Takashi Kokubun
84f45c6ed5
Place continue-on-error consistently
...
Once it fails on "Perform CodeQL Analysis", it proceeds to subsequent
steps and fails because required files are not created by previous
steps. When we have a continue-on-error, all subsequent steps that rely
on the step should have a continue-on-error as well.
2023-11-24 22:28:39 -08:00
dependabot[bot]
be1608592e
Bump actions/checkout from 4.1.0 to 4.1.1
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4.1.0 to 4.1.1.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](8ade135a41...b4ffde65f4
2023-10-17 20:24:16 -07:00
Takashi Kokubun
92bdc3757f
Ignore the failures of CodeQL
...
It randomly fails like this:
https://github.com/ruby/ruby/actions/runs/6510372995/job/17683918027
and we don't want to pay for and use a larger runner for the job that
only generates false positives most of the time.
2023-10-13 09:40:44 -07:00
dependabot[bot]
7816307b30
Bump actions/checkout from 4.0.0 to 4.1.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](3df4ab11eb...8ade135a41
2023-09-25 12:42:39 +09:00
dependabot[bot]
5a7f5bb0de
Bump actions/checkout from 3.6.0 to 4.0.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 3.6.0 to 4.0.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](f43a0e5ff2...3df4ab11eb
2023-09-15 17:05:23 +09:00
Nobuyoshi Nakada
fa70e361e0
CodeQL: Increase memory size [ci skip]
...
Query evaluation ran out of Java heap frequently since CodeQL 2.14.3.
2023-08-31 14:06:35 +09:00
Nobuyoshi Nakada
5b407450f5
Skip push by dependabot [ci skip]
...
Would be pull-requested soon.
2023-08-25 17:10:45 +09:00
dependabot[bot]
945e79c996
Bump actions/checkout from 3.5.3 to 3.6.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 3.5.3 to 3.6.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](c85c95e3d7...f43a0e5ff2
2023-08-25 12:08:51 +09:00
Nobuyoshi Nakada
e098468d7f
Let [DOC] in PR title skip CIs
2023-07-13 19:08:50 +09:00
卜部昌平
b0977e402a
chore: just add spaces [ci skip]
...
As seen in:
https://docs.github.com/en/actions/learn-github-actions/expressions
2023-07-04 20:13:49 +09:00
卜部昌平
d1efc7a3f0
chore: prettier [ci skip]
...
This is just `prettier --single-quote`. Single quote is because
it generated smaller diff than vice verca.
2023-07-04 20:13:49 +09:00
卜部昌平
420d069cc2
refactor extract mkdir
...
Everyone does `mkdir build; src/autogen.sh`; why not merge them.
2023-07-04 20:13:49 +09:00
卜部昌平
e8d629ed76
refactor extract apt-get
...
Use composite action to reduce copy & paste.
2023-06-30 11:18:06 +09:00
dependabot[bot]
b308f7cfe4
Bump actions/checkout from 3.5.2 to 3.5.3
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 3.5.2 to 3.5.3.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](8e5e7e5ab8...c85c95e3d7
2023-06-12 16:07:18 +09:00
dependabot[bot]
c09b75ab35
Bump github/codeql-action from 2.3.5 to 2.13.4
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 2.3.5 to 2.13.4.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](0225834cc5...cdcdbb5797
2023-06-12 12:36:20 +09:00
dependabot[bot]
3dae55ea2f
Bump github/codeql-action from 2.3.3 to 2.3.5
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 2.3.3 to 2.3.5.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](29b1f65c5e...0225834cc5
2023-05-26 12:39:20 +09:00
Yuichiro Kaneko
a1b01e7701
Use Lrama LALR parser generator instead of Bison
...
https://bugs.ruby-lang.org/issues/19637
Co-authored-by: Nobuyoshi Nakada <nobu@ruby-lang.org>
2023-05-12 18:25:10 +09:00
dependabot[bot]
085a8709b5
Bump github/codeql-action from 2.3.2 to 2.3.3
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 2.3.2 to 2.3.3.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](f3feb00acb...29b1f65c5e
2023-05-05 12:43:58 +09:00
dependabot[bot]
83a822f70f
Bump advanced-security/filter-sarif from 1.0.0 to 1.0.1
...
Bumps [advanced-security/filter-sarif](https://github.com/advanced-security/filter-sarif ) from 1.0.0 to 1.0.1.
- [Release notes](https://github.com/advanced-security/filter-sarif/releases )
- [Commits](bc96d9fb93...f3b8118a93
2023-05-02 12:37:13 +09:00
dependabot[bot]
f93fcdb885
Bump advanced-security/filter-sarif
...
Bumps [advanced-security/filter-sarif](https://github.com/advanced-security/filter-sarif ) from eac3ea6a5e1270952681bf7287598a6cd1a4d49d to bc96d9fb9338c5b48cc440b1b4d0a350b26a20db.
- [Release notes](https://github.com/advanced-security/filter-sarif/releases )
- [Commits](eac3ea6a5e...bc96d9fb93
2023-05-01 16:58:27 +09:00
dependabot[bot]
9b07d30df8
Bump github/codeql-action from 2.3.0 to 2.3.2
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 2.3.0 to 2.3.2.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](b2c19fb9a2...f3feb00acb
2023-04-28 12:45:58 +09:00
dependabot[bot]
886986b3ef
Bump github/codeql-action from 2.2.11 to 2.3.0
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 2.2.11 to 2.3.0.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](d186a2a36c...b2c19fb9a2
2023-04-24 12:48:15 +09:00
dependabot[bot]
389ea0ae4c
Bump actions/checkout from 3.5.0 to 3.5.2
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 3.5.0 to 3.5.2.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](8f4b7f8486...8e5e7e5ab8
2023-04-14 12:39:49 +09:00
dependabot[bot]
cc0b8c47bf
Bump github/codeql-action from 2.2.10 to 2.2.11
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 2.2.10 to 2.2.11.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](8c8d71dde4...d186a2a36c
2023-04-07 12:45:35 +09:00
dependabot[bot]
5d718f109d
Bump github/codeql-action from 2.2.9 to 2.2.10
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 2.2.9 to 2.2.10.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](04df1262e6...8c8d71dde4
2023-04-06 12:43:19 +09:00
dependabot[bot]
a136ca0d04
Bump actions/checkout from 3.4.0 to 3.5.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 3.4.0 to 3.5.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](24cb908017...8f4b7f8486
2023-03-28 17:15:17 +09:00
dependabot[bot]
82f46ddb81
Bump github/codeql-action from 2.2.8 to 2.2.9
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 2.2.8 to 2.2.9.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](67a35a0858...04df1262e6
2023-03-28 12:41:26 +09:00
dependabot[bot]
fee9044b25
Bump github/codeql-action from 2.2.7 to 2.2.8
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 2.2.7 to 2.2.8.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](168b99b3c2...67a35a0858
2023-03-23 12:44:07 +09:00
dependabot[bot]
c0866f8adb
Bump actions/cache from 3.2.6 to 3.3.1
...
Bumps [actions/cache](https://github.com/actions/cache ) from 3.2.6 to 3.3.1.
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](https://github.com/actions/cache/compare/v3.2.6...88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 )
---
updated-dependencies:
- dependency-name: actions/cache
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-03-17 13:53:39 +09:00
dependabot[bot]
c7ae6f6ae8
Bump actions/checkout from 3.3.0 to 3.4.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 3.3.0 to 3.4.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v3.3.0...24cb9080177205b6e8c946b17badbe402adc938f )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-03-17 13:17:30 +09:00
dependabot[bot]
a6c447d4c5
Bump github/codeql-action from 2.2.6 to 2.2.7
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 2.2.6 to 2.2.7.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](16964e90ba...168b99b3c2
2023-03-16 12:38:21 +09:00
dependabot[bot]
45fdc18053
Bump github/codeql-action from 2.2.5 to 2.2.6
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 2.2.5 to 2.2.6.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](32dc499307...16964e90ba
2023-03-13 12:34:43 +09:00
Hiroshi SHIBATA
66b89b069d
Also ignore dismissed CodeQL alerts at tests and URI library
2023-02-28 12:44:13 +09:00
Hiroshi SHIBATA
ad679ec9e5
Ignore rb/overly-large-range on URI
2023-02-28 12:05:57 +09:00
Hiroshi SHIBATA
c21260e3ff
Enable only master branch for CodeQL push trigger
2023-02-28 12:05:57 +09:00
Hiroshi SHIBATA
9ff09d695c
Run CodeQL each PRs again
2023-02-28 12:05:57 +09:00
StepSecurity Bot
2cbe1f3ebc
[StepSecurity] ci: Harden GitHub Actions
...
Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>
2023-02-27 19:09:36 +09:00
Hiroshi SHIBATA
10a80d9dc4
Ignore test case for Kernel and IO methods
2023-02-27 18:49:18 +09:00
Hiroshi SHIBATA
ae4d8e99f1
Rename job and workflow names
2023-02-27 17:57:58 +09:00
Hiroshi SHIBATA
f21f51915e
Use matrix strategies each language
2023-02-27 17:57:58 +09:00
Hiroshi SHIBATA
b5a1c57c98
Merge codeql-config into codeql-analysis
2023-02-27 17:57:58 +09:00
dependabot[bot]
d686a45cdb
Bump github/codeql-action from 2.2.4 to 2.2.5
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 2.2.4 to 2.2.5.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](17573ee1cc...32dc499307
2023-02-27 12:52:45 +09:00
dependabot[bot]
2798b13e33
Bump actions/cache from 3.2.5 to 3.2.6
...
Bumps [actions/cache](https://github.com/actions/cache ) from 3.2.5 to 3.2.6.
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](6998d139dd...69d9d449ac
2023-02-22 11:56:36 +09:00
dependabot[bot]
1df75d6586
Bump actions/cache from 3.2.4 to 3.2.5
...
Bumps [actions/cache](https://github.com/actions/cache ) from 3.2.4 to 3.2.5.
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](627f0f41f6...6998d139dd
2023-02-16 11:40:58 +09:00
dependabot[bot]
0116650525
Bump github/codeql-action from 2.2.1 to 2.2.4
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 2.2.1 to 2.2.4.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](3ebbd71c74...17573ee1cc
2023-02-16 11:40:45 +09:00
dependabot[bot]
4f4038e634
Bump actions/cache from 3.2.2 to 3.2.4
...
Bumps [actions/cache](https://github.com/actions/cache ) from 3.2.2 to 3.2.4.
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](4723a57e26...627f0f41f6
2023-02-01 16:24:49 +09:00
dependabot[bot]
eb8f284cf2
Bump github/codeql-action from 2.1.37 to 2.2.1
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 2.1.37 to 2.2.1.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](959cbb7472...3ebbd71c74
2023-02-01 13:56:43 +09:00
dependabot[bot]
41e84c7b09
Bump actions/checkout from 3.2.0 to 3.3.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 3.2.0 to 3.3.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](755da8c3cf...ac59398561
2023-02-01 13:56:14 +09:00
dependabot[bot]
1f9b6bfa93
Bump actions/cache from 3.2.0 to 3.2.2
...
Bumps [actions/cache](https://github.com/actions/cache ) from 3.2.0 to 3.2.2.
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](c17f4bf466...4723a57e26
2023-01-03 12:03:00 -05:00
dependabot[bot]
4d05a96d14
Bump actions/checkout from 3.1.0 to 3.2.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 3.1.0 to 3.2.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](93ea575cb5...755da8c3cf
2022-12-23 12:54:36 +09:00
