镜像站点 · 本页由第三方 GitHub 只读镜像提供，非 GitHub 官方站点，不接受任何登录或凭据输入。前往 github.com

Merge main into releases/v4 - #3494

Merged

mbg merged 84 commits into

releases/v4from

update-v4.32.4-39ba80c47

Feb 20, 2026

Commits on Feb 11, 2026

Set `keyUsage`
mbg
committed
713a293
Explicitly sign certificate with SHA256
mbg
committed
e8f0116
Set more extensions
mbg
committed
d155ebf
Move certificate code to its own file
mbg
committed
d636fb3
Gate updated cert gen behind FF
mbg
committed
b1d963e
Add some basic unit tests
mbg
committed
7801eda
Fix typo in test
mbg
committed
bc1164e
Add `csra` analysis kind
mbg
committed
9267d8d
Enforce that only compatible kinds can be enabled concurrently
mbg
committed
5b3261b
Fix `CodeScanning` config's `sarifPredicate` and add test
mbg
committed
5132eb5
Update `upload-lib` tests for CSRA
mbg
committed
406bbfc
Remove redundant analysis kind check
mbg
committed
8cc4d25
Update `getPrimaryAnalysis*` and add test
mbg
committed
6a17f4e
Update PR check for `csra`
mbg
committed
2de76b6
Add `csra` case to `addSarifExtension` test
mbg
committed
db93462
Type the upload payload object
mbg
committed
cbb92e7
Add `transformPayload` to `AnalysisConfig`
mbg
committed
0cfcceb
Add `assessment_id` to CSRA payload
mbg
committed
c48cd24

Commits on Feb 12, 2026

Change `assessment_id` to be a number
mbg
committed
da67096
Add `BasePayload` type and derive `AssessmentPayload` from it
mbg
committed
2adcb64
Validate `CODEQL_ACTION_CSRA_ASSESSMENT_ID` value
mbg
committed
0ce6420
CSRA category does not need to be adjusted
mbg
committed
9835994
Extend `uploadPayload` tests to all analysis kinds
mbg
committed
15a3d32
Add `RecordingLogger` that keeps track of groups
mbg
committed
edf3609
Find all missing messages in `checkExpectedLogMessages`
mbg
committed
e1933c6

Commits on Feb 13, 2026

Commits on Feb 15, 2026

Remove superfluous `try`/`catch`
mbg
committed
248d797
Add `ForceNightly` feature
mbg
committed
34d43db
Improve docs in `setup-codeql`
mbg
committed
817d568
Add unit test for `tools: nightly`
mbg
committed
466a4f0
Force `nightly` bundle when FF is enabled
mbg
committed
d5f0374
Add integration test
mbg
committed
a61e3cb
Add `JavaNetworkDebugging` feature
mbg
committed
595ce2d
Add debugging options to `JAVA_TOOL_OPTIONS` when FF is enabled
mbg
committed
e21e4ca

Commits on Feb 16, 2026

Improve variable names and comments
mbg
committed
8b734d3
Complete JSDoc
mbg
committed
73f5a29
Allow `addNoLanguageDiagnostic` to be used without a `Config`
mbg
committed
e6a312a
Add diagnostic when a nightly release is forced
mbg
committed
e315c6f
Change diagnostic level to `note`
mbg
committed
f8c75d3
Use `init` in new check workflow
mbg
committed
ac74c28
Merge pull request #3473 from github/mbg/start-proxy/cert-gen
mbg
authored
aee29a1
Merge pull request #3482 from github/mbg/release/author-or-merger
mbg
authored
ad5a6c0
Merge branch 'main' into mbg/java/network-debugging
mbg
committed
3e37216
Merge pull request #3484 from github/mbg/cli/force-nightly
mbg
authored
147d149

Commits on Feb 17, 2026

Use `all`
mbg
committed
d1689c9
Merge pull request #3485 from github/mbg/java/network-debugging
mbg
authored
ebce69a
Rename `csra` to `risk-assessment`
mbg
committed
f315d82
Remove unnecessary check
mbg
committed
d6ea670
Add enum for Java-related env var names
mbg
committed
bff89dc
Log information about proxy-related environment variables
mbg
committed
33e2dff
Find likely JDK locations and check configurations
mbg
committed
a3d7d36
Wrap `checkProxyEnvironment` call in `try`/`catch` for good measure
mbg
committed
4250b46
Clear GHA `JAVA_HOME_*` env vars for `discoverActionsJdks` test
mbg
committed
ef9cfd9
Fix typos
mbg
committed
c1d6ee5
Check whether `value` is a URL in `checkEnvVar` and clear credentials
mbg
committed
99fcc7b
Only run when debugging or test mode is enabled
mbg
committed
11c6c18
Fixup: add missing `.env`
mbg
committed
44a4bea
Add JSDoc comments to `upload-lib` types
mbg
committed
5c96b6e
Reword error message
mbg
committed
6d55dff
Replace most occurrences of `CSRA`
mbg
committed
2abec3f
Consistently use "\n" to split lines, then trim extra characters if needed
mbg
committed
9715925
Move interesting JRE properties out of `checkJdkSettings`
mbg
committed
32ab108
Add more interesting Java properties
mbg
committed
46473e0
Merge pull request #3474 from github/mbg/risk-assessment-analysis
mbg
authored
b1b1e44
Run `java` to show computed settings
mbg
committed
906dd89
Merge branch 'main' into mbg/start-proxy/java-env-checks
mbg
committed
64300e4
Fix `checkExpectedLogMessages` not asserting anything on success
mbg
committed
61f7dd3
Merge pull request #3486 from github/mbg/start-proxy/java-env-checks
mbg
authored
015d8c7

Commits on Feb 18, 2026

Bump fast-xml-parser from 5.3.4 to 5.3.6
dependabot[bot]
authored
7407d38
Rebuild
github-actions[bot]
committed
76cf404
Merge pull request #3488 from github/dependabot/npm_and_yarn/fast-xml-parser-5.3.6
oscarsj
authored
5e7a52f

Commits on Feb 19, 2026

Use new feature flag for repository properties
henrymercer
committed
f7905e8

Commits on Feb 20, 2026

Merge pull request #3492 from github/henrymercer/new-repository-properties-ff
mbg
authored
50fdbb9
Update default bundle to codeql-bundle-v2.24.2
github-actions[bot]
committed
d97dce6
Add changelog note
github-actions[bot]
committed
00150da
Merge pull request #3493 from github/update-bundle/codeql-bundle-v2.24.2
mbg
authored
39ba80c
Update changelog for v4.32.4
github-actions[bot]
committed
cfda84c
Add changelog entries
mbg
committed
cdda72d
Fix typo
mbg
committed
314172e
Apply suggestions from code review

authored
0c20209
Apply remaining review suggestions
mbg
committed
e5d84c8