chore(deps): update github/codeql-action action to v2.21.9

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
github/codeql-action	action	patch	v2.21.1 -> v2.21.9

---

Release Notes

github/codeql-action (github/codeql-action)

v2.21.9

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

2.21.9 - 27 Sep 2023

• Update default CodeQL bundle version to 2.14.6. #​1897
• We are rolling out a feature in October 2023 that will improve the success rate of C/C++ autobuild. #​1889
• We are rolling out a feature in October 2023 that will provide specific file coverage information for C and C++, Java and Kotlin, and JavaScript and TypeScript. Currently file coverage information for each of these pairs of languages is grouped together. #​1903
• Add a warning to help customers avoid inadvertently analyzing the same CodeQL language in multiple matrix jobs. #​1901

See the full CHANGELOG.md for more information.

v2.21.8

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

2.21.8 - 19 Sep 2023

• Add a deprecation warning for customers using CodeQL version 2.10.4 and earlier. These versions of CodeQL were discontinued on 12 September 2023 alongside GitHub Enterprise Server 3.6, and will be unsupported by the next minor release of the CodeQL Action. #​1884
  • If you are using one of these versions, please update to CodeQL CLI version 2.10.5 or later. For instance, if you have specified a custom version of the CLI using the 'tools' input to the 'init' Action, you can remove this input to use the default version.
  • Alternatively, if you want to continue using a version of the CodeQL CLI between 2.9.5 and 2.10.4, you can replace github/codeql-action/*@​v2 by github/codeql-action/*@​v2.21.7 in your code scanning workflow to ensure you continue using this version of the CodeQL Action.
• Enable the following language aliases when using CodeQL 2.14.4 and later: c-cpp for C/C++ analysis, java-kotlin for Java/Kotlin analysis, and javascript-typescript for JavaScript/TypeScript analysis. #​1883

See the full CHANGELOG.md for more information.

v2.21.7

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

2.21.7 - 14 Sep 2023

• Update default CodeQL bundle version to 2.14.5. #​1882

See the full CHANGELOG.md for more information.

v2.21.6

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

2.21.6 - 13 Sep 2023

• Better error message when there is a failure to determine the merge base of the code to analysis. #​1860
• Improve the calculation of default amount of RAM used for query execution on GitHub Enterprise Server. This now reduces in proportion to the runner's total memory to better account for system memory usage, helping to avoid out-of-memory failures on larger runners. This feature is already available to GitHub.com users. #​1866
• Enable improved file coverage information for GitHub Enterprise Server users. This feature is already available to GitHub.com users. #​1867
• Update default CodeQL bundle version to 2.14.4. #​1873

See the full CHANGELOG.md for more information.

v2.21.5

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

2.21.5 - 28 Aug 2023

• Update default CodeQL bundle version to 2.14.3. #​1845
• Fixed a bug in CodeQL Action 2.21.3 onwards that affected beta support for Project Lombok when analyzing Java. The environment variable CODEQL_EXTRACTOR_JAVA_RUN_ANNOTATION_PROCESSORS will now be respected if it was manually configured in the workflow. #​1844
• Enable support for Kotlin 1.9.20 when running with CodeQL CLI v2.13.4 through v2.14.3. #​1853

See the full CHANGELOG.md for more information.

v2.21.4: CodeQL Bundle v2.21.4

Compare Source

Bundles CodeQL CLI v2.21.4

• (changelog, release)

Includes the following CodeQL language packs from github/codeql@codeql-cli/v2.21.4:

• codeql/actions-queries (changelog, source)
• codeql/actions-all (changelog, source)
• codeql/cpp-queries (changelog, source)
• codeql/cpp-all (changelog, source)
• codeql/csharp-queries (changelog, source)
• codeql/csharp-all (changelog, source)
• codeql/go-queries (changelog, source)
• codeql/go-all (changelog, source)
• codeql/java-queries (changelog, source)
• codeql/java-all (changelog, source)
• codeql/javascript-queries (changelog, source)
• codeql/javascript-all (changelog, source)
• codeql/python-queries (changelog, source)
• codeql/python-all (changelog, source)
• codeql/ruby-queries (changelog, source)
• codeql/ruby-all (changelog, source)
• codeql/rust-queries (changelog, source)
• codeql/rust-all (changelog, source)
• codeql/swift-queries (changelog, source)
• codeql/swift-all (changelog, source)

v2.21.3

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

2.21.3 - 08 Aug 2023

• We are rolling out a feature in August 2023 that will improve multi-threaded performance on larger runners. #​1817
• We are rolling out a feature in August 2023 that adds beta support for Project Lombok when analyzing Java. #​1809
• Reduce disk space usage when downloading the CodeQL bundle. #​1820

See the full CHANGELOG.md for more information.

v2.21.2

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

2.21.2 - 28 Jul 2023

• Update default CodeQL bundle version to 2.14.1. #​1797
• Avoid duplicating the analysis summary within the logs. #​1811

See the full CHANGELOG.md for more information.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Branch automerge failure

This PR was configured for branch automerge. However, this is not possible, so it has been raised as a PR instead.