Skip to content

Update config-utils.ts #3381

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
joe10832 wants to merge 286 commits into from
Closed

Update config-utils.ts #3381

joe10832 wants to merge 286 commits into from

Conversation

@joe10832
Copy link

@joe10832 joe10832 commented Dec 23, 2025

Risk assessment

For internal use only. Please select the risk level of this change:

  • Low risk: Changes are fully under feature flags, or have been fully tested and validated in pre-production environments and are highly observable, or are documentation or test only.
  • High risk: Changes are not fully under feature flags, have limited visibility and/or cannot be tested outside of production.

Which use cases does this change impact?

Workflow types:

  • Advanced setup - Impacts users who have custom CodeQL workflows.
  • Managed - Impacts users with dynamic workflows (Default Setup, CCR, ...).

Products:

  • Code Scanning - The changes impact analyses when analysis-kinds: code-scanning.
  • Code Quality - The changes impact analyses when analysis-kinds: code-quality.
  • CCR - The changes impact analyses for Copilot Code Reviews.
  • Third-party analyses - The changes affect the upload-sarif action.

Environments:

  • Dotcom - Impacts CodeQL workflows on github.com and/or GitHub Enterprise Cloud with Data Residency.
  • GHES - Impacts CodeQL workflows on GitHub Enterprise Server.
  • Testing/None - This change does not impact any CodeQL workflows in production.

How did/will you validate this change?

  • Test repository - This change will be tested on a test repository before merging.
  • Unit tests - I am depending on unit test coverage (i.e. tests in .test.ts files).
  • End-to-end tests - I am depending on PR checks (i.e. tests in pr-checks).
  • Other - Please provide details.
  • None - I am not validating these changes.

If something goes wrong after this change is released, what are the mitigation and rollback strategies?

  • Feature flags - All new or changed code paths can be fully disabled with corresponding feature flags.
  • Rollback - Change can only be disabled by rolling back the release or releasing a new version with a fix.
  • Other - Please provide details.

How will you know if something goes wrong after this change is released?

  • Telemetry - I rely on existing telemetry or have made changes to the telemetry.
    • Dashboards - I will watch relevant dashboards for issues after the release. Consider whether this requires this change to be released at a particular time rather than as part of a regular release.
    • Alerts - New or existing monitors will trip if something goes wrong with this change.
  • Other - Please provide details.

Are there any special considerations for merging or releasing this change?

  • No special considerations - This change can be merged at any time.
  • Special considerations - This change should only be merged once certain preconditions are met. Please provide details of those or link to this PR from an internal issue.

Merge / deployment checklist

  • Confirm this change is backwards compatible with existing workflows.
  • Consider adding a changelog entry for this change.
  • Confirm the readme and docs have been updated if necessary.

mbg and others added 30 commits November 9, 2025 11:10
@mbg
Restore missing status.push resulting from a bad merge
b0e9dfc
@mbg
Restore earlier log messages for checkHashPatterns
a47d550
@mbg
Insert new featurePrefix after general cache key prefix
4885eb2
@mbg
Add some tests for downloadDependencyCaches related to feature pref…
48a56f6 
…ixes
@mbg
Merge pull request github#3279 from github/mbg/lint/jsdoc-param-names
04bd5c6 
Linter: check JSDoc parameter names exist
@dependabot
Bump the npm-minor group with 4 updates
63bb415 
Bumps the npm-minor group with 4 updates: [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js), [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin), [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) and [esbuild](https://github.com/evanw/esbuild).


Updates `@eslint/js` from 9.39.0 to 9.39.1
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](https://github.com/eslint/eslint/commits/v9.39.1/packages/js)

Updates `@typescript-eslint/eslint-plugin` from 8.46.3 to 8.46.4
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.46.4/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.46.3 to 8.46.4
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.46.4/packages/parser)

Updates `esbuild` from 0.25.12 to 0.27.0
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](evanw/esbuild@v0.25.12...v0.27.0)

---
updated-dependencies:
- dependency-name: "@eslint/js"
  dependency-version: 9.39.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.46.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.46.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: esbuild
  dependency-version: 0.27.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@github-actions
Rebuild
3d7be7b
@henrymercer
Merge pull request github#3281 from github/dependabot/npm_and_yarn/np…
1d9f357 
…m-minor-9dd9c1a8e4

Bump the npm-minor group with 4 updates
@mbg
Merge pull request github#3117 from github/mbg/csharp/new-cache-key-c…
534824e 
…alculation

Support non-lock files for C# cache key computation
@mbg
Run npm ci in update-supported-enterprise-server-versions.yml
71c3720
@mbg
Perform sparse checkout
a7e52b6
@mbg
Trigger on PR for relevant changes
fd830db
@mbg
Don't push for PR event
7a7cd85
@mbg
Merge pull request github#3284 from github/mbg/ci/fix-enterprise-work…
ba454b8 
…flow

Fix `update-supported-enterprise-server-versions.yml` workflow
@kaspersv
Overlay: Remove repository owner restriction
5091e42
@mbg
Refactor C# cache content paths into a function
cf8b7a6
@mbg
Pass FeatureEnablement to getDependencyPaths
d854ba6
@mbg
Add FF for extra C# cache contents
a47d04c
@mbg
Include getCsharpTempDependencyDir in C# caches if FF is enabled
ecaa6db
@mbg
Configure temp dependency dir for C# extractor when FF is enabled
f5f9571 
And also clean it up.
@github-actions
Update default bundle to codeql-bundle-v2.23.5
362f8d1
@github-actions
Add changelog note
8d3d400
@mbg
Add support for adding setup-dotnet steps to sync.sh
f20e021
@mbg
Add global.json
58c9eb6
@mbg
Enable installDotNet in all workflows that analyse C#
38a3a72
@mbg
Update remaining workflows
3fac49c
@henrymercer
Merge pull request github#3289 from github/mbg/ci/setup-dotnet
456a74a 
Add support for adding `setup-dotnet` steps to `sync.sh`
@mbg
Merge branch 'main' into update-bundle/codeql-bundle-v2.23.5
9777b01
@mbg
Merge pull request github#3288 from github/update-bundle/codeql-bundl…
8c10e89 
…e-v2.23.5

Update default bundle to 2.23.5
@github-actions
Update changelog for v4.31.3
14d898e
@henrymercer
Bump timeout on Windows
3322491
@henrymercer
Skip slow test on Windows
6b5763e
@henrymercer
Merge branch 'main' into copilot/update-overlay-git-version-check
32795b3
@henrymercer
Run testing Action using Node 24
7673a2d
@henrymercer
Remove caching mechanism
e052dbd
@henrymercer
Move git version logging to config utils
3765106
@henrymercer
Remove unnecessary stub restores
9c5588d
@henrymercer
Update makeTelemetryDiagnostic doc
056581e
@henrymercer
Extract zstd files too
ac6c41b
@henrymercer
Require tools feature for uploading overlay DBs
cb26a02
@henrymercer
Report bundled DB size in error if known
67e683b
@henrymercer
Check !== undefined rather than truthiness
a2917b0
@henrymercer
Record both truncated and full git versions
a13b404
@henrymercer
Bump log level for failing to parse git version
a2c3c8e
@henrymercer
Avoid non-determinism in PR checks due to overlay FFs
003ddae
@henrymercer
Merge pull request github#3375 from github/henrymercer/overlay-upload…
eb823a7 
…-tools-feature

Require tools feature for uploading overlay DBs
@henrymercer
Throw in test mode if can't compute git version
358a55e
@henrymercer
Trim git version output
cec3cc5
@henrymercer
Test mode: Tolerate missing git binary
948c7fb
@henrymercer
Improve comment
ff84c6f
@henrymercer
Only enable overlay for the code scanning suite
a7e88a4
@henrymercer
Merge pull request github#3374 from github/henrymercer/scan-debug-art…
525b648 
…ifacts

CI: Perform a best-effort scan of the debug artifacts during release validation
@henrymercer
Prefer explicit env var to binary accessibility check
95246ce
@henrymercer
Merge branch 'main' into copilot/update-overlay-git-version-check
034401b
@henrymercer
Use EnvVar
8b428c0
@henrymercer
Fix import order
3b6fef6
@henrymercer
Merge pull request github#3370 from github/copilot/update-overlay-git…
f67ec12 
…-version-check

Add git version check for overlay analysis enablement
@joe10832 joe10832 requested a review from a team as a code owner December 23, 2025 16:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

9 participants

@joe10832 @NlightNFotis @mbg @henrymercer @kaspersv @mario-campos @redsun82 @oscarsj @nickrolfe