From c98271eca28faaceae6b197b4e5d2a3a7991cc5a Mon Sep 17 00:00:00 2001 From: "Michael B. Gale" Date: Wed, 14 Oct 2026 15:57:53 +0100 Subject: [PATCH 1/3] Add change note for #4148 --- unreleased-change-notes/analyze-checkout-path-validation.md | 1 + 1 file changed, 1 insertion(+) create mode 100644 unreleased-change-notes/analyze-checkout-path-validation.md diff --git a/unreleased-change-notes/analyze-checkout-path-validation.md b/unreleased-change-notes/analyze-checkout-path-validation.md new file mode 100644 index 0000000000..4704376a47 --- /dev/null +++ b/unreleased-change-notes/analyze-checkout-path-validation.md @@ -0,0 +1 @@ +- The `codeql-action/analyze` step now validates that a correct argument for the `checkout_path` input has been provided. The `checkout_path` input must be set to the path where the repository that is being analyzed is checked out at on the runner, if that path is something other than the workspace root. If the path does not point to a repository checkout or is different from the path that was used by `codeql-action/init`, then the CodeQL Action now produces a warning. [#4148](https://github.com/github/codeql-action/pull/4148) From c8bd0195fb2ec9584b1bd6faf9ff5e2983c63d82 Mon Sep 17 00:00:00 2001 From: "Michael B. Gale" Date: Wed, 14 Oct 2026 16:03:37 +0100 Subject: [PATCH 2/3] Add change note for #4198 --- unreleased-change-notes/start-proxy-setup-logic.md | 1 + 1 file changed, 1 insertion(+) create mode 100644 unreleased-change-notes/start-proxy-setup-logic.md diff --git a/unreleased-change-notes/start-proxy-setup-logic.md b/unreleased-change-notes/start-proxy-setup-logic.md new file mode 100644 index 0000000000..fc3582843e --- /dev/null +++ b/unreleased-change-notes/start-proxy-setup-logic.md @@ -0,0 +1 @@ +- The `codeql-action/start-proxy` step that is used in Code Scanning Default Setup now finds CodeQL releases using the same logic as `codeql-action/init`. This primarily benefits customers who are using GitHub instances other than `github.com` where the `codeql-action/start-proxy` step may previously have been unable to locate recent releases and ended up using outdated versions of the private registry authentication proxy as a result. [#4198](https://github.com/github/codeql-action/pull/4198) From a897ed5c2eeeb4862bf224c65f62a8b2478eb581 Mon Sep 17 00:00:00 2001 From: "Michael B. Gale" Date: Wed, 14 Oct 2026 16:05:40 +0100 Subject: [PATCH 3/3] Add change note for #4206 --- unreleased-change-notes/restore-keys.md | 1 + 1 file changed, 1 insertion(+) create mode 100644 unreleased-change-notes/restore-keys.md diff --git a/unreleased-change-notes/restore-keys.md b/unreleased-change-notes/restore-keys.md new file mode 100644 index 0000000000..3612c1b607 --- /dev/null +++ b/unreleased-change-notes/restore-keys.md @@ -0,0 +1 @@ +- Resolved an issue with third-party caching implementations that prevented caches from being restored correctly. [#4206](https://github.com/github/codeql-action/pull/4206)