Repository navigation

Merge releases/v4 into releases/v3 - #3577

Merged

mbg merged 147 commits into

releases/v3from

backport-v3.33.0-b1bff8193

Mar 16, 2026

Commits on Feb 26, 2026
- Rename secondary `run` to `uploadFailureInfo`
  mbg
  committed
  0f3e632
- Change order of checks in `tryUploadSarifIfRunFailed`
  mbg
  committed
  e9ce32d
- Change skipped reason message
  mbg
  committed
  56d1ccc
- Refactor `prepareFailedSarif` out of `maybeUploadFailedSarif`
  mbg
  committed
  60ca40e
- Upload failed SARIF as artifact for risk assessments
  mbg
  committed
  44b66a8
- Separate `generateFailedSarif` out of `prepareFailedSarif`
  mbg
  committed
  f265dd9
- Simplify `prepareFailedSarif` for risk assessments
  mbg
  committed
  5b9d1f4
- Add test
  mbg
  committed
  003044e
- Sanitise artifact name
  mbg
  committed
  ce97dfe
- Ensure correct failed SARIF file names for CSRA
  mbg
  committed
  ca32b84
Commits on Feb 27, 2026
- Refactor some test setup code into `mockRiskAssessmentEnv`
  mbg
  committed
  383b86d
- Add tests where upload should get skipped
  mbg
  committed
  1e7e52a
- Add more tests/assertions
  mbg
  committed
  e995ba3
Commits on Feb 28, 2026
- Fix typos in comments
  mbg
  committed
  f3663cd
Commits on Mar 3, 2026
- Extract `JobSpecification` type from `Specification`
  mbg
  committed
  5db3a9e
Commits on Mar 4, 2026
- Organise language-specific setup information
  mbg
  committed
  97a3705
- Refactor matrix generation into its own function
  mbg
  committed
  369d73b
- Refactor job generation into `generateJob`
  mbg
  committed
  92ab799
- Move `yq` setup code into `getSetupSteps`
  mbg
  committed
  95fc2f1
- Add support for additional, validation jobs
  mbg
  committed
  2b60771
Commits on Mar 5, 2026
- Merge branch 'main' into mbg/pr-checks/validation-jobs
  mbg
  committed
  56ebdff
- Add `tsconfig.json` for `pr-checks`
  mbg
  committed
  3d47812
- Fix `generateValidationJobs` typing
  mbg
  committed
  79fdef7
- Make it more explicit that `getSetupSteps` just needs a `JobSpecification`
  mbg
  committed
  103db93
- Fix condition
  mbg
  committed
  2a00604
- Remove `installPython` from checks which should no longer need it
  mbg
  committed
  0da2e79
- Update changelog and version after v4.32.6
  github-actions[bot]
  committed
  05a4820
- Rebuild
  github-actions[bot]
  committed
  0ccdcb8
Commits on Mar 6, 2026
- Merge pull request #3552 from github/mergeback/v4.32.6-to-main-0d579ffd
  oscarsj
  authored
  d1a6527
Commits on Mar 9, 2026
- Update `GitHubRepositoryProperty` to match schema
  mbg
  committed
  8e70ae2
- Only validate property `value` type if we care about the property
  mbg
  committed
  9c75a5f
- Validate `value` types returned by API against expectations
  mbg
  committed
  5899159
- Export types that weren't already
  mbg
  committed
  58314dc
- Include type in error message
  mbg
  committed
  5311ed4
- Add unknown property with `string[]` value
  mbg
  committed
  149fd14
- Run `prepare-test` after setup steps
  mbg
  committed
  da11f44
- Install python if there is no `matrix.version`
  mbg
  committed
  5ddbbbe
- Add changelog entry
  mbg
  committed
  6f90eb6
- Merge pull request #3549 from github/mbg/pr-checks/remove-python-setup
  mbg
  authored
  f054eea
- Merge pull request #3557 from github/mbg/repo-props/multi-select
  mbg
  authored
  b39251f
- Clean up repository properties feature flag
  henrymercer
  committed
  b35c0d3
- Remove GHES feature gate
  henrymercer
  committed
  8924dfb
- Add changelog note
  henrymercer
  committed
  a770e76
- Remove unused imports
  henrymercer
  committed
  b0642f9
- Drop unused variable
  henrymercer
  committed
  1b7fa1a
- Clean up pre GHES 3.14 code paths
  henrymercer
  committed
  ab180c9
- Linting: Require unused function parameters to start with `_`
  henrymercer
  committed
  fdecf48
- feat: add minimumVersion values for existing language-specific overlay feature flags
  sam-robson
  committed
  e046976
- test: verify overlay analysis is disabled for languages without per-language feature flags
  sam-robson
  committed
  867f2b0
- Require tools feature flag
  henrymercer
  committed
  c102a6d
- Add ability to override via repository property
  henrymercer
  committed
  9e8c059
- Add telemetry diagnostic to track whether repo property is used
  henrymercer
  committed
  a3fdd0e
- Add changelog note
  henrymercer
  committed
  6773afd
- Merge pull request #3559 from github/henrymercer/ghes-repository-properties
  henrymercer
  authored
  3c97288
- Address review comments
  henrymercer
  committed
  3592fe5
- Merge remote-tracking branch 'origin/main' into mbg/pr-checks/validation-jobs
  mbg
  committed
  8ba8180
- Merge pull request #3560 from github/henrymercer/ghes-3.13-cleanup
  mbg
  authored
  0ad7d7b
- Merge pull request #3561 from github/henrymercer/eslint-unused-vars
  mbg
  authored
  babab88
- Merge remote-tracking branch 'origin/main' into mbg/csra/upload-failed-sarif-artifact
  mbg
  committed
  746f940
- Extend `isPrintable` check to all keys with string values
  mbg
  committed
  65f7f36
- Merge branch 'main' into sam-robson/overlay-per-lang-min-bundle-version
  sam-robson
  authored
  8bddab0
Commits on Mar 10, 2026
- Move out auth config from `Credential` type
  mbg
  committed
  01b5262
- Add OIDC config types
  mbg
  committed
  9e26f9e
- Add predicates for `Auth` types
  mbg
  committed
  37eb89b
- Extract `AuthConfig` from `Credential`
  mbg
  committed
  7263be2
- Move `credentialToStr` and update it
  mbg
  committed
  e168f8e
- Run more `start-proxy` tests in parallel
  mbg
  committed
  3d57420
- Fix old test
  mbg
  committed
  4649e15
- Add OIDC tests for `getCredentials`
  mbg
  committed
  88bd340
- Add preliminary change note
  mbg
  committed
  e90d128
- Simplify default repo properties
  henrymercer
  committed
  3d2bdbb
- Reduce duplication of `getFileCoverageInformationEnabled`
  henrymercer
  committed
  55ae117
- Merge branch 'main' into henrymercer/skip-file-coverage-rollout
  henrymercer
  committed
  ce321da
- Merge pull request #3519 from github/mbg/csra/upload-failed-sarif-artifact
  mbg
  authored
  87c3b7b
- Fix retries when uploading databases
  henrymercer
  committed
  13c5489
- Add changelog note
  henrymercer
  committed
  ca969a9
- Update tests
  henrymercer
  committed
  edfcb0a
- Update to log deprecation warning
  henrymercer
  committed
  bef08ed
- Fix changelog entry
  mbg
  committed
  131392e
- Use `isDefined` for password and token in `credentialToStr`
  mbg
  committed
  823869d
- Merge branch 'main' into sam-robson/overlay-per-lang-min-bundle-version
  sam-robson
  authored
  79ea59d
- Add JSON helper types and functions
  mbg
  committed
  c6e75ac
- Type result of parsing JSON as `unknown` until narrowed
  mbg
  committed
  c92efdb
- Add environment variable override
  henrymercer
  committed
  55a0f2b
- Tweak changelog formatting
  henrymercer
  committed
  e07c305
- Address review comments
  henrymercer
  committed
  ee5ede7
- Update database upload tests to use `checkExpectedLogMessages`
  henrymercer
  committed
  cf972cd
- Address review comments
  mbg
  committed
  048d0ea
- Merge branch 'main' into henrymercer/skip-file-coverage-rollout
  henrymercer
  committed
  a11c6cb
- Refactor: Extract separate function for `uploadBundledDatabase`
  henrymercer
  committed
  a63886b
- Merge pull request #3564 from github/henrymercer/fix-database-upload-retries
  henrymercer
  authored
  5cb13d6
Commits on Mar 11, 2026
- Merge pull request #3550 from github/sam-robson/overlay-per-lang-min-bundle-version
  henrymercer
  authored
  2e7e91f
- Merge pull request #3562 from github/henrymercer/skip-file-coverage-rollout
  henrymercer
  authored
  997acaf
- Remove last use of `installPython`
  mbg
  committed
  b9b42be
- Remove `installPython` condition in `sync.ts`
  mbg
  committed
  2e1f08f
- Make it more explicit by construction that known inputs always have the same specifications
  mbg
  committed
  be7fe2b
- Extend base `tsconfig.json`
  mbg
  committed
  6570ad3
- Use `version` in error message
  mbg
  committed
  89f6321
- Verify PR checks in a different job, with newer Node
  mbg
  committed
  d1a7580
- Merge pull request #3541 from github/mbg/pr-checks/validation-jobs
  mbg
  authored
  1a97b0f
- Merge remote-tracking branch 'origin/main' into mbg/private-registry/oidc
  mbg
  committed
  6c99ca5
- PR checks: Add support for per-OS CodeQL version
  henrymercer
  committed
  2bc0658
- PR checks: Only run Go macOS tests on latest CodeQL versions
  henrymercer
  committed
  4174779
- PR checks: Replace inline arrays
  henrymercer
  committed
  30ecc82
- Sort OS list and versions consistently
  henrymercer
  committed
  117bf91
- Bump the npm-minor group with 2 updates
  dependabot[bot]
  authored
  de2997a
- Bump ava from 6.4.1 to 7.0.0
  dependabot[bot]
  authored
  f9f5edb
- CI: Set up Node.js 24 in rebuild workflow
  henrymercer
  committed
  4472004
- Fix merge in progress detection
  henrymercer
  committed
  6fb1c2a
- Fix finishing up in progress merge
  henrymercer
  committed
  5f3f250
- Address review comments
  henrymercer
  committed
  567ca73
- Merge pull request #3565 from github/henrymercer/go-macos-checks
  henrymercer
  authored
  309fd2a
- Merge pull request #3568 from github/henrymercer/fix-rebuild
  henrymercer
  authored
  378e4b3
- Merge branch 'main' into dependabot/npm_and_yarn/ava-7.0.0
  henrymercer
  authored
  363219d
- Merge branch 'main' into dependabot/npm_and_yarn/npm-minor-aebc49e072
  henrymercer
  authored
  9771a76
- Rebuild
  github-actions[bot]
  committed
  373dec9
- Rebuild
  github-actions[bot]
  committed
  0d0df94
- Merge pull request #3567 from github/dependabot/npm_and_yarn/ava-7.0.0
  henrymercer
  authored
  82d7a77
- Merge pull request #3566 from github/dependabot/npm_and_yarn/npm-minor-aebc49e072
  henrymercer
  authored
  1dbebad
Commits on Mar 12, 2026
- Emit warning for unrecognised repo properties with our common prefix
  mbg
  committed
  a717db1
- Move `ava` config out of `package.json`
  mbg
  committed
  c183dca
- Avoid bundling `package.json`
  mbg
  committed
  ea70366
- Add `workspaces` to root `package.json`
  mbg
  committed
  b5e1fb0
- Add minimal `Step` type
  mbg
  committed
  7df3db2
- Add eslint configuration for `pr-checks`
  mbg
  committed
  e608db4
- Fix linter errors in `sync.ts`
  mbg
  committed
  7950e47
- Rename `sync_back` to `sync-back`
  mbg
  committed
  967ca85
- Fix linter errors in `sync-back.ts`
  mbg
  committed
  b171c1c
- Fix linter errors in `sync-back.test.ts`
  mbg
  committed
  b4cb104
- Add explicit cache dependency paths in `pr-checks.yml`
  mbg
  committed
  3bc3228
- Add step (in root directory) to install dependencies
  mbg
  committed
  fc8d303
Commits on Mar 13, 2026
- Merge pull request #3573 from github/mbg/esbuild/no-package-json
  mbg
  authored
  dafe740
- Remove `package-lock.json` that's no longer needed
  mbg
  committed
  a5aba59
- Remove `cache-dependency-path` options as well
  mbg
  committed
  136b8ab
- Only emit one message with accumulated property names
  mbg
  committed
  b4937c1
- Merge pull request #3570 from github/mbg/repo-props/warn-on-unexpected-props
  mbg
  authored
  4c356c7
- Merge pull request #3563 from github/mbg/private-registry/oidc
  mbg
  authored
  e3200e3
- Merge pull request #3572 from github/mbg/pr-checks/eslint
  mbg
  authored
  7dd76e6
Commits on Mar 16, 2026
- Update changelog for v4.32.7
  github-actions[bot]
  committed
  59bcb60
- Bump minor version
  mbg
  committed
  95be291
- Add changelog entry for #3570
  mbg
  committed
  e682234
- Merge pull request #3574 from github/update-v4.32.7-7dd76e6bf
  mbg
  authored
  b1bff81
- Revert "Update version and changelog for v3.32.6"
  github-actions[bot]
  committed
  ee6db5e
- Revert "Rebuild"
  github-actions[bot]
  committed
  e50ab6d
- Merge remote-tracking branch 'origin/releases/v4' into backport-v3.33.0-b1bff8193
  github-actions[bot]
  committed
  4ccf9a5
- Update version and changelog for v3.33.0
  github-actions[bot]
  committed
  2da877a
- Rebuild
  github-actions[bot]
  committed
  9ed0d75

Commits

Commits on Feb 26, 2026

Commits on Feb 27, 2026

Commits on Feb 28, 2026

Commits on Mar 3, 2026

Commits on Mar 4, 2026

Commits on Mar 5, 2026

Commits on Mar 6, 2026

Commits on Mar 9, 2026

Commits on Mar 10, 2026

Commits on Mar 11, 2026

Commits on Mar 12, 2026

Commits on Mar 13, 2026