Skip to content

Chore: Update dependencies #1

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 98 commits into
base: main
Choose a base branch
from
Open

Chore: Update dependencies #1

wants to merge 98 commits into from

Conversation

salonichf5
Copy link

Proposed changes

Updates dependencies for this fork based off of main repo

Checklist

Before creating a PR, run through this checklist and mark each as complete:

renovate bot and others added 30 commits February 11, 2025 19:17
@renovate @lucacome
Update Node.js to v22 (lucacome#452)
488f2fe 
* Update Node.js to v22

| datasource   | package     | from    | to       |
| ------------ | ----------- | ------- | -------- |
| node-version | node        | v20.0.0 | v22.13.1 |
| npm          | @types/node | 22.13.1 | 22.13.1  |


Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Discard changes to .nvmrc

---------

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Luca Comellini <[email protected]>
@renovate
Update dependency eslint to ^9.20.1 (lucacome#454)
0e2b52b 
| datasource | package | from   | to     |
| ---------- | ------- | ------ | ------ |
| npm        | eslint  | 9.20.0 | 9.20.1 |

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update dependency semver to ^7.7.1 (lucacome#455)
9cddae1 
| datasource | package | from  | to    |
| ---------- | ------- | ----- | ----- |
| npm        | semver  | 7.7.1 | 7.7.1 |

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update dependency prettier to v3.5.0 (lucacome#458)
b17e2a5 
| datasource | package  | from  | to    |
| ---------- | -------- | ----- | ----- |
| npm        | prettier | 3.4.2 | 3.5.0 |

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update github/codeql-action action to v3.28.9 (lucacome#456)
77189ca 
| datasource  | package              | from    | to      |
| ----------- | -------------------- | ------- | ------- |
| github-tags | github/codeql-action | v3.28.8 | v3.28.9 |

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update dependency prettier to v3.5.1 (lucacome#459)
519cf8c 
| datasource | package  | from  | to    |
| ---------- | -------- | ----- | ----- |
| npm        | prettier | 3.5.0 | 3.5.1 |

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update dependency rollup to ^4.34.8 (lucacome#460)
7a2c6a2 
| datasource | package | from   | to     |
| ---------- | ------- | ------ | ------ |
| npm        | rollup  | 4.34.6 | 4.34.8 |

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update dependency @docker/actions-toolkit to ^0.54.0 (lucacome#457)
ebbf5b8 
| datasource | package                 | from   | to     |
| ---------- | ----------------------- | ------ | ------ |
| npm        | @docker/actions-toolkit | 0.53.0 | 0.54.0 |

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update typescript-eslint monorepo to ^8.24.1 (lucacome#462)
16eb6c7 
| datasource | package                          | from   | to     |
| ---------- | -------------------------------- | ------ | ------ |
| npm        | @typescript-eslint/eslint-plugin | 8.23.0 | 8.24.1 |
| npm        | @typescript-eslint/parser        | 8.23.0 | 8.24.1 |

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update reviewdog/action-actionlint action to v1.65.0 (lucacome#461)
9d48911 
| datasource  | package                     | from    | to      |
| ----------- | --------------------------- | ------- | ------- |
| github-tags | reviewdog/action-actionlint | v1.64.1 | v1.65.0 |

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@lucacome
Set pre-commit schedule to quarterly (lucacome#464)
e78be78
@pre-commit-ci
[pre-commit.ci] pre-commit autoupdate (lucacome#463)
91df04a 
Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>
@lucacome
Test the JSON output properly (lucacome#465)
356e1c0
@lucacome
Add yamllint to pre-commit config and markdownlint (lucacome#466)
0ccc2c5
@lucacome
Add more data in tests (lucacome#467)
3e85fb2
@lucacome
Add actionlint to pre-commit config (lucacome#468)
a4fba0e
@renovate
Update typescript-eslint monorepo to ^8.25.0 (lucacome#478)
10d6275 
| datasource | package                          | from   | to     |
| ---------- | -------------------------------- | ------ | ------ |
| npm        | @typescript-eslint/eslint-plugin | 8.24.1 | 8.25.0 |
| npm        | @typescript-eslint/parser        | 8.24.1 | 8.25.0 |

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update eslint monorepo to ^9.21.0 (lucacome#477)
c380e54 
| datasource | package    | from   | to     |
| ---------- | ---------- | ------ | ------ |
| npm        | @eslint/js | 9.20.0 | 9.21.0 |
| npm        | eslint     | 9.20.1 | 9.21.0 |

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update ossf/scorecard-action action to v2.4.1 (lucacome#475)
4e9eb72 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update github/codeql-action action to v3.28.10 (lucacome#474)
3c5c419 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update actions/upload-artifact action to v4.6.1 (lucacome#469)
bb74928 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update dependency @eslint/compat to ^1.2.7 (lucacome#470)
3332642 
| datasource | package        | from  | to    |
| ---------- | -------------- | ----- | ----- |
| npm        | @eslint/compat | 1.2.6 | 1.2.7 |

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update dependency @types/node to ^22.13.5 (lucacome#471)
e6cf2a9 
| datasource | package     | from    | to      |
| ---------- | ----------- | ------- | ------- |
| npm        | @types/node | 22.13.1 | 22.13.5 |

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update dependency prettier to v3.5.2 (lucacome#472)
b341400 
| datasource | package  | from  | to    |
| ---------- | -------- | ----- | ----- |
| npm        | prettier | 3.5.1 | 3.5.2 |

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update dependency ts-jest to ^29.2.6 (lucacome#473)
95600c6 
| datasource | package | from   | to     |
| ---------- | ------- | ------ | ------ |
| npm        | ts-jest | 29.2.5 | 29.2.6 |

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update dependency @docker/actions-toolkit to ^0.56.0 (lucacome#476)
d9b088f 
| datasource | package                 | from   | to     |
| ---------- | ----------------------- | ------ | ------ |
| npm        | @docker/actions-toolkit | 0.54.0 | 0.56.0 |

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update dependency eslint-config-prettier to ^10.0.2 (lucacome#479)
0b9c5bd 
| datasource | package                | from   | to     |
| ---------- | ---------------------- | ------ | ------ |
| npm        | eslint-config-prettier | 10.0.1 | 10.0.2 |

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@lucacome
Add option to group updates of the same dependency (lucacome#480)
7205c58
@coderabbitai
📝 Add docstrings to context and notes (lucacome#481)
003ab1c
@lucacome
Handle pre-commit deps and more renovate options (lucacome#482)
fe0839a
renovate bot and others added 28 commits April 9, 2025 20:52
@renovate
Update dependency typescript to ^5.8.3 (lucacome#518)
d6c5441 
| datasource | package    | from  | to    |
| ---------- | ---------- | ----- | ----- |
| npm        | typescript | 5.8.2 | 5.8.3 |

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update eslint monorepo to ^9.24.0 (lucacome#530)
4fcf7bf 
| datasource | package    | from   | to     |
| ---------- | ---------- | ------ | ------ |
| npm        | @eslint/js | 9.22.0 | 9.24.0 |
| npm        | eslint     | 9.22.0 | 9.24.0 |

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update dependency ts-jest to ^29.3.1 (lucacome#529)
9f46391 
| datasource | package | from   | to     |
| ---------- | ------- | ------ | ------ |
| npm        | ts-jest | 29.2.6 | 29.3.1 |

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update dependency rollup to ^4.39.0 (lucacome#528)
8636cf5 
| datasource | package | from   | to     |
| ---------- | ------- | ------ | ------ |
| npm        | rollup  | 4.35.0 | 4.39.0 |

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update dependency @types/semver to ^7.7.0 (lucacome#527)
ed830cb 
| datasource | package       | from  | to    |
| ---------- | ------------- | ----- | ----- |
| npm        | @types/semver | 7.5.8 | 7.7.0 |

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update dependency @docker/actions-toolkit to ^0.59.0 (lucacome#526)
3899975 
| datasource | package                 | from   | to     |
| ---------- | ----------------------- | ------ | ------ |
| npm        | @docker/actions-toolkit | 0.57.0 | 0.59.0 |

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update actions/setup-node action to v4.3.0 (lucacome#525)
d8f40a9 
| datasource  | package            | from   | to     |
| ----------- | ------------------ | ------ | ------ |
| github-tags | actions/setup-node | v4.2.0 | v4.3.0 |

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update dependency eslint-plugin-prettier to ^5.2.6 (lucacome#517)
6322ffe 
| datasource | package                | from  | to    |
| ---------- | ---------------------- | ----- | ----- |
| npm        | eslint-plugin-prettier | 5.2.3 | 5.2.6 |

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update dependency eslint-config-prettier to ^10.1.2 (lucacome#536)
890876e 
| datasource | package                | from   | to     |
| ---------- | ---------------------- | ------ | ------ |
| npm        | eslint-config-prettier | 10.1.1 | 10.1.2 |

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update pre-commit hook gitleaks/gitleaks to v8.24.3 (lucacome#538)
c2f5dd6 
| datasource  | package           | from    | to      |
| ----------- | ----------------- | ------- | ------- |
| github-tags | gitleaks/gitleaks | v8.24.2 | v8.24.3 |

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update dependency ts-jest to ^29.3.2 (lucacome#537)
f94aa4b 
| datasource | package | from   | to     |
| ---------- | ------- | ------ | ------ |
| npm        | ts-jest | 29.3.1 | 29.3.2 |

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update dependency rollup to ^4.40.0 (lucacome#539)
7c367dc 
| datasource | package | from   | to     |
| ---------- | ------- | ------ | ------ |
| npm        | rollup  | 4.39.0 | 4.40.0 |

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update actions/setup-node action to v4.4.0 (lucacome#540)
e4d3ee6 
| datasource  | package            | from   | to     |
| ----------- | ------------------ | ------ | ------ |
| github-tags | actions/setup-node | v4.3.0 | v4.4.0 |

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update Yarn to v4.9.1 (lucacome#541)
ac2d53b 
| datasource | package      | from  | to    |
| ---------- | ------------ | ----- | ----- |
| npm        | @yarnpkg/cli | 4.9.0 | 4.9.1 |

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update typescript-eslint monorepo to ^8.30.1 (lucacome#542)
b4fb68b 
| datasource | package                          | from   | to     |
| ---------- | -------------------------------- | ------ | ------ |
| npm        | @typescript-eslint/eslint-plugin | 8.29.1 | 8.30.1 |
| npm        | @typescript-eslint/parser        | 8.29.1 | 8.30.1 |

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@lucacome
Use node 20 (lucacome#543)
72c8dce
@renovate
Update Node.js to v20.19.0 (lucacome#522)
59fb8ba 
| datasource   | package | from     | to       |
| ------------ | ------- | -------- | -------- |
| node-version | node    | v20.18.3 | v20.19.0 |
| node-version | node    | v20.0.0  | v20.19.0 |

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate @pre-commit-ci
Migrate renovate config (lucacome#544)
7bc6320 
* Migrate config renovate.json

* [pre-commit.ci] auto fixes from pre-commit.com hooks

for more information, see https://pre-commit.ci

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>
@renovate
Lock file maintenance (lucacome#545)
f15262d 
* Lock file maintenance

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Update dist/ after build

---------

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update typescript-eslint monorepo to ^8.31.1 (lucacome#553)
7083b0b 
| datasource | package                          | from   | to     |
| ---------- | -------------------------------- | ------ | ------ |
| npm        | @typescript-eslint/eslint-plugin | 8.30.1 | 8.31.1 |
| npm        | @typescript-eslint/parser        | 8.30.1 | 8.31.1 |

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update stefanzweifel/git-auto-commit-action action to v5.2.0 (lucacom…
f094c2c 
…e#552)

| datasource  | package                              | from   | to     |
| ----------- | ------------------------------------ | ------ | ------ |
| github-tags | stefanzweifel/git-auto-commit-action | v5.1.0 | v5.2.0 |

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update dependency @docker/actions-toolkit to ^0.61.0 (lucacome#550)
42641bc 
* Update dependency @docker/actions-toolkit to ^0.61.0

| datasource | package                 | from   | to     |
| ---------- | ----------------------- | ------ | ------ |
| npm        | @docker/actions-toolkit | 0.59.0 | 0.61.0 |


Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* Update dist/ after build

---------

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update Node.js to v20.19.1 (lucacome#549)
6770c68 
| datasource   | package     | from     | to       |
| ------------ | ----------- | -------- | -------- |
| node-version | node        | v20.19.0 | v20.19.1 |
| npm          | @types/node | 20.17.30 | 20.17.32 |

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update github/codeql-action action to v3.28.16 (lucacome#548)
dac2eae 
| datasource  | package              | from     | to       |
| ----------- | -------------------- | -------- | -------- |
| github-tags | github/codeql-action | v3.28.15 | v3.28.16 |

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update dependency lucacome/draft-release to v1.2.2 (lucacome#546)
955313c 
| datasource  | package                | from   | to     |
| ----------- | ---------------------- | ------ | ------ |
| github-tags | lucacome/draft-release | v1.2.1 | v1.2.2 |

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update eslint monorepo to ^9.25.1 (lucacome#551)
5958e6b 
| datasource | package    | from   | to     |
| ---------- | ---------- | ------ | ------ |
| npm        | @eslint/js | 9.24.0 | 9.25.1 |
| npm        | eslint     | 9.24.0 | 9.25.1 |

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update pre-commit hook gitleaks/gitleaks to v8.25.1 (lucacome#554)
c637372 
| datasource  | package           | from    | to      |
| ----------- | ----------------- | ------- | ------- |
| github-tags | gitleaks/gitleaks | v8.24.3 | v8.25.1 |

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update dependency rollup to ^4.40.1 (lucacome#547)
9a005e6 
| datasource | package | from   | to     |
| ---------- | ------- | ------ | ------ |
| npm        | rollup  | 4.40.0 | 4.40.1 |

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
pdabelf5
pdabelf5 reviewed Jun 2, 2025
View reviewed changes
.github/workflows/codeql.yml
Comment on lines +22 to +50
name: Analyze (${{ matrix.language }})
runs-on: ubuntu-24.04
permissions:
actions: read
contents: read
security-events: write

strategy:
fail-fast: false
matrix:
language: [ 'javascript' ]
# CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python', 'ruby' ]
# Use only 'java' to analyze code written in Java, Kotlin or both
# Use only 'javascript' to analyze code written in JavaScript, TypeScript or both
# Learn more about CodeQL language support at https://aka.ms/codeql-docs/language-support
include:
- language: javascript-typescript
build-mode: none

steps:
- name: Checkout repository
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
uses: github/codeql-action/init@dd746615b3b9d728a6a37ca2045b68ca76d4841a # v3.28.8
with:
languages: ${{ matrix.language }}
# If you wish to specify custom queries, you can do so here or in a config file.
# By default, queries listed here will override any specified in a config file.
# Prefix the list here with "+" to use these queries and those in the config file.

# Details on CodeQL's query packs refer to : https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
# queries: security-extended,security-and-quality


# Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
# If this step fails, then you should remove it and run the build manually (see below)
- name: Autobuild
uses: github/codeql-action/autobuild@dd746615b3b9d728a6a37ca2045b68ca76d4841a # v3.28.8

# ℹ️ Command-line programs to run using the OS shell.
# 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun

# If the Autobuild fails above, remove it and uncomment the following three lines.
# modify them (or add more) to build your code if your project, please refer to the EXAMPLE below for guidance.

# - run: |
# echo "Run, Build Application using script"
# ./location_of_script_within_repo/buildscript.sh

- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@dd746615b3b9d728a6a37ca2045b68ca76d4841a # v3.28.8
with:
category: "/language:${{matrix.language}}"
- name: Checkout repository
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
uses: github/codeql-action/init@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16
with:
languages: ${{ matrix.language }}
build-mode: ${{ matrix.build-mode }}
queries: security-and-quality
config-file: ./.github/codeql-config.yml

- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16
with:
category: "/language:${{matrix.language}}"
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Use F5 approved codeql workflow

    permissions:
      actions: read # for github/codeql-action/init to get workflow details
      contents: read # for actions/checkout to fetch code
      packages: read
      security-events: write # for github/codeql-action/autobuild to send a status report
    uses: nginxinc/compliance-rules/.github/workflows/codeql.yml@a27656f8f9a8748085b434ebe007f5b572709aad # v0.2
    with:
      requested_languages: javascript-typescript

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@pdabelf5 pdabelf5 pdabelf5 left review comments

@bjee19 bjee19 bjee19 approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
4 participants
@salonichf5 @pdabelf5 @bjee19 @lucacome