Sourced from danielpalme/ReportGenerator-GitHub-Action's releases.
5.4.1
- #707 Fixed issue with file filters
5.4.0
810356c
5.4.151bf1a3
5.4.03c6f698
5.4.0Sourced from github/codeql-action's releases.
v3.27.4
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
Note that the only difference between
v2
andv3
of the CodeQL Action is the node version they support, withv3
running on node 20 while we continue to releasev2
to support running on node 16. For example3.22.11
was the firstv3
release and is functionally identical to2.22.11
. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.3.27.4 - 14 Nov 2024
No user facing changes.
See the full CHANGELOG.md for more information.
v3.27.3
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
Note that the only difference between
v2
andv3
of the CodeQL Action is the node version they support, withv3
running on node 20 while we continue to releasev2
to support running on node 16. For example3.22.11
was the firstv3
release and is functionally identical to2.22.11
. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.3.27.3 - 12 Nov 2024
No user facing changes.
See the full CHANGELOG.md for more information.
v3.27.2
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
Note that the only difference between
v2
andv3
of the CodeQL Action is the node version they support, withv3
running on node 20 while we continue to releasev2
to support running on node 16. For example3.22.11
was the firstv3
release and is functionally identical to2.22.11
. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.3.27.2 - 12 Nov 2024
- Fixed an issue where setting up the CodeQL tools would sometimes fail with the message "Invalid value 'undefined' for header 'authorization'". #2590
See the full CHANGELOG.md for more information.
v3.27.1
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
Note that the only difference between
v2
andv3
of the CodeQL Action is the node version they support, withv3
running on node 20 while we continue to releasev2
to support running on node 16. For example3.22.11
was the firstv3
release and is functionally identical to2.22.11
. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.3.27.1 - 08 Nov 2024
... (truncated)
Sourced from github/codeql-action's changelog.
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
Note that the only difference between
v2
andv3
of the CodeQL Action is the node version they support, withv3
running on node 20 while we continue to releasev2
to support running on node 16. For example3.22.11
was the firstv3
release and is functionally identical to2.22.11
. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.[UNRELEASED]
No user facing changes.
3.27.4 - 14 Nov 2024
No user facing changes.
3.27.3 - 12 Nov 2024
No user facing changes.
3.27.2 - 12 Nov 2024
- Fixed an issue where setting up the CodeQL tools would sometimes fail with the message "Invalid value 'undefined' for header 'authorization'". #2590
3.27.1 - 08 Nov 2024
- The CodeQL Action now downloads bundles compressed using Zstandard on GitHub Enterprise Server when using Linux or macOS runners. This speeds up the installation of the CodeQL tools. This feature is already available to GitHub.com users. #2573
- Update default CodeQL bundle version to 2.19.3. #2576
3.27.0 - 22 Oct 2024
- Bump the minimum CodeQL bundle version to 2.14.6. #2549
- Fix an issue where the
upload-sarif
Action would fail with "upload-sarif post-action step failed: Input required and not supplied: token" when called in a composite Action that had a different set of inputs to the ones expected by theupload-sarif
Action. #2557- Update default CodeQL bundle version to 2.19.2. #2552
3.26.13 - 14 Oct 2024
No user facing changes.
3.26.12 - 07 Oct 2024
Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.14.5 and earlier. These versions of CodeQL were discontinued on 24 September 2024 alongside GitHub Enterprise Server 3.10, and will be unsupported by CodeQL Action versions 3.27.0 and later and versions 2.27.0 and later. #2520
If you are using one of these versions, please update to CodeQL CLI version 2.14.6 or later. For instance, if you have specified a custom version of the CLI using the 'tools' input to the 'init' Action, you can remove this input to use the default version.
Alternatively, if you want to continue using a version of the CodeQL CLI between 2.13.5 and 2.14.5, you can replace
github/codeql-action/*@v3
bygithub/codeql-action/*@v3.26.11
andgithub/codeql-action/*@v2
bygithub/codeql-action/*@v2.26.11
in your code scanning workflow to ensure you continue using this version of the CodeQL Action.3.26.11 - 03 Oct 2024
Upcoming breaking change: Add support for using
actions/download-artifact@v4
to programmatically consume CodeQL Action debug artifacts.Starting November 30, 2024, GitHub.com customers will no longer be able to use
actions/download-artifact@v3
. Therefore, to avoid breakage, customers who programmatically download the CodeQL Action debug artifacts should set theCODEQL_ACTION_ARTIFACT_V4_UPGRADE
environment variable totrue
and bumpactions/download-artifact@v3
toactions/download-artifact@v4
in their workflows. The CodeQL Action will enable this behavior by default in early November and workflows that have not yet bumped toactions/download-artifact@v3
toactions/download-artifact@v4
will begin failing then.
... (truncated)
ea9e4e3
Merge pull request #2605
from github/update-v3.27.4-3ab67a219845ea92
Update changelog for v3.27.43ab67a2
Merge pull request #2597
from github/mbg/caching/output-improvements6e3a010
Merge pull request #2583
from jsoref/use-artifact-41c83cd1
Upgrade actions/upload-artifact to v4024283f
Merge pull request #2602
from github/mergeback/v3.27.3-to-main-396bb3e4613fe96
Update checked-in dependenciese35d4aa
Update changelog and version after v3.27.3396bb3e
Merge pull request #2601
from github/update-v3.27.3-f047903672b13194
Update changelog for v3.27.3Sourced from @azure/msal-node
's
releases.
@azure/msal-node
v2.16.12.16.1
Tue, 12 Nov 2024 15:32:46 GMT
Patches
- Fixes bug where getAllAccounts always writes to the cache (shylasummers@microsoft.com)
- Bump eslint-config-msal to v0.0.0 (beachball)
- Bump rollup-msal to v0.0.0 (beachball)
@azure/msal-node
v2.16.02.16.0
Tue, 05 Nov 2024 18:58:45 GMT
Minor changes
- Add first order broker parameters #7348 (kshabelko@microsoft.com)
- Make clear synchronous (shylasummers@microsoft.com)
- Remove NetworkManager class (thomas.norling@microsoft.com)
- Region auto enable on env variable #7354 (rginsburg@microsoft.com)
- Bump
@azure/msal-common
to v14.16.0 (beachball)- Bump eslint-config-msal to v0.0.0 (beachball)
- Bump rollup-msal to v0.0.0 (beachball)
f810915
Bump package versions411d815
getAllAccounts always writes to cache (#7378)056024e
Bump package versions1bd3b55
Update CODEOWNERS (#7404)2e1e9d8
Enable New Client Credential Certificate E2E Tests on Pipeline (#7403)dbc0040
Added E2E Test: Client Credentials with Certificate from Key Vault (#7367)098a957
Region auto enable on env variable (#7354)933f21d
Updated CodeOwners (#7391)b18c3da
Replace MSA lab account with hardcoded UPN (#7397)df26209
Collect additional telemetry for crypto/runtime errors (#7394)Sourced from gpt-tokenizer's releases.
2.6.2
2.6.2 (2024-11-13)
Bug Fixes
- correct special token matching & counting (3547826)
- unify property and variable names across the library (6030d91)
2.6.1
2.6.1 (2024-11-11)
Bug Fixes
2.6.0
2.6.0 (2024-11-04)
Bug Fixes
Features
3547826
fix: correct special token matching & counting6030d91
fix: unify property and variable names across the libraryed01980
chore: use updated version of scaffoldd6be673
ci: fix build step402ff0b
fix: expose vocabulary size78b803d
fix: use extensions in models.tsf2f2663
docs: update LICENSEdb84947
docs: improve README and add sponsorsbc96467
ci: fix build workflowe832f9a
feat: add new and update existing modelsSourced from @microsoft/teams-js
's
releases.
v2.31.0
Minor changes
- Made the library treeshakable
- Made
externalAppAuthenticationForCEA.ts
throwError
objects instead ofSdkErrors
.- Replaced
Buffer
withuint8array-extras
to allow forbuffer
polyfill removal- Added validation for AppId instance in CEA APIs
- Changed the
notifySuccess
function to indicate through a promise when the function finished processing in the host.- Added new timestamp and handler for analyzing latencies due to message delays between app and hub.
Patches
- Add userClickTimeV2 to app
Context
to provide the timestamp when the user clicked the app using the performance timer API.- Increased the initialize response wait-timeout to 60 sec
- Removed
type: module
from package.json to fix nextjs bug- Added validation for
IActionExecuteInvokeRequest.data
element inExternalAppAuthentication
andExternalAppAuthenticationForCEA
capabilities. The element can be of type primitive or plain object only
Sourced from @microsoft/teams-js
's
changelog.
2.31.0
Wed, 13 Nov 2024 19:22:01 GMT
Minor changes
- Made the library treeshakable
- Made
externalAppAuthenticationForCEA.ts
throwError
objects instead ofSdkErrors
.- Replaced
Buffer
withuint8array-extras
to allow forbuffer
polyfill removal- Added validation for AppId instance in CEA APIs
- Changed the
notifySuccess
function to indicate through a promise when the function finished processing in the host.- Added new timestamp and handler for analyzing latencies due to message delays between app and hub.
Patches
- Add userClickTimeV2 to app
Context
to provide the timestamp when the user clicked the app using the performance timer API.- Increased the initialize response wait-timeout to 60 sec
- Removed
type: module
from package.json to fix nextjs bug- Added validation for
IActionExecuteInvokeRequest.data
element inExternalAppAuthentication
andExternalAppAuthenticationForCEA
capabilities. The element can be of type primitive or plain object only
75821b0
Prepare release 2.31.0 (#2618)1a1824d
Adding appId class type validation to CEA APIs (#2612)5b232cb
noahdarveau/nextjs fix (#2613)b783500
noahdarveau/buffer removal (#2598)7d21b55
Noahdarveau/docs fix (#2601)97ab50d
Add promise response to notify success. (#2589)577213c
Niha/increase initialize time out (#2590)ab4604e
Validate the unknown object is either plain object of primitive (#2572)f2f4757
noahdarveau/ The Last Treeshaking PR (#2593)6ce5c0a
noahdarveau/treeshaking private capabilities (#2592)Sourced from actions/dependency-review-action's releases.
v4.5.0
What's Changed
- Bump got from 14.4.2 to 14.4.3 by
@dependabot
in actions/dependency-review-action#844- Bump nodemon from 3.1.0 to 3.1.7 by
@dependabot
in actions/dependency-review-action#847- Bump
@vercel/ncc
from 0.38.1 to 0.38.3 by@dependabot
in actions/dependency-review-action#849- Overriding the cross-spawn dependency to use a safe version by
@Ahmed3lmallah
in actions/dependency-review-action#850- fix: add summary comment on failure when warn-only: true by
@ebickle
in actions/dependency-review-action#827- Prepare for 4.5.0 release by
@Ahmed3lmallah
in actions/dependency-review-action#851New Contributors
@ebickle
made their first contribution in actions/dependency-review-action#827Full Changelog: https://github.com/actions/dependency-review-action/compare/v4...v4.5.0
3b139cf
Merge pull request #851
from actions/ahmed3lmallah/prepare-for-4.5.0-released6807b6
updating generated codec89b41f
addressing lint issueseee97d8
incrementing project version9d10182
Merge pull request #827
from ebickle/fix/comment-warn-only9192be9
Merge pull request #850
from actions/ahmed3lmallah/adressing-CVE-2024-215382fc8e23
Using cross-spawn safe versionfb86db2
fix: resolve race conditions in async core.group calls0a198ab
fix: replace integer failureCount with booleanfc499fc
Merge branch 'main' into fix/comment-warn-onlySourced from step-security/harden-runner's releases.
v2.10.2
What's Changed
Fixes low-severity command injection weaknesses The advisory is here: https://github.com/step-security/harden-runner/security/advisories/GHSA-g85v-wf27-67xc
Bug fix to improve detection of whether Harden-Runner is running in a container
Full Changelog: https://github.com/step-security/harden-runner/compare/v2...v2.10.2
0080882
Merge pull request #476
from step-security/rc-164a3a88b
Update dist556aae6
Merge pull request #480
from h0x0er/jatin/cleanup6c39b84
chore: clean the code40401cf
Update for isdocker806ab1c
Update check for isdocker2846811
update distdf8a07c
Merge pull request #475
from h0x0er/fix-execSync30636fb
bug fixesSourced from github/codeql-action's releases.
v3.27.5
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
Note that the only difference between
v2
andv3
of the CodeQL Action is the node version they support, withv3
running on node 20 while we continue to releasev2
to support running on node 16. For example3.22.11
was the firstv3
release and is functionally identical to2.22.11
. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.3.27.5 - 19 Nov 2024
No user facing changes.
See the full CHANGELOG.md for more information.
Sourced from github/codeql-action's changelog.
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
Note that the only difference between
v2
andv3
of the CodeQL Action is the node version they support, withv3
running on node 20 while we continue to releasev2
to support running on node 16. For example3.22.11
was the firstv3
release and is functionally identical to2.22.11
. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.[UNRELEASED]
No user facing changes.
3.27.5 - 19 Nov 2024
No user facing changes.
3.27.4 - 14 Nov 2024
No user facing changes.
3.27.3 - 12 Nov 2024
No user facing changes.
3.27.2 - 12 Nov 2024
- Fixed an issue where setting up the CodeQL tools would sometimes fail with the message "Invalid value 'undefined' for header 'authorization'". #2590
3.27.1 - 08 Nov 2024
- The CodeQL Action now downloads bundles compressed using Zstandard on GitHub Enterprise Server when using Linux or macOS runners. This speeds up the installation of the CodeQL tools. This feature is already available to GitHub.com users. #2573
- Update default CodeQL bundle version to 2.19.3. #2576
3.27.0 - 22 Oct 2024
- Bump the minimum CodeQL bundle version to 2.14.6. #2549
- Fix an issue where the
upload-sarif
Action would fail with "upload-sarif post-action step failed: Input required and not supplied: token" when called in a composite Action that had a different set of inputs to the ones expected by theupload-sarif
Action. #2557- Update default CodeQL bundle version to 2.19.2. #2552
3.26.13 - 14 Oct 2024
No user facing changes.
3.26.12 - 07 Oct 2024
Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.14.5 and earlier. These versions of CodeQL were discontinued on 24 September 2024 alongside GitHub Enterprise Server 3.10, and will be unsupported by CodeQL Action versions 3.27.0 and later and versions 2.27.0 and later. #2520
If you are using one of these versions, please update to CodeQL CLI version 2.14.6 or later. For instance, if you have specified a custom version of the CLI using the 'tools' input to the 'init' Action, you can remove this input to use the default version.
Alternatively, if you want to continue using a version of the CodeQL CLI between 2.13.5 and 2.14.5, you can replace
github/codeql-action/*@v3
bygithub/codeql-action/*@v3.26.11
andgithub/codeql-action/*@v2
bygithub/codeql-action/*@v2.26.11
in your code scanning workflow to ensure you continue using this version of the CodeQL Action.3.26.11 - 03 Oct 2024
... (truncated)
f09c1c0
Merge pull request #2616
from github/update-v3.27.5-a6c8729a567b73ea
Update changelog for v3.27.5a6c8729
Merge pull request #2614
from github/marcogario/per-platform-proxy8f3b487
Start-proxy: Fetch OS specific binarycba5fb5
Merge pull request #2613
from github/dependabot/npm_and_yarn/npm_and_yarn-018...e782c3a
Merge pull request #2612
from github/angelapwen/report-linux-runner-releasedb67881
Update checked-in dependenciesecde4d2
Bump cross-spawn from 7.0.3 to 7.0.6 in the npm_and_yarn groupe3c67a0
Merge pull request #2610
from github/dependabot/npm_and_yarn/npm-d2ca52e617f9ada54
Telemetry: report OS release for GitHub-hosted Linux runnersSourced from github/codeql-action's releases.
v3.27.6
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
Note that the only difference between
v2
andv3
of the CodeQL Action is the node version they support, withv3
running on node 20 while we continue to releasev2
to support running on node 16. For example3.22.11
was the firstv3
release and is functionally identical to2.22.11
. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.3.27.6 - 03 Dec 2024
- Update default CodeQL bundle version to 2.19.4. #2626
See the full CHANGELOG.md for more information.
Sourced from github/codeql-action's changelog.
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
Note that the only difference between
v2
andv3
of the CodeQL Action is the node version they support, withv3
running on node 20 while we continue to releasev2
to support running on node 16. For example3.22.11
was the firstv3
release and is functionally identical to2.22.11
. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.[UNRELEASED]
- We are rolling out a change in December 2024 that will extract the CodeQL bundle directly to the toolcache to improve performance. #2631
- Update default CodeQL bundle version to 2.20.0. #2636
3.27.6 - 03 Dec 2024
- Update default CodeQL bundle version to 2.19.4. #2626
3.27.5 - 19 Nov 2024
No user facing changes.
3.27.4 - 14 Nov 2024
No user facing changes.
3.27.3 - 12 Nov 2024
No user facing changes.
3.27.2 - 12 Nov 2024
- Fixed an issue where setting up the CodeQL tools would sometimes fail with the message "Invalid value 'undefined' for header 'authorization'". #2590
3.27.1 - 08 Nov 2024
- The CodeQL Action now downloads bundles compressed using Zstandard on GitHub Enterprise Server when using Linux or macOS runners. This speeds up the installation of the CodeQL tools. This feature is already available to GitHub.com users. #2573
- Update default CodeQL bundle version to 2.19.3. #2576
3.27.0 - 22 Oct 2024
- Bump the minimum CodeQL bundle version to 2.14.6. #2549
- Fix an issue where the
upload-sarif
Action would fail with "upload-sarif post-action step failed: Input required and not supplied: token" when called in a composite Action that had a different set of inputs to the ones expected by theupload-sarif
Action. #2557- Update default CodeQL bundle version to 2.19.2. #2552
3.26.13 - 14 Oct 2024
No user facing changes.
3.26.12 - 07 Oct 2024
- Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.14.5 and earlier. These versions of CodeQL were discontinued on 24 September 2024 alongside GitHub Enterprise Server 3.10, and will be unsupported by CodeQL Action versions 3.27.0 and later and versions 2.27.0 and later. #2520
... (truncated)
aa57810
Merge pull request #2628
from github/update-v3.27.6-af49565b834e77b7
Update changelog for v3.27.6af49565
Merge pull request #2620
from github/cklin/DiffThunkRange-fix5659f01
Merge pull request #2626
from github/update-bundle/codeql-bundle-v2.19.45333ff3
Add changelog notee4fb28d
Update default bundle to codeql-bundle-v2.19.43d3d628
Merge pull request #2617
from github/update-supported-enterprise-server-versions2eea97e
Fix DiffThunkRange accessf8e782a
Merge pull request #2618
from github/mergeback/v3.27.5-to-main-f09c1c0a49b7c97
Update checked-in dependencies