CHANGELOG.md

CodeQL Action and CodeQL Runner Changelog

[UNRELEASED]

No user facing changes.

1.0.14 - 09 Sep 2021

• Update default CodeQL bundle version to 2.6.1. #733

1.0.13 - 06 Sep 2021

• Update default CodeQL bundle version to 2.6.0. #712
• Update baseline lines of code counter for python. All multi-line strings are counted as code. #714
• Remove old baseline LoC injection #715

1.0.12 - 16 Aug 2021

• Update README to include a sample permissions block. #689

1.0.11 - 09 Aug 2021

• Update default CodeQL bundle version to 2.5.9. #687

1.0.10 - 03 Aug 2021

• Fix an issue where a summary of diagnostics information from CodeQL was not output to the logs of the analyze step of the Action. #672

1.0.9 - 02 Aug 2021

No user facing changes.

1.0.8 - 26 Jul 2021

• Update default CodeQL bundle version to 2.5.8. #631

1.0.7 - 21 Jul 2021

No user facing changes.

1.0.6 - 19 Jul 2021

• The init step of the Action now supports a source-root input as a path to the root source-code directory. By default, the path is relative to $GITHUB_WORKSPACE. #607
• The init step will now try to install a few Python tools needed by this Action when running on a self-hosted runner. #616

1.0.5 - 12 Jul 2021

• The analyze step of the Action now supports a skip-queries option to merely build the CodeQL database without analyzing. This functionality is not present in the runner. Additionally, the step will no longer fail if it encounters a finalized database, and will instead continue with query execution. #602
• Update the warning message when the baseline lines of code count is unavailable. #608

1.0.4 - 28 Jun 2021

• Fix RUNNER_TEMP environment variable must be set when using runner. #594
• Fix couting of lines of code for C# projects. #586

1.0.3 - 23 Jun 2021

No user facing changes.

1.0.2 - 17 Jun 2021

• Fix out of memory in hash computation. #550
• Clean up logging during analyze results. #557
• Add --finalize-dataset to database finalize call, freeing up some disk space after database creation. #558

1.0.1 - 07 Jun 2021

• Pass the --sarif-group-rules-by-pack argument to CodeQL CLI invocations that generate SARIF. This means the SARIF rule object for each query will now be found underneath its corresponding query pack in runs[].tool.extensions. #546
• Output the location of CodeQL databases created in the analyze step. #543

1.0.0 - 31 May 2021

• Add this changelog file. #507
• Improve grouping of analysis logs. Add a new log group containing a summary of metrics and diagnostics, if they were produced by CodeQL builtin queries. #515
• Add metrics and diagnostics summaries from custom query suites to the analysis summary log group. #532