Merge pull request #943 from crazy-max/codeql

ci: update codeql workflow

.github/workflows/codeql.yml

@@ -5,46 +5,41 @@ on:
     branches:
       - 'master'
       - 'releases/v*'
-    paths:
-      - '.github/workflows/codeql.yml'
-      - 'dist/**'
-      - 'src/**'
   pull_request:
-    paths:
-      - '.github/workflows/codeql.yml'
-      - 'dist/**'
-      - 'src/**'
 
 permissions:
   actions: read
   contents: read
   security-events: write
 
+env:
+  NODE_VERSION: "24"
+
 jobs:
   analyze:
     runs-on: ubuntu-latest
-    strategy:
-      fail-fast: false
-      matrix:
-        language:
-          - javascript-typescript
     steps:
       -
         name: Checkout
         uses: actions/checkout@v6
+      -
+        name: Enable corepack
+        run: |
+          corepack enable
+          yarn --version
+      -
+        name: Set up Node
+        uses: actions/setup-node@v6
+        with:
+          node-version: ${{ env.NODE_VERSION }}
       -
         name: Initialize CodeQL
         uses: github/codeql-action/init@v4
         with:
-          languages: ${{ matrix.language }}
+          languages: javascript-typescript
-          config: |
+          build-mode: none
-            paths:
-              - src
-      -
-        name: Autobuild
-        uses: github/codeql-action/autobuild@v4
       -
         name: Perform CodeQL Analysis
         uses: github/codeql-action/analyze@v4
         with:
-          category: "/language:${{matrix.language}}"
+          category: "/language:javascript-typescript"

.github/workflows/update-dist.yml

@@ -14,7 +14,7 @@ jobs:
       -
         name: GitHub auth token from GitHub App
         id: docker-read-app
-        uses: actions/create-github-app-token@v2
+        uses: actions/create-github-app-token@v3
         with:
           app-id: ${{ secrets.GHACTIONS_REPO_WRITE_APP_ID }}
           private-key: ${{ secrets.GHACTIONS_REPO_WRITE_APP_PRIVATE_KEY }}

package.json

@@ -25,7 +25,7 @@
     "@actions/core": "^3.0.0",
     "@aws-sdk/client-ecr": "^3.1000.0",
     "@aws-sdk/client-ecr-public": "^3.1000.0",
-    "@docker/actions-toolkit": "^0.81.0",
+    "@docker/actions-toolkit": "^0.79.0",
     "http-proxy-agent": "^7.0.2",
     "https-proxy-agent": "^7.0.6",
     "js-yaml": "^4.1.1"

yarn.lock

@@ -877,9 +877,9 @@ __metadata:
   languageName: node
   linkType: hard
 
-"@docker/actions-toolkit@npm:^0.81.0":
+"@docker/actions-toolkit@npm:^0.79.0":
-  version: 0.81.0
+  version: 0.79.0
-  resolution: "@docker/actions-toolkit@npm:0.81.0"
+  resolution: "@docker/actions-toolkit@npm:0.79.0"
   dependencies:
     "@actions/artifact": "npm:^6.2.0"
     "@actions/cache": "npm:^6.0.0"
@@ -903,7 +903,7 @@ __metadata:
     semver: "npm:^7.7.4"
     tar-stream: "npm:^3.1.7"
     tmp: "npm:^0.2.5"
-  checksum: 10/d1e975337fede15244d4968dbc5a7c0b6e169df4082b61573d6774965ba3d12a741fbb552261d4d99643a325078a595b6c192b8e960a518ae087033f6b12c74d
+  checksum: 10/d64849ba49b2b59e2e93237a70be03fd7c43b1f7f01bac3f7557616ba5f59be785cb12a273bbb6a71c1e0d959f1bc6c673111b587c57bd2d6da105dcc500921a
   languageName: node
   linkType: hard
 
@@ -3145,7 +3145,7 @@ __metadata:
     "@actions/core": "npm:^3.0.0"
     "@aws-sdk/client-ecr": "npm:^3.1000.0"
     "@aws-sdk/client-ecr-public": "npm:^3.1000.0"
-    "@docker/actions-toolkit": "npm:^0.81.0"
+    "@docker/actions-toolkit": "npm:^0.79.0"
     "@eslint/js": "npm:^9.39.3"
     "@types/js-yaml": "npm:^4.0.9"
     "@types/node": "npm:^24.11.0"