Merged
Conversation
Create a new job to run actions since we don't need to matrix the runs across multiple OSes.
Mergeback v3.28.8 refs/heads/releases/v3 into main
Add actions analysis to code scanning
Pin `ruby/setup-ruby` Action to v1.215.0
Switch auth for enterprises-release repo from ssh to codeql CI token
Bumps the actions group with 1 update: [actions/create-github-app-token](https://github.com/actions/create-github-app-token). Updates `actions/create-github-app-token` from 1.11.1 to 1.11.2 - [Release notes](https://github.com/actions/create-github-app-token/releases) - [Commits](actions/create-github-app-token@c1a2851...136412a) --- updated-dependencies: - dependency-name: actions/create-github-app-token dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps the npm group with 5 updates: | Package | From | To | | --- | --- | --- | | [@octokit/types](https://github.com/octokit/types.ts) | `13.7.0` | `13.8.0` | | [semver](https://github.com/npm/node-semver) | `7.6.3` | `7.7.0` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.22.0` | `8.23.0` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.22.0` | `8.23.0` | | [eslint-plugin-github](https://github.com/github/eslint-plugin-github) | `5.1.5` | `5.1.7` | Updates `@octokit/types` from 13.7.0 to 13.8.0 - [Release notes](https://github.com/octokit/types.ts/releases) - [Commits](octokit/types.ts@v13.7.0...v13.8.0) Updates `semver` from 7.6.3 to 7.7.0 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md) - [Commits](npm/node-semver@v7.6.3...v7.7.0) Updates `@typescript-eslint/eslint-plugin` from 8.22.0 to 8.23.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.23.0/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 8.22.0 to 8.23.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.23.0/packages/parser) Updates `eslint-plugin-github` from 5.1.5 to 5.1.7 - [Release notes](https://github.com/github/eslint-plugin-github/releases) - [Commits](github/eslint-plugin-github@v5.1.5...v5.1.7) --- updated-dependencies: - dependency-name: "@octokit/types" dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm - dependency-name: semver dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm - dependency-name: "@typescript-eslint/eslint-plugin" dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: "@typescript-eslint/parser" dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: eslint-plugin-github dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm ... Signed-off-by: dependabot[bot] <support@github.com>
…s-29d379cebb build(deps): bump actions/create-github-app-token from 1.11.1 to 1.11.2 in the actions group
…d9b555 build(deps): bump the npm group with 5 updates
…t-config Send `init-post` status report in absence of config
Update default bundle to 2.20.4
Contributor
There was a problem hiding this comment.
PR Overview
This pull request merges changes from main into the releases/v3 branch. The purpose is to synchronize the latest updates, including workflows, configuration files, and the CHANGELOG. Below is a quick summary of the changes made:
- Added a new CodeQL Actions configuration file.
- Updated the CHANGELOG with a new release version and date.
- Updated various GitHub Actions workflows to reference newer commit SHAs and Python/Ruby versions.
- Adjusted logic in lib/init-action-post.js to remove an early return, ensuring debug artifact behavior is handled consistently.
Changes
| File | Description |
|---|---|
| .github/codeql/codeql-actions-config.yml | Adds a CodeQL Actions config file pointing to "security-and-quality" queries. |
| CHANGELOG.md | Adds a new version (3.28.9) entry and notes for updating the default CodeQL bundle version. |
| .github/workflows/__rubocop-multi-language.yml | Updates Ruby setup reference to a more specific commit for improved consistency. |
| .github/workflows/post-release-mergeback.yml | Pins actions/create-github-app-token to a newer commit for certain release processes. |
| lib/init-action-post.js | Removes an early return to allow additional debug artifact handling if config is undefined. |
| .github/workflows/update-supported-enterprise-server-versions.yml | Updates Python version from 3.7 to 3.13 for enterprise server version management. |
| .github/workflows/update-release-branch.yml | Pins actions/create-github-app-token to a newer commit for release branch updates. |
| .github/workflows/codeql.yml | Renames build job to analyze-javascript and adds an analyze-actions job for CodeQL. |
Copilot reviewed 1005 out of 1005 changed files in this pull request and generated no comments.
Tip: If you use Visual Studio Code, you can request a review from Copilot before you push from the "Source Control" tab. Learn more
aibaars
approved these changes
Feb 7, 2025
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
5 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Merging 24e1c2d into
releases/v3.Conductor for this PR is @aibaars.
Contains the following pull requests:
ruby/setup-rubyAction to v1.215.0 #2748 (@henrymercer)init-poststatus report in absence of config #2751 (@henrymercer)Please do the following:
releases/v3branch.Create a merge commitis selected rather thanSquash and mergeorRebase and merge.