Merge main into releases/v2 #1700
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
The version we were using is quite old. Copied the latest from https://github.com/oasis-tcs/sarif-spec/blob/123e95847b13fbdd4cbe2120fa5e33355d4a042b/Schemata/sarif-schema-2.1.0.json I do not think the sarif spec will be changing any more without an explicit version update, so this is fine for now.
Fixes bug in `uniqueItems` property.
Mergeback v2.3.3 refs/heads/releases/v2 into main
Co-authored-by: Aditya Sharad <6874315+adityasharad@users.noreply.github.com>
`($i)` is not valid for javascript regexes.
Fix broken regex
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 5.0.0 to 5.0.1. - [Release notes](https://github.com/peter-evans/create-pull-request/releases) - [Commits](peter-evans/create-pull-request@5b4a9f6...284f54f) --- updated-dependencies: - dependency-name: peter-evans/create-pull-request dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
…evans/create-pull-request-5.0.1 Bump peter-evans/create-pull-request from 5.0.0 to 5.0.1
Co-authored-by: Henry Mercer <henry.mercer@me.com>
Co-authored-by: Henry Mercer <henry.mercer@me.com>
Remove MismatchedBranches check from code scanning workflow validation
The last dot in `=3.11.` is just slightly confusing, so added single quotes around the environment variable assignments to make it 100% clear
Co-authored-by: Henry Mercer <henry.mercer@me.com>
Co-authored-by: Henry Mercer <henry.mercer@me.com>
…cy-installation Feature flag to disable python dependency installation
Use `resolve extractor` when finding autobuild scripts
Remove redundant query help version flag
Extract semantic CLI version from URL when requesting specific tools
Push back the first bundle released using a semantic version number to 2.13.4 now that we're skipping 2.13.2.
Push back semver CodeQL bundles
We should check language autodetect for Ruby unconditionally. We can now move it into the step that checks all other languages.
adityasharad
previously approved these changes
May 24, 2023
angelapwen
approved these changes
May 24, 2023
adityasharad
approved these changes
May 24, 2023
adityasharad
approved these changes
May 24, 2023
|
I added a missing PR link to one of the CHANGELOG items, and moved the "Updated the SARIF 2.1.0 JSON schema file to the latest from |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Merging 570734c into releases/v2.
Conductor for this PR is @angelapwen.
Contains the following pull requests:
resolve extractorwhen finding autobuild scripts #1680 (@henrymercer)nightly-latestCLI #1696 (@angelapwen)Please do the following:
Create a merge commitis selected rather thanSquash and mergeorRebase and merge.