Merge releases/v4 into releases/v3#3496

Merged

mbg merged 90 commits intoreleases/v3from

backport-v3.32.4-89a39a4e5

Feb 20, 2026

Commits on Feb 11, 2026

Set `keyUsage`
mbg
committed
713a293
Copy full SHA for 713a293
Explicitly sign certificate with SHA256
mbg
committed
e8f0116
Copy full SHA for e8f0116
Set more extensions
mbg
committed
d155ebf
Copy full SHA for d155ebf
Move certificate code to its own file
mbg
committed
d636fb3
Copy full SHA for d636fb3
Gate updated cert gen behind FF
mbg
committed
b1d963e
Copy full SHA for b1d963e
Add some basic unit tests
mbg
committed
7801eda
Copy full SHA for 7801eda
Fix typo in test
mbg
committed
bc1164e
Copy full SHA for bc1164e
Add `csra` analysis kind
mbg
committed
9267d8d
Copy full SHA for 9267d8d
Enforce that only compatible kinds can be enabled concurrently
mbg
committed
5b3261b
Copy full SHA for 5b3261b
Fix `CodeScanning` config's `sarifPredicate` and add test
mbg
committed
5132eb5
Copy full SHA for 5132eb5
Update `upload-lib` tests for CSRA
mbg
committed
406bbfc
Copy full SHA for 406bbfc
Remove redundant analysis kind check
mbg
committed
8cc4d25
Copy full SHA for 8cc4d25
Update `getPrimaryAnalysis*` and add test
mbg
committed
6a17f4e
Copy full SHA for 6a17f4e
Update PR check for `csra`
mbg
committed
2de76b6
Copy full SHA for 2de76b6
Add `csra` case to `addSarifExtension` test
mbg
committed
db93462
Copy full SHA for db93462
Type the upload payload object
mbg
committed
cbb92e7
Copy full SHA for cbb92e7
Add `transformPayload` to `AnalysisConfig`
mbg
committed
0cfcceb
Copy full SHA for 0cfcceb
Add `assessment_id` to CSRA payload
mbg
committed
c48cd24
Copy full SHA for c48cd24

Commits on Feb 12, 2026

Change `assessment_id` to be a number
mbg
committed
da67096
Copy full SHA for da67096
Add `BasePayload` type and derive `AssessmentPayload` from it
mbg
committed
2adcb64
Copy full SHA for 2adcb64
Validate `CODEQL_ACTION_CSRA_ASSESSMENT_ID` value
mbg
committed
0ce6420
Copy full SHA for 0ce6420
CSRA category does not need to be adjusted
mbg
committed
9835994
Copy full SHA for 9835994
Extend `uploadPayload` tests to all analysis kinds
mbg
committed
15a3d32
Copy full SHA for 15a3d32
Add `RecordingLogger` that keeps track of groups
mbg
committed
edf3609
Copy full SHA for edf3609
Find all missing messages in `checkExpectedLogMessages`
mbg
committed
e1933c6
Copy full SHA for e1933c6

Commits on Feb 13, 2026

Update changelog and version after v4.32.3
github-actions[bot]
committed
01fcdce
Copy full SHA for 01fcdce
Rebuild
github-actions[bot]
committed
6bddc79
Copy full SHA for 6bddc79
Merge pull request #3480 from github/mergeback/v4.32.3-to-main-9e907b5e
Show description for ef618fe
henrymercer
authored
ef618fe
Copy full SHA for ef618fe
Use author if they are GitHub staff
mbg
committed
64940fa
Copy full SHA for 64940fa

Commits on Feb 15, 2026

Remove superfluous `try`/`catch`
mbg
committed
248d797
Copy full SHA for 248d797
Add `ForceNightly` feature
mbg
committed
34d43db
Copy full SHA for 34d43db
Improve docs in `setup-codeql`
mbg
committed
817d568
Copy full SHA for 817d568
Add unit test for `tools: nightly`
mbg
committed
466a4f0
Copy full SHA for 466a4f0
Force `nightly` bundle when FF is enabled
mbg
committed
d5f0374
Copy full SHA for d5f0374
Add integration test
mbg
committed
a61e3cb
Copy full SHA for a61e3cb
Add `JavaNetworkDebugging` feature
mbg
committed
595ce2d
Copy full SHA for 595ce2d
Add debugging options to `JAVA_TOOL_OPTIONS` when FF is enabled
mbg
committed
e21e4ca
Copy full SHA for e21e4ca

Commits on Feb 16, 2026

Improve variable names and comments
Show description for 8b734d3
mbg
committed
8b734d3
Copy full SHA for 8b734d3
Complete JSDoc
mbg
committed
73f5a29
Copy full SHA for 73f5a29
Allow `addNoLanguageDiagnostic` to be used without a `Config`
mbg
committed
e6a312a
Copy full SHA for e6a312a
Add diagnostic when a nightly release is forced
mbg
committed
e315c6f
Copy full SHA for e315c6f
Change diagnostic level to `note`
mbg
committed
f8c75d3
Copy full SHA for f8c75d3
Use `init` in new check workflow
mbg
committed
ac74c28
Copy full SHA for ac74c28
Merge pull request #3473 from github/mbg/start-proxy/cert-gen
Show description for aee29a1
mbg
authored
aee29a1
Copy full SHA for aee29a1
Merge pull request #3482 from github/mbg/release/author-or-merger
Show description for ad5a6c0
mbg
authored
ad5a6c0
Copy full SHA for ad5a6c0
Merge branch 'main' into mbg/java/network-debugging
mbg
committed
3e37216
Copy full SHA for 3e37216
Merge pull request #3484 from github/mbg/cli/force-nightly
Show description for 147d149
mbg
authored
147d149
Copy full SHA for 147d149

Commits on Feb 17, 2026

Use `all`
mbg
committed
d1689c9
Copy full SHA for d1689c9
Merge pull request #3485 from github/mbg/java/network-debugging
Show description for ebce69a
mbg
authored
ebce69a
Copy full SHA for ebce69a
Rename `csra` to `risk-assessment`
mbg
committed
f315d82
Copy full SHA for f315d82
Remove unnecessary check
mbg
committed
d6ea670
Copy full SHA for d6ea670
Add enum for Java-related env var names
mbg
committed
bff89dc
Copy full SHA for bff89dc
Log information about proxy-related environment variables
mbg
committed
33e2dff
Copy full SHA for 33e2dff
Find likely JDK locations and check configurations
mbg
committed
a3d7d36
Copy full SHA for a3d7d36
Wrap `checkProxyEnvironment` call in `try`/`catch` for good measure
mbg
committed
4250b46
Copy full SHA for 4250b46
Clear GHA `JAVA_HOME_*` env vars for `discoverActionsJdks` test
mbg
committed
ef9cfd9
Copy full SHA for ef9cfd9
Fix typos
mbg
committed
c1d6ee5
Copy full SHA for c1d6ee5
Check whether `value` is a URL in `checkEnvVar` and clear credentials
Show description for 99fcc7b
mbg
committed
99fcc7b
Copy full SHA for 99fcc7b
Only run when debugging or test mode is enabled
mbg
committed
11c6c18
Copy full SHA for 11c6c18
Fixup: add missing `.env`
mbg
committed
44a4bea
Copy full SHA for 44a4bea
Add JSDoc comments to `upload-lib` types
mbg
committed
5c96b6e
Copy full SHA for 5c96b6e
Reword error message
mbg
committed
6d55dff
Copy full SHA for 6d55dff
Replace most occurrences of `CSRA`
mbg
committed
2abec3f
Copy full SHA for 2abec3f
Consistently use "\n" to split lines, then trim extra characters if needed
mbg
committed
9715925
Copy full SHA for 9715925
Move interesting JRE properties out of `checkJdkSettings`
mbg
committed
32ab108
Copy full SHA for 32ab108
Add more interesting Java properties
mbg
committed
46473e0
Copy full SHA for 46473e0
Merge pull request #3474 from github/mbg/risk-assessment-analysis
Show description for b1b1e44
mbg
authored
b1b1e44
Copy full SHA for b1b1e44
Run `java` to show computed settings
mbg
committed
906dd89
Copy full SHA for 906dd89
Merge branch 'main' into mbg/start-proxy/java-env-checks
mbg
committed
64300e4
Copy full SHA for 64300e4
Fix `checkExpectedLogMessages` not asserting anything on success
mbg
committed
61f7dd3
Copy full SHA for 61f7dd3
Merge pull request #3486 from github/mbg/start-proxy/java-env-checks
Show description for 015d8c7
mbg
authored
015d8c7
Copy full SHA for 015d8c7

Commits on Feb 18, 2026

Bump fast-xml-parser from 5.3.4 to 5.3.6
Show description for 7407d38
dependabot[bot]
authored
7407d38
Copy full SHA for 7407d38
Rebuild
github-actions[bot]
committed
76cf404
Copy full SHA for 76cf404
Merge pull request #3488 from github/dependabot/npm_and_yarn/fast-xml-parser-5.3.6
Show description for 5e7a52f
oscarsj
authored
5e7a52f
Copy full SHA for 5e7a52f

Commits on Feb 19, 2026

Use new feature flag for repository properties
henrymercer
committed
f7905e8
Copy full SHA for f7905e8

Commits on Feb 20, 2026

Merge pull request #3492 from github/henrymercer/new-repository-properties-ff
Show description for 50fdbb9
mbg
authored
50fdbb9
Copy full SHA for 50fdbb9
Update default bundle to codeql-bundle-v2.24.2
github-actions[bot]
committed
d97dce6
Copy full SHA for d97dce6
Add changelog note
github-actions[bot]
committed
00150da
Copy full SHA for 00150da
Merge pull request #3493 from github/update-bundle/codeql-bundle-v2.24.2
Show description for 39ba80c
mbg
authored
39ba80c
Copy full SHA for 39ba80c
Update changelog for v4.32.4
github-actions[bot]
committed
cfda84c
Copy full SHA for cfda84c
Add changelog entries
mbg
committed
cdda72d
Copy full SHA for cdda72d
Fix typo
mbg
committed
314172e
Copy full SHA for 314172e
Apply suggestions from code review
Show description for 0c20209

authored
0c20209
Copy full SHA for 0c20209
Apply remaining review suggestions
mbg
committed
e5d84c8
Copy full SHA for e5d84c8
Merge pull request #3494 from github/update-v4.32.4-39ba80c47
mbg
authored
89a39a4
Copy full SHA for 89a39a4
Revert "Update version and changelog for v3.32.3"
Show description for 72edeaa
github-actions[bot]
committed
72edeaa
Copy full SHA for 72edeaa
Revert "Rebuild"
Show description for 88d9aba
github-actions[bot]
committed
88d9aba
Copy full SHA for 88d9aba
Merge remote-tracking branch 'origin/releases/v4' into backport-v3.32.4-89a39a4e5
github-actions[bot]
committed
acb91bd
Copy full SHA for acb91bd
Update version and changelog for v3.32.4
github-actions[bot]
committed
147ec67
Copy full SHA for 147ec67
Rebuild
github-actions[bot]
committed
a3696cd
Copy full SHA for a3696cd