Commit history

1. Commits on Sep 17, 2026

   • Release preparation for version 2.27.1

     

     github-actions[bot]

     committed
     903466fView commit details

     Copy full SHA for 903466f

     View code at this pointBrowse repository at this point
2. Commits on Sep 9, 2026

   • Code review suggestions

     

     hvitved

     authored and

     nodeselector

     committed
     ff9bf5dView commit details

     Copy full SHA for ff9bf5d

     View code at this pointBrowse repository at this point

   • Actions lockfiles: ignore schema version value

     nodeselector

     committed
     2b7e7abView commit details

     Copy full SHA for 2b7e7ab

     View code at this pointBrowse repository at this point

   • Actions: consume extracted lockfile pins

     nodeselector

     committed
     2e04003View commit details

     Copy full SHA for 2e04003

     View code at this pointBrowse repository at this point

   • actions/unpinned-tag: normalize lockfile action identity

     nodeselector

     committed
     91faa26View commit details

     Copy full SHA for 91faa26

     View code at this pointBrowse repository at this point

   • actions: drop lockfile-extension generator from unpinned-tag PR

     Show description for 77ac6d9
     nodeselector

     committed
     77ac6d9View commit details

     Copy full SHA for 77ac6d9

     View code at this pointBrowse repository at this point

   • actions: use US spelling in lockfile-aware pinning comments

     Show description for 2db34d2
     nodeselector

     committed
     2db34d2View commit details

     Copy full SHA for 2db34d2

     View code at this pointBrowse repository at this point

   • actions/unpinned-tag: match lockfile pins case-insensitively on owner/repo

     Show description for f8f8aa8
     nodeselector

     committed
     f8f8aa8View commit details

     Copy full SHA for f8f8aa8

     View code at this pointBrowse repository at this point

   • actions: emit empty data list for zero-row lockfile extension

     Show description for b6a8394
     nodeselector

     committed
     b6a8394View commit details

     Copy full SHA for b6a8394

     View code at this pointBrowse repository at this point

   • actions: rename self-reference to self repository in unpinned-tag

     Show description for feed864
     nodeselector

     committed
     feed864View commit details

     Copy full SHA for feed864

     View code at this pointBrowse repository at this point

   • actions: drop machine-specific replace, document lockfile generator limits

     Show description for 9e7133b
     nodeselector

     committed
     9e7133bView commit details

     Copy full SHA for 9e7133b

     View code at this pointBrowse repository at this point

   • actions: scaffold lockfile-aware pinning for unpinned-tag

     Show description for 180c109
     nodeselector

     committed
     180c109View commit details

     Copy full SHA for 180c109

     View code at this pointBrowse repository at this point

   • actions: stop unpinned-tag flagging $/ self-references

     Show description for 7fedff2
     nodeselector

     committed
     7fedff2View commit details

     Copy full SHA for 7fedff2

     View code at this pointBrowse repository at this point
3. Commits on Sep 3, 2026

   • Post-release preparation for codeql-cli-2.27.0

     

     github-actions[bot]

     committed
     cb62641View commit details

     Copy full SHA for cb62641

     View code at this pointBrowse repository at this point

   • Release preparation for version 2.27.0

     

     github-actions[bot]

     committed
     da93726View commit details

     Copy full SHA for da93726

     View code at this pointBrowse repository at this point
4. Commits on Aug 21, 2026

   • Post-release preparation for codeql-cli-2.26.4

     

     github-actions[bot]

     committed
     dbb6921View commit details

     Copy full SHA for dbb6921

     View code at this pointBrowse repository at this point
5. Commits on Aug 20, 2026

   • Release preparation for version 2.26.4

     

     github-actions[bot]

     committed
     2bbab1bView commit details

     Copy full SHA for 2bbab1b

     View code at this pointBrowse repository at this point
6. Commits on Aug 12, 2026

   • Merge branch 'main' into fix-actions-unpinned-reusable-workflows

     theinfosecguy

     authored
     ed82161View commit details

     Copy full SHA for ed82161

     View code at this pointBrowse repository at this point

   • Simplify composite action lookup

     theinfosecguy

     committed
     710a753View commit details

     Copy full SHA for 710a753

     View code at this pointBrowse repository at this point
7. Commits on Aug 6, 2026

   • Post-release preparation for codeql-cli-2.26.3

     

     github-actions[bot]

     committed
     47d6b11View commit details

     Copy full SHA for 47d6b11

     View code at this pointBrowse repository at this point

   • Release preparation for version 2.26.3

     

     github-actions[bot]

     committed
     fae4a92View commit details

     Copy full SHA for fae4a92

     View code at this pointBrowse repository at this point
8. Commits on Aug 5, 2026

   • Detect unpinned reusable workflows

     theinfosecguy

     committed
     d85deefView commit details

     Copy full SHA for d85deef

     View code at this pointBrowse repository at this point
9. Commits on Aug 4, 2026

   • Merge branch 'main' of https://github.com/github/codeql into fix/actions-cache-poisoning-cache-write-access

     JarLob

     committed
     6a2d7beView commit details

     Copy full SHA for 6a2d7be

     View code at this pointBrowse repository at this point

   • Merge pull request #22274 from JarLob/remove/actions-self-hosted-runner-query

     Show description for 2f2b4c8
     aschackmull

     authored
     2f2b4c8View commit details

     Copy full SHA for 2f2b4c8

     View code at this pointBrowse repository at this point
10. Commits on Aug 3, 2026

    • Actions: Remove experimental self-hosted runner query

      Show description for 7a7dae0
      JarLob

      committed
      7a7dae0View commit details

      Copy full SHA for 7a7dae0

      View code at this pointBrowse repository at this point
11. Commits on Jul 31, 2026

    • Add change note

      JarLob

      committed
      caf91c9View commit details

      Copy full SHA for caf91c9

      View code at this pointBrowse repository at this point

    • Reworded the misleading 'Unprivileged'

      JarLob

      committed
      c40fe85View commit details

      Copy full SHA for c40fe85

      View code at this pointBrowse repository at this point

    • Merge github/main into fix/actions-cache-poisoning-cache-write-access

      Show description for 827af90
      JarLob

      committed
      827af90View commit details

      Copy full SHA for 827af90

      View code at this pointBrowse repository at this point

    • Merge remote-tracking branch 'github/main' into fix/actions-output-clobbering-regex

      Show description for c9727af
      JarLob

      committed
      c9727afView commit details

      Copy full SHA for c9727af

      View code at this pointBrowse repository at this point

    • Merge pull request #22243 from JarLob/improve/actions-untrusted-checkout-source-link

      Show description for ddb7e3f
      aschackmull

      authored
      ddb7e3fView commit details

      Copy full SHA for ddb7e3f

      View code at this pointBrowse repository at this point

    • Merge pull request #22235 from JarLob/fix/actions-envvar-injection-precision

      Show description for 0fb9774
      aschackmull

      authored
      0fb9774View commit details

      Copy full SHA for 0fb9774

      View code at this pointBrowse repository at this point

    • Merge branch 'main' into improve/actions-untrusted-checkout-source-link

      JarLob

      authored
      a44c25cView commit details

      Copy full SHA for a44c25c

      View code at this pointBrowse repository at this point

    • Apply batched suggestions from code review

      Show description for 9d147bc
      

      JarLob

      and

      aschackmull

      authored
      9d147bcView commit details

      Copy full SHA for 9d147bc

      View code at this pointBrowse repository at this point

    • Delay envvar event-name correlation

      JarLob

      committed
      de68881View commit details

      Copy full SHA for de68881

      View code at this pointBrowse repository at this point

    • Fix FP in envvar injection

      JarLob

      committed
      26da3e7View commit details

      Copy full SHA for 26da3e7

      View code at this pointBrowse repository at this point