@@ -18,10 +18,20 @@ jobs:
1818 runs-on : ubuntu-22.04
1919 steps :
2020 - name : Checkout
21- uses : actions/checkout@v2
21+ uses : actions/checkout@v4
22+
23+ - name : Fetch CodeQL
24+ env :
25+ GITHUB_TOKEN : ${{ github.token }}
26+ RUNNER_TEMP : ${{ runner.temp }}
27+ run : |
28+ cd $RUNNER_TEMP
29+ gh release download "v${CODEQL_CLI_VERSION}" --repo https://github.com/github/codeql-cli-binaries --pattern codeql-linux64.zip
30+ unzip -q codeql-linux64.zip
31+ echo "$RUNNER_TEMP/codeql/" >> $GITHUB_PATH
2232
2333 - name : Install Python
24- uses : actions/setup-python@v4
34+ uses : actions/setup-python@v5
2535 with :
2636 python-version : " 3.9"
2737
@@ -35,27 +45,27 @@ jobs:
3545 run : |
3646 python3 scripts/upgrade-codeql-dependencies/upgrade-codeql-dependencies.py --cli-version "$CODEQL_CLI_VERSION"
3747
38- - name : Fetch CodeQL
39- env :
40- GITHUB_TOKEN : ${{ github.token }}
41- RUNNER_TEMP : ${{ runner.temp }}
42- run : |
43- cd $RUNNER_TEMP
44- gh release download "v${CODEQL_CLI_VERSION}" --repo https://github.com/github/codeql-cli-binaries --pattern codeql-linux64.zip
45- unzip -q codeql-linux64.zip
46-
4748 - name : Update CodeQL formatting based on new CLI version
4849 env :
4950 RUNNER_TEMP : ${{ runner.temp }}
5051 run : |
51- find cpp \( -name '*.ql' -or -name '*.qll' \) -print0 | xargs -0 --max-procs "$XARGS_MAX_PROCS" $RUNNER_TEMP/codeql/ codeql query format --in-place
52- find c \( -name '*.ql' -or -name '*.qll' \) -print0 | xargs -0 --max-procs "$XARGS_MAX_PROCS" $RUNNER_TEMP/codeql/ codeql query format --in-place
52+ find cpp \( -name '*.ql' -or -name '*.qll' \) -print0 | xargs -0 --max-procs "$XARGS_MAX_PROCS" codeql query format --in-place
53+ find c \( -name '*.ql' -or -name '*.qll' \) -print0 | xargs -0 --max-procs "$XARGS_MAX_PROCS" codeql query format --in-place
5354
5455 - name : Create Pull Request
55- uses : peter-evans/create-pull-request@v3
56+ uses : peter-evans/create-pull-request@5e914681df9dc83aa4e4905692ca88beb2f9e91f # v7.0.5
5657 with :
57- title : " Upgrading `github/codeql` dependency to ${{ github.event.inputs.codeql_cli_version }}"
58- body : " This PR upgrades the CodeQL CLI version to ${{ github.event.inputs.codeql_cli_version }}."
58+ title : " Upgrade `github/codeql` dependency to ${{ github.event.inputs.codeql_cli_version }}"
59+ body : |
60+ This PR upgrades the CodeQL CLI version to ${{ github.event.inputs.codeql_cli_version }}.
61+
62+ ## CodeQL dependency upgrade checklist:
63+
64+ - [ ] Confirm the code has been correctly reformatted according to the new CodeQL CLI.
65+ - [ ] Identify any CodeQL compiler warnings and errors, and update queries as required.
66+ - [ ] Validate that the `github/codeql` test cases succeed.
67+ - [ ] Address any CodeQL test failures in the `github/codeql-coding-standards` repository.
68+ - [ ] Validate performance vs pre-upgrade, using /test-performance
5969 commit-message : " Upgrading `github/codeql` dependency to ${{ github.event.inputs.codeql_cli_version }}"
6070 delete-branch : true
6171 branch : " codeql/upgrade-to-${{ github.event.inputs.codeql_cli_version }}"
0 commit comments