1
- Merge pull request #4183 from github/dependabot/github_actions/dot-github/workflows/actions-minor-f389ef8e3c
  mbg
  authored
  f24d881
- Explain why the file baseline PR check uses the combined bundle
  
  henrymercer
  and
  Copilot
  committed
  ce28f3e
- Parse lists of queries with a single function
  
  henrymercer
  and
  Copilot
  committed
  1c0814d
- Share the check of the properties that Default Setup sets in the `config` input
  
  henrymercer
  and
  Copilot
  committed
  e869836
- Parse the `config` input once
  
  henrymercer
  and
  Copilot
  committed
  113b18e
- Point to the Default Setup config schema from the per-language bundle check
  
  henrymercer
  and
  Copilot
  committed
  f6a7f00
- Trigger workflows
  mbg
  committed
  05d2a1a
- Merge remote-tracking branch 'origin/main' into mbg/improve-release-workflow
  mbg
  committed
  dc1f3ac
- Update comment
  mbg
  committed
  488027b
- Merge pull request #4189 from github/dependabot/npm_and_yarn/brace-expansion-1.1.21
  mbg
  authored
  c535168
- Fix detection of merge conflicts outside `lib` in the rebuild workflow
  
  henrymercer
  and
  Copilot
  committed
  27c60c5
- Merge remote-tracking branch 'origin/main' into henrymercer/per-language-pr-check-failures
  
  Copilot
  and
  henrymercer
  authored
  a47cc9f
- Dependabot: Apply `cooldown` uniformly
  mbg
  committed
  b804ae9
- Fix the rebuild workflow failing when merging the base branch conflicts
  
  henrymercer
  and
  Copilot
  committed
  56b0d5f
- Add `min-release-age=7` to `.npmrc`
  mbg
  committed
  1f8080a
- Downgrade `@actions/cache`
  mbg
  committed
  6ce88f6
- Merge pull request #4193 from github/mbg/dependabot/uniform-cooldown
  mbg
  authored
  c26ee0c
- Merge pull request #4194 from github/mbg/dependency/downgrade-cache
  mbg
  authored
  0cd78b3
- Bump ruby/setup-ruby
  dependabot[bot]
  authored
  412197a
- Rebuild
  github-actions[bot]
  committed
  4d9cd8c
- Merge branch 'main' into henrymercer/per-language-pr-check-failures
  henrymercer
  authored
  c275b4a
- Add check for non-public feed URLs
  mbg
  committed
  62b0dd9
- Install newer `npm` in Node 20 workflows
  mbg
  committed
  8948426
- Normalise feed URLs in `package-lock.json`
  mbg
  committed
  b948c4d
- Merge pull request #4192 from github/mbg/project-changes
  mbg
  authored
  b6d38e5
Commits on Oct 5, 2026
- Merge pull request #4191 from github/henrymercer/ci-job-failure-investigation
  henrymercer
  authored
  d8251b8
- Replace deprecated config key
  mbg
  committed
  fa90489
- Exclude "tests" folder from workspace
  mbg
  committed
  363d874
- Merge pull request #4197 from github/mbg/vscode/workspace-improvements
  mbg
  authored
  aeafd00
- Merge pull request #4196 from github/dependabot/github_actions/dot-github/workflows/actions-minor-e631a66382
  henrymercer
  authored
  1767808
- Reword the JSDoc for `parseQueriesFromInput`
  
  henrymercer
  and
  Copilot
  committed
  c1e7769
- Return early from `parseQueriesFromInput` when there are no queries
  
  henrymercer
  and
  Copilot
  committed
  ac4b9b8
- Remove the `checkDefaultSetupConfig` wrapper around `checkSchema`
  
  henrymercer
  and
  Copilot
  committed
  711f3bf
- Say that the Default Setup config schema reflects what Default Setup is known to send
  
  henrymercer
  and
  Copilot
  committed
  966f3c3
- Explain that the `config` input is written to disk without merging
  
  henrymercer
  and
  Copilot
  committed
  a4a04dc
- Construct `UserConfig` objects directly in the `config-utils` tests
  
  henrymercer
  and
  Copilot
  committed
  6cb83fa
- Parse the `config` input in `init` without the `parseConfigInput` wrapper
  
  henrymercer
  and
  Copilot
  committed
  e0b8480
- Say that `parseUserConfig`'s `pathInput` may not be a file path
  
  henrymercer
  and
  Copilot
  committed
  9d3242e
- Compare `originalUserInput` with a separate object in the `config` input test
  
  henrymercer
  and
  Copilot
  committed
  8e6b600
- Describe what `parseUserConfig` accepts, returns and throws more precisely
  
  henrymercer
  and
  Copilot
  committed
  55e4091
- Explain why the `config` input test compares with a separate object
  
  henrymercer
  and
  Copilot
  committed
  12db63b
- Update CodeQL deprecation warning for GHES 3.17
  
  henrymercer
  and
  Copilot
  committed
  61c3b54
- Remove unsupported GHES versions from compatibility table
  
  henrymercer
  and
  Copilot
  committed
  118af59
Commits on Oct 6, 2026
- Merge pull request #4184 from github/henrymercer/per-language-pr-check-failures
  henrymercer
  authored
  2c8d410
- Update CHANGELOG.md
  
  henrymercer
  and
  mbg
  authored
  d1ca36f
- Merge pull request #4188 from github/update-supported-enterprise-server-versions
  henrymercer
  authored
  7265309
- Merge pull request #4169 from github/mbg/improve-release-workflow
  mbg
  authored
  f455295
- Bump `@types/node` to `v24` for `pr-checks`
  mbg
  committed
  36f377b
- Add `nvmrc` for `pr-checks`
  mbg
  committed
  4c98a0b
- Add compatibility definitions to `config.ts`
  mbg
  committed
  b813f91
- Replace `require` check with `import.meta.main`
  mbg
  committed
  f5b4c32
- Set `type: module` for `pr-checks`
  mbg
  committed
  1b38bb1
- Replace `.mts` extensions
  mbg
  committed
  4c932d9
- Replace `__dirname` in `sync-back.ts`
  mbg
  committed
  a2374c3
- Replace `.mts` with `.ts` in comments and workflows
  mbg
  committed
  0f3412f
- Remove `.mts` patterns from configurations
  mbg
  committed
  0a44f18
- Replace `__dirname` in `sync.ts`
  mbg
  committed
  a71b0c6
- Merge pull request #4200 from github/mbg/esm/migrate-pr-checks
  mbg
  authored
  d208ec7
Commits on Oct 7, 2026
Commits on Oct 8, 2026
- Update changelog for v4.38.3
  github-actions[bot]
  committed
  23b6828
- Add changelog note for #4184
  henrymercer
  authored
  69e87c5
- Merge pull request #4214 from github/update-v4.38.3-e0b52dbdc
  navntoft
  authored
  24c5418
- Revert "Update version and changelog for v3.38.2"
  github-actions[bot]
  committed
  45d97c3
- Revert "Rebuild"
  github-actions[bot]
  committed
  1720989
- Merge remote-tracking branch 'origin/releases/v4' into backport-v3.38.3-24c54180a
  github-actions[bot]
  committed
  1d986a1
- Update version and changelog for v3.38.3
  github-actions[bot]
  committed
  9c17bbc
- Rebuild
  github-actions[bot]
  committed
  472ce8f

Commits

Commits on Sep 22, 2026

Commits on Sep 24, 2026

Commits on Sep 25, 2026

Commits on Sep 28, 2026

Commits on Sep 29, 2026

Commits on Sep 30, 2026

Commits on Oct 1, 2026

Commits on Oct 2, 2026

Commits on Oct 5, 2026

Commits on Oct 6, 2026

Commits on Oct 7, 2026

Commits on Oct 8, 2026