Commits

Breadcrumbs

History for

ondependabot/github_actions/github/codeql-action-4.36.2

User selector

All users

All time

Commit History

Commits on Jun 8, 2026

• chore(deps): bump github/codeql-action from 4.36.1 to 4.36.2

  Show description for 1a279ac
  dependabot[bot]

  authored
  1a279ac

  Copy full SHA for 1a279ac

Commits on Jun 5, 2026

• Merge pull request #13596 from cli/dependabot/github_actions/github/codeql-action-4.36.1

  Show description for 19ac156
  BagToad

  authored
  19ac156

  Copy full SHA for 19ac156

• chore(deps): bump actions/checkout from 6.0.2 to 6.0.3

  Show description for 8c582eb
  dependabot[bot]

  authored
  8c582eb

  Copy full SHA for 8c582eb

• chore(deps): bump github/codeql-action from 4.36.0 to 4.36.1

  Show description for def924b
  dependabot[bot]

  authored
  def924b

  Copy full SHA for def924b

Commits on May 25, 2026

• chore(deps): bump golangci/golangci-lint-action from 9.2.0 to 9.2.1

  Show description for 34f71fe
  dependabot[bot]

  authored
  34f71fe

  Copy full SHA for 34f71fe

Commits on May 22, 2026

• SHA pin first-party GitHub Actions

  Show description for 94e3b1f
  

  williammartin

  and

  Copilot

  committed
  94e3b1f

  Copy full SHA for 94e3b1f

• chore(deps): bump github/codeql-action from 4 to 4.35.5

  Show description for 01e0b8d
  dependabot[bot]

  authored
  01e0b8d

  Copy full SHA for 01e0b8d

• Merge pull request #13487 from cli/wm-more-vulncheck

  Show description for 806c553
  williammartin

  authored
  806c553

  Copy full SHA for 806c553

• Add 3 day dependabot cooldown period

  Show description for d4a57fe
  

  williammartin

  and

  Copilot

  committed
  d4a57fe

  Copy full SHA for d4a57fe

• Run govulncheck daily instead of weekly

  Show description for a9026fd
  

  williammartin

  and

  Copilot

  committed
  a9026fd

  Copy full SHA for a9026fd

Commits on May 21, 2026

• Merge pull request #13479 from cli/wm-no-homebrew

  Show description for 0a68614
  williammartin

  authored
  0a68614

  Copy full SHA for 0a68614

• Stop bumping homebrew on release

  williammartin

  committed
  b49fc31

  Copy full SHA for b49fc31

Commits on May 20, 2026

• chore(deps): bump goreleaser/goreleaser-action from 7.2.1 to 7.2.2 (#13461)

  Show description for 6bbaae0
  dependabot[bot]

  authored
  6bbaae0

  Copy full SHA for 6bbaae0

• Remove discussion workflow

  williammartin

  committed
  6b5e3bc

  Copy full SHA for 6b5e3bc

• Remove dependency on persistent token

  williammartin

  committed
  57480dd

  Copy full SHA for 57480dd

• Remove third-party license debris

  williammartin

  committed
  3faf4e9

  Copy full SHA for 3faf4e9

Commits on May 13, 2026

• Simplify bump-go.sh toolchain logic

  Show description for e5f5427
  

  williammartin

  and

  Copilot

  committed
  e5f5427

  Copy full SHA for e5f5427

• Remove unnecessary null checks in jq output handling

  Show description for d2cc91b
  

  2 peopleauthored and

  williammartin

  committed
  d2cc91b

  Copy full SHA for d2cc91b

• Rewrite script to use go mod edit instead of grep/sed

  Show description for 355f507
  

  Copilot

  and

  williammartin

  committed
  355f507

  Copy full SHA for 355f507

• Address code review comments

  Show description for 209ef1d
  

  Copilot

  and

  williammartin

  committed
  209ef1d

  Copy full SHA for 209ef1d

• Improve version comparison to handle both X.Y.0 and X.Y.Z formats

  Show description for 653ffc2
  

  Copilot

  and

  williammartin

  committed
  653ffc2

  Copy full SHA for 653ffc2

• Update bump-go.sh to handle missing toolchain directive

  Show description for f561003
  

  Copilot

  and

  williammartin

  committed
  f561003

  Copy full SHA for f561003

• Update CODEOWNERS for skills directory ownership

  williammartin

  authored
  83bc3de

  Copy full SHA for 83bc3de

Commits on May 8, 2026

• Fix triage-pull-requests skipping PRs that open as draft

  Show description for 8fb4f33
  

  BagToad

  and

  Copilot

  committed
  8fb4f33

  Copy full SHA for 8fb4f33

Commits on May 1, 2026

• Switch from actions/attest-build-provenance to actions/attest

  Show description for 4ed7002
  scop

  committed
  4ed7002

  Copy full SHA for 4ed7002

Commits on Apr 29, 2026

• Enable extended PR screening for external PRs

  Show description for 8b89c8b
  

  tidy-dev

  and

  Copilot

  committed
  8b89c8b

  Copy full SHA for 8b89c8b

Commits on Apr 27, 2026

• chore(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.2.1

  Show description for ed31e2f
  dependabot[bot]

  authored
  ed31e2f

  Copy full SHA for ed31e2f

Commits on Apr 22, 2026

• fix: yaml.github-actions.security.run-shell-injection.run-shell-injection security vulnerability

  Show description for f52acd5
  orbisai0security

  committed
  f52acd5

  Copy full SHA for f52acd5

Commits on Apr 16, 2026

• Add @cli/code-reviewers to all CODEOWNERS rules

  Show description for d88705e
  

  BagToad

  and

  Copilot

  committed
  d88705e

  Copy full SHA for d88705e

• Add cli/skill-reviewers as CODEOWNERS for skills packages

  Show description for a38e81e
  

  BagToad

  and

  Copilot

  committed
  a38e81e

  Copy full SHA for a38e81e

Commits on Apr 14, 2026

• Merge pull request #12918 from cli/dependabot/github_actions/advanced-security/filter-sarif-1.1

  Show description for d3b2ceb
  BagToad

  authored
  d3b2ceb

  Copy full SHA for d3b2ceb

Commits on Apr 8, 2026

• Document dependency CVE policy in SECURITY.md

  Show description for 73d65ed
  

  BagToad

  and

  Copilot

  committed
  73d65ed

  Copy full SHA for 73d65ed

Commits on Mar 26, 2026

• Merge pull request #12951 from cli/dependabot/github_actions/azure/login-3.0.0

  Show description for afe0adf
  williammartin

  authored
  afe0adf

  Copy full SHA for afe0adf

• Merge pull request #13004 from cli/dependabot/github_actions/mislav/bump-homebrew-formula-action-4.1

  Show description for c61b160
  williammartin

  authored
  c61b160

  Copy full SHA for c61b160

Commits on Mar 23, 2026

• chore(deps): bump microsoft/setup-msbuild from 2.0.0 to 3.0.0

  Show description for dd1a368
  dependabot[bot]

  authored
  dd1a368

  Copy full SHA for dd1a368