Repository navigation

Merge releases/v4 into releases/v3 - #4259

Merged

mario-campos merged 68 commits into

releases/v3from

backport-v3.39.1-9b3254085

Oct 21, 2026

Merged

Merge releases/v4 into releases/v3#4259
mario-campos merged 68 commits into
releases/v3from
backport-v3.39.1-9b3254085

Commits on Oct 9, 2026
- Do not run `pr-checks` for all push events
  mbg
  committed
  ba79a4f
- Fix conditions in `pr-checks` workflow
  mbg
  committed
  2883b5b
- Use `github.actor` for `post-repo-size-comment` condition
  mbg
  committed
  a6ff2ad
Commits on Oct 14, 2026
- Improve `GitHubApiDetails` types and documentation
  mbg
  committed
  0735d79
- Move some definitions out of `util.ts` into a new `github.ts` module
  mbg
  committed
  102e46e
- Add functions to get the current and dotcom instance
  mbg
  committed
  61bfcff
- Move `GitHubApiDetails` to `github.ts`
  mbg
  committed
  e062530
- Make `auth` property on `GitHubApiDetails` optional
  mbg
  committed
  a243813
- Use `getCurrentInstance()`
  mbg
  committed
  96501a3
- Make `externalRepoAuth` check more consistent
  mbg
  committed
  1b0a617
- Guard against blank `auth` value
  mbg
  committed
  1d30a84
- Check `auth` value in `getAuthorizationHeaderFor`
  mbg
  committed
  66c96fd
- Check token value in `uploadBundledDatabase`
  mbg
  committed
  f9b4185
- Add very basic `getApiClientWithExternalAuth` test
  mbg
  committed
  bfe264b
- Allow `getApiClient` to accept `GitHubApiDetails`
  mbg
  committed
  a08b587
- Pass `apiDetails` to `getApiClient` in `uploadBundledDatabase`
  mbg
  committed
  f6e8dce
- Add a test for `uploadBundledDatabase`
  mbg
  committed
  047c751
- Remove explicit `authorization` header from `uploadBundledDatabase`
  mbg
  committed
  c164184
- Bump the actions-minor group across 1 directory with 3 updates
  dependabot[bot]
  authored
  8844fb3
- Rebuild
  github-actions[bot]
  committed
  3afe9c0
Commits on Oct 15, 2026
- Merge branch 'main' into mbg/ci/improve-pr-checks-triggers
  mbg
  authored
  d63cb97
- Merge branch 'main' into dependabot/github_actions/dot-github/workflows/actions-minor-c673fd7efc
  mbg
  authored
  3ec43ab
- Merge pull request #4238 from github/dependabot/github_actions/dot-github/workflows/actions-minor-c673fd7efc
  mbg
  authored
  e5b217a
- Update changelog and version after v4.39.0
  github-actions[bot]
  committed
  2edace4
- Rebuild
  github-actions[bot]
  committed
  46d3daa
- Merge pull request #4240 from github/mergeback/v4.39.0-to-main-6f2ac81f
  mbg
  authored
  7a6e2f7
- Enable toolcache bundle cleanup by default
  
  henrymercer
  and
  Copilot
  committed
  1ec6b03
- Remove the toolcache cleanup test override
  
  henrymercer
  and
  Copilot
  committed
  4ebc48b
Commits on Oct 16, 2026
- Merge pull request #4230 from github/mbg/auth/allow-unauthed
  mbg
  authored
  0a458f1
- Merge pull request #4242 from github/henrymercer/graduate-toolcache-cleanup
  henrymercer
  authored
  ae098fa
- Graduate overlay TRAP caching defaults
  
  henrymercer
  and
  Copilot
  committed
  e038b67
- Update `copilot-instructions.md` to mention feature flags
  mbg
  committed
  0d2baf6
- Document TRAP caching default with improved incremental analysis
  
  henrymercer
  and
  Copilot
  committed
  e344c79
- Update "Review instructions" based on recent reviews
  mbg
  committed
  2441e6e
- Add some guidelines for change notes
  mbg
  committed
  f3c93e3
- Elaborate GHES details
  mbg
  committed
  6992155
- Drop "requests" again
  mbg
  committed
  e461913
- Suggest "Minor" prefix
  mbg
  committed
  5ecf3b3
- Merge pull request #4247 from github/mbg/copilot/clarify-feature-flags
  mbg
  authored
  83e1837
- Move inline script from `diagnostics-export.yml` to a `.ts` file
  mbg
  committed
  604377f
- Merge pull request #4219 from github/mbg/ci/improve-pr-checks-triggers
  mbg
  authored
  3db7caf
Commits on Oct 20, 2026
- Merge pull request #4248 from github/mbg/move-diag-export-script
  mbg
  authored
  0fda7a6
- Log when we didn't get a normal configuration file
  mbg
  authored
  be1223f
- Allow to explicitly not skip the SARIF upload
  mbg
  authored
  a9cd2f9
- Add and use `shouldSkipGenerateFailedSarif`
  mbg
  authored
  6e9aec6
- Propagate `Config` to `combineSarifFilesUsingCLI`
  mbg
  authored
  02fb8cc
- Skip waiting for SARIF if nothing was uploaded
  mbg
  authored
  e7340ee
- Upload failed SARIF as workflow artifact in test mode
  mbg
  authored
  1d373e0
- Improve logging in `uploadSarifArtifact`
  mbg
  authored
  5b69b28
- Ensure that `rootDirectory` is suitable for `sarifFile` in `uploadSarifArtifact`
  mbg
  authored
  950b147
- Update default bundle to codeql-bundle-v2.27.3
  github-actions[bot]
  committed
  72cb698
- Add changelog note
  github-actions[bot]
  committed
  260a534
- Fix typo in comment
  mbg
  committed
  74ddcd9
- Document that setting the env vars to `false` takes precedence
  mbg
  committed
  a69c7cb
- Use `shouldSkipSarifUpload` in `analyze-action.ts`
  mbg
  committed
  7fa4518
- Change comment for `getConfig` call in `upload-sarif`
  mbg
  committed
  b96e339
- Merge pull request #4249 from github/mbg/upload-improvements-for-4223
  mbg
  authored
  3dd33f8
- Merge pull request #4256 from github/update-bundle/codeql-bundle-v2.27.3
  mario-campos
  authored
  61a5a80
- Merge pull request #4245 from github/henrymercer/graduate-overlay-trap-caching
  henrymercer
  authored
  c5a2f4b
Commits on Oct 21, 2026
- Update changelog for v4.39.1
  github-actions[bot]
  committed
  20f5ec3
- Trigger workflows
  mario-campos
  committed
  b5e1ed9
- Merge pull request #4257 from github/update-v4.39.1-c5a2f4b0f
  mario-campos
  authored
  9b32540
- Revert "Update version and changelog for v3.39.0"
  github-actions[bot]
  committed
  71fd480
- Revert "Rebuild"
  github-actions[bot]
  committed
  6f8ca3e
- Merge remote-tracking branch 'origin/releases/v4' into backport-v3.39.1-9b3254085
  github-actions[bot]
  committed
  bfa15a2
- Update version and changelog for v3.39.1
  github-actions[bot]
  committed
  2bdfb07
- Rebuild
  github-actions[bot]
  committed
  bc3fac4
- Trigger workflows
  mario-campos
  committed
  fca87a6

Commits

Commits on Oct 9, 2026

Commits on Oct 14, 2026

Commits on Oct 15, 2026

Commits on Oct 16, 2026

Commits on Oct 20, 2026

Commits on Oct 21, 2026