dependabot[bot]
|
8afa30c52b
|
Build(deps): Bump the github-actions group with 2 updates (#41798)
Bumps the github-actions group with 2 updates: [github/codeql-action](https://github.com/github/codeql-action) and [ossf/scorecard-action](https://github.com/ossf/scorecard-action).
Updates `github/codeql-action` from 3.30.5 to 3.30.6
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/3599b3baa15b485a2e49ef411a7a4bb2452e7f93...64d10c13136e1c5bce3e5fbde8d4906eeaafc885)
Updates `ossf/scorecard-action` from 2.4.2 to 2.4.3
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](https://github.com/ossf/scorecard-action/compare/05b42c624433fc40578a4040d5cf5e36ddca8cde...4eaacf0543bb3f2c246792bd56e8cdeffafb205a)
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 3.30.6
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
- dependency-name: ossf/scorecard-action
dependency-version: 2.4.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2025-10-07 17:25:14 +02:00 |
|
dependabot[bot]
|
4189b3075c
|
Build(deps): Bump github/codeql-action in the github-actions group (#41782)
Bumps the github-actions group with 1 update: [github/codeql-action](https://github.com/github/codeql-action).
Updates `github/codeql-action` from 3.30.3 to 3.30.5
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/192325c86100d080feab897ff886c34abd4c83a3...3599b3baa15b485a2e49ef411a7a4bb2452e7f93)
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 3.30.5
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2025-09-30 18:01:50 +02:00 |
|
dependabot[bot]
|
af73c870cb
|
Build(deps): Bump the github-actions group with 2 updates (#41744)
Bumps the github-actions group with 2 updates: [calibreapp/image-actions](https://github.com/calibreapp/image-actions) and [github/codeql-action](https://github.com/github/codeql-action).
Updates `calibreapp/image-actions` from 1.4.0 to 1.4.1
- [Release notes](https://github.com/calibreapp/image-actions/releases)
- [Commits](https://github.com/calibreapp/image-actions/compare/f72c7c4a237181dd3b26e5935fd33b22ae4a7e26...f32575787d333b0579f0b7d506ff03be63a669d1)
Updates `github/codeql-action` from 3.30.2 to 3.30.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/d3678e237b9c32a6c9bffb3315c335f976f3549f...192325c86100d080feab897ff886c34abd4c83a3)
---
updated-dependencies:
- dependency-name: calibreapp/image-actions
dependency-version: 1.4.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
- dependency-name: github/codeql-action
dependency-version: 3.30.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2025-09-17 18:28:26 +02:00 |
|
dependabot[bot]
|
6f2f7dd37f
|
Build(deps): Bump the github-actions group with 2 updates (#41730)
Bumps the github-actions group with 2 updates: [actions/setup-node](https://github.com/actions/setup-node) and [github/codeql-action](https://github.com/github/codeql-action).
Updates `actions/setup-node` from 4.4.0 to 5.0.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/49933ea5288caeca8642d1e84afbd3f7d6820020...a0853c24544627f65ddf259abe73b1d18a591444)
Updates `github/codeql-action` from 3.30.0 to 3.30.1
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/2d92b76c45b91eb80fc44c74ce3fce0ee94e8f9d...f1f6e5f6af878fb37288ce1c627459e94dbf7d01)
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-version: 5.0.0
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions
- dependency-name: github/codeql-action
dependency-version: 3.30.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2025-09-09 20:35:19 +02:00 |
|
dependabot[bot]
|
2eff466b63
|
Build(deps): Bump the github-actions group with 2 updates (#41721)
Bumps the github-actions group with 2 updates: [calibreapp/image-actions](https://github.com/calibreapp/image-actions) and [github/codeql-action](https://github.com/github/codeql-action).
Updates `calibreapp/image-actions` from 1.3.0 to 1.4.0
- [Release notes](https://github.com/calibreapp/image-actions/releases)
- [Commits](https://github.com/calibreapp/image-actions/compare/51921e25c9b0b62ed202c0ad0a2121f0f3ad186d...f72c7c4a237181dd3b26e5935fd33b22ae4a7e26)
Updates `github/codeql-action` from 3.29.11 to 3.30.0
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/3c3833e0f8c1c83d449a7478aa59c036a9165498...2d92b76c45b91eb80fc44c74ce3fce0ee94e8f9d)
---
updated-dependencies:
- dependency-name: calibreapp/image-actions
dependency-version: 1.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions
- dependency-name: github/codeql-action
dependency-version: 3.30.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2025-09-03 14:34:53 +02:00 |
|
dependabot[bot]
|
2b44684f5d
|
Build(deps): Bump github/codeql-action from 3.29.10 to 3.29.11 (#41678)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.29.10 to 3.29.11.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/96f518a34f7a870018057716cc4d7a5c014bd61c...3c3833e0f8c1c83d449a7478aa59c036a9165498)
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 3.29.11
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2025-08-27 22:12:21 +03:00 |
|
dependabot[bot]
|
26c86ba875
|
Build(deps): Bump github/codeql-action from 3.29.8 to 3.29.10 (#41664)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.29.8 to 3.29.10.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/76621b61decf072c1cee8dd1ce2d2a82d33c17ed...96f518a34f7a870018057716cc4d7a5c014bd61c)
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 3.29.10
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Julien Déramond <juderamond@gmail.com>
|
2025-08-20 10:06:24 +02:00 |
|
dependabot[bot]
|
ae069ffb35
|
Build(deps): Bump actions/checkout from 4.2.2 to 5.0.0 (#41655)
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.2.2 to 5.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/11bd71901bbe5b1630ceea73d27597364c9af683...08c6903cd8c0fde910a37f88322edcfb5dd907a8)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 5.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2025-08-15 08:25:43 +02:00 |
|
dependabot[bot]
|
934beb1b66
|
Build(deps): Bump github/codeql-action from 3.29.7 to 3.29.8 (#41657)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.29.7 to 3.29.8.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/51f77329afa6477de8c49fc9c7046c15b9a4e79d...76621b61decf072c1cee8dd1ce2d2a82d33c17ed)
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 3.29.8
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2025-08-15 08:22:25 +02:00 |
|
dependabot[bot]
|
89fbf03410
|
Build(deps): Bump github/codeql-action from 3.29.4 to 3.29.5 (#41640)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.29.4 to 3.29.5.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/4e828ff8d448a8a6e532957b1811f387a63867e8...51f77329afa6477de8c49fc9c7046c15b9a4e79d)
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 3.29.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2025-08-05 21:06:21 +02:00 |
|
dependabot[bot]
|
e8fdc4f614
|
Build(deps): Bump github/codeql-action from 3.29.3 to 3.29.4 (#41624)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.29.3 to 3.29.4.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/d6bbdef45e766d081b84a2def353b0055f728d3e...4e828ff8d448a8a6e532957b1811f387a63867e8)
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 3.29.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2025-07-29 18:36:04 +02:00 |
|
dependabot[bot]
|
45439923aa
|
Build(deps): Bump github/codeql-action from 3.29.2 to 3.29.3 (#41611)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.29.2 to 3.29.3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/181d5eefc20863364f96762470ba6f862bdef56b...d6bbdef45e766d081b84a2def353b0055f728d3e)
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 3.29.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2025-07-28 20:00:18 +02:00 |
|
Julien Déramond
|
117a248faa
|
Workflows: Use SHA-1 precise references for third-party actions (#41595)
|
2025-07-16 09:11:53 -07:00 |
|
dependabot[bot]
|
056a0e0d75
|
Build(deps): Bump github/codeql-action from 2 to 3 (#39502)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2 to 3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v2...v3)
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-12-17 10:41:14 +02:00 |
|
dependabot[bot]
|
52edf180c5
|
Build(deps): Bump actions/checkout from 3 to 4 (#39148)
Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v4)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-09-13 12:47:26 +03:00 |
|
XhmikosR
|
898cfc740d
|
Update codeql.yml (#38225)
|
2023-03-14 09:10:31 +02:00 |
|
XhmikosR
|
9aff4cdc90
|
CodeQL: ignore dist folder (#37486)
|
2022-11-14 18:40:09 +02:00 |
|
XhmikosR
|
8387827c13
|
Update CodeQL Action (#37481)
|
2022-11-12 13:09:35 +02:00 |
|
XhmikosR
|
11f5d28db6
|
CI: remove git credentials after checkout (#37459)
|
2022-11-09 09:21:55 +02:00 |
|
dependabot[bot]
|
314a9dd949
|
Bump github/codeql-action from 1 to 2 (#36230)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1 to 2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v1...v2)
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2022-05-10 09:33:45 +03:00 |
|
dependabot[bot]
|
c766904aa2
|
Bump actions/checkout from 2 to 3 (#35933)
Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2...v3)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: XhmikosR <xhmikosr@gmail.com>
|
2022-03-02 16:51:46 +02:00 |
|
XhmikosR
|
6eef480e1e
|
CI: add workflow_dispatch (#35454)
|
2021-12-02 23:02:11 +02:00 |
|
XhmikosR
|
8b0b34e92e
|
Update CodeQL workflow (#34961)
|
2021-09-14 09:07:59 +03:00 |
|
XhmikosR
|
205e2cae70
|
CodeQL: skip dependabot PRs too (#33130)
|
2021-03-02 16:09:49 +02:00 |
|
XhmikosR
|
c3e8a0ef2a
|
Update CodeQL Action (#32452)
|
2020-12-15 09:14:03 +02:00 |
|
XhmikosR
|
d61f506a5f
|
Update codeql.yml (#32125)
Specify the branches and clean up the comments
|
2020-11-24 08:35:33 +02:00 |
|
XhmikosR
|
e993ca76e0
|
CI: Skip dependabot PR branches. (#32006)
Also, reword Node.js setup step
|
2020-10-29 19:26:15 +02:00 |
|
XhmikosR
|
646a706764
|
Update CodeQL action (#31930)
Should run on PRs too.
|
2020-10-26 18:56:16 +02:00 |
|
XhmikosR
|
a22e2900f9
|
Update codeql.yml (#30777)
Remove moot fail-fast option
|
2020-05-11 21:04:27 +03:00 |
|
XhmikosR
|
9e8d6ba3f8
|
Update codeql.yml (#30719)
Remove `pull_request` event since it's not supported.
|
2020-05-04 19:24:26 +03:00 |
|
XhmikosR
|
ad75ee191f
|
Update codeql.yml (#30679)
* run the action on PRs too
* specify `javascript` language
* remove comments
* reindent
|
2020-04-29 16:57:10 +03:00 |
|
XhmikosR
|
6d7cb22728
|
Move codeql.yml one dir up (#30677)
|
2020-04-29 15:01:48 +03:00 |
|