From 5e624cdeabd54cc722272df1dccbb9d121e6b839 Mon Sep 17 00:00:00 2001 From: Ken Lewerentz Date: Tue, 6 May 2025 10:18:12 +0700 Subject: [PATCH 1/2] [chore] Update action to use CodeQLAction v3 CodeQL Action v2 was deprecated in Jan 2025, and has now been upgraded to use v3. See: https://github.blog/changelog/2025-01-10-code-scanning-codeql-action-v2-is-now-deprecated/ --- .github/workflows/code-analysis.yml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/code-analysis.yml b/.github/workflows/code-analysis.yml index 65ebdef8e..636bbdb3f 100644 --- a/.github/workflows/code-analysis.yml +++ b/.github/workflows/code-analysis.yml @@ -38,11 +38,11 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v3 + uses: actions/checkout@v4 # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@v2 + uses: github/codeql-action/init@v3 with: languages: ${{ matrix.language }} # Override language selection by uncommenting this and choosing your languages @@ -52,7 +52,7 @@ jobs: # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java). # If this step fails, then you should remove it and run the build manually (see below). - name: Autobuild - uses: github/codeql-action/autobuild@v2 + uses: github/codeql-action/autobuild@v3 # â„šī¸ Command-line programs to run using the OS shell. # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun @@ -66,7 +66,7 @@ jobs: # make release - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v2 + uses: github/codeql-action/analyze@v3 - name: TruffleHog OSS if: env.BRANCH_NAME != github.event.repository.default_branch From 57f271e727462e70cf4a421482697f146375d0e2 Mon Sep 17 00:00:00 2001 From: Ken Lewerentz Date: Tue, 6 May 2025 10:24:25 +0700 Subject: [PATCH 2/2] [chore] Making sure action is running when target is 17.0 --- .github/workflows/code-analysis.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/code-analysis.yml b/.github/workflows/code-analysis.yml index 636bbdb3f..5379cb549 100644 --- a/.github/workflows/code-analysis.yml +++ b/.github/workflows/code-analysis.yml @@ -3,10 +3,10 @@ name: "Code Scanning - Action" on: push: branches: - - "{{ odoo_version }}" + - "17.0" pull_request: branches: - - "{{ odoo_version }}" + - "17.0" schedule: # ┌───────────── minute (0 - 59) # │ ┌───────────── hour (0 - 23)