Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly
Appearance settings

Comments

Close side panel

Merge releases/v4 into releases/v3#3496

Merged
mbg merged 90 commits intoreleases/v3github/codeql-action:releases/v3from
backport-v3.32.4-89a39a4e5github/codeql-action:backport-v3.32.4-89a39a4e5Copy head branch name to clipboard
Feb 20, 2026
Merged

Merge releases/v4 into releases/v3#3496
mbg merged 90 commits intoreleases/v3github/codeql-action:releases/v3from
backport-v3.32.4-89a39a4e5github/codeql-action:backport-v3.32.4-89a39a4e5Copy head branch name to clipboard

Conversation

@github-actions
Copy link
Contributor

@github-actions github-actions bot commented Feb 20, 2026 •
edited by mbg
Loading

Merging 89a39a4 into releases/v3.

Conductor for this PR is @mbg.

Contains the following pull requests:

Please do the following:

  • Ensure the CHANGELOG displays the correct version and date.
  • Ensure the CHANGELOG includes all relevant, user-facing changes since the last release.
  • Check that there are not any unexpected commits being merged into the releases/v3 branch.
  • Ensure the docs team is aware of any documentation changes that need to be released.
  • Remove and re-add the "Rebuild" label to the PR to trigger just this workflow.
  • Wait for the "Rebuild" workflow to push a commit updating the distribution files.
  • Mark the PR as ready for review to trigger the full set of PR checks.
  • Approve and merge this PR. Make sure Create a merge commit is selected rather than Squash and merge or Rebase and merge.

mbg and others added 30 commits February 11, 2026 19:23
@mbg
Set keyUsage
713a293
@mbg
Explicitly sign certificate with SHA256
e8f0116
@mbg
Set more extensions
d155ebf
@mbg
Move certificate code to its own file
d636fb3
@mbg
Gate updated cert gen behind FF
b1d963e
@mbg
Add some basic unit tests
7801eda
@mbg
Fix typo in test
bc1164e
@mbg
Add csra analysis kind
9267d8d
@mbg
Enforce that only compatible kinds can be enabled concurrently
5b3261b
@mbg
Fix CodeScanning config's sarifPredicate and add test
5132eb5
@mbg
Update upload-lib tests for CSRA
406bbfc
@mbg
Remove redundant analysis kind check
8cc4d25
@mbg
Update getPrimaryAnalysis* and add test
6a17f4e
@mbg
Update PR check for csra
2de76b6
@mbg
Add csra case to addSarifExtension test
db93462
@mbg
Type the upload payload object
cbb92e7
@mbg
Add transformPayload to AnalysisConfig
0cfcceb
@mbg
Add assessment_id to CSRA payload
c48cd24
@mbg
Change assessment_id to be a number
da67096
@mbg
Add BasePayload type and derive AssessmentPayload from it
2adcb64
@mbg
Validate CODEQL_ACTION_CSRA_ASSESSMENT_ID value
0ce6420
@mbg
CSRA category does not need to be adjusted
9835994
@mbg
Extend uploadPayload tests to all analysis kinds
15a3d32
@mbg
Add RecordingLogger that keeps track of groups
edf3609
@mbg
Find all missing messages in checkExpectedLogMessages
e1933c6
@github-actions
Update changelog and version after v4.32.3
01fcdce
@github-actions
Rebuild
6bddc79
@henrymercer
Merge pull request #3480 from github/mergeback/v4.32.3-to-main-9e907b5e
ef618fe 
Mergeback v4.32.3 refs/heads/releases/v4 into main
@mbg
Use author if they are GitHub staff
64940fa
@mbg
Remove superfluous try/catch
248d797
@github-actions github-actions bot added the Rebuild Re-transpile JS & re-generate workflows label Feb 20, 2026
@github-actions github-actions bot added the size/XXL May be extremely hard to review label Feb 20, 2026
@mbg mbg removed Rebuild Re-transpile JS & re-generate workflows size/XXL May be extremely hard to review labels Feb 20, 2026
@github-actions github-actions bot added the size/XXL May be extremely hard to review label Feb 20, 2026
@mbg mbg added Rebuild Re-transpile JS & re-generate workflows and removed size/XXL May be extremely hard to review labels Feb 20, 2026
@github-actions github-actions bot removed the Rebuild Re-transpile JS & re-generate workflows label Feb 20, 2026
@github-actions
Copy link
Contributor Author

github-actions bot commented Feb 20, 2026

Pushed a commit to rebuild the Action. Please mark the PR as ready for review to trigger PR checks.

@mbg mbg marked this pull request as ready for review February 20, 2026 14:53
Copilot AI review requested due to automatic review settings February 20, 2026 14:53
@mbg mbg requested a review from a team as a code owner February 20, 2026 14:53
@github-actions github-actions bot added the size/XXL May be extremely hard to review label Feb 20, 2026
Copilot AI reviewed Feb 20, 2026
View reviewed changes
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This is a release PR merging changes from releases/v4 into releases/v3 to create version 3.32.4. The release includes updates to the default CodeQL bundle, improvements to certificate generation for authentication proxies, additional diagnostic logging, and new internal settings for managing nightly builds and Java network debugging.

Changes:

  • Update version to 3.32.4 with release date of February 20, 2026
  • Update default CodeQL bundle from 2.24.1 to 2.24.2
  • Add experimental certificate improvements for authentication proxy
  • Add diagnostic logging for proxy environment inspection
  • Add internal settings for nightly CLI and Java network debugging

Reviewed changes

Copilot reviewed 39 out of 45 changed files in this pull request and generated no comments.

File Description
CHANGELOG.md Documents version 3.32.4 with appropriate user-facing changes from PRs #3493, #3473, #3486, #3485, and #3484
package.json Updates version to 3.32.4
package-lock.json Contains critical version mismatch - shows 4.32.4 instead of 3.32.4

@mbg
Copy link
Member

mbg commented Feb 20, 2026

As Copilot points out in its summary, it seems that package-lock.json doesn't contain the expected version. That already seems to be the case in the release/v3 branch as well, so it seems to be an existing issue. Probably not critical, since that branch only really exists for the JS files and they get the correct version.

I'll proceed with this PR as-is and we can make a change to the workflow/release branch later if needed.

@mbg mbg merged commit 4558047 into releases/v3 Feb 20, 2026
254 checks passed
@mbg mbg deleted the backport-v3.32.4-89a39a4e5 branch February 20, 2026 15:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot Copilot left review comments

@mbg mbg mbg approved these changes

Assignees

@mbg mbg

Labels

size/XXL May be extremely hard to review

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@mbg @henrymercer @oscarsj
Morty Proxy This is a proxified and sanitized view of the page, visit original site.