Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Merge main into v1 #913

Merged
merged 63 commits into from Feb 7, 2022
Merged

Merge main into v1 #913

merged 63 commits into from Feb 7, 2022

Commits on Jan 29, 2022

  1. Bump trim-off-newlines from 1.0.2 to 1.0.3 

    Bumps [trim-off-newlines](https://github.com/stevemao/trim-off-newlines) from 1.0.2 to 1.0.3.
- [Release notes](https://github.com/stevemao/trim-off-newlines/releases)
- [Commits](stevemao/trim-off-newlines@v1.0.2...v1.0.3)

---
updated-dependencies:
- dependency-name: trim-off-newlines
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed Jan 29, 2022
    Copy the full SHA
    253bc84 View commit details
    Browse the repository at this point in the history

  2. Update checked-in dependencies

    github-actions[bot] committed Jan 29, 2022
    Copy the full SHA
    8e07ec6 View commit details
    Browse the repository at this point in the history

Commits on Jan 31, 2022

  1. Merge branch 'main' into dependabot/npm_and_yarn/trim-off-newlines-1.0.3

    @henrymercer
    henrymercer committed Jan 31, 2022
    Copy the full SHA
    9664bae View commit details
    Browse the repository at this point in the history

  2. Merge pull request #893 from github/dependabot/npm_and_yarn/trim-off-… 

    …newlines-1.0.3

Bump trim-off-newlines from 1.0.2 to 1.0.3
    @henrymercer
    henrymercer committed Jan 31, 2022
    Copy the full SHA
    ea2ef85 View commit details
    Browse the repository at this point in the history

  3. Update changelog and version after v1.0.31

    github-actions[bot] committed Jan 31, 2022
    Copy the full SHA
    30790fe View commit details
    Browse the repository at this point in the history

  4. 1.0.32

    github-actions[bot] committed Jan 31, 2022
    Copy the full SHA
    ce6e94b View commit details
    Browse the repository at this point in the history

  5. Merge branch 'main' into mergeback/v1.0.31-to-main-1a927e93

    @aeisenberg
    aeisenberg committed Jan 31, 2022
    Copy the full SHA
    6677734 View commit details
    Browse the repository at this point in the history

  6. Update checked-in dependencies

    github-actions[bot] committed Jan 31, 2022
    Copy the full SHA
    a602dbe View commit details
    Browse the repository at this point in the history

  7. Bump long from 4.0.0 to 5.2.0 

    Bumps [long](https://github.com/dcodeIO/long.js) from 4.0.0 to 5.2.0.
- [Release notes](https://github.com/dcodeIO/long.js/releases)
- [Commits](dcodeIO/long.js@4.0.0...v5.2.0)

---
updated-dependencies:
- dependency-name: long
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed Jan 31, 2022
    Copy the full SHA
    ba2b46d View commit details
    Browse the repository at this point in the history

  8. Update checked-in dependencies

    github-actions[bot] committed Jan 31, 2022
    Copy the full SHA
    3929310 View commit details
    Browse the repository at this point in the history

  9. Merge pull request #900 from github/mergeback/v1.0.31-to-main-1a927e93 

    Mergeback v1.0.31 refs/heads/v1 into main
    @aeisenberg
    aeisenberg committed Jan 31, 2022
    Copy the full SHA
    e9d5234 View commit details
    Browse the repository at this point in the history

Commits on Feb 1, 2022

  1. Add a permissions block for generated workflows 

    Ensure that all workflows are able to write security events.
    @aeisenberg
    aeisenberg committed Feb 1, 2022
    Copy the full SHA
    e9aa2c6 View commit details
    Browse the repository at this point in the history

  2. Adds ref and SHA as inputs, and sarif-id as output

    @cw-alexcroteau
    cw-alexcroteau committed Feb 1, 2022
    Copy the full SHA
    980fd4e View commit details
    Browse the repository at this point in the history

  3. Apply documentation suggestions from code review 

    Co-authored-by: Andrew Eisenberg <aeisenberg@github.com>
    @cw-alexcroteau @aeisenberg
    cw-alexcroteau and aeisenberg committed Feb 1, 2022
    Copy the full SHA
    0dd4dbf View commit details
    Browse the repository at this point in the history

  4. Applies recomendation in upload-sarif/action.yml

    @cw-alexcroteau
    cw-alexcroteau committed Feb 1, 2022
    Copy the full SHA
    5916f98 View commit details
    Browse the repository at this point in the history

  5. Adds check on inputs and compiled files

    @cw-alexcroteau
    cw-alexcroteau committed Feb 1, 2022
    Copy the full SHA
    1eaaf07 View commit details
    Browse the repository at this point in the history

  6. Adds integration test and fixes linting

    @cw-alexcroteau
    cw-alexcroteau committed Feb 1, 2022
    Copy the full SHA
    1bfa9ac View commit details
    Browse the repository at this point in the history

  7. Fixes integration test

    @cw-alexcroteau
    cw-alexcroteau committed Feb 1, 2022
    Copy the full SHA
    260b4d5 View commit details
    Browse the repository at this point in the history

  8. Updates javascript files

    @cw-alexcroteau
    cw-alexcroteau committed Feb 1, 2022
    Copy the full SHA
    3cc8799 View commit details
    Browse the repository at this point in the history

  9. Fixes integration tests referred repo

    @cw-alexcroteau
    cw-alexcroteau committed Feb 1, 2022
    Copy the full SHA
    63d0c78 View commit details
    Browse the repository at this point in the history

  10. Changes to commit hash in main branch

    @cw-alexcroteau
    cw-alexcroteau committed Feb 1, 2022
    Copy the full SHA
    dfe2bc4 View commit details
    Browse the repository at this point in the history

  11. Splits integration tests

    @cw-alexcroteau
    cw-alexcroteau committed Feb 1, 2022
    Copy the full SHA
    9f36b75 View commit details
    Browse the repository at this point in the history

  12. Regenerates test workflows

    @cw-alexcroteau
    cw-alexcroteau committed Feb 1, 2022
    Copy the full SHA
    72f9a88 View commit details
    Browse the repository at this point in the history

  13. Merge branch 'main' into dependabot/npm_and_yarn/long-5.2.0

    @henrymercer
    henrymercer committed Feb 1, 2022
    Copy the full SHA
    ae87410 View commit details
    Browse the repository at this point in the history

  14. Merge pull request #901 from github/dependabot/npm_and_yarn/long-5.2.0 

    Bump long from 4.0.0 to 5.2.0
    @henrymercer
    henrymercer committed Feb 1, 2022
    Copy the full SHA
    a9da9fc View commit details
    Browse the repository at this point in the history

  15. Bump @ava/typescript from 2.0.0 to 3.0.1 

    Bumps [@ava/typescript](https://github.com/avajs/typescript) from 2.0.0 to 3.0.1.
- [Release notes](https://github.com/avajs/typescript/releases)
- [Commits](avajs/typescript@v2.0.0...v3.0.1)

---
updated-dependencies:
- dependency-name: "@ava/typescript"
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot
    dependabot[bot] committed Feb 1, 2022
    Copy the full SHA
    1163942 View commit details
    Browse the repository at this point in the history

  16. Detect merge base as base_sha for upload

    @cannist
    cannist committed Feb 1, 2022
    Copy the full SHA
    e836f97 View commit details
    Browse the repository at this point in the history

  17. remove some debug info

    @cannist
    cannist committed Feb 1, 2022
    Copy the full SHA
    ec0b3ae View commit details
    Browse the repository at this point in the history

  18. Update checked-in dependencies

    github-actions[bot] committed Feb 1, 2022
    Copy the full SHA
    9a40cc5 View commit details
    Browse the repository at this point in the history

  19. Avoid sending status reports in test mode

    @aeisenberg
    aeisenberg committed Feb 1, 2022
    Copy the full SHA
    36419a7 View commit details
    Browse the repository at this point in the history

  20. Merge branch 'aeisenberg/permissions' into add-ref-input

    @aeisenberg
    aeisenberg committed Feb 1, 2022
    Copy the full SHA
    13f97c8 View commit details
    Browse the repository at this point in the history

  21. Update the description of new inputs 

    These new inputs will not work on pull requests from forks.
    @aeisenberg
    aeisenberg committed Feb 1, 2022
    Copy the full SHA
    6c6b8c3 View commit details
    Browse the repository at this point in the history

  22. Merge branch 'main' into aeisenberg/permissions

    @aeisenberg
    aeisenberg committed Feb 1, 2022
    Copy the full SHA
    941e382 View commit details
    Browse the repository at this point in the history

  23. Merge pull request #902 from github/aeisenberg/permissions 

    Add a permissions block for generated workflows
    @aeisenberg
    aeisenberg committed Feb 1, 2022
    Copy the full SHA
    57f34a1 View commit details
    Browse the repository at this point in the history

  24. Upgrade Ava to v4

    @henrymercer
    henrymercer committed Feb 1, 2022
    1
    Copy the full SHA
    ce89f1b View commit details
    Browse the repository at this point in the history

  25. Merge branch 'main' into dependabot/npm_and_yarn/ava/typescript-3.0.1

    @henrymercer
    henrymercer committed Feb 1, 2022
    Copy the full SHA
    e9aa623 View commit details
    Browse the repository at this point in the history

  26. Merge pull request #3 from aeisenberg/aeisenberg/add-ref-input 

    Update the description of new inputs
    @cw-alexcroteau
    cw-alexcroteau committed Feb 1, 2022
    Copy the full SHA
    9bfa05f View commit details
    Browse the repository at this point in the history

Commits on Feb 2, 2022

  1. Merge branch 'main' into add-ref-input

    @cw-alexcroteau
    cw-alexcroteau committed Feb 2, 2022
    Copy the full SHA
    1a5b604 View commit details
    Browse the repository at this point in the history

  2. Merge pull request #904 from cw-acroteau/add-ref-input 

    Add ref input
    @aeisenberg
    aeisenberg committed Feb 2, 2022
    Copy the full SHA
    7719458 View commit details
    Browse the repository at this point in the history

  3. Remove security-events: write from tests 

    This is not necessary.
    @aeisenberg
    aeisenberg committed Feb 2, 2022
    Copy the full SHA
    b2af074 View commit details
    Browse the repository at this point in the history

  4. Fix changelog 

    Move a couple of entries for #889 that should have been in the
unreleased section but were inadvertently moved into the 1.0.31
release.
    @henrymercer
    henrymercer committed Feb 2, 2022
    Copy the full SHA
    78eb2c9 View commit details
    Browse the repository at this point in the history

  5. Merge pull request #905 from github/henrymercer/fix-changelog 

    Fix changelog
    @henrymercer
    henrymercer committed Feb 2, 2022
    Copy the full SHA
    6081b90 View commit details
    Browse the repository at this point in the history

  6. Fix typo in error message

    @aibaars
    aibaars committed Feb 2, 2022
    Copy the full SHA
    d57c276 View commit details
    Browse the repository at this point in the history

  7. Merge branch 'main' into use-better-base-sha

    @cannist
    cannist committed Feb 2, 2022
    Copy the full SHA
    3469c69 View commit details
    Browse the repository at this point in the history

  8. Merge pull request #906 from github/aibaars/fix-typo 

    Fix typo in error message
    @henrymercer
    henrymercer committed Feb 2, 2022
    Copy the full SHA
    942b34d View commit details
    Browse the repository at this point in the history

  9. Merge branch 'main' into dependabot/npm_and_yarn/ava/typescript-3.0.1

    @henrymercer
    henrymercer committed Feb 2, 2022
    Copy the full SHA
    6a6a320 View commit details
    Browse the repository at this point in the history

  10. Merge pull request #822 from github/dependabot/npm_and_yarn/ava/types… 

    …cript-3.0.1

Upgrade AVA to v4
    @henrymercer
    henrymercer committed Feb 2, 2022
    Copy the full SHA
    ff33f03 View commit details
    Browse the repository at this point in the history

Commits on Feb 3, 2022

  1. Convert status report comments to documentation

    @henrymercer
    henrymercer committed Feb 3, 2022
    Copy the full SHA
    a005206 View commit details
    Browse the repository at this point in the history

  2. Add ML-powered queries enablement to init status report 

    We report this information in the `init` status report rather than the
`analyze` status report so we can gather data about timeouts.
    @henrymercer
    henrymercer committed Feb 3, 2022
    Copy the full SHA
    1cddec9 View commit details
    Browse the repository at this point in the history

Commits on Feb 4, 2022

  1. Merge branch 'main' into use-better-base-sha

    @cannist
    cannist committed Feb 4, 2022
    Copy the full SHA
    9b14aa7 View commit details
    Browse the repository at this point in the history

  2. Merge pull request #858 from github/use-better-base-sha 

    Declare the merge base as base for code scanning comparisons
    @cannist
    cannist committed Feb 4, 2022
    Copy the full SHA
    904d0ac View commit details
    Browse the repository at this point in the history

  3. Only add ML-powered queries pack if the user didn't manually request it

    @henrymercer
    henrymercer committed Feb 4, 2022
    Copy the full SHA
    9f32fc9 View commit details
    Browse the repository at this point in the history

  4. Add "multiple" report for ML-powered JS query enablement 

    When multiple ML-powered JS packs are in scope (an unsupported
scenario), the status report is "multiple".
    @henrymercer
    henrymercer committed Feb 4, 2022
    Copy the full SHA
    537b2f8 View commit details
    Browse the repository at this point in the history

  5. Merge branch 'main' into henrymercer/report-ml-powered-query-enablement

    @henrymercer
    henrymercer committed Feb 4, 2022
    Copy the full SHA
    ad40e4a View commit details
    Browse the repository at this point in the history

  6. Update getMlPoweredJsQueriesStatus doc

    @henrymercer
    henrymercer committed Feb 4, 2022
    Copy the full SHA
    501fe7f View commit details
    Browse the repository at this point in the history

  7. Update default CodeQL version to 2.8.0

    @cklin
    cklin committed Feb 4, 2022
    Copy the full SHA
    aab5452 View commit details
    Browse the repository at this point in the history

  8. Merge pull request #911 from github/cklin/codeql-cli-2.8.0 

    Update default CodeQL version to 2.8.0
    @cklin
    cklin committed Feb 4, 2022
    Copy the full SHA
    16d4068 View commit details
    Browse the repository at this point in the history

Commits on Feb 7, 2022

  1. Nit: Simplify code with optional chaining

    @henrymercer
    henrymercer committed Feb 7, 2022
    Copy the full SHA
    f888be7 View commit details
    Browse the repository at this point in the history

  2. Limit cardinality of ML-powered JS queries status report 

    Some platforms that ingest this status report charge based on the
cardinality of the fields, so here we restrict the version strings we
support to a fixed set.
    @henrymercer
    henrymercer committed Feb 7, 2022
    Copy the full SHA
    c95a3d8 View commit details
    Browse the repository at this point in the history

  3. Merge branch 'main' into henrymercer/report-ml-powered-query-enablement

    @henrymercer
    henrymercer committed Feb 7, 2022
    Copy the full SHA
    cc622a0 View commit details
    Browse the repository at this point in the history

  4. Add more documentation for ML-powered JS queries status report 

    Also be more explicit about which version strings are reportable in
the code.
    @henrymercer
    henrymercer committed Feb 7, 2022
    Copy the full SHA
    03c64ef View commit details
    Browse the repository at this point in the history

  5. Merge pull request #907 from github/henrymercer/report-ml-powered-que… 

    …ry-enablement

Report ML-powered query enablement in the `init` status report
    @henrymercer
    henrymercer committed Feb 7, 2022
    Copy the full SHA
    4eb03fb View commit details
    Browse the repository at this point in the history

  6. 1.0.32

    github-actions[bot] committed Feb 7, 2022
    Copy the full SHA
    6d8390b View commit details
    Browse the repository at this point in the history