)]}'
{
  "commit": "364b9ca2b4ca55577ecb57e735ebbe837f224dc8",
  "tree": "8a7a3f235c28f7fa9d83a48de547af65602aacbd",
  "parents": [
    "035b97127b505bf5d4df334ccc3e96d016a2c39e"
  ],
  "author": {
    "name": "dependabot[bot]",
    "email": "49699333+dependabot[bot]@users.noreply.github.com",
    "time": "Mon Jan 01 18:10:00 2024 +0000"
  },
  "committer": {
    "name": "GitHub",
    "email": "noreply@github.com",
    "time": "Mon Jan 01 18:10:00 2024 +0000"
  },
  "message": "Bump github/codeql-action from 2.22.8 to 3.22.12 (#1069)\n\nBumps [github/codeql-action](https://github.com/github/codeql-action) from 2.22.8 to 3.22.12.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href\u003d\"https://github.com/github/codeql-action/blob/main/CHANGELOG.md\"\u003egithub/codeql-action\u0027s changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eCodeQL Action Changelog\u003c/h1\u003e\n\u003cp\u003eSee the \u003ca href\u003d\"https://github.com/github/codeql-action/releases\"\u003ereleases page\u003c/a\u003e for the relevant changes to the CodeQL CLI and language packs.\u003c/p\u003e\n\u003cp\u003eNote that the only difference between \u003ccode\u003ev2\u003c/code\u003e and \u003ccode\u003ev3\u003c/code\u003e of the CodeQL Action is the node version they support, with \u003ccode\u003ev3\u003c/code\u003e running on node 20 while we continue to release \u003ccode\u003ev2\u003c/code\u003e to support running on node 16. For example \u003ccode\u003e3.22.11\u003c/code\u003e was the first \u003ccode\u003ev3\u003c/code\u003e release and is functionally identical to \u003ccode\u003e2.22.11\u003c/code\u003e. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.\u003c/p\u003e\n\u003ch2\u003e[UNRELEASED]\u003c/h2\u003e\n\u003cp\u003eNo user facing changes.\u003c/p\u003e\n\u003ch2\u003e3.22.12 - 22 Dec 2023\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate default CodeQL bundle version to 2.15.5. \u003ca href\u003d\"https://redirect.github.com/github/codeql-action/pull/2047\"\u003e#2047\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.22.11 - 13 Dec 2023\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[v3+ only] The CodeQL Action now runs on Node.js v20. \u003ca href\u003d\"https://redirect.github.com/github/codeql-action/pull/2006\"\u003e#2006\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.22.10 - 12 Dec 2023\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate default CodeQL bundle version to 2.15.4. \u003ca href\u003d\"https://redirect.github.com/github/codeql-action/pull/2016\"\u003e#2016\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.22.9 - 07 Dec 2023\u003c/h2\u003e\n\u003cp\u003eNo user facing changes.\u003c/p\u003e\n\u003ch2\u003e2.22.8 - 23 Nov 2023\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate default CodeQL bundle version to 2.15.3. \u003ca href\u003d\"https://redirect.github.com/github/codeql-action/pull/2001\"\u003e#2001\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.22.7 - 16 Nov 2023\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd a deprecation warning for customers using CodeQL version 2.11.5 and earlier. These versions of CodeQL were discontinued on 8 November 2023 alongside GitHub Enterprise Server 3.7, and will be unsupported by CodeQL Action v2.23.0 and later. \u003ca href\u003d\"https://redirect.github.com/github/codeql-action/pull/1993\"\u003e#1993\u003c/a\u003e\n\u003cul\u003e\n\u003cli\u003eIf you are using one of these versions, please update to CodeQL CLI version 2.11.6 or later. For instance, if you have specified a custom version of the CLI using the \u0027tools\u0027 input to the \u0027init\u0027 Action, you can remove this input to use the default version.\u003c/li\u003e\n\u003cli\u003eAlternatively, if you want to continue using a version of the CodeQL CLI between 2.10.5 and 2.11.5, you can replace \u003ccode\u003egithub/codeql-action/*@v2\u003c/code\u003e by \u003ccode\u003egithub/codeql-action/*@v2.22.7\u003c/code\u003e in your code scanning workflow to ensure you continue using this version of the CodeQL Action.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.22.6 - 14 Nov 2023\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCustomers running Python analysis on macOS using version 2.14.6 or earlier of the CodeQL CLI should upgrade to CodeQL CLI version 2.15.0 or later. If you do not wish to upgrade the CodeQL CLI, ensure that you are using Python version 3.11 or earlier, as CodeQL version 2.14.6 and earlier do not support Python 3.12. You can achieve this by adding a \u003ca href\u003d\"https://github.com/actions/setup-python\"\u003e\u003ccode\u003esetup-python\u003c/code\u003e\u003c/a\u003e step to your code scanning workflow before the step that invokes \u003ccode\u003egithub/codeql-action/init\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eUpdate default CodeQL bundle version to 2.15.2. \u003ca href\u003d\"https://redirect.github.com/github/codeql-action/pull/1978\"\u003e#1978\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e2.22.5 - 27 Oct 2023\u003c/h2\u003e\n\u003cp\u003eNo user facing changes.\u003c/p\u003e\n\u003ch2\u003e2.22.4 - 20 Oct 2023\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate default CodeQL bundle version to 2.15.1. \u003ca href\u003d\"https://redirect.github.com/github/codeql-action/pull/1953\"\u003e#1953\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUsers will begin to see warnings on Node.js 16 deprecation in their Actions logs on code scanning runs starting October 23, 2023.\n\u003cul\u003e\n\u003cli\u003eAll code scanning workflows should continue to succeed regardless of the warning.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/github/codeql-action/commit/012739e5082ff0c22ca6d6ab32e07c36df03c4a4\"\u003e\u003ccode\u003e012739e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href\u003d\"https://redirect.github.com/github/codeql-action/issues/2052\"\u003e#2052\u003c/a\u003e from github/update-v3.22.12-40cb08c12\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/github/codeql-action/commit/c1cf794881a27f68e730726dd21de4fa01022485\"\u003e\u003ccode\u003ec1cf794\u003c/code\u003e\u003c/a\u003e Update changelog for v3.22.12\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/github/codeql-action/commit/40cb08c1213f65be8e56fefeb194e783b9676b36\"\u003e\u003ccode\u003e40cb08c\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href\u003d\"https://redirect.github.com/github/codeql-action/issues/2051\"\u003e#2051\u003c/a\u003e from github/angelapwen/patch-release-script\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/github/codeql-action/commit/0be92905083e1fbcf7491e075cd8ad0da02d01b6\"\u003e\u003ccode\u003e0be9290\u003c/code\u003e\u003c/a\u003e Typecast \u003ccode\u003eOLDEST_SUPPORTED_MAJOR_VERSION\u003c/code\u003e when defined\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/github/codeql-action/commit/658e3c66196dcc6a0e97919ab2ef382453a94454\"\u003e\u003ccode\u003e658e3c6\u003c/code\u003e\u003c/a\u003e Fix type error\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/github/codeql-action/commit/49812ec6b6fc5cb29e909348cc6fe33d611ed7be\"\u003e\u003ccode\u003e49812ec\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href\u003d\"https://redirect.github.com/github/codeql-action/issues/2050\"\u003e#2050\u003c/a\u003e from github/nickfyson/add-releases-ini\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/github/codeql-action/commit/9ed5fc7131494b125e49f3dae119ef679e0caca4\"\u003e\u003ccode\u003e9ed5fc7\u003c/code\u003e\u003c/a\u003e add note about backporting check changes to v2 branch\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/github/codeql-action/commit/a42c9a26343df70afaf9edbfb4c650d08e642f00\"\u003e\u003ccode\u003ea42c9a2\u003c/code\u003e\u003c/a\u003e update required checks script to handle release branches\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/github/codeql-action/commit/a110746c60b9030722922b319cd3941f939c5638\"\u003e\u003ccode\u003ea110746\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href\u003d\"https://redirect.github.com/github/codeql-action/issues/2047\"\u003e#2047\u003c/a\u003e from github/update-bundle/codeql-bundle-v2.15.5\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/github/codeql-action/commit/a99bd84dff3648800150caf86c49faf8e99b52b1\"\u003e\u003ccode\u003ea99bd84\u003c/code\u003e\u003c/a\u003e Add changelog note\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href\u003d\"https://github.com/github/codeql-action/compare/407ffafae6a767df3e0230c3df91b6443ae8df75...012739e5082ff0c22ca6d6ab32e07c36df03c4a4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dgithub/codeql-action\u0026package-manager\u003dgithub_actions\u0026previous-version\u003d2.22.8\u0026new-version\u003d3.22.12)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\u003c/details\u003e",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "6cd154ce8c4186ccb91f276fdc9e8894b2d5564e",
      "old_mode": 33188,
      "old_path": ".github/workflows/scorecards-analysis.yml",
      "new_id": "8170bf24b8e2c762bba9ac73250381790cdbcee4",
      "new_mode": 33188,
      "new_path": ".github/workflows/scorecards-analysis.yml"
    }
  ]
}