GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — Merge main into releases/v4 by github-actions[bot] · Pull Request #4152 · github/codeql-action

Conversation

@github-actions

@github-actions github-actions Bot commented Sep 18, 2026 •
edited by mbg
Loading

Uh oh!

There was an error while loading. Please reload this page.

Copy link
Copy Markdown
Contributor

Merging a65b83a into releases/v4.

Conductor for this PR is @mbg.

Contains the following pull requests:

  • Validate change-notes as a PR check #4116 (@mario-campos)
  • Migrate changetool to pr-checks #4128 (@mbg)
  • Mergeback v4.38.0 refs/heads/releases/v4 into main #4132 (@henrymercer)
  • Bump the npm-minor group across 1 directory with 6 updates #4134 (@mbg)
  • Bump @octokit/types from 17.0.0 to 18.0.0 #4135 (@henrymercer)
  • Bump actions/setup-java from 6.0.0 to 6.0.1 in /.github/workflows in the actions-minor group across 1 directory #4136 (@mbg)
  • Preserve HTTP errors from streaming bundle downloads #4138 (@henrymercer)
  • Update dependencies #4139 (@mbg)
  • Move withTmpFile next to withTmpDir #4140 (@mario-campos)
  • Always clean-up temp dirs in withTmpDir #4141 (@mario-campos)
  • Improve Copilot instructions #4142 (@mbg)
  • Rename validate-changelog to changenotes #4143 (@mbg)
  • Separate CodeQL bundle resolution from installation #4145 (@henrymercer)
  • Use per-language CodeQL bundles #4146 (@mbg)
  • Bump the npm-minor group across 1 directory with 3 updates #4150 (@henrymercer)

Please do the following:

  • Ensure the CHANGELOG displays the correct version and date.
  • Ensure the CHANGELOG includes all relevant, user-facing changes since the last release.
  • Check that there are not any unexpected commits being merged into the releases/v4 branch.
  • Ensure the docs team is aware of any documentation changes that need to be released.
  • Approve running the full set of PR checks if you have not pushed any changes.
  • Approve and merge this PR. Make sure Create a merge commit is selected rather than Squash and merge or Rebase and merge.
  • Merge the mergeback PR that will automatically be created once this PR is merged.
  • Merge all backport PRs to older release branches, that will automatically be created once this PR is merged.

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
All reactions
mbg and others added 30 commits September 9, 2026 11:44
@mbg
Migrate changetool to pr-checks
83d1431
@mbg
Fix some formatting in pr-checks.yml
b136352
@mbg
Address linter errors in validate.test.mts
d235931
@github-actions
Update changelog and version after v4.38.0
6f5a84b
@github-actions
Rebuild
23a5edc
@henrymercer
Merge pull request #4132 from github/mergeback/v4.38.0-to-main-b96794f0
e855781 
Mergeback v4.38.0 refs/heads/releases/v4 into main
@dependabot
Bump the npm-minor group across 1 directory with 6 updates
d40707c 
Bumps the npm-minor group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@octokit/core](https://github.com/octokit/core.js) | `7.0.7` | `7.0.8` |
| [js-yaml](https://github.com/nodeca/js-yaml) | `5.4.0` | `5.4.1` |
| [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc) | `64.2.1` | `64.3.4` |
| [globals](https://github.com/sindresorhus/globals) | `17.11.0` | `17.12.0` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.68.0` | `8.69.0` |
| [tsx](https://github.com/privatenumber/tsx) | `4.23.12` | `4.23.13` |



Updates `@octokit/core` from 7.0.7 to 7.0.8
- [Release notes](https://github.com/octokit/core.js/releases)
- [Commits](octokit/core.js@v7.0.7...v7.0.8)

Updates `js-yaml` from 5.4.0 to 5.4.1
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@5.4.0...5.4.1)

Updates `eslint-plugin-jsdoc` from 64.2.1 to 64.3.4
- [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases)
- [Commits](gajus/eslint-plugin-jsdoc@v64.2.1...v64.3.4)

Updates `globals` from 17.11.0 to 17.12.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v17.11.0...v17.12.0)

Updates `typescript-eslint` from 8.68.0 to 8.69.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.69.0/packages/typescript-eslint)

Updates `tsx` from 4.23.12 to 4.23.13
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.12...v4.23.13)

---
updated-dependencies:
- dependency-name: "@octokit/core"
  dependency-version: 7.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: js-yaml
  dependency-version: 5.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: eslint-plugin-jsdoc
  dependency-version: 64.3.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: globals
  dependency-version: 17.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: typescript-eslint
  dependency-version: 8.69.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
- dependency-name: tsx
  dependency-version: 4.23.13
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
Bump actions/setup-java
a727983 
Bumps the actions-minor group with 1 update in the /.github/workflows directory: [actions/setup-java](https://github.com/actions/setup-java).


Updates `actions/setup-java` from 6.0.0 to 6.0.1
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](actions/setup-java@dd06d9c...de7274f)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@github-actions
Rebuild
d9ef050
@github-actions
Rebuild
9f28912
@mbg
Merge pull request #4136 from github/dependabot/github_actions/dot-gi…
d982658 
…thub/workflows/actions-minor-4cf73e6ad1

Bump actions/setup-java from 6.0.0 to 6.0.1 in /.github/workflows in the actions-minor group across 1 directory
@mbg
Merge pull request #4134 from github/dependabot/npm_and_yarn/npm-mino…
5584cec 
…r-a30b170aad

Bump the npm-minor group across 1 directory with 6 updates
@dependabot
Bump @octokit/types from 17.0.0 to 18.0.0
5bd5bf9 
Bumps [@octokit/types](https://github.com/octokit/types.ts) from 17.0.0 to 18.0.0.
- [Release notes](https://github.com/octokit/types.ts/releases)
- [Commits](octokit/types.ts@v17.0.0...v18.0.0)

---
updated-dependencies:
- dependency-name: "@octokit/types"
  dependency-version: 18.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@mbg
Remove unneeded Promise.resolve
aaa0143
@mbg
Merge remote-tracking branch 'origin/main' into mbg/move-changetool
0484c3a
@mbg
Merge pull request #4128 from github/mbg/move-changetool
14c568a 
Migrate `changetool` to `pr-checks`
@henrymercer
Preserve HTTP errors from streaming bundle downloads
5bdaf5d 
Co-authored-by: Copilot App <[email protected]>
@mbg
Update dependencies
a50b659
@mario-campos
Move withTmpFile to util.ts and update tests to use it
4375107
@mario-campos
Reduce duplication by using withTmpDir in withTmpFile
f6491d6
@mario-campos
Update npm commands in sync.sh to include workspace root dependencies
297617d
@mario-campos
Always clean-up temp dirs in withTmpDir
80d5f4e
@mbg
Merge pull request #4139 from github/mbg/10sep26-deps
7be8083 
Update dependencies
@mbg
Merge pull request #4141 from github/mario-campos/finally-clean-withT…
032138d 
…mpDir

Always clean-up temp dirs in `withTmpDir`
@mbg
Improve Copilot instructions
cc78526
@mbg
Rename validate-changelog to changenotes
27a821e
@mario-campos @mbg
Delete unnecessary .js file extension from import statement
15b91db 
Co-authored-by: Michael B. Gale <[email protected]>
@mbg
Merge pull request #4143 from github/mbg/rename-script-to-changenote
e72db59 
Rename `validate-changelog` to `changenotes`
@mario-campos
Add JSDoc to withTmpFile
faf4f3a
@mario-campos
Merge pull request #4140 from github/mario-campos/move-withTmpFile
1cf8f51 
Move `withTmpFile` next to `withTmpDir`
henrymercer and others added 21 commits September 16, 2026 17:36
@henrymercer
Clarify bundle resolution and latest-nightly selection
2f552a9 
Co-authored-by: Copilot App <[email protected]>
@dependabot
Bump the npm-minor group across 1 directory with 3 updates
ac47650 
Bumps the npm-minor group with 3 updates in the / directory: [@eslint/compat](https://github.com/eslint/rewrite/tree/HEAD/packages/compat), [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc) and [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint).


Updates `@eslint/compat` from 2.1.0 to 2.1.1
- [Release notes](https://github.com/eslint/rewrite/releases)
- [Changelog](https://github.com/eslint/rewrite/blob/main/packages/compat/CHANGELOG.md)
- [Commits](https://github.com/eslint/rewrite/commits/compat-v2.1.1/packages/compat)

Updates `eslint-plugin-jsdoc` from 64.3.4 to 64.3.8
- [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases)
- [Commits](gajus/eslint-plugin-jsdoc@v64.3.4...v64.3.8)

Updates `typescript-eslint` from 8.69.0 to 8.70.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.70.0/packages/typescript-eslint)

---
updated-dependencies:
- dependency-name: "@eslint/compat"
  dependency-version: 2.1.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: eslint-plugin-jsdoc
  dependency-version: 64.3.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: typescript-eslint
  dependency-version: 8.70.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@henrymercer
Extract explicit CodeQL bundle URL classification
bd2ddba 
Co-authored-by: Copilot App <[email protected]>
@henrymercer
Return toolcache rejection reasons with Result
89606bb 
Co-authored-by: Copilot App <[email protected]>
@henrymercer
Share elapsed-time rounding for bundle downloads
f4fa111 
Co-authored-by: Copilot App <[email protected]>
@henrymercer
Use Result.orElse for bundle extraction paths
69f4715 
Co-authored-by: Copilot App <[email protected]>
@henrymercer
Merge pull request #4150 from github/dependabot/npm_and_yarn/npm-mino…
cf9bbfe 
…r-b347c7d8de

Bump the npm-minor group across 1 directory with 3 updates
@henrymercer
Merge published per-language bundle history
5a2f29e 
Co-authored-by: Copilot App <[email protected]>
@henrymercer
Isolate bundle cleanup test environments
06f4ce7 
Co-authored-by: Copilot App <[email protected]>
@henrymercer
Use initAllState in bundle cleanup tests
41c04be 
Co-authored-by: Copilot App <[email protected]>
@henrymercer
Merge pull request #4145 from github/henrymercer/bundle-resolution-pr
a0cc010 
Separate CodeQL bundle resolution from installation
@henrymercer
Use shared test state for bundle eligibility
28b8f59 
Co-authored-by: Copilot App <[email protected]>
@henrymercer
Group bundle eligibility test state overrides
ed3a24c 
Co-authored-by: Copilot App <[email protected]>
@henrymercer
Simplify per-language platform eligibility checks
549d498 
Co-authored-by: Copilot App <[email protected]>
@henrymercer
Rename the platform module
ead1f7d 
Co-authored-by: Copilot App <[email protected]>
@henrymercer
Move download telemetry into the status-report directory
79fe3a1 
Co-authored-by: Copilot App <[email protected]>
@henrymercer
Share per-language telemetry fields without renaming
ecec9b5 
Co-authored-by: Copilot App <[email protected]>
@henrymercer
Describe the bundle URL resolver
f18f353 
Co-authored-by: Copilot App <[email protected]>
@henrymercer
Clarify the latest-nightly eligibility exception
07fa87d 
Co-authored-by: Copilot App <[email protected]>
@mbg
Merge pull request #4146 from github/henrymercer/per-language-bundles-pr
a65b83a 
Use per-language CodeQL bundles
@github-actions
Update changelog for v4.38.1
cc6c691
@github-actions
github-actions Bot requested a review from a team as a code owner September 18, 2026 12:46
@github-actions github-actions Bot assigned mbg Sep 18, 2026
@mbg
Add changelog entry for #4146
a97cdca
@github-actions github-actions Bot added the size/XXL May be extremely hard to review label Sep 18, 2026
mbg
mbg approved these changes Sep 18, 2026
View reviewed changes
@mbg
mbg enabled auto-merge September 18, 2026 12:59
@mbg
mbg merged commit 1c5b675 into releases/v4 Sep 18, 2026
234 checks passed

Uh oh!

There was an error while loading. Please reload this page.
@mbg
mbg deleted the update-v4.38.1-a65b83a73 branch September 18, 2026 13:09
@github-actions github-actions Bot mentioned this pull request Sep 18, 2026
Merge releases/v4 into releases/v3 #4154
Merged
4 of 6 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@mbg mbg mbg approved these changes

Uh oh!

There was an error while loading. Please reload this page.

Assignees

@mbg mbg

Labels

size/XXL May be extremely hard to review

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Uh oh!

There was an error while loading. Please reload this page.

3 participants

@mbg @henrymercer @mario-campos
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.