Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 15, 2023

Bumps github/codeql-action from 2.21.2 to 2.21.4.

Changelog

Sourced from github/codeql-action's changelog.

2.21.4 - 14 Aug 2023

  • Update default CodeQL bundle version to 2.14.2. #1831
  • Log a warning if the amount of available disk space runs low during a code scanning run. #1825
  • When downloading CodeQL bundle version 2.13.4 and later, cache these bundles in the Actions tool cache using a simpler version number. #1832
  • Fix an issue that first appeared in CodeQL Action v2.21.2 that prevented CodeQL invocations from being logged. #1833
  • We are rolling out a feature in August 2023 that will improve the quality of file coverage information. #1835

2.21.3 - 08 Aug 2023

  • We are rolling out a feature in August 2023 that will improve multi-threaded performance on larger runners. #1817
  • We are rolling out a feature in August 2023 that adds beta support for Project Lombok when analyzing Java. #1809
  • Reduce disk space usage when downloading the CodeQL bundle. #1820
Commits
  • a09933a Merge pull request #1838 from github/update-v2.21.4-492a68c32
  • 37116fb Fix positioning of bundle update changelog note
  • c613917 Update changelog for v2.21.4
  • 492a68c Merge pull request #1836 from github/henrymercer/analysis-summary-v2-ff
  • ac49314 Merge pull request #1834 from github/henrymercer/analysis-summary-v2-ff
  • ac35d7a Merge pull request #1835 from github/henrymercer/language-baseline-config
  • d03c744 Don't pass --no- flag as it doesn't exist yet
  • a0407a8 Add changelog note for rollout
  • 8a7b2e9 Enable language specific baselines via feature flag
  • 9a510d9 Rename new analysis summary feature flag
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.21.2 to 2.21.4.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@v2.21.2...v2.21.4)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested a review from a team as a code owner August 15, 2023 00:36
@dependabot dependabot bot added area/ci Indicates an issue on the CI area/dependencies labels Aug 15, 2023
@jonkoops jonkoops requested a review from abstractj August 21, 2023 14:51
@jonkoops jonkoops requested a review from ssilvert August 22, 2023 11:12
@jonkoops jonkoops enabled auto-merge (squash) August 22, 2023 11:13
@jonkoops jonkoops merged commit f0739c1 into main Aug 22, 2023
@jonkoops jonkoops deleted the dependabot/github_actions/github/codeql-action-2.21.4 branch August 22, 2023 11:15
stianst pushed a commit to stianst/keycloak that referenced this pull request Sep 5, 2023
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.21.2 to 2.21.4.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@v2.21.2...v2.21.4)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
stianst pushed a commit that referenced this pull request Sep 6, 2023
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.21.2 to 2.21.4.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@v2.21.2...v2.21.4)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@stianst stianst mentioned this pull request Sep 11, 2023
@stianst stianst mentioned this pull request Nov 14, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/ci Indicates an issue on the CI area/dependencies

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants