dependabot[bot]
ea77062daf
deps(actions): bump github/codeql-action from 3 to 4 ( #112549 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3 to 4.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Commits](https://github.com/github/codeql-action/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: '4'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-17 13:01:06 +00:00
dependabot[bot]
4b416f89bf
Chore(deps): Bump actions/checkout from 4 to 5 ( #110558 )
...
* Chore(deps): Bump actions/checkout from 4 to 5
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4 to 5.
- [Release notes](https://github.com/actions/checkout/releases )
- [Commits](https://github.com/actions/checkout/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
* remove incorrect comments
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Ashley Harrison <ashley.harrison@grafana.com>
2025-09-10 14:25:41 +01:00
Tobias Skarhed
c25b0f053c
Devenv: Remove graphite 0.9 ( #106167 )
...
* Add trailing slash
* Remove graphite09 from devenv
* Remove directory from codeowners and modify CodeQL workflow
* Fix shell script
2025-06-02 09:06:48 +02:00
Kevin Minehart
2436b4e097
CI: move workflows/actions to actions ( #104711 )
...
* move workflows/actions to actions
* rerun actions
* fix setup-go v5
* unpinned unnecessary pins
* update CODEOWONERS
* update CODEOWONERS
* remove remove-milestone from codeowners
* remove bad key
2025-04-29 14:24:55 -05:00
Kevin Minehart
97d10b5095
CI: remove unused worklow; use GITHUB_TOKEN where possible ( #104657 )
...
* remove unused worklow; use GITHUB_TOKEN where possible
* pin usages of checkout and setup-go
* Fix zizmor errors
* add zizmor.yml
* fix `changelog.yml`
* fix `core-plugins-build-and-release.yml`
* fix `release-comms.yml`
* update release-pr.yml and run-e2e-suite.yml
* Fix errors in files outside of .github/workflows
* Remove path filter on zizmor.yml
---------
Co-authored-by: Sven Grossmann <svennergr@gmail.com>
Co-authored-by: joshhunt <josh.hunt@grafana.com>
2025-04-29 10:09:23 -05:00
Ashley Harrison
4dbd1846c7
Chore: bump codeql versions used in pr checks ( #101957 )
...
* bump codeql versions used in pr checks
* update supported versions
* use glob syntax
* wider glob
2025-03-11 17:28:36 +00:00
Fabrizio
027329d4b6
CI: Skip analysis steps if not needed ( #85532 )
2024-04-03 17:00:13 +03:00
Fabrizio
8852b1dcc5
Run analysis steps only on grafana/grafana ( #83185 )
2024-02-22 10:26:50 +01:00
dependabot[bot]
5ea16cb947
Bump actions/checkout from 2 to 4 ( #74356 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 2 to 4.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v2...v4 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-05 09:10:10 +01:00
Josh Soref
9571aea651
Only run workflows if they might be able to work ( #72503 )
...
* Fix whitespace
* Only run workflows if they might be able to work
* fix quotes
---------
Co-authored-by: joshhunt <josh@trtr.co>
2023-08-02 12:25:23 +01:00
Armand Grillet
dc486e0ca4
Revert "Only run workflows if they might be able to work" ( #72506 )
...
Revert "Only run workflows if they might be able to work (#63164 )"
This reverts commit 234b5c8c21
2023-07-28 13:21:34 +02:00
Josh Soref
234b5c8c21
Only run workflows if they might be able to work ( #63164 )
2023-07-28 11:01:14 +02:00
Dan Cech
da9c646f24
Build: add explicit build step for go codeql ( #58195 )
...
* add explicit build step for go codeql
* support workflow_dispatch for codeql checks
* syntax fix
* enable on push to codeql-go branch
* test
* use go version from go.mod
* explicitly set go version
* tidy up, add workflow_dispatch support to all codeql actions
2022-11-04 10:20:08 -04:00
dependabot[bot]
369358500d
Bump github/codeql-action from 1 to 2 ( #49128 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 1 to 2.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/v1...v2 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-13 11:29:42 +01:00
dependabot[bot]
c8514756be
Bump actions/checkout from 2 to 3 ( #46068 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-04-08 09:26:30 +01:00
Armand Grillet
3e9dfcd730
Optimize CodeQL workflow ( #47095 )
...
* Do not run CodeQL analysis when updating .cue file
* Remove autobuild step for CodeQL workflow as unecessary
* Add specialized CodeQL workflow
* Updated main CodeQL workflow to not run on PRs
* Simplify CodeQL analysis on PR
* Add .tsx file format to JS CodeQL analysis match
2022-04-01 16:40:25 +02:00
