Merge pull request #2721 from github/update-v3.28.5-01f001931

Merge main into releases/v3

Author: dbartol

.github/workflows/query-filters.yml

@@ -20,6 +20,8 @@ jobs:
     name: Query Filters Tests
     timeout-minutes: 45
     runs-on: ubuntu-latest
+    permissions:
+      contents: read # This permission is needed to allow the GitHub Actions workflow to read the contents of the repository.
     steps:
     - name: Check out repository
       uses: actions/checkout@v4

CHANGELOG.md

@@ -2,6 +2,10 @@
 
 See the [releases page](https://github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs.
 
+## 3.28.5 - 24 Jan 2025
+
+- Update default CodeQL bundle version to 2.20.3. [#2717](https://github.com/github/codeql-action/pull/2717)
+
 ## 3.28.4 - 23 Jan 2025
 
 No user facing changes.

lib/defaults.json

@@ -1,6 +1,6 @@
 {
-    "bundleVersion": "codeql-bundle-v2.20.2",
-    "cliVersion": "2.20.2",
-    "priorBundleVersion": "codeql-bundle-v2.20.1",
-    "priorCliVersion": "2.20.1"
+    "bundleVersion": "codeql-bundle-v2.20.3",
+    "cliVersion": "2.20.3",
+    "priorBundleVersion": "codeql-bundle-v2.20.2",
+    "priorCliVersion": "2.20.2"
 }

node_modules/.package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "codeql",
-  "version": "3.28.4",
+  "version": "3.28.5",
   "private": true,
   "description": "CodeQL action",
   "scripts": {

package-lock.json

@@ -1,6 +1,6 @@
 {
-  "bundleVersion": "codeql-bundle-v2.20.2",
-  "cliVersion": "2.20.2",
-  "priorBundleVersion": "codeql-bundle-v2.20.1",
-  "priorCliVersion": "2.20.1"
+  "bundleVersion": "codeql-bundle-v2.20.3",
+  "cliVersion": "2.20.3",
+  "priorBundleVersion": "codeql-bundle-v2.20.2",
+  "priorCliVersion": "2.20.2"
 }