No semantic changes.

This is a common case, so we should handle it.

This better handles cases where customers have a monorepo and have
separate jobs for different components.

…led-runs

Mergeback v2.1.35 refs/heads/releases/v2 into main

Add functionality for parsing Action inputs from a workflow file

)

Co-authored-by: Henry Mercer <[email protected]>

Submit SARIF for failed runs too

Add Dependabot config file

Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 3.4.1 to 4.2.3.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](peter-evans/create-pull-request@c7f493a...2b011fa)

---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>

Bumps [actions/setup-python](https://github.com/actions/setup-python) from 3 to 4.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@v3...v4)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump swift-actions/setup-swift from 1.19.0 to 1.20.0

Bumps [swift-actions/setup-swift](https://github.com/swift-actions/setup-swift) from 1.19.0 to 1.20.0.
- [Release notes](https://github.com/swift-actions/setup-swift/releases)
- [Commits](swift-actions/setup-swift@5cdaa91...194625b)

---
updated-dependencies:
- dependency-name: swift-actions/setup-swift
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* Update setup-swift SHA in non-autogenerated files

* Specify v5.7.0 instead of 5.7

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Angela P Wen <[email protected]>

…evans/create-pull-request-4.2.3

Bump peter-evans/create-pull-request from 3.4.1 to 4.2.3

This is now fully rolled out.

I mostly verified this works on my local machine, but did add a sample `poetry.toml` to the tests, so it can be verified from looking at the logs 🤷

…-info-feature-flag

Enable file baseline export by default

This created unexpected behavior with a workflow calling
`codeql-action/analyze` locally.
Therefore, be more conservative with parsing inputs from workflows and
refuse to parse jobs that don't call the specified Action exactly once.

This isn't severe enough to appear on the Actions summary.

python-setup: Don't allow Poetry to make venv in project

…on-not-found

Fix failed SARIF upload behavior when the workflow doesn't call the CodeQL Action

Bump default CodeQL version to 2.11.5

Bumps [certifi](https://github.com/certifi/python-certifi) from 2021.10.8 to 2022.12.7.
- [Release notes](https://github.com/certifi/python-certifi/releases)
- [Commits](certifi/python-certifi@2021.10.08...2022.12.07)

---
updated-dependencies:
- dependency-name: certifi
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>

…s/pipenv/requests-3/certifi-2022.12.7

Bump certifi from 2021.10.8 to 2022.12.7 in /python-setup/tests/pipenv/requests-3

Bumps [certifi](https://github.com/certifi/python-certifi) from 2021.10.8 to 2022.12.7.
- [Release notes](https://github.com/certifi/python-certifi/releases)
- [Commits](certifi/python-certifi@2021.10.08...2022.12.07)

---
updated-dependencies:
- dependency-name: certifi
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>

…-sha

update-required-checks.sh: fix argument handling

…s/pipenv/python-3.8/certifi-2022.12.7

Bump certifi from 2021.10.8 to 2022.12.7 in /python-setup/tests/pipenv/python-3.8

Bumps [certifi](https://github.com/certifi/python-certifi) from 2021.10.8 to 2022.12.7.
- [Release notes](https://github.com/certifi/python-certifi/releases)
- [Commits](certifi/python-certifi@2021.10.08...2022.12.07)

---
updated-dependencies:
- dependency-name: certifi
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>

…s/poetry/requests-3/certifi-2022.12.7

Bump certifi from 2021.10.8 to 2022.12.7 in /python-setup/tests/poetry/requests-3

Merge main into releases/v2

This reverts commit 04dc682.

This reverts commit 5e70e07.

…-a669cc59