Merge releases/v4 into releases/v3 by github-actions[bot] · Pull Request #3481 · github/codeql-action

github-actions · 2026-02-13T11:56:42Z

Merging 9e907b5 into releases/v3.

Conductor for this PR is @henrymercer.

Contains the following pull requests:

Please do the following:

Ensure the CHANGELOG displays the correct version and date.
Ensure the CHANGELOG includes all relevant, user-facing changes since the last release.
Check that there are not any unexpected commits being merged into the releases/v3 branch.
Ensure the docs team is aware of any documentation changes that need to be released.
Remove and re-add the "Rebuild" label to the PR to trigger just this workflow.
Wait for the "Rebuild" workflow to push a commit updating the distribution files.
Mark the PR as ready for review to trigger the full set of PR checks.
Approve and merge this PR. Make sure Create a merge commit is selected rather than Squash and merge or Rebase and merge.

Disable TypeScript `noUnusedLocals` and `noUnusedParameters` options, already covered by eslint

…main-45cbd0c6

Mergeback v4.32.2 refs/heads/releases/v4 into main

Bumps the npm-minor group with 2 updates: [@eslint/compat](https://github.com/eslint/rewrite/tree/HEAD/packages/compat) and [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc). Updates `@eslint/compat` from 2.0.1 to 2.0.2 - [Release notes](https://github.com/eslint/rewrite/releases) - [Changelog](https://github.com/eslint/rewrite/blob/main/packages/compat/CHANGELOG.md) - [Commits](https://github.com/eslint/rewrite/commits/compat-v2.0.2/packages/compat) Updates `eslint-plugin-jsdoc` from 62.4.1 to 62.5.0 - [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases) - [Commits](gajus/eslint-plugin-jsdoc@v62.4.1...v62.5.0) --- updated-dependencies: - dependency-name: "@eslint/compat" dependency-version: 2.0.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor - dependency-name: eslint-plugin-jsdoc dependency-version: 62.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps the actions-minor group with 1 update in the /.github/workflows directory: [ruby/setup-ruby](https://github.com/ruby/setup-ruby). Updates `ruby/setup-ruby` from 1.286.0 to 1.288.0 - [Release notes](https://github.com/ruby/setup-ruby/releases) - [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb) - [Commits](ruby/setup-ruby@90be115...09a7688) --- updated-dependencies: - dependency-name: ruby/setup-ruby dependency-version: 1.288.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-minor ... Signed-off-by: dependabot[bot] <support@github.com>

Retry API authentication errors since these can be transient

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Avoid requesting features in CCR

…t-entry Add changelog entry for #3466

Merge main into releases/v4

This reverts commit 6b68dd5.

This reverts commit bb15952.

….3-9e907b5e6

github-actions · 2026-02-13T12:01:10Z

Pushed a commit to rebuild the Action. Please mark the PR as ready for review to trigger PR checks.

Copilot

Pull request overview

This PR merges changes from releases/v4 into releases/v3, bumping the v3 release to 3.32.3 and bringing in updates around feature flags, API retry behavior, and start-proxy private registry connectivity checks.

Changes:

Bump release version to 3.32.3 and add a changelog entry.
Add optional (FF-gated) private registry reachability checks to the start-proxy action.
Adjust feature-flag behavior for CCR/GHES and update API retry behavior; refresh dependencies and CI Ruby action pin.

Reviewed changes

Copilot reviewed 25 out of 28 changed files in this pull request and generated 29 comments.

Show a summary per file

File	Description
tsconfig.json	Disables TS unused locals/params checks (relying on eslint).
src/start-proxy/types.ts	Introduces shared types for registry credentials and address handling.
src/start-proxy/reachability.ts	Adds reachability checker implementation using `https-proxy-agent`.
src/start-proxy/reachability.test.ts	Adds unit tests for reachability checking and logging.
src/start-proxy.ts	Refactors credential parsing/validation to use new types and validates required fields.
src/start-proxy.test.ts	Adds coverage for missing `type` and updates credential string tests.
src/start-proxy-action.ts	Initializes feature flags and adds FF-gated registry reachability checks.
src/feature-flags.ts	Adds new feature flag and skips remote FF API calls in CCR; updates logging.
src/feature-flags.test.ts	Adds CCR defaulting test and refactors repeated assertions.
src/api-client.ts	Tweaks Octokit retry configuration to retry auth-like failures.
src/api-client.test.ts	Updates expected Octokit client options for retry configuration.
pr-checks/checks/rubocop-multi-language.yml	Updates `ruby/setup-ruby` pin to v1.288.0.
package.json	Bumps version to 3.32.3 and adds `https-proxy-agent`; updates dev deps.
package-lock.json	Updates lockfile for dependency changes (but version metadata needs alignment).
CHANGELOG.md	Adds 3.32.3 release entry describing the start-proxy connectivity checks.
.github/workflows/__rubocop-multi-language.yml	Generated workflow update for `ruby/setup-ruby` pin.
lib/upload-sarif-action.js	Generated build output update (not reviewed).
lib/upload-sarif-action-post.js	Generated build output update (not reviewed).
lib/upload-lib.js	Generated build output update (not reviewed).
lib/start-proxy-action-post.js	Generated build output update (not reviewed).
lib/setup-codeql-action.js	Generated build output update (not reviewed).
lib/resolve-environment-action.js	Generated build output update (not reviewed).
lib/init-action.js	Generated build output update (not reviewed).
lib/init-action-post.js	Generated build output update (not reviewed).
lib/autobuild-action.js	Generated build output update (not reviewed).
lib/analyze-action.js	Generated build output update (not reviewed).
lib/analyze-action-post.js	Generated build output update (not reviewed).

Copilot · 2026-02-13T12:10:33Z

src/start-proxy-action.ts

    .filter((credential) => credential.url !== undefined)
    .map((credential) => ({
      type: credential.type,
      url: credential.url,
    }));


startProxy builds registry_urls (and the returned ProxyInfo.registries) by filtering to credentials with a defined url. Credentials configured with only host will be excluded from the new reachability checks, so they will never be tested even when the feature flag is enabled. Consider including host-only registries in ProxyInfo (and/or proxy_urls) so checkConnections can attempt them (it already logs and skips invalid/non-URL addresses).

Suggested change

.filter((credential) => credential.url !== undefined)

.map((credential) => ({

type: credential.type,

url: credential.url,

}));

.filter((credential) => credential.url !== undefined || credential.host !== undefined)

.map((credential) => {

// Prefer an explicit URL if provided; otherwise, derive one from the host.

const url = credential.url ?? (credential.host ? `https://${credential.host}` : undefined);

return {

type: credential.type,

url,

};

});

Copilot · 2026-02-13T12:10:34Z

lib/start-proxy-action.js

The value assigned to MatchKind here is unused.

Copilot · 2026-02-13T12:10:34Z

lib/start-proxy-action.js

The value assigned to CacheFilename here is unused.

Copilot · 2026-02-13T12:10:35Z

lib/start-proxy-action.js

The value assigned to CompressionMethod here is unused.

Copilot · 2026-02-13T12:10:35Z

lib/start-proxy-action.js

The value assigned to ArchiveToolType here is unused.

Copilot · 2026-02-13T12:10:39Z

lib/start-proxy-action.js

This use of variable 'CacheFilename' always evaluates to false.

Copilot · 2026-02-13T12:10:39Z

lib/start-proxy-action.js

This use of variable 'CompressionMethod' always evaluates to false.

Copilot · 2026-02-13T12:10:39Z

lib/start-proxy-action.js

This use of variable 'ArchiveToolType' always evaluates to false.

Copilot · 2026-02-13T12:10:40Z

lib/start-proxy-action.js

This use of variable 'KnownLanguage' always evaluates to false.

Copilot · 2026-02-13T12:10:40Z

lib/start-proxy-action.js

This use of variable 'AnalysisKind' always evaluates to false.

github-actions bot and others added 30 commits February 5, 2026 17:09

Update changelog and version after v4.32.2

5a82333

Disable noUnusedLocals and noUnusedParameters

46c411a

Make FFs available in start-proxy action

d2901f5

Merge pull request #3464 from github/mbg/disable-ts-unused-checks

9b3a0d2

Disable TypeScript `noUnusedLocals` and `noUnusedParameters` options, already covered by eslint

Merge remote-tracking branch 'origin/main' into mergeback/v4.32.2-to-…

481be99

…main-45cbd0c6

Rebuild

4b8e16f

Merge pull request #3462 from github/mergeback/v4.32.2-to-main-45cbd0c6

b13d724

Mergeback v4.32.2 refs/heads/releases/v4 into main

Merge branch 'main' into mbg/start-proxy/test-connections

310177a

Move Credential type

93302bc

Break up Credential type into two interfaces

70eae15

Add explicit dependency on https-proxy-agent

b030333

Add ProxyInfo type and return from startProxy

c4717c9

Add StartProxyConnectionChecks feature

c7eff3f

Test connections to registries, if FF is enabled

01ee641

Remove superflous log message

9f2f6d0

Add missing else

700fc11

Type that registries must have either an url or a host

4d44b57

Add a 5s timeout to requests

5135700

Remove superfluous error handling details

c4b0f60

Remove unnecessary test assertions

27b3b65

Fix outdated comment

0387f55

Rename types

4d0bec1

Require validated Credential for credentialToStr

bd36637

Add test for missing type

e114998

Remove unused logger in NetworkReachabilityBackend

555ee17

Add timeout event handler

2b5b614

Rebuild

be578c7

Rebuild

d736445

henrymercer and others added 13 commits February 12, 2026 16:19

Retry API authentication errors since these can be transient

43b46a1

Avoid requesting features in CCR

876cecb

Merge pull request #3475 from github/henrymercer/retry-auth-errors

2d6b98c

Retry API authentication errors since these can be transient

Apply suggestion from @Copilot

05bca54

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Add changelog entry for #3466

be75dd9

Merge pull request #3476 from github/henrymercer/retry-auth-errors

9658e23

Avoid requesting features in CCR

Merge pull request #3478 from github/mbg/changelog/add-connection-tes…

4bf6fa4

…t-entry Add changelog entry for #3466

Update changelog for v4.32.3

1814c9f

Merge pull request #3479 from github/update-v4.32.3-4bf6fa4e2

9e907b5

Merge main into releases/v4

Revert "Update version and changelog for v3.32.2"

e2a90d3

This reverts commit 6b68dd5.

Revert "Rebuild"

f5e6f52

This reverts commit bb15952.

Merge remote-tracking branch 'origin/releases/v4' into backport-v3.32…

e127ec2

….3-9e907b5e6

Update version and changelog for v3.32.3

676a1ce

github-actions bot added the Rebuild Re-transpile JS & re-generate workflows label Feb 13, 2026

github-actions bot assigned henrymercer Feb 13, 2026

henrymercer added Rebuild Re-transpile JS & re-generate workflows and removed Rebuild Re-transpile JS & re-generate workflows labels Feb 13, 2026

github-actions bot removed the Rebuild Re-transpile JS & re-generate workflows label Feb 13, 2026

Rebuild

70a71a5

henrymercer marked this pull request as ready for review February 13, 2026 12:01

henrymercer requested a review from a team as a code owner February 13, 2026 12:01

Copilot AI review requested due to automatic review settings February 13, 2026 12:01

henrymercer approved these changes Feb 13, 2026

View reviewed changes

github-actions bot added the size/L May be hard to review label Feb 13, 2026

henrymercer enabled auto-merge February 13, 2026 12:02

Copilot started reviewing on behalf of henrymercer February 13, 2026 12:02 View session

Copilot AI reviewed Feb 13, 2026

View reviewed changes

henrymercer merged commit f5c2471 into releases/v3 Feb 13, 2026
249 checks passed

henrymercer deleted the backport-v3.32.3-9e907b5e6 branch February 13, 2026 12:21

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Merge releases/v4 into releases/v3#3481

Merge releases/v4 into releases/v3#3481
henrymercer merged 48 commits intoreleases/v3from
backport-v3.32.3-9e907b5e6

github-actions bot commented Feb 13, 2026

Uh oh!

github-actions bot commented Feb 13, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

Copilot AI Feb 13, 2026

Uh oh!

Copilot AI Feb 13, 2026

Uh oh!

Copilot AI Feb 13, 2026

Uh oh!

Copilot AI Feb 13, 2026

Uh oh!

Copilot AI Feb 13, 2026

Uh oh!

Copilot AI Feb 13, 2026

Uh oh!

Copilot AI Feb 13, 2026

Uh oh!

Copilot AI Feb 13, 2026

Uh oh!

Copilot AI Feb 13, 2026

Uh oh!

Copilot AI Feb 13, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

github-actions bot commented Feb 13, 2026

Uh oh!

github-actions bot commented Feb 13, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Copilot AI Feb 13, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 13, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 13, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 13, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 13, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 13, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 13, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 13, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 13, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 13, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants