Merge branch 'main' into dbartol/remove-actions-extractor

Author: aeisenberg

.github/workflows/__rubocop-multi-language.yml

@@ -168,7 +168,7 @@ jobs:
             --draft
 
       - name: Generate token
-        uses: actions/create-github-app-token@v1.11.5
+        uses: actions/create-github-app-token@v1.12.0
         id: app-token
         with:
           app-id: ${{ vars.AUTOMATION_APP_ID }}

.github/workflows/post-release-mergeback.yml

@@ -124,7 +124,7 @@ jobs:
       pull-requests: write # needed to create pull request
     steps:
     - name: Generate token
-      uses: actions/create-github-app-token@v1.11.5
+      uses: actions/create-github-app-token@v1.12.0
       id: app-token
       with:
         app-id: ${{ vars.AUTOMATION_APP_ID }}

.github/workflows/update-release-branch.yml

@@ -9,6 +9,19 @@ See the [releases page](https://github.com/github/codeql-action/releases) for th
   your `tools:` property to a specific version of the CodeQL CLI earlier than v2.20.4, you will need to update to at least CodeQL v2.20.4 or disable
   `actions` analysis.
 
+## 3.28.13 - 24 Mar 2025
+
+No user facing changes.
+
+## 3.28.12 - 19 Mar 2025
+
+- Dependency caching should now cache more dependencies for Java `build-mode: none` extractions. This should speed up workflows and avoid inconsistent alerts in some cases.
+- Update default CodeQL bundle version to 2.20.7. [#2810](https://github.com/github/codeql-action/pull/2810)
+
+## 3.28.11 - 07 Mar 2025
+
+- Update default CodeQL bundle version to 2.20.6. [#2793](https://github.com/github/codeql-action/pull/2793)
+
 ## 3.28.10 - 21 Feb 2025
 
 - Update default CodeQL bundle version to 2.20.5. [#2772](https://github.com/github/codeql-action/pull/2772)

CHANGELOG.md

@@ -3,7 +3,7 @@ all: lint sync
 
 # Lint source typescript
 lint:
-    npm run lint -- --fix
+    npm run lint-fix
 
 # Sync generated files (javascript and PR checks)
 sync: build update-pr-checks
@@ -15,3 +15,16 @@ update-pr-checks:
 # Transpile typescript code into javascript
 build:
     npm run build
+
+# Build then run all the tests
+test: build
+    npm run test
+
+# Run the tests for a single file
+test_file filename: build
+    npx ava --verbose {{filename}}
+
+[doc("Refresh the .js build artefacts in the lib directory")]
+[confirm]
+refresh-lib:
+    rm -rf lib && npm run build