Skip to content

Releases: github/codeql-action

v4.37.2

Choose a tag to compare

@codeql-action-automation codeql-action-automation released this 21 Jul 14:26
Immutable release. Only release title and notes can be modified.
e064762
  • The new address format for the config-file input that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, the remote= prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. #4023
  • The CodeQL Action can now make use of configured private registries in Default Setup to retrieve CodeQL configuration files from remote repositories that require authentication. This will allow customers to store their CodeQL configuration in a single repository that can then be referenced by Default Setup workflows in other repositories. We expect to roll this and other, related changes out to everyone in July. #4007

v3.37.2

Choose a tag to compare

@codeql-action-automation codeql-action-automation released this 21 Jul 15:07
Immutable release. Only release title and notes can be modified.
08d09a5
  • The new address format for the config-file input that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, the remote= prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. #4023
  • The CodeQL Action can now make use of configured private registries in Default Setup to retrieve CodeQL configuration files from remote repositories that require authentication. This will allow customers to store their CodeQL configuration in a single repository that can then be referenced by Default Setup workflows in other repositories. We expect to roll this and other, related changes out to everyone in July. #4007

v4.37.1

Choose a tag to compare

@codeql-action-automation codeql-action-automation released this 16 Jul 15:35
Immutable release. Only release title and notes can be modified.
7188fc3
  • Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.20.6 and earlier. These versions of CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and will be unsupported by the next minor release of the CodeQL Action. #3956
  • Update default CodeQL bundle version to 2.26.1. #4019

v3.37.1

Choose a tag to compare

@codeql-action-automation codeql-action-automation released this 16 Jul 18:18
Immutable release. Only release title and notes can be modified.
b7351df
  • Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.20.6 and earlier. These versions of CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and will be unsupported by the next minor release of the CodeQL Action. #3956
  • Update default CodeQL bundle version to 2.26.1. #4019

CodeQL Bundle v2.26.1

Choose a tag to compare

@codeql-ci codeql-ci released this 16 Jul 09:06
Immutable release. Only release title and notes can be modified.
e584241

Bundles CodeQL CLI v2.26.1

Includes the following CodeQL language packs from github/codeql@codeql-cli/v2.26.1:

v4.37.0

Choose a tag to compare

@codeql-action-automation codeql-action-automation released this 08 Jul 12:09
Immutable release. Only release title and notes can be modified.
99df26d
  • Update default CodeQL bundle version to 2.26.0. #3995
  • In addition to the existing input format, the config-file input for the codeql-action/init step will soon support a new [owner/]repo[@ref][:path] format. All components except the repository name are optional. If omitted, owner defaults to the same owner as the repository the analysis is running for, ref to main, and path to .github/codeql-action.yaml. Support for this format ships in this version of the CodeQL Action, but will only be enabled over the coming weeks. #3973

v3.37.0

Choose a tag to compare

@codeql-action-automation codeql-action-automation released this 08 Jul 13:16
Immutable release. Only release title and notes can be modified.
02c5e83
  • Update default CodeQL bundle version to 2.26.0. #3995
  • In addition to the existing input format, the config-file input for the codeql-action/init step will soon support a new [owner/]repo[@ref][:path] format. All components except the repository name are optional. If omitted, owner defaults to the same owner as the repository the analysis is running for, ref to main, and path to .github/codeql-action.yaml. Support for this format ships in this version of the CodeQL Action, but will only be enabled over the coming weeks. #3973

CodeQL Bundle v2.26.0

Choose a tag to compare

@codeql-ci codeql-ci released this 08 Jul 07:32
Immutable release. Only release title and notes can be modified.
f58f0d1

Bundles CodeQL CLI v2.26.0

Includes the following CodeQL language packs from github/codeql@codeql-cli/v2.26.0:

v4.36.3

Choose a tag to compare

@codeql-action-automation codeql-action-automation released this 02 Jul 09:29
Immutable release. Only release title and notes can be modified.
54f647b

No user facing changes.

v3.36.3

Choose a tag to compare

@codeql-action-automation codeql-action-automation released this 02 Jul 11:11
Immutable release. Only release title and notes can be modified.
411c4c9

No user facing changes.