CHANGELOG.md

CodeQL Action and CodeQL Runner Changelog

1.0.23 - 16 Nov 2021

• The upload-sarif action now allows multiple uploads in a single job, as long as they have different categories. #801
• Update default CodeQL bundle version to 2.7.1. #816

1.0.22 - 04 Nov 2021

• The init step of the Action now supports ram and threads inputs to limit resource use of CodeQL extractors. These inputs also serve as defaults to the subsequent analyze step, which finalizes the database and executes queries. #738
• When used with CodeQL 2.7.1 or above, the Action now includes custom query help in the analysis results uploaded to GitHub code scanning, if available. To add help text for a custom query, create a Markdown file next to the .ql file containing the query, using the same base name but the file extension .md. #804

1.0.21 - 28 Oct 2021

• Update default CodeQL bundle version to 2.7.0. #795

1.0.20 - 25 Oct 2021

No user facing changes.

1.0.19 - 18 Oct 2021

No user facing changes.

1.0.18 - 08 Oct 2021

• Fixed a bug where some builds were no longer being traced correctly. #766

1.0.17 - 07 Oct 2021

• Update default CodeQL bundle version to 2.6.3. #761

1.0.16 - 05 Oct 2021

No user facing changes.

1.0.15 - 22 Sep 2021

• Update default CodeQL bundle version to 2.6.2. #746

1.0.14 - 09 Sep 2021

• Update default CodeQL bundle version to 2.6.1. #733

1.0.13 - 06 Sep 2021

• Update default CodeQL bundle version to 2.6.0. #712
• Update baseline lines of code counter for python. All multi-line strings are counted as code. #714
• Remove old baseline LoC injection #715

1.0.12 - 16 Aug 2021

• Update README to include a sample permissions block. #689

1.0.11 - 09 Aug 2021

• Update default CodeQL bundle version to 2.5.9. #687

1.0.10 - 03 Aug 2021

• Fix an issue where a summary of diagnostics information from CodeQL was not output to the logs of the analyze step of the Action. #672

1.0.9 - 02 Aug 2021

No user facing changes.

1.0.8 - 26 Jul 2021

• Update default CodeQL bundle version to 2.5.8. #631

1.0.7 - 21 Jul 2021

No user facing changes.

1.0.6 - 19 Jul 2021

• The init step of the Action now supports a source-root input as a path to the root source-code directory. By default, the path is relative to $GITHUB_WORKSPACE. #607
• The init step will now try to install a few Python tools needed by this Action when running on a self-hosted runner. #616

1.0.5 - 12 Jul 2021

• The analyze step of the Action now supports a skip-queries option to merely build the CodeQL database without analyzing. This functionality is not present in the runner. Additionally, the step will no longer fail if it encounters a finalized database, and will instead continue with query execution. #602
• Update the warning message when the baseline lines of code count is unavailable. #608

1.0.4 - 28 Jun 2021

• Fix RUNNER_TEMP environment variable must be set when using runner. #594
• Fix couting of lines of code for C# projects. #586

1.0.3 - 23 Jun 2021

No user facing changes.

1.0.2 - 17 Jun 2021

• Fix out of memory in hash computation. #550
• Clean up logging during analyze results. #557
• Add --finalize-dataset to database finalize call, freeing up some disk space after database creation. #558

1.0.1 - 07 Jun 2021

• Pass the --sarif-group-rules-by-pack argument to CodeQL CLI invocations that generate SARIF. This means the SARIF rule object for each query will now be found underneath its corresponding query pack in runs[].tool.extensions. #546
• Output the location of CodeQL databases created in the analyze step. #543

1.0.0 - 31 May 2021

• Add this changelog file. #507
• Improve grouping of analysis logs. Add a new log group containing a summary of metrics and diagnostics, if they were produced by CodeQL builtin queries. #515
• Add metrics and diagnostics summaries from custom query suites to the analysis summary log group. #532