Merge pull request #1224 from github/edoardo/2.10.4-bump

Bump CodeQL version to 2.10.4

CHANGELOG.md

@@ -3,6 +3,8 @@
 ## [UNRELEASED]
 
 - Downloading CodeQL packs has been moved to the `init` step. Previously, CodeQL packs were downloaded during the `analyze` step. [#1218](https://github.com/github/codeql-action/pull/1218)
+- Update default CodeQL bundle version to 2.10.4. [#1224](https://github.com/github/codeql-action/pull/1224)
+- The newly released [Poetry 1.2](https://python-poetry.org/blog/announcing-poetry-1.2.0) is not yet supported. In the most common case where the CodeQL Action is automatically installing Python dependencies, it will continue to install and use Poetry 1.1 on its own. However, in certain cases such as with self-hosted runners, you may need to ensure Poetry 1.1 is installed yourself.
 
 ## 2.1.21 - 25 Aug 2022
 

lib/defaults.json

@@ -1,3 +1,3 @@
 {
-    "bundleVersion": "codeql-bundle-20220811"
+    "bundleVersion": "codeql-bundle-20220825"
 }

python-setup/install_tools.ps1

@@ -8,6 +8,6 @@ py -3 -m pip install --user --upgrade pip setuptools wheel
 py -2 -m pip install --user 'virtualenv<20.11'
 py -3 -m pip install --user 'virtualenv<20.11'
 
-# poetry 1.0.10 has error (https://github.com/python-poetry/poetry/issues/2711)
-py -3 -m pip install --user poetry!=1.0.10
+# We aren't compatible with poetry 1.2
+py -3 -m pip install --user "poetry>=1.1,<1.2"
 py -3 -m pip install --user pipenv

python-setup/install_tools.sh

@@ -24,8 +24,8 @@ python3 -m pip install --user 'virtualenv<20.11'
 #       "program uses threads.", RuntimeWarning)
 #     LGTM_PYTHON_SETUP_VERSION=The currently activated Python version 2.7.18 is not supported by the project (^3.5). Trying to find and use a compatible version. Using python3 (3.8.2) 3
 
-# poetry 1.0.10 has error (https://github.com/python-poetry/poetry/issues/2711)
-python3 -m pip install --user poetry!=1.0.10
+# We aren't compatible with poetry 1.2
+python3 -m pip install --user "poetry>=1.1,<1.2"
 python3 -m pip install --user pipenv
 
 if command -v python2 >/dev/null 2>&1; then

src/defaults.json

@@ -1,3 +1,3 @@
 {
-  "bundleVersion": "codeql-bundle-20220811"
+  "bundleVersion": "codeql-bundle-20220825"
 }