Merge main into releases/v4 #3417

github-actions · 2026-01-23T13:00:32Z

Merging 1601acf into releases/v4.

Conductor for this PR is @mbg.

Contains the following pull requests:

Please do the following:

Ensure the CHANGELOG displays the correct version and date.
Ensure the CHANGELOG includes all relevant, user-facing changes since the last release.
Check that there are not any unexpected commits being merged into the releases/v4 branch.
Ensure the docs team is aware of any documentation changes that need to be released.
Mark the PR as ready for review to trigger the full set of PR checks.
Approve and merge this PR. Make sure Create a merge commit is selected rather than Squash and merge or Rebase and merge.
Merge the mergeback PR that will automatically be created once this PR is merged.
Merge all backport PRs to older release branches, that will automatically be created once this PR is merged.

Mergeback v4.31.10 refs/heads/releases/v4 into main

Bumps the npm-minor group with 7 updates: | Package | From | To | | --- | --- | --- | | [@actions/artifact](https://github.com/actions/toolkit/tree/HEAD/packages/artifact) | `5.0.1` | `5.0.2` | | [@actions/cache](https://github.com/actions/toolkit/tree/HEAD/packages/cache) | `5.0.1` | `5.0.2` | | [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) | `2.0.1` | `2.0.2` | | [@actions/http-client](https://github.com/actions/toolkit/tree/HEAD/packages/http-client) | `3.0.0` | `3.0.1` | | [@eslint/compat](https://github.com/eslint/rewrite/tree/HEAD/packages/compat) | `2.0.0` | `2.0.1` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.52.0` | `8.53.0` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.52.0` | `8.53.0` | Updates `@actions/artifact` from 5.0.1 to 5.0.2 - [Changelog](https://github.com/actions/toolkit/blob/main/packages/artifact/RELEASES.md) - [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/artifact) Updates `@actions/cache` from 5.0.1 to 5.0.2 - [Changelog](https://github.com/actions/toolkit/blob/main/packages/cache/RELEASES.md) - [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/cache) Updates `@actions/core` from 2.0.1 to 2.0.2 - [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md) - [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core) Updates `@actions/http-client` from 3.0.0 to 3.0.1 - [Changelog](https://github.com/actions/toolkit/blob/main/packages/http-client/RELEASES.md) - [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/http-client) Updates `@eslint/compat` from 2.0.0 to 2.0.1 - [Release notes](https://github.com/eslint/rewrite/releases) - [Changelog](https://github.com/eslint/rewrite/blob/main/packages/compat/CHANGELOG.md) - [Commits](https://github.com/eslint/rewrite/commits/compat-v2.0.1/packages/compat) Updates `@typescript-eslint/eslint-plugin` from 8.52.0 to 8.53.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.53.0/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 8.52.0 to 8.53.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.53.0/packages/parser) --- updated-dependencies: - dependency-name: "@actions/artifact" dependency-version: 5.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor - dependency-name: "@actions/cache" dependency-version: 5.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor - dependency-name: "@actions/core" dependency-version: 2.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor - dependency-name: "@actions/http-client" dependency-version: 3.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor - dependency-name: "@eslint/compat" dependency-version: 2.0.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor - dependency-name: "@typescript-eslint/eslint-plugin" dependency-version: 8.53.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor - dependency-name: "@typescript-eslint/parser" dependency-version: 8.53.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc) from 61.5.0 to 62.0.0. - [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases) - [Commits](gajus/eslint-plugin-jsdoc@v61.5.0...v62.0.0) --- updated-dependencies: - dependency-name: eslint-plugin-jsdoc dependency-version: 62.0.0 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [@actions/tool-cache](https://github.com/actions/toolkit/tree/HEAD/packages/tool-cache) from 2.0.2 to 3.0.0. - [Changelog](https://github.com/actions/toolkit/blob/main/packages/tool-cache/RELEASES.md) - [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/tool-cache) --- updated-dependencies: - dependency-name: "@actions/tool-cache" dependency-version: 3.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps the actions-minor group with 1 update in the /.github/workflows directory: [ruby/setup-ruby](https://github.com/ruby/setup-ruby). Updates `ruby/setup-ruby` from 1.278.0 to 1.281.0 - [Release notes](https://github.com/ruby/setup-ruby/releases) - [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb) - [Commits](ruby/setup-ruby@4c24fa5...675dd7b) --- updated-dependencies: - dependency-name: ruby/setup-ruby dependency-version: 1.281.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-minor ... Signed-off-by: dependabot[bot] <support@github.com>

…thub/workflows/actions-minor-c79fd65a81 Bump ruby/setup-ruby from 1.278.0 to 1.281.0 in /.github/workflows in the actions-minor group across 1 directory

…tool-cache-3.0.0 Bump @actions/tool-cache from 2.0.2 to 3.0.0

…r-70139cb906 Bump the npm-minor group with 7 updates

…lugin-jsdoc-62.0.0 Bump eslint-plugin-jsdoc from 61.5.0 to 62.0.0

Bumps [@actions/github](https://github.com/actions/toolkit/tree/HEAD/packages/github) from 6.0.1 to 7.0.0. - [Changelog](https://github.com/actions/toolkit/blob/main/packages/github/RELEASES.md) - [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/github) --- updated-dependencies: - dependency-name: "@actions/github" dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

The analysis key already tells us this under normal conditions

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.21 to 4.17.23. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.21...4.17.23) --- updated-dependencies: - dependency-name: lodash dependency-version: 4.17.23 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

Bump tar from 7.4.3 to 7.5.6

….17.23 Bump lodash from 4.17.21 to 4.17.23

Address missing telemetry at the start of Actions

mbg and others added 30 commits November 19, 2025 15:35

Add function to query git for all generated files

1512f40

Add isCCR helper, and update isDefaultSetup

3eaf000

Add IgnoreGeneratedFiles FF

846f859

Add generated files to paths-ignore, if FF is enabled

b4db382

Add tools feature for codeql database bundle --include

d6efb85

Include base database OIDs when bundling database

d32cd4d

Copy OIDs from DB cluster to individual DBs

79939d8

Update changelog and version after v4.31.10

be6e3c4

Rebuild

4672d78

Merge pull request #3395 from github/mergeback/v4.31.10-to-main-cdefb33c

a2d9de6

Mergeback v4.31.10 refs/heads/releases/v4 into main

Rebuild

642eca3

Rebuild

dc7e2ff

Rebuild

39105f3

Rebuild

21c5dc0

Merge pull request #3401 from github/dependabot/github_actions/dot-gi…

fb650c2

…thub/workflows/actions-minor-c79fd65a81 Bump ruby/setup-ruby from 1.278.0 to 1.281.0 in /.github/workflows in the actions-minor group across 1 directory

Merge pull request #3400 from github/dependabot/npm_and_yarn/actions/…

070e2a5

…tool-cache-3.0.0 Bump @actions/tool-cache from 2.0.2 to 3.0.0

Merge pull request #3397 from github/dependabot/npm_and_yarn/npm-mino…

f687ebf

…r-70139cb906 Bump the npm-minor group with 7 updates

Merge pull request #3399 from github/dependabot/npm_and_yarn/eslint-p…

c99e493

…lugin-jsdoc-62.0.0 Bump eslint-plugin-jsdoc from 61.5.0 to 62.0.0

Merge branch 'main' into mbg/ignore-generated

1782089

Use stdin for files to query attributes of

02b2c55

Restore condition for enablement

644e2b9

Add EnvVar constant for analysis key

055e6b6

Drop isDynamic check from isCCR

c7d0b92

The analysis key already tells us this under normal conditions

Add docs comments for listFiles and getGeneratedFiles

5f5c095

Add some logging

9c3f69d

mbg and others added 18 commits January 21, 2026 13:27

Trim whitespace/remove empty lines

dc2428c

Add empty lines to test cases

bc75091

Merge pull request #3318 from github/mbg/ignore-generated

1c4c0b3

Expand try-catch to cover more of Actions

7c72e12

Move config saving within try-catch

b715292

Add reminder to minimise code outside try/catch

14bd767

Add catch-all error reporting for errors that slip through run

229e0cd

Merge pull request #3410 from github/dependabot/npm_and_yarn/tar-7.5.6

5e98e18

Bump tar from 7.4.3 to 7.5.6

Rename to "unhandled"

6bd84b6

Use getErrorMessage in more places

529c266

Differentiate unhandled errors in telemetry

edebb78

Throw if in test mode

91f3460

Omit error from start-proxy Action

28bfb7b

Merge pull request #3414 from github/dependabot/npm_and_yarn/lodash-4…

a8dd5ab

….17.23 Bump lodash from 4.17.21 to 4.17.23

Address review comments

fba7872

Merge pull request #3415 from github/henrymercer/address-telemetry-gap

1601acf

Address missing telemetry at the start of Actions

Update changelog for v4.31.11

9469107

github-actions bot assigned mbg Jan 23, 2026

github-actions bot added the size/XL May be very hard to review label Jan 23, 2026

mbg marked this pull request as ready for review January 23, 2026 13:21

mbg requested a review from a team as a code owner January 23, 2026 13:21

Copilot AI review requested due to automatic review settings January 23, 2026 13:21

Copilot started reviewing on behalf of mbg January 23, 2026 13:21 View session

Add noteworthy changes to changelog

03afde0

mbg force-pushed the update-v4.31.11-1601acf88 branch from 5dc312b to 03afde0 Compare January 23, 2026 13:26

mbg approved these changes Jan 23, 2026

View reviewed changes

mbg merged commit 19b2f06 into releases/v4 Jan 23, 2026
250 checks passed

mbg deleted the update-v4.31.11-1601acf88 branch January 23, 2026 13:51

github-actions bot mentioned this pull request Jan 23, 2026

Merge releases/v4 into releases/v3 #3419

Merged

8 tasks

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Merge main into releases/v4 #3417

Merge main into releases/v4 #3417

github-actions bot commented Jan 23, 2026 •

edited by mbg

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

Merge main into releases/v4 #3417

Merge main into releases/v4 #3417

Conversation

github-actions bot commented Jan 23, 2026 • edited by mbg Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

github-actions bot commented Jan 23, 2026 •

edited by mbg

Loading