From 1725087693188feacf4da783d72befaa02c2e748 Mon Sep 17 00:00:00 2001 From: Edoardo Pirovano Date: Thu, 12 May 2022 17:32:17 +0100 Subject: [PATCH 1/5] Update default CodeQL to 2.9.2 --- CHANGELOG.md | 2 +- lib/defaults.json | 2 +- src/defaults.json | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 820a6e5df1..f0a90f56ee 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,7 +2,7 @@ ## [UNRELEASED] -No user facing changes. +- Update default CodeQL bundle version to 2.9.2. [#1074](https://github.com/github/codeql-action/pull/1074) ## 2.1.10 - 10 May 2022 diff --git a/lib/defaults.json b/lib/defaults.json index 4cf60ef044..30e3b01f9c 100644 --- a/lib/defaults.json +++ b/lib/defaults.json @@ -1,3 +1,3 @@ { - "bundleVersion": "codeql-bundle-20220428" + "bundleVersion": "codeql-bundle-20220512" } diff --git a/src/defaults.json b/src/defaults.json index d4517276b6..99ddb41bcf 100644 --- a/src/defaults.json +++ b/src/defaults.json @@ -1,3 +1,3 @@ { - "bundleVersion": "codeql-bundle-20220428" + "bundleVersion": "codeql-bundle-20220512" } From 657581e7a8b9bb039df7a122c9bf8d7c2ae428d1 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" Date: Tue, 17 May 2022 07:54:00 +0000 Subject: [PATCH 2/5] Update changelog for v2.1.11 --- CHANGELOG.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index f0a90f56ee..075860461c 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,6 +1,6 @@ # CodeQL Action Changelog -## [UNRELEASED] +## 2.1.11 - 17 May 2022 - Update default CodeQL bundle version to 2.9.2. [#1074](https://github.com/github/codeql-action/pull/1074) From c88cf91b1f2e3cc9f78cc8bf7feff274d2fd6abf Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" Date: Tue, 17 May 2022 08:23:51 +0000 Subject: [PATCH 3/5] Update changelog and version after v2.1.11 --- CHANGELOG.md | 4 ++++ package-lock.json | 4 ++-- package.json | 2 +- 3 files changed, 7 insertions(+), 3 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 075860461c..97243cb41e 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,9 @@ # CodeQL Action Changelog +## [UNRELEASED] + +No user facing changes. + ## 2.1.11 - 17 May 2022 - Update default CodeQL bundle version to 2.9.2. [#1074](https://github.com/github/codeql-action/pull/1074) diff --git a/package-lock.json b/package-lock.json index 960f686a7e..f78268939d 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,12 +1,12 @@ { "name": "codeql", - "version": "2.1.11", + "version": "2.1.12", "lockfileVersion": 2, "requires": true, "packages": { "": { "name": "codeql", - "version": "2.1.11", + "version": "2.1.12", "license": "MIT", "dependencies": { "@actions/artifact": "^1.0.0", diff --git a/package.json b/package.json index 9b736ed220..526b90d97a 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "codeql", - "version": "2.1.11", + "version": "2.1.12", "private": true, "description": "CodeQL action", "scripts": { From 6f285ad15b816450a9c8617b14ecfe6c5e14dd60 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" Date: Tue, 17 May 2022 08:42:16 +0000 Subject: [PATCH 4/5] Update checked-in dependencies --- node_modules/.package-lock.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/node_modules/.package-lock.json b/node_modules/.package-lock.json index f18fe3adab..5abf4b86a4 100644 --- a/node_modules/.package-lock.json +++ b/node_modules/.package-lock.json @@ -1,6 +1,6 @@ { "name": "codeql", - "version": "2.1.11", + "version": "2.1.12", "lockfileVersion": 2, "requires": true, "packages": { From 2faa3e16f37b58eb0dac332d43ed57ea876efd36 Mon Sep 17 00:00:00 2001 From: Marco Gario Date: Tue, 17 May 2022 12:04:13 +0200 Subject: [PATCH 5/5] Remove outdated guidance on missing analysis As of December 2021, we do not return missing base analysis anymore. --- README.md | 7 ------- 1 file changed, 7 deletions(-) diff --git a/README.md b/README.md index 7b405d190d..3602f24a96 100644 --- a/README.md +++ b/README.md @@ -139,10 +139,3 @@ By default, this will override any queries specified in a config file. If you wi Read about [troubleshooting code scanning](https://help.github.com/en/github/finding-security-vulnerabilities-and-errors-in-your-code/troubleshooting-code-scanning). -### Note on "missing analysis" message - -The very first time code scanning is run and if it is on a pull request, you will probably get a message mentioning a "missing analysis". This is expected. - -After code scanning has analyzed the code in a pull request, it needs to compare the analysis of the topic branch (the merge commit of the branch you used to create the pull request) with the analysis of the base branch (the branch into which you want to merge the pull request). This allows code scanning to compute which alerts are newly introduced by the pull request, which alerts were already present in the base branch, and whether any existing alerts are fixed by the changes in the pull request. Initially, if you use a pull request to add code scanning to a repository, the base branch has not yet been analyzed, so it's not possible to compute these details. In this case, when you click through from the results check on the pull request you will see the "Missing analysis for base commit SHA-HASH" message. - -For more information and other causes of this message, see [Reasons for the "Analysis not found" message](https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/setting-up-code-scanning-for-a-repository#reasons-for-the-analysis-not-found-message)