Repository navigation
Conversation
Updated CodeQL workflow to modify schedule and runner settings.
Signed-off-by: axe <axeonetwothree@gmail.com>
…dates Bumps the npm_and_yarn group with 2 updates in the /ui directory: [zod](https://github.com/colinhacks/zod) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite). Updates `zod` from 4.6.5 to 4.6.7 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v4.6.5...v4.6.7) Updates `vite` from 8.3.2 to 8.3.5 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.3.5/packages/vite) --- updated-dependencies: - dependency-name: zod dependency-version: 4.6.7 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: vite dependency-version: 8.3.5 dependency-type: direct:development dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
This workflow is set to analyze code using CodeQL for JavaScript/TypeScript and C# on pushes and pull requests to the main branch, as well as on a scheduled basis. Signed-off-by: axe <axeonetwothree@gmail.com>
…_yarn-5e92e5aac6 build(deps): bump the npm_and_yarn group across 1 directory with 2 updates
<!-- : Fill all sections. Prefer short, concrete answers. If a checkbox is selected, add a brief explanation. --> ## Summary Updates the CodeQL Advanced workflow to scan Go instead of C# and adds `actions/setup-go` to support autobuild. ## Why Fixes CodeQL autobuild failures where CodeQL was configured to analyze C# (`csharp`), which does not exist in this repository. Because this project is written in Go, the C# analysis job failed to detect any `.sln`/`.csproj` project files. Fixes # ## What changed - Replaced `- language: csharp` with `- language: go` in the matrix strategy. - Added `actions/setup-go@v5` conditioned on `matrix.language == 'go'` using `go-version-file: 'go.mod'` to ensure Go is properly configured for the CodeQL autobuild step. - Cleaned up malformed action references in the workflow. ## MCP impact - [x] No tool or API changes - Only updates repository CI workflow configuration (`.github/workflows/codeql.yml`). - [ ] Tool schema or behavior changed - [ ] New tool added ## Prompts tested (tool changes only) - N/A (CI workflow change only) ## Security / limits - [x] No security or limits impact - Restores functional CodeQL static analysis security scanning for the Go codebase. - [ ] Auth / permissions considered - [ ] Data exposure, filtering, or token/size limits considered ## Tool renaming - [ ] I am renaming tools as part of this PR (e.g. a part of a consolidation effort) - [ ] I have added the new tool aliases in `deprecated_tool_aliases.go` - [x] I am not renaming tools as part of this PR ## Lint & tests - [ ] Linted locally with `./script/lint` - Workflow YAML validated; no Go code modified. - [ ] Tested locally with `./script/test` - Validated GitHub Actions workflow syntax for CodeQL analysis. ## Docs - [x] Not needed - Internal CI/CodeQL workflow configuration update only. - [ ] Updated (README / docs / examples) Signed-off-by: axe <axeonetwothree@gmail.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
update