GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — Merge releases/v4 into releases/v3 by github-actions[bot] · Pull Request #4259 · github/codeql-action

Conversation

@github-actions

@github-actions github-actions Bot commented Oct 21, 2026

Copy link
Copy Markdown
Contributor

Merging 9b32540 into releases/v3.

Conductor for this PR is @mario-campos.

Contains the following pull requests:

  • Improve pr-checks.yml triggers and conditions #4219 (@mbg)
  • Make auth in GitHubApiDetails optional #4230 (@mbg)
  • Bump the actions-minor group across 1 directory with 3 updates #4238 (@mbg)
  • Mergeback v4.39.0 refs/heads/releases/v4 into main #4240 (@mbg)
  • Enable cleaning up toolcache bundles by default #4242 (@henrymercer)
  • Graduate overlay TRAP caching defaults #4245 (@henrymercer)
  • Add Copilot instructions for FFs, and update documentation more generally #4247 (@mbg)
  • Move inline script from diagnostics-export.yml to a .ts file #4248 (@mbg)
  • Failed SARIF testing and logging improvements #4249 (@mbg)
  • Update default bundle to 2.27.3 #4256 (@mario-campos)
  • Merge main into releases/v4 #4257 (@mario-campos)

Please do the following:

  • Ensure the CHANGELOG displays the correct version and date.
  • Ensure the CHANGELOG includes all relevant, user-facing changes since the last release.
  • Check that there are not any unexpected commits being merged into the releases/v3 branch.
  • Ensure the docs team is aware of any documentation changes that need to be released.
  • Approve running the full set of PR checks if you have not pushed any changes.
  • Approve and merge this PR. Make sure Create a merge commit is selected rather than Squash and merge or Rebase and merge.

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
All reactions
mbg and others added 30 commits October 9, 2026 09:55
@mbg
Do not run pr-checks for all push events
ba79a4f
@mbg
Fix conditions in pr-checks workflow
2883b5b
@mbg
Use github.actor for post-repo-size-comment condition
a6ff2ad
@mbg
Improve GitHubApiDetails types and documentation
0735d79
@mbg
Move some definitions out of util.ts into a new github.ts module
102e46e
@mbg
Add functions to get the current and dotcom instance
61bfcff
@mbg
Move GitHubApiDetails to github.ts
e062530
@mbg
Make auth property on GitHubApiDetails optional
a243813
@mbg
Use getCurrentInstance()
96501a3
@mbg
Make externalRepoAuth check more consistent
1b0a617
@mbg
Guard against blank auth value
1d30a84 
This shouldn't be possible, but was previously handled by the library
@mbg
Check auth value in getAuthorizationHeaderFor
66c96fd 
Also add some tests for it
@mbg
Check token value in uploadBundledDatabase
f9b4185
@mbg
Add very basic getApiClientWithExternalAuth test
bfe264b
@mbg
Allow getApiClient to accept GitHubApiDetails
a08b587
@mbg
Pass apiDetails to getApiClient in uploadBundledDatabase
f6e8dce
@mbg
Add a test for uploadBundledDatabase
047c751
@mbg
Remove explicit authorization header from uploadBundledDatabase
c164184
@dependabot
Bump the actions-minor group across 1 directory with 3 updates
8844fb3 
Bumps the actions-minor group with 3 updates in the /.github/workflows directory: [actions/upload-artifact](https://github.com/actions/upload-artifact), [actions/setup-node](https://github.com/actions/setup-node) and [actions/download-artifact](https://github.com/actions/download-artifact).


Updates `actions/upload-artifact` from 7.0.1 to 7.0.2
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@043fb46...cf430e0)

Updates `actions/setup-node` from 7.0.0 to 7.1.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@8207627...949feb2)

Updates `actions/download-artifact` from 8.0.1 to 8.0.2
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@3e5f45b...9000827)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-minor
- dependency-name: actions/setup-node
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
- dependency-name: actions/download-artifact
  dependency-version: 8.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@github-actions
Rebuild
3afe9c0
@mbg
Merge branch 'main' into mbg/ci/improve-pr-checks-triggers
d63cb97
@mbg
Merge branch 'main' into dependabot/github_actions/dot-github/workflo…
3ec43ab 
…ws/actions-minor-c673fd7efc
@mbg
Merge pull request #4238 from github/dependabot/github_actions/dot-gi…
e5b217a 
…thub/workflows/actions-minor-c673fd7efc

Bump the actions-minor group across 1 directory with 3 updates
@github-actions
Update changelog and version after v4.39.0
2edace4
@github-actions
Rebuild
46d3daa
@mbg
Merge pull request #4240 from github/mergeback/v4.39.0-to-main-6f2ac81f
7a6e2f7 
Mergeback v4.39.0 refs/heads/releases/v4 into main
@henrymercer
Enable toolcache bundle cleanup by default
1ec6b03 
Co-authored-by: Copilot App <[email protected]>
Copilot-Session: 9bf883d4-ecd7-4428-970f-86895f760571
@henrymercer
Remove the toolcache cleanup test override
4ebc48b 
Co-authored-by: Copilot App <[email protected]>
Copilot-Session: 9bf883d4-ecd7-4428-970f-86895f760571
@mbg
Merge pull request #4230 from github/mbg/auth/allow-unauthed
0a458f1 
Make `auth` in `GitHubApiDetails` optional
@henrymercer
Merge pull request #4242 from github/henrymercer/graduate-toolcache-c…
ae098fa 
…leanup

Enable cleaning up toolcache bundles by default
mbg and others added 23 commits October 20, 2026 16:07
@mbg
Add and use shouldSkipGenerateFailedSarif
6e9aec6
@mbg
Propagate Config to combineSarifFilesUsingCLI
02fb8cc
@mbg
Skip waiting for SARIF if nothing was uploaded
e7340ee
@mbg
Upload failed SARIF as workflow artifact in test mode
1d373e0
@mbg
Improve logging in uploadSarifArtifact
5b69b28
@mbg
Ensure that rootDirectory is suitable for sarifFile in `uploadSar…
950b147 
…ifArtifact`
@github-actions
Update default bundle to codeql-bundle-v2.27.3
72cb698
@github-actions
Add changelog note
260a534
@mbg
Fix typo in comment
74ddcd9
@mbg
Document that setting the env vars to false takes precedence
a69c7cb
@mbg
Use shouldSkipSarifUpload in analyze-action.ts
7fa4518
@mbg
Change comment for getConfig call in upload-sarif
b96e339
@mbg
Merge pull request #4249 from github/mbg/upload-improvements-for-4223
3dd33f8 
Failed SARIF testing and logging improvements
@mario-campos
Merge pull request #4256 from github/update-bundle/codeql-bundle-v2.27.3
61a5a80 
Update default bundle to 2.27.3
@henrymercer
Merge pull request #4245 from github/henrymercer/graduate-overlay-tra…
c5a2f4b 
…p-caching

Graduate overlay TRAP caching defaults
@github-actions
Update changelog for v4.39.1
20f5ec3
@mario-campos
Trigger workflows
b5e1ed9
@mario-campos
Merge pull request #4257 from github/update-v4.39.1-c5a2f4b0f
9b32540 
Merge main into releases/v4
@github-actions
Revert "Update version and changelog for v3.39.0"
71fd480 
This reverts commit c157d44.
@github-actions
Revert "Rebuild"
6f8ca3e 
This reverts commit 67cc5f0.
@github-actions
Merge remote-tracking branch 'origin/releases/v4' into backport-v3.39…
bfa15a2 
….1-9b3254085
@github-actions
Update version and changelog for v3.39.1
2bdfb07
@github-actions
Rebuild
bc3fac4
@github-actions
github-actions Bot requested a review from a team as a code owner October 21, 2026 15:50
@github-actions github-actions Bot assigned mario-campos Oct 21, 2026
@github-actions github-actions Bot added the size/XXL May be extremely hard to review label Oct 21, 2026
mario-campos
mario-campos approved these changes Oct 21, 2026
View reviewed changes
@mario-campos
Trigger workflows
fca87a6
@mario-campos
mario-campos merged commit 4bfa242 into releases/v3 Oct 21, 2026
226 checks passed

Uh oh!

There was an error while loading. Please reload this page.
@mario-campos
mario-campos deleted the backport-v3.39.1-9b3254085 branch October 21, 2026 16:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@mario-campos mario-campos mario-campos approved these changes

Uh oh!

There was an error while loading. Please reload this page.

Assignees

@mario-campos mario-campos

Labels

size/XXL May be extremely hard to review

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Uh oh!

There was an error while loading. Please reload this page.

3 participants

@mario-campos @mbg @henrymercer
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.