10 Releases published by 5 people

• v3.28.20

  published Jul 21, 2025

• v3.29.3

  published Jul 21, 2025

• codeql-bundle-v2.22.2 CodeQL Bundle v2.22.2

  published Jul 23, 2025

• v3.29.4

  published Jul 23, 2025

• v3.28.21

  published Jul 28, 2025

• v3.29.5

  published Jul 29, 2025

• codeql-bundle-v2.22.3 CodeQL Bundle v2.22.3

  published Aug 4, 2025

• v3.29.6

  published Aug 7, 2025

• v3.29.7

  published Aug 7, 2025

• v3.29.8

  published Aug 8, 2025

48 Pull requests merged by 8 people

• Overlay: check query packs for compatibility

  #2993 merged Aug 11, 2025

• Clean-up logic for overriding proxy

  #2839 merged Aug 11, 2025

• Add risk assessment to PR template

  #3022 merged Aug 11, 2025

• Cleanup extract to toolcache feature flag

  #3021 merged Aug 11, 2025

• Mergeback v3.29.8 refs/heads/releases/v3 into main

  #3020 merged Aug 8, 2025

• Merge main into releases/v3

  #3019 merged Aug 8, 2025

• Enable rebuilding PRs with conflicts

  #3014 merged Aug 8, 2025

• Fix auto-detection of extractors that aren't languages

  #3015 merged Aug 7, 2025

• Mergeback v3.29.6 refs/heads/releases/v3 into main

  #3013 merged Aug 7, 2025

• Merge main into releases/v3

  #3012 merged Aug 7, 2025

• Prefer providing CodeQL via dependency injection

  #3011 merged Aug 7, 2025

• Clean up the database if it will be uploaded

  #3010 merged Aug 7, 2025

• Make all errors on an unsupported platform ConfigurationErrors

  #3005 merged Aug 7, 2025

• Support auto-detecting Actions workflows

  #3009 merged Aug 7, 2025

• Rewrite legacy SARIF categories for CQ

  #3003 merged Aug 7, 2025

• Bump tmp from 0.2.3 to 0.2.4 in the npm_and_yarn group

  #3007 merged Aug 7, 2025

• Update default bundle to 2.22.3

  #3000 merged Aug 6, 2025

• Treat missing pack errors as configuration errors

  #3004 merged Aug 6, 2025

• Allow using new CodeQL languages without updating the CodeQL Action

  #2914 merged Aug 6, 2025

• Deprecate the 'cleanup-level' option

  #2999 merged Aug 5, 2025

• Bump the npm group with 5 updates

  #3001 merged Aug 5, 2025

• Bump ruby/setup-ruby from 1.253.0 to 1.254.0 in the actions group

  #3002 merged Aug 5, 2025

• Remove disable_combine_sarif_files feature flag

  #2991 merged Aug 1, 2025

• Bump form-data from 2.5.1 to 2.5.5 in the npm_and_yarn group

  #2982 merged Jul 30, 2025

• Bump ruby/setup-ruby from 1.247.0 to 1.253.0 in the actions group

  #2995 merged Jul 30, 2025

• Mergeback v3.29.5 refs/heads/releases/v3 into main

  #2998 merged Jul 29, 2025

• Merge main into releases/v3

  #2997 merged Jul 29, 2025

• Bump the npm group with 2 updates

  #2996 merged Jul 29, 2025

• Update changelog for v3.28.21

  #2994 merged Jul 29, 2025

• Update default bundle to 2.22.2

  #2986 merged Jul 29, 2025

• Update supported GitHub Enterprise Server versions

  #2971 merged Jul 29, 2025

• Mergeback v3.29.4 refs/heads/releases/v3 into main

  #2990 merged Jul 23, 2025

• Merge main into releases/v3

  #2989 merged Jul 23, 2025

• Disable combining runs within a single file

  #2988 merged Jul 23, 2025

• Treat processing error for multiple runs with the same category as configuration error

  #2987 merged Jul 23, 2025

• Bump the npm group with 5 updates

  #2981 merged Jul 23, 2025

• Bump ruby/setup-ruby from 1.245.0 to 1.247.0 in the actions group

  #2980 merged Jul 22, 2025

• Update combining SARIF runs changelog post URL

  #2983 merged Jul 22, 2025

• Overlay: report telemetry

  #2975 merged Jul 21, 2025

• Add changelog entry for v3.28.20 backport

  #2979 merged Jul 21, 2025

• Mergeback v3.29.3 refs/heads/releases/v3 into main

  #2978 merged Jul 21, 2025

• Merge main into releases/v3

  #2977 merged Jul 21, 2025

• Enable Feature.DiffInformedQueries

  #2970 merged Jul 17, 2025

• Overlay: additional feature flags

  #2967 merged Jul 17, 2025

• Ignore pre-release parts when comparing GHES versions

  #2972 merged Jul 17, 2025

• Bump the npm group across 1 directory with 7 updates

  #2963 merged Jul 15, 2025

• Fix parsing of GHES pre-release versions

  #2969 merged Jul 14, 2025

• Update supported GitHub Enterprise Server versions

  #2951 merged Jul 14, 2025

2 Pull requests opened by 2 people

• Fix `upload-sarif` potentially initialising CodeQL twice

  #3006 opened Aug 6, 2025

• Improve Rust analysis PR check

  #3023 opened Aug 11, 2025

3 Issues closed by 3 people

• Azure Devops codeql automatic install job step just stopped working

  #3017 closed Aug 7, 2025

• AdvancedSecurity-Codeql-Init@1 broken: A CodeQL Action release being tagged as latest instead of a CodeQL Bundle release

  #3016 closed Aug 7, 2025

• Encountered a fatal error while running "/opt/hostedtoolcache/CodeQL/2.22.1/x64/codeql/codeql database finalize

  #2955 closed Jul 14, 2025

5 Issues opened by 5 people

• Tasks fails to download the latest version 3.29.7

  #3018 opened Aug 7, 2025

• Is it possible to create custom codeQL workflow for branch other than default branch may be dev?

  #3008 opened Aug 7, 2025

• upload-sarif: constantly hitting the timeout window on upload step

  #2992 opened Jul 24, 2025

• https://github.blog/changelog/2025-07-21-code-scanning-will-stop-combining-multiple-sarif-runs-uploaded-in-the-same-sarif-file/ broke all scan tools

  #2985 opened Jul 22, 2025

• Please consider using verified commits

  #2974 opened Jul 16, 2025

2 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• Rust: remove shipped feature flag

  #2960 commented on Aug 11, 2025 • 12 new comments

• CodeQL won't run locally using `act`

  #967 commented on Jul 23, 2025 • 0 new comments