From 67d5a9a476d141a467a0ff2b4d820df13343ca01 Mon Sep 17 00:00:00 2001 From: Angela P Wen Date: Fri, 31 May 2024 11:45:44 +0200 Subject: [PATCH] PR Checks: Use `tools: linked` rather than `tools: latest` Also changes the input and output in the `prepare-test` Action to use `linked`. --- .github/actions/prepare-test/action.yml | 6 +++--- .github/workflows/__autobuild-action.yml | 6 +++--- .github/workflows/__autobuild-direct-tracing.yml | 4 ++-- .github/workflows/__build-mode-none.yml | 2 +- .github/workflows/__config-export.yml | 6 +++--- .github/workflows/__config-input.yml | 2 +- .github/workflows/__cpp-deptrace-disabled.yml | 2 +- .github/workflows/__cpp-deptrace-enabled.yml | 2 +- .github/workflows/__diagnostics-export.yml | 6 +++--- .github/workflows/__extractor-ram-threads.yml | 2 +- .github/workflows/__go-custom-queries.yml | 6 +++--- .github/workflows/__go-tracing-autobuilder.yml | 4 ++-- .github/workflows/__go-tracing-custom-build-steps.yml | 4 ++-- .github/workflows/__go-tracing-legacy-workflow.yml | 4 ++-- .github/workflows/__init-with-registries.yml | 6 +++--- .github/workflows/__javascript-source-root.yml | 2 +- .github/workflows/__language-aliases.yml | 2 +- .github/workflows/__multi-language-autodetect.yml | 2 +- .../__packaging-codescanning-config-inputs-js.yml | 6 +++--- .github/workflows/__packaging-config-inputs-js.yml | 6 +++--- .github/workflows/__packaging-config-js.yml | 6 +++--- .github/workflows/__packaging-inputs-js.yml | 6 +++--- .github/workflows/__remote-config.yml | 6 +++--- .github/workflows/__resolve-environment-action.yml | 6 +++--- .github/workflows/__ruby.yml | 4 ++-- .github/workflows/__scaling-reserved-ram.yml | 2 +- .github/workflows/__split-workflow.yml | 4 ++-- .github/workflows/__submit-sarif-failure.yml | 2 +- .github/workflows/__swift-custom-build.yml | 2 +- .github/workflows/__test-autobuild-working-dir.yml | 2 +- .github/workflows/__test-proxy.yml | 2 +- .github/workflows/__unset-environment.yml | 2 +- .github/workflows/__with-checkout-path.yml | 6 +++--- .github/workflows/codeql.yml | 8 ++++---- .github/workflows/codescanning-config-cli.yml | 4 ++-- .github/workflows/debug-artifacts-failure.yml | 2 +- .github/workflows/debug-artifacts.yml | 6 +++--- .github/workflows/expected-queries-runs.yml | 2 +- .github/workflows/python312-windows.yml | 2 +- .github/workflows/query-filters.yml | 2 +- .github/workflows/update-bundle.yml | 2 +- pr-checks/checks/autobuild-action.yml | 2 +- pr-checks/checks/autobuild-direct-tracing.yml | 2 +- pr-checks/checks/build-mode-none.yml | 2 +- pr-checks/checks/config-export.yml | 2 +- pr-checks/checks/config-input.yml | 2 +- pr-checks/checks/cpp-deptrace-disabled.yml | 2 +- pr-checks/checks/cpp-deptrace-enabled.yml | 2 +- pr-checks/checks/diagnostics-export.yml | 2 +- pr-checks/checks/extractor-ram-threads.yml | 2 +- pr-checks/checks/init-with-registries.yml | 2 +- pr-checks/checks/javascript-source-root.yml | 2 +- pr-checks/checks/language-aliases.yml | 2 +- .../checks/packaging-codescanning-config-inputs-js.yml | 2 +- pr-checks/checks/packaging-config-inputs-js.yml | 2 +- pr-checks/checks/packaging-config-js.yml | 2 +- pr-checks/checks/packaging-inputs-js.yml | 2 +- pr-checks/checks/resolve-environment-action.yml | 2 +- pr-checks/checks/ruby.yml | 2 +- pr-checks/checks/split-workflow.yml | 2 +- pr-checks/checks/submit-sarif-failure.yml | 2 +- pr-checks/checks/swift-custom-build.yml | 2 +- pr-checks/checks/test-autobuild-working-dir.yml | 2 +- pr-checks/checks/test-proxy.yml | 2 +- pr-checks/checks/unset-environment.yml | 2 +- pr-checks/checks/with-checkout-path.yml | 2 +- pr-checks/sync.py | 2 +- 67 files changed, 105 insertions(+), 105 deletions(-) diff --git a/.github/actions/prepare-test/action.yml b/.github/actions/prepare-test/action.yml index 2cbe4626e9..44a01f69f4 100644 --- a/.github/actions/prepare-test/action.yml +++ b/.github/actions/prepare-test/action.yml @@ -2,7 +2,7 @@ name: "Prepare test" description: Performs some preparation to run tests inputs: version: - description: "The version of the CodeQL CLI to use. Can be 'latest', 'default', 'nightly-latest', 'nightly-YYYY-MM-DD', or 'stable-YYYY-MM-DD'." + description: "The version of the CodeQL CLI to use. Can be 'linked', 'default', 'nightly-latest', 'nightly-YYYY-MM-DD', or 'stable-YYYY-MM-DD'." required: true use-all-platform-bundle: description: "If true, we output a tools URL with codeql-bundle.tar.gz file rather than platform-specific URL" @@ -50,8 +50,8 @@ runs: elif [[ ${{ inputs.version }} == *"stable"* ]]; then version=`echo ${{ inputs.version }} | sed -e 's/^.*\-//'` echo "tools-url=https://github.com/github/codeql-action/releases/download/codeql-bundle-$version/$artifact_name" >> $GITHUB_OUTPUT - elif [[ ${{ inputs.version }} == "latest" ]]; then - echo "tools-url=latest" >> $GITHUB_OUTPUT + elif [[ ${{ inputs.version }} == "linked" ]]; then + echo "tools-url=linked" >> $GITHUB_OUTPUT elif [[ ${{ inputs.version }} == "default" ]]; then echo "tools-url=" >> $GITHUB_OUTPUT else diff --git a/.github/workflows/__autobuild-action.yml b/.github/workflows/__autobuild-action.yml index b5016aa39c..2b9ab0e044 100644 --- a/.github/workflows/__autobuild-action.yml +++ b/.github/workflows/__autobuild-action.yml @@ -29,11 +29,11 @@ jobs: matrix: include: - os: ubuntu-latest - version: latest + version: linked - os: macos-latest - version: latest + version: linked - os: windows-latest - version: latest + version: linked name: autobuild-action permissions: contents: read diff --git a/.github/workflows/__autobuild-direct-tracing.yml b/.github/workflows/__autobuild-direct-tracing.yml index dc04870437..1317a344dc 100644 --- a/.github/workflows/__autobuild-direct-tracing.yml +++ b/.github/workflows/__autobuild-direct-tracing.yml @@ -29,9 +29,9 @@ jobs: matrix: include: - os: ubuntu-latest - version: latest + version: linked - os: windows-latest - version: latest + version: linked - os: ubuntu-latest version: nightly-latest - os: windows-latest diff --git a/.github/workflows/__build-mode-none.yml b/.github/workflows/__build-mode-none.yml index 7c1fec9b30..23029f02e0 100644 --- a/.github/workflows/__build-mode-none.yml +++ b/.github/workflows/__build-mode-none.yml @@ -29,7 +29,7 @@ jobs: matrix: include: - os: ubuntu-latest - version: latest + version: linked - os: ubuntu-latest version: nightly-latest name: Build mode none diff --git a/.github/workflows/__config-export.yml b/.github/workflows/__config-export.yml index 0f118c00e2..e4f5fb300a 100644 --- a/.github/workflows/__config-export.yml +++ b/.github/workflows/__config-export.yml @@ -29,11 +29,11 @@ jobs: matrix: include: - os: ubuntu-latest - version: latest + version: linked - os: macos-latest - version: latest + version: linked - os: windows-latest - version: latest + version: linked - os: ubuntu-latest version: nightly-latest - os: macos-latest diff --git a/.github/workflows/__config-input.yml b/.github/workflows/__config-input.yml index 98cff8f367..85073ac703 100644 --- a/.github/workflows/__config-input.yml +++ b/.github/workflows/__config-input.yml @@ -29,7 +29,7 @@ jobs: matrix: include: - os: ubuntu-latest - version: latest + version: linked name: Config input permissions: contents: read diff --git a/.github/workflows/__cpp-deptrace-disabled.yml b/.github/workflows/__cpp-deptrace-disabled.yml index d344f72ea3..6257336963 100644 --- a/.github/workflows/__cpp-deptrace-disabled.yml +++ b/.github/workflows/__cpp-deptrace-disabled.yml @@ -29,7 +29,7 @@ jobs: matrix: include: - os: ubuntu-latest - version: latest + version: linked - os: ubuntu-latest version: default - os: ubuntu-latest diff --git a/.github/workflows/__cpp-deptrace-enabled.yml b/.github/workflows/__cpp-deptrace-enabled.yml index 98d29a3918..f04cc7815c 100644 --- a/.github/workflows/__cpp-deptrace-enabled.yml +++ b/.github/workflows/__cpp-deptrace-enabled.yml @@ -29,7 +29,7 @@ jobs: matrix: include: - os: ubuntu-latest - version: latest + version: linked - os: ubuntu-latest version: default - os: ubuntu-latest diff --git a/.github/workflows/__diagnostics-export.yml b/.github/workflows/__diagnostics-export.yml index 492fc9425c..d42d1addfa 100644 --- a/.github/workflows/__diagnostics-export.yml +++ b/.github/workflows/__diagnostics-export.yml @@ -35,11 +35,11 @@ jobs: - os: windows-latest version: stable-20230403 - os: ubuntu-latest - version: latest + version: linked - os: macos-latest - version: latest + version: linked - os: windows-latest - version: latest + version: linked - os: ubuntu-latest version: nightly-latest - os: macos-latest diff --git a/.github/workflows/__extractor-ram-threads.yml b/.github/workflows/__extractor-ram-threads.yml index d098207a71..5141607251 100644 --- a/.github/workflows/__extractor-ram-threads.yml +++ b/.github/workflows/__extractor-ram-threads.yml @@ -29,7 +29,7 @@ jobs: matrix: include: - os: ubuntu-latest - version: latest + version: linked name: Extractor ram and threads options test permissions: contents: read diff --git a/.github/workflows/__go-custom-queries.yml b/.github/workflows/__go-custom-queries.yml index ed9894436f..ba9f41f8da 100644 --- a/.github/workflows/__go-custom-queries.yml +++ b/.github/workflows/__go-custom-queries.yml @@ -65,11 +65,11 @@ jobs: - os: windows-latest version: default - os: ubuntu-latest - version: latest + version: linked - os: macos-latest - version: latest + version: linked - os: windows-latest - version: latest + version: linked - os: ubuntu-latest version: nightly-latest - os: macos-latest diff --git a/.github/workflows/__go-tracing-autobuilder.yml b/.github/workflows/__go-tracing-autobuilder.yml index d4f0dfb68c..ed68f57ee8 100644 --- a/.github/workflows/__go-tracing-autobuilder.yml +++ b/.github/workflows/__go-tracing-autobuilder.yml @@ -53,9 +53,9 @@ jobs: - os: macos-latest version: default - os: ubuntu-latest - version: latest + version: linked - os: macos-latest - version: latest + version: linked - os: ubuntu-latest version: nightly-latest - os: macos-latest diff --git a/.github/workflows/__go-tracing-custom-build-steps.yml b/.github/workflows/__go-tracing-custom-build-steps.yml index 776ea250ee..08973e0504 100644 --- a/.github/workflows/__go-tracing-custom-build-steps.yml +++ b/.github/workflows/__go-tracing-custom-build-steps.yml @@ -53,9 +53,9 @@ jobs: - os: macos-latest version: default - os: ubuntu-latest - version: latest + version: linked - os: macos-latest - version: latest + version: linked - os: ubuntu-latest version: nightly-latest - os: macos-latest diff --git a/.github/workflows/__go-tracing-legacy-workflow.yml b/.github/workflows/__go-tracing-legacy-workflow.yml index 09d882c8e8..83f77de0c5 100644 --- a/.github/workflows/__go-tracing-legacy-workflow.yml +++ b/.github/workflows/__go-tracing-legacy-workflow.yml @@ -53,9 +53,9 @@ jobs: - os: macos-latest version: default - os: ubuntu-latest - version: latest + version: linked - os: macos-latest - version: latest + version: linked - os: ubuntu-latest version: nightly-latest - os: macos-latest diff --git a/.github/workflows/__init-with-registries.yml b/.github/workflows/__init-with-registries.yml index 4035d7bba7..bbf962b940 100644 --- a/.github/workflows/__init-with-registries.yml +++ b/.github/workflows/__init-with-registries.yml @@ -35,11 +35,11 @@ jobs: - os: windows-latest version: default - os: ubuntu-latest - version: latest + version: linked - os: macos-latest - version: latest + version: linked - os: windows-latest - version: latest + version: linked - os: ubuntu-latest version: nightly-latest - os: macos-latest diff --git a/.github/workflows/__javascript-source-root.yml b/.github/workflows/__javascript-source-root.yml index d5017ecf2b..fd217d834f 100644 --- a/.github/workflows/__javascript-source-root.yml +++ b/.github/workflows/__javascript-source-root.yml @@ -29,7 +29,7 @@ jobs: matrix: include: - os: ubuntu-latest - version: latest + version: linked - os: ubuntu-latest version: default - os: ubuntu-latest diff --git a/.github/workflows/__language-aliases.yml b/.github/workflows/__language-aliases.yml index 5dad1c8dbe..eefc40bfd9 100644 --- a/.github/workflows/__language-aliases.yml +++ b/.github/workflows/__language-aliases.yml @@ -29,7 +29,7 @@ jobs: matrix: include: - os: ubuntu-latest - version: latest + version: linked name: Language aliases permissions: contents: read diff --git a/.github/workflows/__multi-language-autodetect.yml b/.github/workflows/__multi-language-autodetect.yml index 139630ad9b..1e73102fe4 100644 --- a/.github/workflows/__multi-language-autodetect.yml +++ b/.github/workflows/__multi-language-autodetect.yml @@ -41,7 +41,7 @@ jobs: - os: macos-latest version: default - os: macos-latest - version: latest + version: linked - os: macos-latest version: nightly-latest name: Multi-language repository diff --git a/.github/workflows/__packaging-codescanning-config-inputs-js.yml b/.github/workflows/__packaging-codescanning-config-inputs-js.yml index 3e6a7b7099..101b6bc57a 100644 --- a/.github/workflows/__packaging-codescanning-config-inputs-js.yml +++ b/.github/workflows/__packaging-codescanning-config-inputs-js.yml @@ -29,11 +29,11 @@ jobs: matrix: include: - os: ubuntu-latest - version: latest + version: linked - os: macos-latest - version: latest + version: linked - os: windows-latest - version: latest + version: linked - os: ubuntu-latest version: default - os: macos-latest diff --git a/.github/workflows/__packaging-config-inputs-js.yml b/.github/workflows/__packaging-config-inputs-js.yml index 8c2fa360ec..bb514e765e 100644 --- a/.github/workflows/__packaging-config-inputs-js.yml +++ b/.github/workflows/__packaging-config-inputs-js.yml @@ -29,11 +29,11 @@ jobs: matrix: include: - os: ubuntu-latest - version: latest + version: linked - os: macos-latest - version: latest + version: linked - os: windows-latest - version: latest + version: linked - os: ubuntu-latest version: default - os: macos-latest diff --git a/.github/workflows/__packaging-config-js.yml b/.github/workflows/__packaging-config-js.yml index a6e7cf4a7a..1b2f01a594 100644 --- a/.github/workflows/__packaging-config-js.yml +++ b/.github/workflows/__packaging-config-js.yml @@ -29,11 +29,11 @@ jobs: matrix: include: - os: ubuntu-latest - version: latest + version: linked - os: macos-latest - version: latest + version: linked - os: windows-latest - version: latest + version: linked - os: ubuntu-latest version: default - os: macos-latest diff --git a/.github/workflows/__packaging-inputs-js.yml b/.github/workflows/__packaging-inputs-js.yml index 6147a72f95..18e0dc3fa4 100644 --- a/.github/workflows/__packaging-inputs-js.yml +++ b/.github/workflows/__packaging-inputs-js.yml @@ -29,11 +29,11 @@ jobs: matrix: include: - os: ubuntu-latest - version: latest + version: linked - os: macos-latest - version: latest + version: linked - os: windows-latest - version: latest + version: linked - os: ubuntu-latest version: default - os: macos-latest diff --git a/.github/workflows/__remote-config.yml b/.github/workflows/__remote-config.yml index 5e416ad848..c5f2646082 100644 --- a/.github/workflows/__remote-config.yml +++ b/.github/workflows/__remote-config.yml @@ -65,11 +65,11 @@ jobs: - os: windows-latest version: default - os: ubuntu-latest - version: latest + version: linked - os: macos-latest - version: latest + version: linked - os: windows-latest - version: latest + version: linked - os: ubuntu-latest version: nightly-latest - os: macos-latest diff --git a/.github/workflows/__resolve-environment-action.yml b/.github/workflows/__resolve-environment-action.yml index 3a93a3585d..f0a886269c 100644 --- a/.github/workflows/__resolve-environment-action.yml +++ b/.github/workflows/__resolve-environment-action.yml @@ -41,11 +41,11 @@ jobs: - os: windows-latest version: default - os: ubuntu-latest - version: latest + version: linked - os: macos-latest - version: latest + version: linked - os: windows-latest - version: latest + version: linked - os: ubuntu-latest version: nightly-latest - os: macos-latest diff --git a/.github/workflows/__ruby.yml b/.github/workflows/__ruby.yml index 81228eb550..d95e30f697 100644 --- a/.github/workflows/__ruby.yml +++ b/.github/workflows/__ruby.yml @@ -29,9 +29,9 @@ jobs: matrix: include: - os: ubuntu-latest - version: latest + version: linked - os: macos-latest - version: latest + version: linked - os: ubuntu-latest version: default - os: macos-latest diff --git a/.github/workflows/__scaling-reserved-ram.yml b/.github/workflows/__scaling-reserved-ram.yml index ecf944bc42..6ec16715ec 100644 --- a/.github/workflows/__scaling-reserved-ram.yml +++ b/.github/workflows/__scaling-reserved-ram.yml @@ -41,7 +41,7 @@ jobs: - os: macos-latest version: default - os: macos-latest - version: latest + version: linked - os: macos-latest version: nightly-latest name: Scaling reserved RAM diff --git a/.github/workflows/__split-workflow.yml b/.github/workflows/__split-workflow.yml index eab78fc931..0ae20642e5 100644 --- a/.github/workflows/__split-workflow.yml +++ b/.github/workflows/__split-workflow.yml @@ -29,9 +29,9 @@ jobs: matrix: include: - os: ubuntu-latest - version: latest + version: linked - os: macos-latest - version: latest + version: linked - os: ubuntu-latest version: default - os: macos-latest diff --git a/.github/workflows/__submit-sarif-failure.yml b/.github/workflows/__submit-sarif-failure.yml index 934ad57ac9..129a57ed3f 100644 --- a/.github/workflows/__submit-sarif-failure.yml +++ b/.github/workflows/__submit-sarif-failure.yml @@ -29,7 +29,7 @@ jobs: matrix: include: - os: ubuntu-latest - version: latest + version: linked - os: ubuntu-latest version: default - os: ubuntu-latest diff --git a/.github/workflows/__swift-custom-build.yml b/.github/workflows/__swift-custom-build.yml index 040728a595..961ddacf8d 100644 --- a/.github/workflows/__swift-custom-build.yml +++ b/.github/workflows/__swift-custom-build.yml @@ -29,7 +29,7 @@ jobs: matrix: include: - os: macos-latest - version: latest + version: linked - os: macos-latest version: default - os: macos-latest diff --git a/.github/workflows/__test-autobuild-working-dir.yml b/.github/workflows/__test-autobuild-working-dir.yml index 58a5ed2cf5..107830efe2 100644 --- a/.github/workflows/__test-autobuild-working-dir.yml +++ b/.github/workflows/__test-autobuild-working-dir.yml @@ -29,7 +29,7 @@ jobs: matrix: include: - os: ubuntu-latest - version: latest + version: linked name: Autobuild working directory permissions: contents: read diff --git a/.github/workflows/__test-proxy.yml b/.github/workflows/__test-proxy.yml index 1898f18462..80b5f4a931 100644 --- a/.github/workflows/__test-proxy.yml +++ b/.github/workflows/__test-proxy.yml @@ -29,7 +29,7 @@ jobs: matrix: include: - os: ubuntu-latest - version: latest + version: linked name: Proxy test permissions: contents: read diff --git a/.github/workflows/__unset-environment.yml b/.github/workflows/__unset-environment.yml index 024c496d13..16e16a6778 100644 --- a/.github/workflows/__unset-environment.yml +++ b/.github/workflows/__unset-environment.yml @@ -35,7 +35,7 @@ jobs: - os: macos-latest version: stable-v2.16.6 - os: macos-latest - version: latest + version: linked - os: macos-latest version: default - os: macos-latest diff --git a/.github/workflows/__with-checkout-path.yml b/.github/workflows/__with-checkout-path.yml index 611e2b8757..22d40f6251 100644 --- a/.github/workflows/__with-checkout-path.yml +++ b/.github/workflows/__with-checkout-path.yml @@ -29,11 +29,11 @@ jobs: matrix: include: - os: ubuntu-latest - version: latest + version: linked - os: macos-latest - version: latest + version: linked - os: windows-latest - version: latest + version: linked name: Use a custom `checkout_path` permissions: contents: read diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index b4ca48232f..c9cff72f72 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -41,7 +41,7 @@ jobs: id: init-latest uses: ./init with: - tools: latest + tools: linked languages: javascript - name: Compare default and latest CodeQL bundle versions id: compare @@ -54,16 +54,16 @@ jobs: echo "Default CodeQL bundle version is $CODEQL_VERSION_DEFAULT" echo "Latest CodeQL bundle version is $CODEQL_VERSION_LATEST" - # If we're running on a pull request, run with both bundles, even if `tools: latest` would + # If we're running on a pull request, run with both bundles, even if `tools: linked` would # be the same as `tools: null`. This allows us to make the job for each of the bundles a # required status check. # - # If we're running on push or schedule, then we can skip running with `tools: latest` when it would be + # If we're running on push or schedule, then we can skip running with `tools: linked` when it would be # the same as running with `tools: null`. if [[ "$GITHUB_EVENT_NAME" != "pull_request" && "$CODEQL_VERSION_DEFAULT" == "$CODEQL_VERSION_LATEST" ]]; then VERSIONS_JSON='[null]' else - VERSIONS_JSON='[null, "latest"]' + VERSIONS_JSON='[null, "linked"]' fi # Output a JSON-encoded list with the distinct versions to test against. diff --git a/.github/workflows/codescanning-config-cli.yml b/.github/workflows/codescanning-config-cli.yml index 105d36c029..c4cd4eeaa8 100644 --- a/.github/workflows/codescanning-config-cli.yml +++ b/.github/workflows/codescanning-config-cli.yml @@ -28,9 +28,9 @@ jobs: matrix: include: - os: ubuntu-latest - version: latest + version: linked - os: macos-latest - version: latest + version: linked - os: ubuntu-latest version: default - os: macos-latest diff --git a/.github/workflows/debug-artifacts-failure.yml b/.github/workflows/debug-artifacts-failure.yml index cbafc70f18..caea667895 100644 --- a/.github/workflows/debug-artifacts-failure.yml +++ b/.github/workflows/debug-artifacts-failure.yml @@ -37,7 +37,7 @@ jobs: id: prepare-test uses: ./.github/actions/prepare-test with: - version: latest + version: linked - uses: actions/setup-go@v5 with: go-version: ^1.13.1 diff --git a/.github/workflows/debug-artifacts.yml b/.github/workflows/debug-artifacts.yml index 038a5337e9..5b23e036a2 100644 --- a/.github/workflows/debug-artifacts.yml +++ b/.github/workflows/debug-artifacts.yml @@ -32,13 +32,13 @@ jobs: - stable-v2.15.5 - stable-v2.16.6 - default - - latest + - linked - nightly-latest name: Upload debug artifacts env: CODEQL_ACTION_TEST_MODE: true timeout-minutes: 45 - runs-on: macos-latest # TODO: Switch back to ubuntu for `nightly-latest` and `latest` once CLI v2.17.4 is available. + runs-on: macos-latest # TODO: Switch back to ubuntu for `nightly-latest` and `linked` once CLI v2.17.4 is available. steps: - name: Check out repository uses: actions/checkout@v4 @@ -76,7 +76,7 @@ jobs: - name: Check expected artifacts exist shell: bash run: | - VERSIONS="stable-v2.15.5 stable-v2.16.6 default latest nightly-latest" + VERSIONS="stable-v2.15.5 stable-v2.16.6 default linked nightly-latest" LANGUAGES="cpp csharp go java javascript python" for version in $VERSIONS; do pushd "./my-debug-artifacts-${version//./}" diff --git a/.github/workflows/expected-queries-runs.yml b/.github/workflows/expected-queries-runs.yml index 10d080adaa..9d74434266 100644 --- a/.github/workflows/expected-queries-runs.yml +++ b/.github/workflows/expected-queries-runs.yml @@ -29,7 +29,7 @@ jobs: id: prepare-test uses: ./.github/actions/prepare-test with: - version: latest + version: linked - uses: ./../action/init with: languages: javascript diff --git a/.github/workflows/python312-windows.yml b/.github/workflows/python312-windows.yml index 31326de96a..bee51dfa69 100644 --- a/.github/workflows/python312-windows.yml +++ b/.github/workflows/python312-windows.yml @@ -32,7 +32,7 @@ jobs: - name: Initialize CodeQL uses: ./../action/init with: - tools: latest + tools: linked languages: python - name: Analyze diff --git a/.github/workflows/query-filters.yml b/.github/workflows/query-filters.yml index 4bc9ea25aa..c5a838716c 100644 --- a/.github/workflows/query-filters.yml +++ b/.github/workflows/query-filters.yml @@ -27,7 +27,7 @@ jobs: id: prepare-test uses: ./.github/actions/prepare-test with: - version: latest + version: linked - name: Check SARIF for default queries with Single include, Single exclude uses: ./../action/.github/actions/query-filter-test diff --git a/.github/workflows/update-bundle.yml b/.github/workflows/update-bundle.yml index fc70aac95c..36a96c7399 100644 --- a/.github/workflows/update-bundle.yml +++ b/.github/workflows/update-bundle.yml @@ -54,7 +54,7 @@ jobs: cli_version=$(jq -r '.cliVersion' src/defaults.json) pr_url=$(gh pr create \ --title "Update default bundle to $cli_version" \ - --body "This pull request updates the default CodeQL bundle, as used with \`tools: latest\` and on GHES, to $cli_version." \ + --body "This pull request updates the default CodeQL bundle, as used with \`tools: linked\` and on GHES, to $cli_version." \ --assignee "$GITHUB_ACTOR" \ --draft \ ) diff --git a/pr-checks/checks/autobuild-action.yml b/pr-checks/checks/autobuild-action.yml index aa3cbdcca6..666e4a0dcf 100644 --- a/pr-checks/checks/autobuild-action.yml +++ b/pr-checks/checks/autobuild-action.yml @@ -1,6 +1,6 @@ name: "autobuild-action" description: "Tests that the C# autobuild action works" -versions: ["latest"] +versions: ["linked"] steps: - uses: ./../action/init with: diff --git a/pr-checks/checks/autobuild-direct-tracing.yml b/pr-checks/checks/autobuild-direct-tracing.yml index 74dbb93c54..edc6122f13 100644 --- a/pr-checks/checks/autobuild-direct-tracing.yml +++ b/pr-checks/checks/autobuild-direct-tracing.yml @@ -1,7 +1,7 @@ name: "Autobuild direct tracing" description: "An end-to-end integration test of a Java repository built using 'build-mode: autobuild', with direct tracing enabled" operatingSystems: ["ubuntu", "windows"] -versions: ["latest", "nightly-latest"] +versions: ["linked", "nightly-latest"] env: CODEQL_ACTION_AUTOBUILD_BUILD_MODE_DIRECT_TRACING: true steps: diff --git a/pr-checks/checks/build-mode-none.yml b/pr-checks/checks/build-mode-none.yml index 43b22bf3a4..4d23614a90 100644 --- a/pr-checks/checks/build-mode-none.yml +++ b/pr-checks/checks/build-mode-none.yml @@ -1,7 +1,7 @@ name: "Build mode none" description: "An end-to-end integration test of a Java repository built using 'build-mode: none'" operatingSystems: ["ubuntu"] -versions: ["latest", "nightly-latest"] +versions: ["linked", "nightly-latest"] steps: - uses: ./../action/init id: init diff --git a/pr-checks/checks/config-export.yml b/pr-checks/checks/config-export.yml index 7a86701756..abb316e828 100644 --- a/pr-checks/checks/config-export.yml +++ b/pr-checks/checks/config-export.yml @@ -1,6 +1,6 @@ name: "Config export" description: "Tests that the code scanning configuration file is exported to SARIF correctly." -versions: ["latest", "nightly-latest"] +versions: ["linked", "nightly-latest"] steps: - uses: ./../action/init with: diff --git a/pr-checks/checks/config-input.yml b/pr-checks/checks/config-input.yml index 0c46f98ac7..413bf1a10b 100644 --- a/pr-checks/checks/config-input.yml +++ b/pr-checks/checks/config-input.yml @@ -1,7 +1,7 @@ name: "Config input" description: "Tests specifying configuration using the config input" operatingSystems: ["ubuntu"] -versions: ["latest"] +versions: ["linked"] steps: - name: Copy queries into workspace run: | diff --git a/pr-checks/checks/cpp-deptrace-disabled.yml b/pr-checks/checks/cpp-deptrace-disabled.yml index 118d01ae1c..4a98a720c9 100644 --- a/pr-checks/checks/cpp-deptrace-disabled.yml +++ b/pr-checks/checks/cpp-deptrace-disabled.yml @@ -1,7 +1,7 @@ name: "C/C++: disabling autoinstalling dependencies (Linux)" description: "Checks that running C/C++ autobuild with autoinstalling dependencies explicitly disabled works" operatingSystems: ["ubuntu"] -versions: ["latest", "default", "nightly-latest"] # This feature is not compatible with CLIs < 2.15.0 +versions: ["linked", "default", "nightly-latest"] # This feature is not compatible with CLIs < 2.15.0 env: DOTNET_GENERATE_ASPNET_CERTIFICATE: "false" steps: diff --git a/pr-checks/checks/cpp-deptrace-enabled.yml b/pr-checks/checks/cpp-deptrace-enabled.yml index b3f7b1b733..05d86e2cf1 100644 --- a/pr-checks/checks/cpp-deptrace-enabled.yml +++ b/pr-checks/checks/cpp-deptrace-enabled.yml @@ -1,7 +1,7 @@ name: "C/C++: autoinstalling dependencies (Linux)" description: "Checks that running C/C++ autobuild with autoinstalling dependencies works" operatingSystems: ["ubuntu"] -versions: ["latest", "default", "nightly-latest"] # This feature is not compatible with CLIs < 2.15.0 +versions: ["linked", "default", "nightly-latest"] # This feature is not compatible with CLIs < 2.15.0 env: DOTNET_GENERATE_ASPNET_CERTIFICATE: "false" steps: diff --git a/pr-checks/checks/diagnostics-export.yml b/pr-checks/checks/diagnostics-export.yml index f50d1f0ea7..3e4e362289 100644 --- a/pr-checks/checks/diagnostics-export.yml +++ b/pr-checks/checks/diagnostics-export.yml @@ -2,7 +2,7 @@ name: "Diagnostic export" description: "Tests that manually added diagnostics are correctly exported to SARIF." # Test on 2.12.6 (which requires a workaround in the Action), the latest release, and the latest # nightly. -versions: ["stable-20230403", "latest", "nightly-latest"] +versions: ["stable-20230403", "linked", "nightly-latest"] env: CODEQL_ACTION_EXPORT_DIAGNOSTICS: true steps: diff --git a/pr-checks/checks/extractor-ram-threads.yml b/pr-checks/checks/extractor-ram-threads.yml index 996d8b4bde..4cb1f11668 100644 --- a/pr-checks/checks/extractor-ram-threads.yml +++ b/pr-checks/checks/extractor-ram-threads.yml @@ -1,6 +1,6 @@ name: "Extractor ram and threads options test" description: "Tests passing RAM and threads limits to extractors" -versions: ["latest"] +versions: ["linked"] operatingSystems: ["ubuntu"] steps: - uses: ./../action/init diff --git a/pr-checks/checks/init-with-registries.yml b/pr-checks/checks/init-with-registries.yml index f0ef501cbe..8fda36c985 100644 --- a/pr-checks/checks/init-with-registries.yml +++ b/pr-checks/checks/init-with-registries.yml @@ -7,7 +7,7 @@ description: "Checks that specifying a registries block and associated auth work versions: [ # This feature is not compatible with older CLIs "default", - "latest", + "linked", "nightly-latest", ] diff --git a/pr-checks/checks/javascript-source-root.yml b/pr-checks/checks/javascript-source-root.yml index 9869f0a425..72ca9b2497 100644 --- a/pr-checks/checks/javascript-source-root.yml +++ b/pr-checks/checks/javascript-source-root.yml @@ -1,6 +1,6 @@ name: "Custom source root" description: "Checks that the argument specifying a non-default source root works" -versions: ["latest", "default", "nightly-latest"] # This feature is not compatible with old CLIs +versions: ["linked", "default", "nightly-latest"] # This feature is not compatible with old CLIs operatingSystems: ["ubuntu"] steps: - name: Move codeql-action diff --git a/pr-checks/checks/language-aliases.yml b/pr-checks/checks/language-aliases.yml index c4441923dd..16f5f044f9 100644 --- a/pr-checks/checks/language-aliases.yml +++ b/pr-checks/checks/language-aliases.yml @@ -1,6 +1,6 @@ name: "Language aliases" description: "Tests that language aliases are resolved correctly" -versions: ["latest"] +versions: ["linked"] operatingSystems: ["ubuntu"] steps: - uses: ./../action/init diff --git a/pr-checks/checks/packaging-codescanning-config-inputs-js.yml b/pr-checks/checks/packaging-codescanning-config-inputs-js.yml index 039108cd8a..c4d745cf42 100644 --- a/pr-checks/checks/packaging-codescanning-config-inputs-js.yml +++ b/pr-checks/checks/packaging-codescanning-config-inputs-js.yml @@ -1,6 +1,6 @@ name: "Packaging: Config and input passed to the CLI" description: "Checks that specifying packages using a combination of a config file and input to the Action works" -versions: ["latest", "default", "nightly-latest"] # This feature is not compatible with old CLIs +versions: ["linked", "default", "nightly-latest"] # This feature is not compatible with old CLIs steps: - uses: ./../action/init with: diff --git a/pr-checks/checks/packaging-config-inputs-js.yml b/pr-checks/checks/packaging-config-inputs-js.yml index a20c5d44dc..ca7c2de9b2 100644 --- a/pr-checks/checks/packaging-config-inputs-js.yml +++ b/pr-checks/checks/packaging-config-inputs-js.yml @@ -1,6 +1,6 @@ name: "Packaging: Config and input" description: "Checks that specifying packages using a combination of a config file and input to the Action works" -versions: ["latest", "default", "nightly-latest"] # This feature is not compatible with old CLIs +versions: ["linked", "default", "nightly-latest"] # This feature is not compatible with old CLIs steps: - uses: ./../action/init with: diff --git a/pr-checks/checks/packaging-config-js.yml b/pr-checks/checks/packaging-config-js.yml index 084a8ad72d..6b94d2f19c 100644 --- a/pr-checks/checks/packaging-config-js.yml +++ b/pr-checks/checks/packaging-config-js.yml @@ -1,6 +1,6 @@ name: "Packaging: Config file" description: "Checks that specifying packages using only a config file works" -versions: ["latest", "default", "nightly-latest"] # This feature is not compatible with old CLIs +versions: ["linked", "default", "nightly-latest"] # This feature is not compatible with old CLIs steps: - uses: ./../action/init with: diff --git a/pr-checks/checks/packaging-inputs-js.yml b/pr-checks/checks/packaging-inputs-js.yml index ff1e35a366..77f3fd4033 100644 --- a/pr-checks/checks/packaging-inputs-js.yml +++ b/pr-checks/checks/packaging-inputs-js.yml @@ -1,6 +1,6 @@ name: "Packaging: Action input" description: "Checks that specifying packages using the input to the Action works" -versions: ["latest", "default", "nightly-latest"] # This feature is not compatible with old CLIs +versions: ["linked", "default", "nightly-latest"] # This feature is not compatible with old CLIs steps: - uses: ./../action/init with: diff --git a/pr-checks/checks/resolve-environment-action.yml b/pr-checks/checks/resolve-environment-action.yml index 5c57647049..bc3dbaa544 100644 --- a/pr-checks/checks/resolve-environment-action.yml +++ b/pr-checks/checks/resolve-environment-action.yml @@ -1,6 +1,6 @@ name: "Resolve environment" description: "Tests that the resolve-environment action works for Go and JavaScript/TypeScript" -versions: ["stable-v2.13.4", "default", "latest", "nightly-latest"] +versions: ["stable-v2.13.4", "default", "linked", "nightly-latest"] steps: - uses: ./../action/init with: diff --git a/pr-checks/checks/ruby.yml b/pr-checks/checks/ruby.yml index a857fd3409..9b79eff721 100644 --- a/pr-checks/checks/ruby.yml +++ b/pr-checks/checks/ruby.yml @@ -1,6 +1,6 @@ name: "Ruby analysis" description: "Tests creation of a Ruby database" -versions: ["latest", "default", "nightly-latest"] +versions: ["linked", "default", "nightly-latest"] operatingSystems: ["ubuntu", "macos"] steps: - uses: ./../action/init diff --git a/pr-checks/checks/split-workflow.yml b/pr-checks/checks/split-workflow.yml index c752eca67c..771f65b669 100644 --- a/pr-checks/checks/split-workflow.yml +++ b/pr-checks/checks/split-workflow.yml @@ -1,7 +1,7 @@ name: "Split workflow" description: "Tests a split-up workflow in which we first build a database and later analyze it" operatingSystems: ["ubuntu", "macos"] -versions: ["latest", "default", "nightly-latest"] # This feature is not compatible with old CLIs +versions: ["linked", "default", "nightly-latest"] # This feature is not compatible with old CLIs steps: - uses: ./../action/init with: diff --git a/pr-checks/checks/submit-sarif-failure.yml b/pr-checks/checks/submit-sarif-failure.yml index eba3b2220f..4ded016ca3 100644 --- a/pr-checks/checks/submit-sarif-failure.yml +++ b/pr-checks/checks/submit-sarif-failure.yml @@ -1,6 +1,6 @@ name: Submit SARIF after failure description: Check that a SARIF file is submitted for the workflow run if it fails -versions: ["latest", "default", "nightly-latest"] +versions: ["linked", "default", "nightly-latest"] operatingSystems: ["ubuntu"] env: diff --git a/pr-checks/checks/swift-custom-build.yml b/pr-checks/checks/swift-custom-build.yml index b66c45e9e6..2984641add 100644 --- a/pr-checks/checks/swift-custom-build.yml +++ b/pr-checks/checks/swift-custom-build.yml @@ -1,6 +1,6 @@ name: "Swift analysis using a custom build command" description: "Tests creation of a Swift database using custom build" -versions: ["latest", "default", "nightly-latest"] +versions: ["linked", "default", "nightly-latest"] # TODO: Add ubuntu back for `nightly-latest` and `latest` once CLI v2.17.4 is available. operatingSystems: ["macos"] env: diff --git a/pr-checks/checks/test-autobuild-working-dir.yml b/pr-checks/checks/test-autobuild-working-dir.yml index 56338ee325..5f4cdc3744 100644 --- a/pr-checks/checks/test-autobuild-working-dir.yml +++ b/pr-checks/checks/test-autobuild-working-dir.yml @@ -1,6 +1,6 @@ name: "Autobuild working directory" description: "Tests working-directory input of autobuild action" -versions: ["latest"] +versions: ["linked"] operatingSystems: ["ubuntu"] steps: - name: Test setup diff --git a/pr-checks/checks/test-proxy.yml b/pr-checks/checks/test-proxy.yml index 33955004e7..d3f9f4ae58 100644 --- a/pr-checks/checks/test-proxy.yml +++ b/pr-checks/checks/test-proxy.yml @@ -1,6 +1,6 @@ name: "Proxy test" description: "Tests using a proxy specified by the https_proxy environment variable" -versions: ["latest"] +versions: ["linked"] operatingSystems: ["ubuntu"] container: image: ubuntu:22.04 diff --git a/pr-checks/checks/unset-environment.yml b/pr-checks/checks/unset-environment.yml index 445ad99e27..0fea5d95af 100644 --- a/pr-checks/checks/unset-environment.yml +++ b/pr-checks/checks/unset-environment.yml @@ -1,7 +1,7 @@ name: "Test unsetting environment variables" description: "An end-to-end integration test that unsets some environment variables" # TODO: Switch back to all versions once CLI v2.17.4 is available and running on ubuntu again. -versions: ["stable-v2.14.6", "stable-v2.15.5", "stable-v2.16.6", "latest", "default", "nightly-latest"] +versions: ["stable-v2.14.6", "stable-v2.15.5", "stable-v2.16.6", "linked", "default", "nightly-latest"] operatingSystems: ["macos"] # TODO: Switch back to ubuntu for `nightly-latest` and `latest` once CLI v2.17.4 is available. steps: - uses: ./../action/init diff --git a/pr-checks/checks/with-checkout-path.yml b/pr-checks/checks/with-checkout-path.yml index 481a624c29..5930966a71 100644 --- a/pr-checks/checks/with-checkout-path.yml +++ b/pr-checks/checks/with-checkout-path.yml @@ -1,6 +1,6 @@ name: "Use a custom `checkout_path`" description: "Checks that a custom `checkout_path` will find the proper commit_oid" -versions: ["latest"] +versions: ["linked"] steps: # This ensures we don't accidentally use the original checkout for any part of the test. - name: Delete original checkout diff --git a/pr-checks/sync.py b/pr-checks/sync.py index 4afab344b4..5dcd0b5507 100755 --- a/pr-checks/sync.py +++ b/pr-checks/sync.py @@ -22,7 +22,7 @@ # The version of CodeQL shipped with the Action in `defaults.json`. During the release process # for a new CodeQL release, there will be a period of time during which this will be newer than # the default version on Dotcom. - "latest", + "linked", # A nightly build directly from the our private repo, built in the last 24 hours. "nightly-latest" ]