Skip to content

Commit 8f02cfa

Browse files
committed
Update from main and Rebuild
2 parents 4ea3a4b + 19b3a84 commit 8f02cfa

90 files changed

Lines changed: 145290 additions & 140657 deletions

File tree

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

.github/dependabot.yml

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,9 @@
11
version: 2
22
updates:
33
- package-ecosystem: npm
4-
directory: "/"
4+
directories:
5+
- "/"
6+
- "/pr-checks"
57
schedule:
68
interval: weekly
79
cooldown:

.github/workflows/__language-aliases.yml

Lines changed: 2 additions & 2 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

.github/workflows/__rubocop-multi-language.yml

Lines changed: 1 addition & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

.github/workflows/__start-proxy.yml

Lines changed: 18 additions & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

.github/workflows/debug-artifacts-failure-safe.yml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -66,6 +66,7 @@ jobs:
6666
uses: ./../action/.github/actions/verify-debug-artifact-scan-completed
6767
- uses: ./../action/init
6868
with:
69+
languages: cpp,csharp,go,java,javascript,python
6970
tools: ${{ steps.prepare-test.outputs.tools-url }}
7071
debug: true
7172
debug-artifact-name: my-debug-artifacts

.github/workflows/deflake.yml

Lines changed: 106 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,106 @@
1+
# Workflow runs on main, on a release branch, and that were triggered as part of a merge group have
2+
# already passed CI before being merged. Therefore if they fail, we should make sure that there
3+
# wasn't a transient failure by rerunning the failed jobs once before investigating further.
4+
name: Deflake
5+
6+
on:
7+
workflow_run:
8+
types: [completed]
9+
# Exclude workflows that have significant side effects, like publishing releases. It's OK to
10+
# retry CodeQL analysis.
11+
workflows:
12+
- Check Expected Release Files
13+
- Code-Scanning config CLI tests
14+
- CodeQL action
15+
- Manual Check - go
16+
- "PR Check - All-platform bundle"
17+
- "PR Check - Analysis kinds"
18+
- "PR Check - Analyze: 'ref' and 'sha' from inputs"
19+
- "PR Check - autobuild-action"
20+
- "PR Check - Autobuild direct tracing (custom working directory)"
21+
- "PR Check - Autobuild working directory"
22+
- "PR Check - Build mode autobuild"
23+
- "PR Check - Build mode manual"
24+
- "PR Check - Build mode none"
25+
- "PR Check - Build mode rollback"
26+
- "PR Check - Bundle: Caching checks"
27+
- "PR Check - Bundle: From nightly"
28+
- "PR Check - Bundle: From toolcache"
29+
- "PR Check - Bundle: Zstandard checks"
30+
- "PR Check - C/C\\+\\+: autoinstalling dependencies (Linux)"
31+
- "PR Check - C/C\\+\\+: autoinstalling dependencies is skipped (macOS)"
32+
- "PR Check - C/C\\+\\+: disabling autoinstalling dependencies (Linux)"
33+
- "PR Check - Clean up database cluster directory"
34+
- "PR Check - CodeQL Bundle All"
35+
- "PR Check - Config export"
36+
- "PR Check - Config input"
37+
- "PR Check - Custom source root"
38+
- "PR Check - Debug artifact upload"
39+
- "PR Check - Debug artifacts after failure"
40+
- "PR Check - Diagnostic export"
41+
- "PR Check - Export file baseline information"
42+
- "PR Check - Extractor ram and threads options test"
43+
- "PR Check - Go: Custom queries"
44+
- "PR Check - Go: diagnostic when Go is changed after init step"
45+
- "PR Check - Go: diagnostic when `file` is not installed"
46+
- "PR Check - Go: tracing with autobuilder step"
47+
- "PR Check - Go: tracing with custom build steps"
48+
- "PR Check - Go: tracing with legacy workflow"
49+
- "PR Check - Go: workaround for indirect tracing"
50+
- "PR Check - Job run UUID added to SARIF"
51+
- "PR Check - Language aliases"
52+
- "PR Check - Local CodeQL bundle"
53+
- "PR Check - Multi-language repository"
54+
- "PR Check - Overlay database init fallback"
55+
- "PR Check - Packaging: Action input"
56+
- "PR Check - Packaging: Config and input"
57+
- "PR Check - Packaging: Config and input passed to the CLI"
58+
- "PR Check - Packaging: Config file"
59+
- "PR Check - Packaging: Download using registries"
60+
- "PR Check - Proxy test"
61+
- "PR Check - Remote config file"
62+
- "PR Check - Resolve environment"
63+
- "PR Check - RuboCop multi-language"
64+
- "PR Check - Ruby analysis"
65+
- "PR Check - Rust analysis"
66+
- "PR Check - Split workflow"
67+
- "PR Check - Start proxy"
68+
- "PR Check - Submit SARIF after failure"
69+
- "PR Check - Swift analysis using a custom build command"
70+
- "PR Check - Swift analysis using autobuild"
71+
- "PR Check - Test different uses of `upload-sarif`"
72+
- "PR Check - Test unsetting environment variables"
73+
- "PR Check - Upload-sarif: ref and sha from inputs"
74+
- "PR Check - Use a custom `checkout_path`"
75+
- PR Checks
76+
- Query filters tests
77+
- Test that the workaround for python 3.12 on windows works
78+
79+
jobs:
80+
rerun-on-failure:
81+
name: Rerun failed jobs
82+
if: >-
83+
github.event.workflow_run.conclusion == 'failure' &&
84+
github.event.workflow_run.run_attempt == 1 &&
85+
(
86+
github.event.workflow_run.head_branch == 'main' ||
87+
startsWith(github.event.workflow_run.head_branch, 'releases/') ||
88+
github.event.workflow_run.event == 'merge_group'
89+
)
90+
runs-on: ubuntu-slim
91+
permissions:
92+
actions: write
93+
steps:
94+
- name: Rerun failed jobs in ${{ github.event.workflow_run.name }}
95+
env:
96+
GH_TOKEN: ${{ github.token }}
97+
GH_REPO: ${{ github.repository }}
98+
RUN_ID: ${{ github.event.workflow_run.id }}
99+
RUN_NAME: ${{ github.event.workflow_run.name }}
100+
RUN_URL: ${{ github.event.workflow_run.html_url }}
101+
run: |
102+
echo "Rerunning failed jobs for workflow run ${RUN_ID}"
103+
gh run rerun "${RUN_ID}" --failed
104+
echo "### Reran failed jobs :recycle:" >> "$GITHUB_STEP_SUMMARY"
105+
echo "" >> "$GITHUB_STEP_SUMMARY"
106+
echo "Workflow: [${RUN_NAME}](${RUN_URL})" >> "$GITHUB_STEP_SUMMARY"

.github/workflows/post-release-mergeback.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ defaults:
2424

2525
jobs:
2626
merge-back:
27-
runs-on: ubuntu-slim
27+
runs-on: ubuntu-latest
2828
environment: Automation
2929
if: github.repository == 'github/codeql-action'
3030
env:
@@ -131,7 +131,7 @@ jobs:
131131
echo "::endgroup::"
132132
133133
- name: Generate token
134-
uses: actions/create-github-app-token@v3.0.0
134+
uses: actions/create-github-app-token@v3.1.1
135135
id: app-token
136136
with:
137137
app-id: ${{ vars.AUTOMATION_APP_ID }}

.github/workflows/prepare-release.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,7 @@ defaults:
2929
jobs:
3030
prepare:
3131
name: "Prepare release"
32-
runs-on: ubuntu-slim
32+
runs-on: ubuntu-latest
3333
if: github.repository == 'github/codeql-action'
3434

3535
permissions:

.github/workflows/rollback-release.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -136,7 +136,7 @@ jobs:
136136
137137
- name: Generate token
138138
if: github.event_name == 'workflow_dispatch'
139-
uses: actions/create-github-app-token@v3.0.0
139+
uses: actions/create-github-app-token@v3.1.1
140140
id: app-token
141141
with:
142142
app-id: ${{ vars.AUTOMATION_APP_ID }}

.github/workflows/update-bundle.yml

Lines changed: 12 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@ defaults:
2020
jobs:
2121
update-bundle:
2222
if: github.event.release.prerelease && startsWith(github.event.release.tag_name, 'codeql-bundle-')
23-
runs-on: ubuntu-slim
23+
runs-on: ubuntu-latest
2424
permissions:
2525
contents: write # needed to push commits
2626
pull-requests: write # needed to create pull requests
@@ -57,6 +57,17 @@ jobs:
5757
- name: Update bundle
5858
uses: ./.github/actions/update-bundle
5959

60+
- name: Set up CodeQL CLI from new bundle
61+
id: setup-codeql
62+
uses: ./setup-codeql
63+
with:
64+
tools: https://github.com/github/codeql-action/releases/download/${{ github.event.release.tag_name }}/codeql-bundle-linux64.tar.gz
65+
66+
- name: Update built-in languages
67+
run: npx tsx pr-checks/update-builtin-languages.ts "$CODEQL_PATH"
68+
env:
69+
CODEQL_PATH: ${{ steps.setup-codeql.outputs.codeql-path }}
70+
6071
- name: Bump Action minor version if new CodeQL minor version series
6172
id: bump-action-version
6273
run: |

0 commit comments

Comments
 (0)