[PR #4989] [MERGED] Bump github/codeql-action from 1.1.2 to 1.1.3 #5321

New issue

Closed

opened 2026-05-05 10:36:16 -06:00 by gitea-mirror · 0 comments

gitea-mirror commented 2026-05-05 10:36:16 -06:00

Owner

Copy link

📋 Pull Request Information

Original PR: https://github.com/netblue30/firejail/pull/4989
Author: @dependabot[bot]
Created: 2/28/2022
Status: ✅ Merged
Merged: 2/28/2022
Merged by: @topimiettinen

Base: master ← Head: dependabot/github_actions/github/codeql-action-1.1.3

---

📝 Commits (1)

• 07f7241 Bump github/codeql-action from 1.1.2 to 1.1.3

📊 Changes

1 file changed (+3 additions, -3 deletions)

View changed files

📝 .github/workflows/codeql-analysis.yml (+3 -3)

📄 Description

Bumps github/codeql-action from 1.1.2 to 1.1.3.

Changelog

Sourced from github/codeql-action's changelog.

CodeQL Action and CodeQL Runner Changelog

[UNRELEASED]

No user facing changes.

1.1.3 - 23 Feb 2022

• Fix bug where the CLR traces can continue tracing even after tracing should be stopped. #938

1.1.2 - 17 Feb 2022

• Due to potential issues for GHES 3.1–3.3 customers who are using recent versions of the CodeQL Action via GHES Connect, the CodeQL Action now uses Node.js v12 rather than Node.js v16. #937

1.1.1 - 17 Feb 2022

• The CodeQL CLI versions up to and including version 2.4.4 are not compatible with the CodeQL Action 1.1.1 and later. The Action will emit an error if it detects that it is being used by an incompatible version of the CLI. #931
• Update default CodeQL bundle version to 2.8.1. #925

1.1.0 - 11 Feb 2022

• The CodeQL Action now uses Node.js v16. #909
• Beware that the CodeQL build tracer in this release (and in all earlier releases) is incompatible with Windows 11 and Windows Server 2022. This incompatibility affects database extraction for compiled languages: cpp, csharp, go, and java. As a result, analyzing these languages with the windows-latest or windows-2022 Actions virtual environments is currently unsupported. If you use any of these languages, please use the windows-2019 Actions virtual environment or otherwise avoid these specific Windows versions until a new release fixes this incompatibility.

1.0.32 - 07 Feb 2022

• Add sarif-id as an output for the upload-sarif and analyze actions. #889
• Add ref and sha inputs to the analyze action, which override the defaults provided by the GitHub Action context. #889
• Update default CodeQL bundle version to 2.8.0. #911

1.0.31 - 31 Jan 2022

• Remove experimental message when using custom CodeQL packages. #888
• Add a better warning message stating that experimental features will be disabled if the workflow has been triggered by a pull request from a fork or the security-events: write permission is not present. #882

1.0.30 - 24 Jan 2022

• Display a better error message when encountering a workflow that runs the codeql-action/init action multiple times. #876
• Update default CodeQL bundle version to 2.7.6. #877

1.0.29 - 21 Jan 2022

• The feature to wait for SARIF processing to complete after upload has been disabled by default due to a bug in its interaction with pull requests from forks.

1.0.28 - 18 Jan 2022

• Update default CodeQL bundle version to 2.7.5. #866
• Fix a bug where SARIF files were failing upload due to an invalid test for unique categories. #872

1.0.27 - 11 Jan 2022

... (truncated)

Commits

• 75f07e7 Merge pull request #946 from github/update-v1.1.3-d7ad71d8
• 42c72a1 Update runner version
• fa57ef0 Update changelog
• 4b66d31 1.1.3
• d7ad71d Merge pull request #938 from github/respect-end-tracing
• afbddca Improve error handling for ending tracing
• c592525 Respect end-tracing script instead of deleting one variable
• f14beeb Merge pull request #942 from github/aeisenberg/user-error
• 3d93bb2 Add UserError
• 040feef Merge pull request #941 from github/mergeback/v1.1.2-to-main-d39d5d5c
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/netblue30/firejail/pull/4989 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 2/28/2022 **Status:** ✅ Merged **Merged:** 2/28/2022 **Merged by:** [@topimiettinen](https://github.com/topimiettinen) **Base:** `master` ← **Head:** `dependabot/github_actions/github/codeql-action-1.1.3` --- ### 📝 Commits (1) - [`07f7241`](https://github.com/netblue30/firejail/commit/07f72418d18955a035e059af932947a50a9539a6) Bump github/codeql-action from 1.1.2 to 1.1.3 ### 📊 Changes **1 file changed** (+3 additions, -3 deletions) <details> <summary>View changed files</summary> 📝 `.github/workflows/codeql-analysis.yml` (+3 -3) </details> ### 📄 Description Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1.1.2 to 1.1.3. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's changelog</a>.</em></p> <blockquote> <h1>CodeQL Action and CodeQL Runner Changelog</h1> <h2>[UNRELEASED]</h2> <p>No user facing changes.</p> <h2>1.1.3 - 23 Feb 2022</h2> <ul> <li>Fix bug where the CLR traces can continue tracing even after tracing should be stopped. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/938">#938</a></li> </ul> <h2>1.1.2 - 17 Feb 2022</h2> <ul> <li>Due to potential issues for GHES 3.1–3.3 customers who are using recent versions of the CodeQL Action via GHES Connect, the CodeQL Action now uses Node.js v12 rather than Node.js v16. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/937">#937</a></li> </ul> <h2>1.1.1 - 17 Feb 2022</h2> <ul> <li>The CodeQL CLI versions up to and including version 2.4.4 are not compatible with the CodeQL Action 1.1.1 and later. The Action will emit an error if it detects that it is being used by an incompatible version of the CLI. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/931">#931</a></li> <li>Update default CodeQL bundle version to 2.8.1. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/925">#925</a></li> </ul> <h2>1.1.0 - 11 Feb 2022</h2> <ul> <li>The CodeQL Action now uses Node.js v16. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/909">#909</a></li> <li>Beware that the CodeQL build tracer in this release (and in all earlier releases) is incompatible with Windows 11 and Windows Server 2022. This incompatibility affects database extraction for compiled languages: cpp, csharp, go, and java. As a result, analyzing these languages with the <code>windows-latest</code> or <code>windows-2022</code> Actions virtual environments is currently unsupported. If you use any of these languages, please use the <code>windows-2019</code> Actions virtual environment or otherwise avoid these specific Windows versions until a new release fixes this incompatibility.</li> </ul> <h2>1.0.32 - 07 Feb 2022</h2> <ul> <li>Add <code>sarif-id</code> as an output for the <code>upload-sarif</code> and <code>analyze</code> actions. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/889">#889</a></li> <li>Add <code>ref</code> and <code>sha</code> inputs to the <code>analyze</code> action, which override the defaults provided by the GitHub Action context. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/889">#889</a></li> <li>Update default CodeQL bundle version to 2.8.0. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/911">#911</a></li> </ul> <h2>1.0.31 - 31 Jan 2022</h2> <ul> <li>Remove <code>experimental</code> message when using custom CodeQL packages. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/888">#888</a></li> <li>Add a better warning message stating that experimental features will be disabled if the workflow has been triggered by a pull request from a fork or the <code>security-events: write</code> permission is not present. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/882">#882</a></li> </ul> <h2>1.0.30 - 24 Jan 2022</h2> <ul> <li>Display a better error message when encountering a workflow that runs the <code>codeql-action/init</code> action multiple times. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/876">#876</a></li> <li>Update default CodeQL bundle version to 2.7.6. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/877">#877</a></li> </ul> <h2>1.0.29 - 21 Jan 2022</h2> <ul> <li>The feature to wait for SARIF processing to complete after upload has been disabled by default due to a bug in its interaction with pull requests from forks.</li> </ul> <h2>1.0.28 - 18 Jan 2022</h2> <ul> <li>Update default CodeQL bundle version to 2.7.5. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/866">#866</a></li> <li>Fix a bug where SARIF files were failing upload due to an invalid test for unique categories. <a href="https://github-redirect.dependabot.com/github/codeql-action/pull/872">#872</a></li> </ul> <h2>1.0.27 - 11 Jan 2022</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/github/codeql-action/commit/75f07e7ab2ee63cba88752d8c696324e4df67466"><code>75f07e7</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/github/codeql-action/issues/946">#946</a> from github/update-v1.1.3-d7ad71d8</li> <li><a href="https://github.com/github/codeql-action/commit/42c72a10c8571d935d7081af337c97ca9949faaf"><code>42c72a1</code></a> Update runner version</li> <li><a href="https://github.com/github/codeql-action/commit/fa57ef0579dbce04d5637ce0dc5f31c1b35d77ba"><code>fa57ef0</code></a> Update changelog</li> <li><a href="https://github.com/github/codeql-action/commit/4b66d317a47af9bbd077097901c7c7a854f78732"><code>4b66d31</code></a> 1.1.3</li> <li><a href="https://github.com/github/codeql-action/commit/d7ad71d8034d228d5c8076dc7f058905e272a3fd"><code>d7ad71d</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/github/codeql-action/issues/938">#938</a> from github/respect-end-tracing</li> <li><a href="https://github.com/github/codeql-action/commit/afbddca2632bdfcb77ba72515fbc83f2e429996b"><code>afbddca</code></a> Improve error handling for ending tracing</li> <li><a href="https://github.com/github/codeql-action/commit/c592525a6713199a348284374df232502c844ee4"><code>c592525</code></a> Respect <code>end-tracing</code> script instead of deleting one variable</li> <li><a href="https://github.com/github/codeql-action/commit/f14beebc581c3b241628b8f79fce8292b02666ba"><code>f14beeb</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/github/codeql-action/issues/942">#942</a> from github/aeisenberg/user-error</li> <li><a href="https://github.com/github/codeql-action/commit/3d93bb2ac95b2d131a1470d7dd3d11abf834a2f5"><code>3d93bb2</code></a> Add <code>UserError</code></li> <li><a href="https://github.com/github/codeql-action/commit/040feefecff4ae0fc15c110822a5f96516b0629e"><code>040feef</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/github/codeql-action/issues/941">#941</a> from github/mergeback/v1.1.2-to-main-d39d5d5c</li> <li>Additional commits viewable in <a href="https://github.com/github/codeql-action/compare/d39d5d5c9707b926d517b1b292905ef4c03aa777...75f07e7ab2ee63cba88752d8c696324e4df67466">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- _{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

gitea-mirror 2026-05-05 10:36:16 -06:00

• closed this issue
• added the
  pull-request
  label

gitea-mirror referenced this issue 2026-05-05 10:38:32 -06:00

[PR #5322] [MERGED] man.profile needs additional private-etc items on arch #5443

Sign in to join this conversation.

No Branch/Tag specified

Branches Tags

master

serialize_remounts_v2

landlock_v4

landlock

release-0.9.64

release-0.9.62

gitlab_ci

LTSbase

fred_ctests

docs

0.9.80

0.9.80-rc1

0.9.78

0.9.76

0.9.76-rc4

0.9.76-rc3

0.9.76-rc2

0.9.76-rc1

0.9.74

landlock-split

0.9.72

0.9.72rc1

0.9.70

0.9.68

0.9.68rc1

0.9.66

0.9.66rc1

0.9.64.4

0.9.64.2

0.9.64

0.9.64rc1

0.9.62.4

0.9.62.2

0.9.62

0.9.56.2-LTS

0.9.60

0.9.60-rc1

0.9.58.2

0.9.58

0.9.58-rc1

0.9.56-LTS-release

0.9.56-LTS

0.9.56

0.9.56-rc1

0.9.54

0.9.54-rc2

0.9.54-rc1

0.9.52

0.9.38.12

0.9.50

0.9.50-rc1

0.9.48

0.9.46

0.9.46-rc1

0.9.44.10

0.9.44.8

0.9.44.6

0.9.38.10

0.9.44.4

0.9.38.8

0.9.44.2

0.9.44

0.9.44-rc1

0.9.38.4

0.9.42

0.9.42-rc2

0.9.38.2

0.9.42-rc1

disable-globalcfg

0.9.40

0.9.40-rc1

0.9.38

0.9.38-rc1

0.9.36

0.9.36-rc1

0.9.34

0.9.34-rc1

0.9.32

0.9.32-rc1

0.9.30

0.9.30-rc1

Labels

Clear labels   

LTS merge

  

LTS merge

  

bug

  

bug

  

converted-to-discussion

  

doc-todo

  

documentation

  

duplicate

  

enhancement

  

file-transfer

  

firecfg

  

firejail-in-firejail

  

firetools

  

graphics

  

help wanted

  

information_old

  

installation

  

invalid

  

modif

  

moved

  

needinfo

  

networking

  

notabug

  

notourbug

  

old-version

  

overlayfs

  

packaging

  

profile-request

  

pull-request

Mirrored from GitHub Pull Request

  

question

  

question_old

  

removal

  

runtime-permissions

  

sandbox-ipc

  

security

  

stale

  

wiki

  

wiki

  

wontfix

  

wordpress

  

workaround

No labels

LTS merge

LTS merge

bug

bug

converted-to-discussion

doc-todo

documentation

duplicate

enhancement

file-transfer

firecfg

firejail-in-firejail

firetools

graphics

help wanted

information_old

installation

invalid

modif

moved

needinfo

networking

notabug

notourbug

old-version

overlayfs

packaging

profile-request

pull-request

question

question_old

removal

runtime-permissions

sandbox-ipc

security

stale

wiki

wiki

wontfix

wordpress

workaround

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#5321

No description provided.