[PR #5781] [MERGED] build(deps): bump github/codeql-action from 2.2.9 to 2.2.11 #5662

Closed
opened 2026-05-05 10:42:37 -06:00 by gitea-mirror · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/netblue30/firejail/pull/5781
Author: @dependabot[bot]
Created: 4/10/2023
Status: Merged
Merged: 4/10/2023
Merged by: @topimiettinen

Base: masterHead: dependabot/github_actions/github/codeql-action-2.2.11


📝 Commits (1)

  • 88b7acc build(deps): bump github/codeql-action from 2.2.9 to 2.2.11

📊 Changes

1 file changed (+3 additions, -3 deletions)

View changed files

📝 .github/workflows/codeql-analysis.yml (+3 -3)

📄 Description

Bumps github/codeql-action from 2.2.9 to 2.2.11.

Changelog

Sourced from github/codeql-action's changelog.

CodeQL Action Changelog

[UNRELEASED]

No user facing changes.

2.2.11 - 06 Apr 2023

No user facing changes.

2.2.10 - 05 Apr 2023

  • Update default CodeQL bundle version to 2.12.6. #1629

2.2.9 - 27 Mar 2023

  • Customers post-processing the SARIF output of the analyze Action before uploading it to Code Scanning will benefit from an improved debugging experience. #1598
    • The CodeQL Action will now upload a SARIF file with debugging information to Code Scanning on failed runs for customers using upload: false. Previously, this was only available for customers using the default value of the upload input.
    • The upload input to the analyze Action now accepts the following values:
      • always is the default value, which uploads the SARIF file to Code Scanning for successful and failed runs.
      • failure-only is recommended for customers post-processing the SARIF file before uploading it to Code Scanning. This option uploads debugging information to Code Scanning for failed runs to improve the debugging experience.
      • never avoids uploading the SARIF file to Code Scanning even if the code scanning run fails. This is not recommended for external users since it complicates debugging.
      • The legacy true and false options will be interpreted as always and failure-only respectively.

2.2.8 - 22 Mar 2023

  • Update default CodeQL bundle version to 2.12.5. #1585

2.2.7 - 15 Mar 2023

No user facing changes.

2.2.6 - 10 Mar 2023

  • Update default CodeQL bundle version to 2.12.4. #1561

2.2.5 - 24 Feb 2023

  • Update default CodeQL bundle version to 2.12.3. #1543

2.2.4 - 10 Feb 2023

No user facing changes.

2.2.3 - 08 Feb 2023

  • Update default CodeQL bundle version to 2.12.2. #1518

2.2.2 - 06 Feb 2023

... (truncated)

Commits
  • d186a2a Merge pull request #1638 from github/update-v2.2.11-518b24fea
  • 748f83e Update changelog for v2.2.11
  • 518b24f Merge pull request #1637 from github/henrymercer/fix-init-exception-reporting
  • 69371ff Merge branch 'main' into henrymercer/fix-init-exception-reporting
  • e5c2f32 Consistently wrap errors
  • c28edf0 Merge pull request #1636 from github/henrymercer/re-enable-duplicate-sarif-wo...
  • 555b602 Report exceptions to telemetry in init Action
  • 7193623 Re-enable duplicate SARIF notification location workaround
  • f32426b Merge pull request #1635 from github/mergeback/v2.2.10-to-main-8c8d71dd
  • 173a94c Update checked-in dependencies
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/netblue30/firejail/pull/5781 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 4/10/2023 **Status:** ✅ Merged **Merged:** 4/10/2023 **Merged by:** [@topimiettinen](https://github.com/topimiettinen) **Base:** `master` ← **Head:** `dependabot/github_actions/github/codeql-action-2.2.11` --- ### 📝 Commits (1) - [`88b7acc`](https://github.com/netblue30/firejail/commit/88b7acc1791c9d6966644e9f1d142400c50e45be) build(deps): bump github/codeql-action from 2.2.9 to 2.2.11 ### 📊 Changes **1 file changed** (+3 additions, -3 deletions) <details> <summary>View changed files</summary> 📝 `.github/workflows/codeql-analysis.yml` (+3 -3) </details> ### 📄 Description Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.2.9 to 2.2.11. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's changelog</a>.</em></p> <blockquote> <h1>CodeQL Action Changelog</h1> <h2>[UNRELEASED]</h2> <p>No user facing changes.</p> <h2>2.2.11 - 06 Apr 2023</h2> <p>No user facing changes.</p> <h2>2.2.10 - 05 Apr 2023</h2> <ul> <li>Update default CodeQL bundle version to 2.12.6. <a href="https://redirect.github.com/github/codeql-action/pull/1629">#1629</a></li> </ul> <h2>2.2.9 - 27 Mar 2023</h2> <ul> <li>Customers post-processing the SARIF output of the <code>analyze</code> Action before uploading it to Code Scanning will benefit from an improved debugging experience. <a href="https://redirect.github.com/github/codeql-action/pull/1598">#1598</a> <ul> <li>The CodeQL Action will now upload a SARIF file with debugging information to Code Scanning on failed runs for customers using <code>upload: false</code>. Previously, this was only available for customers using the default value of the <code>upload</code> input.</li> <li>The <code>upload</code> input to the <code>analyze</code> Action now accepts the following values: <ul> <li><code>always</code> is the default value, which uploads the SARIF file to Code Scanning for successful and failed runs.</li> <li><code>failure-only</code> is recommended for customers post-processing the SARIF file before uploading it to Code Scanning. This option uploads debugging information to Code Scanning for failed runs to improve the debugging experience.</li> <li><code>never</code> avoids uploading the SARIF file to Code Scanning even if the code scanning run fails. This is not recommended for external users since it complicates debugging.</li> <li>The legacy <code>true</code> and <code>false</code> options will be interpreted as <code>always</code> and <code>failure-only</code> respectively.</li> </ul> </li> </ul> </li> </ul> <h2>2.2.8 - 22 Mar 2023</h2> <ul> <li>Update default CodeQL bundle version to 2.12.5. <a href="https://redirect.github.com/github/codeql-action/pull/1585">#1585</a></li> </ul> <h2>2.2.7 - 15 Mar 2023</h2> <p>No user facing changes.</p> <h2>2.2.6 - 10 Mar 2023</h2> <ul> <li>Update default CodeQL bundle version to 2.12.4. <a href="https://redirect.github.com/github/codeql-action/pull/1561">#1561</a></li> </ul> <h2>2.2.5 - 24 Feb 2023</h2> <ul> <li>Update default CodeQL bundle version to 2.12.3. <a href="https://redirect.github.com/github/codeql-action/pull/1543">#1543</a></li> </ul> <h2>2.2.4 - 10 Feb 2023</h2> <p>No user facing changes.</p> <h2>2.2.3 - 08 Feb 2023</h2> <ul> <li>Update default CodeQL bundle version to 2.12.2. <a href="https://redirect.github.com/github/codeql-action/pull/1518">#1518</a></li> </ul> <h2>2.2.2 - 06 Feb 2023</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/github/codeql-action/commit/d186a2a36cc67bfa1b860e6170d37fb9634742c7"><code>d186a2a</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/1638">#1638</a> from github/update-v2.2.11-518b24fea</li> <li><a href="https://github.com/github/codeql-action/commit/748f83eaabb67135a415fbeb7b80093a6e103783"><code>748f83e</code></a> Update changelog for v2.2.11</li> <li><a href="https://github.com/github/codeql-action/commit/518b24fea4ba18fbafa1f2be06c594583a0966a8"><code>518b24f</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/1637">#1637</a> from github/henrymercer/fix-init-exception-reporting</li> <li><a href="https://github.com/github/codeql-action/commit/69371ffa95d3dcf49f2d7bc36280b9d65d72fdb9"><code>69371ff</code></a> Merge branch 'main' into henrymercer/fix-init-exception-reporting</li> <li><a href="https://github.com/github/codeql-action/commit/e5c2f32a9f6386408594e3d45f14f4f8e2df4d42"><code>e5c2f32</code></a> Consistently wrap errors</li> <li><a href="https://github.com/github/codeql-action/commit/c28edf06a1d03b8250e56cb8ce4f947a55193f06"><code>c28edf0</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/1636">#1636</a> from github/henrymercer/re-enable-duplicate-sarif-wo...</li> <li><a href="https://github.com/github/codeql-action/commit/555b602b2f924c3419b1eec61ad4dd717756318e"><code>555b602</code></a> Report exceptions to telemetry in init Action</li> <li><a href="https://github.com/github/codeql-action/commit/7193623f40b19441a4b970ec34d09a1130440dbb"><code>7193623</code></a> Re-enable duplicate SARIF notification location workaround</li> <li><a href="https://github.com/github/codeql-action/commit/f32426ba96560beecf71186b24134fb3f613f377"><code>f32426b</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/1635">#1635</a> from github/mergeback/v2.2.10-to-main-8c8d71dd</li> <li><a href="https://github.com/github/codeql-action/commit/173a94ca3f87f2a4aa454c2f4165dd5b375edeb5"><code>173a94c</code></a> Update checked-in dependencies</li> <li>Additional commits viewable in <a href="https://github.com/github/codeql-action/compare/04df1262e6247151b5ac09cd2c303ac36ad3f62b...d186a2a36cc67bfa1b860e6170d37fb9634742c7">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=2.2.9&new-version=2.2.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
gitea-mirror 2026-05-05 10:42:37 -06:00
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#5662
No description provided.