)]}'
{
  "commit": "d28312a1b4ddff41b5f1fb65a6f8826c790082f4",
  "tree": "58a51fac9e2d14d90598f9b4ffa5b4f5eae11109",
  "parents": [
    "bdf782acc8c2c19f00fa0fe8186c168f1c84bd04"
  ],
  "author": {
    "name": "dependabot[bot]",
    "email": "49699333+dependabot[bot]@users.noreply.github.com",
    "time": "Fri Jul 12 09:43:04 2024 +0000"
  },
  "committer": {
    "name": "GitHub",
    "email": "noreply@github.com",
    "time": "Fri Jul 12 09:43:04 2024 +0000"
  },
  "message": "Bump github/codeql-action from 3.25.11 to 3.25.12 (#875)\n\nBumps [github/codeql-action](https://github.com/github/codeql-action) from 3.25.11 to 3.25.12.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href\u003d\"https://github.com/github/codeql-action/blob/main/CHANGELOG.md\"\u003egithub/codeql-action\u0027s changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eCodeQL Action Changelog\u003c/h1\u003e\n\u003cp\u003eSee the \u003ca href\u003d\"https://github.com/github/codeql-action/releases\"\u003ereleases page\u003c/a\u003e for the relevant changes to the CodeQL CLI and language packs.\u003c/p\u003e\n\u003cp\u003eNote that the only difference between \u003ccode\u003ev2\u003c/code\u003e and \u003ccode\u003ev3\u003c/code\u003e of the CodeQL Action is the node version they support, with \u003ccode\u003ev3\u003c/code\u003e running on node 20 while we continue to release \u003ccode\u003ev2\u003c/code\u003e to support running on node 16. For example \u003ccode\u003e3.22.11\u003c/code\u003e was the first \u003ccode\u003ev3\u003c/code\u003e release and is functionally identical to \u003ccode\u003e2.22.11\u003c/code\u003e. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.\u003c/p\u003e\n\u003ch2\u003e[UNRELEASED]\u003c/h2\u003e\n\u003cp\u003eNo user facing changes.\u003c/p\u003e\n\u003ch2\u003e3.25.12 - 12 Jul 2024\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImprove the reliability and performance of analyzing code when analyzing a compiled language with the \u003ccode\u003eautobuild\u003c/code\u003e \u003ca href\u003d\"https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages#codeql-build-modes\"\u003ebuild mode\u003c/a\u003e on GitHub Enterprise Server. This feature is already available to GitHub.com users. \u003ca href\u003d\"https://redirect.github.com/github/codeql-action/pull/2353\"\u003e#2353\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate default CodeQL bundle version to 2.18.0. \u003ca href\u003d\"https://redirect.github.com/github/codeql-action/pull/2364\"\u003e#2364\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.25.11 - 28 Jun 2024\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAvoid failing the workflow run if there is an error while uploading debug artifacts. \u003ca href\u003d\"https://redirect.github.com/github/codeql-action/pull/2349\"\u003e#2349\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate default CodeQL bundle version to 2.17.6. \u003ca href\u003d\"https://redirect.github.com/github/codeql-action/pull/2352\"\u003e#2352\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.25.10 - 13 Jun 2024\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate default CodeQL bundle version to 2.17.5. \u003ca href\u003d\"https://redirect.github.com/github/codeql-action/pull/2327\"\u003e#2327\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.25.9 - 12 Jun 2024\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAvoid failing database creation if the database folder already exists and contains some unexpected files. Requires CodeQL 2.18.0 or higher. \u003ca href\u003d\"https://redirect.github.com/github/codeql-action/pull/2330\"\u003e#2330\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eThe init Action will attempt to clean up the database cluster directory before creating a new database and at the end of the job. This will help to avoid issues where the database cluster directory is left in an inconsistent state. \u003ca href\u003d\"https://redirect.github.com/github/codeql-action/pull/2332\"\u003e#2332\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.25.8 - 04 Jun 2024\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate default CodeQL bundle version to 2.17.4. \u003ca href\u003d\"https://redirect.github.com/github/codeql-action/pull/2321\"\u003e#2321\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.25.7 - 31 May 2024\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eWe are rolling out a feature in May/June 2024 that will reduce the Actions cache usage of the Action by keeping only the newest TRAP cache for each language. \u003ca href\u003d\"https://redirect.github.com/github/codeql-action/pull/2306\"\u003e#2306\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.25.6 - 20 May 2024\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate default CodeQL bundle version to 2.17.3. \u003ca href\u003d\"https://redirect.github.com/github/codeql-action/pull/2295\"\u003e#2295\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.25.5 - 13 May 2024\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd a compatibility matrix of supported CodeQL Action, CodeQL CLI, and GitHub Enterprise Server versions to the \u003ca href\u003d\"https://github.com/github/codeql-action/blob/main/README.md\"\u003ehttps://github.com/github/codeql-action/blob/main/README.md\u003c/a\u003e. \u003ca href\u003d\"https://redirect.github.com/github/codeql-action/pull/2273\"\u003e#2273\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAvoid printing out a warning for a missing \u003ccode\u003eon.push\u003c/code\u003e trigger when the CodeQL Action is triggered via a \u003ccode\u003eworkflow_call\u003c/code\u003e event. \u003ca href\u003d\"https://redirect.github.com/github/codeql-action/pull/2274\"\u003e#2274\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eThe \u003ccode\u003etools: latest\u003c/code\u003e input to the \u003ccode\u003einit\u003c/code\u003e Action has been renamed to \u003ccode\u003etools: linked\u003c/code\u003e. This option specifies that the Action should use the tools shipped at the same time as the Action. The old name will continue to work for backwards compatibility, but we recommend that new workflows use the new name. \u003ca href\u003d\"https://redirect.github.com/github/codeql-action/pull/2281\"\u003e#2281\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.25.4 - 08 May 2024\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate default CodeQL bundle version to 2.17.2. \u003ca href\u003d\"https://redirect.github.com/github/codeql-action/pull/2270\"\u003e#2270\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/github/codeql-action/commit/4fa2a7953630fd2f3fb380f21be14ede0169dd4f\"\u003e\u003ccode\u003e4fa2a79\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href\u003d\"https://redirect.github.com/github/codeql-action/issues/2369\"\u003e#2369\u003c/a\u003e from github/update-v3.25.12-947b18fb7\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/github/codeql-action/commit/dec6fb713c18d10611178d0d693c19aea88c8e8d\"\u003e\u003ccode\u003edec6fb7\u003c/code\u003e\u003c/a\u003e Update changelog for v3.25.12\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/github/codeql-action/commit/947b18fb721ec7b717188ea2d1b77547494b5d71\"\u003e\u003ccode\u003e947b18f\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href\u003d\"https://redirect.github.com/github/codeql-action/issues/2365\"\u003e#2365\u003c/a\u003e from github/dependabot/npm_and_yarn/npm-88aac57241\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/github/codeql-action/commit/9ab727712f519b1609826257798e28ecf183223c\"\u003e\u003ccode\u003e9ab7277\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href\u003d\"https://redirect.github.com/github/codeql-action/issues/2364\"\u003e#2364\u003c/a\u003e from github/update-bundle/codeql-bundle-v2.18.0\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/github/codeql-action/commit/1c60bf167bf7381660d6beef09ff28ef424ddebf\"\u003e\u003ccode\u003e1c60bf1\u003c/code\u003e\u003c/a\u003e Merge branch \u0027main\u0027 into update-bundle/codeql-bundle-v2.18.0\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/github/codeql-action/commit/be825d5eefdb0c498fa30c4b57ec0690b4d0cecb\"\u003e\u003ccode\u003ebe825d5\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href\u003d\"https://redirect.github.com/github/codeql-action/issues/2353\"\u003e#2353\u003c/a\u003e from github/henrymercer/enable-direct-tracing\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/github/codeql-action/commit/243e392ed031ba4a260a4f4dcfb2ea12c4f59c23\"\u003e\u003ccode\u003e243e392\u003c/code\u003e\u003c/a\u003e Fix PR number in changelog\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/github/codeql-action/commit/026682fb73007dbff555c8b972d7fe41df8f9d3b\"\u003e\u003ccode\u003e026682f\u003c/code\u003e\u003c/a\u003e Fix bad auto merge in changelog\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/github/codeql-action/commit/264cbe20c6f634b661bed76ea0993bb895d7e9c7\"\u003e\u003ccode\u003e264cbe2\u003c/code\u003e\u003c/a\u003e Merge branch \u0027main\u0027 into henrymercer/enable-direct-tracing\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/github/codeql-action/commit/0b65015a1d8925dd6936217bc72af1d7175d9e56\"\u003e\u003ccode\u003e0b65015\u003c/code\u003e\u003c/a\u003e Update checked-in dependencies\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href\u003d\"https://github.com/github/codeql-action/compare/b611370bb5703a7efb587f9d136a52ea24c5c38c...4fa2a7953630fd2f3fb380f21be14ede0169dd4f\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003eMost Recent Ignore Conditions Applied to This Pull Request\u003c/summary\u003e\n\n| Dependency Name | Ignore Conditions |\n| --- | --- |\n| github/codeql-action | [\u003c 2.3.5, \u003e 2.3.4] |\n\u003c/details\u003e\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dgithub/codeql-action\u0026package-manager\u003dgithub_actions\u0026previous-version\u003d3.25.11\u0026new-version\u003d3.25.12)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\u003c/details\u003e",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "e943252f2fd1755619d1766d2da58b6539646ef1",
      "old_mode": 33188,
      "old_path": ".github/workflows/scorecards-analysis.yml",
      "new_id": "014744d7223d993cff6be4d962154bda6f587434",
      "new_mode": 33188,
      "new_path": ".github/workflows/scorecards-analysis.yml"
    }
  ]
}