Skip to content

Update the dependencies to CodeQL CLI 2.22.2. #210

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 8 commits into from
Aug 12, 2025

Conversation

lcartey
Copy link
Contributor

@lcartey lcartey commented Jul 30, 2025

What This PR Contributes

This PR updates our CodeQL dependencies to ensure we work with 2.22.2, the latest CodeQL CLI release:

  • Updates the codeql-pack.lock.yml files to use the latest versions of the QL packs, aligned with the CodeQL CLI 2.22.2 release.
  • Relaxed the version constraints on the codeql/javascript-queries pack dependency in the javascript/frameworks/ui5/test/qlpack.yml file. This is because the pack major version increased (to 2.0.0) in CodeQL CLI 2.22.0. We now allow any version later than 1.2.0, as we only use this dependency to run the log injection queries, so we do not need to be precise about the version used.
  • Deletes the spurious lock file scripts/codeql-pack.lock.yml - there is no qlpack.yml file in this directory.
  • Updates qlt.conf.json to 2.22.2.

@lcartey lcartey requested a review from jeongsoolee09 July 30, 2025 16:03
Copy link
Contributor

@jeongsoolee09 jeongsoolee09 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you! When we possibly upgrade the CLI once more, we can remove the PatchDataFlow and its reference.

@jeongsoolee09 jeongsoolee09 merged commit b7b6684 into main Aug 12, 2025
5 checks passed
@jeongsoolee09 jeongsoolee09 deleted the lcartey/update-dependencies branch August 12, 2025 13:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants