This is an automated email from the ASF dual-hosted git repository.
github-bot pushed a commit to branch 2.x
in repository https://gitbox.apache.org/repos/asf/logging-log4j2.git
The following commit(s) were added to refs/heads/2.x by this push:
new 24f4fa9902 Update `github/codeql-action` to version `2.22.6` (#1971)
24f4fa9902 is described below
commit 24f4fa990278a2346e8345d8fd4c09246451bd34
Author: ASF Logging Services RM <[email protected]>
AuthorDate: Wed Nov 15 11:14:39 2023 +0000
Update `github/codeql-action` to version `2.22.6` (#1971)
---
.github/workflows/scorecards-analysis.yml | 2 +-
src/changelog/.2.x.x/update_github_codeql_action.xml | 8 ++++++++
src/site/_release-notes/_2.x.x.adoc | 1 +
3 files changed, 10 insertions(+), 1 deletion(-)
diff --git a/.github/workflows/scorecards-analysis.yml
b/.github/workflows/scorecards-analysis.yml
index 3b97c11208..0ea76e4455 100644
--- a/.github/workflows/scorecards-analysis.yml
+++ b/.github/workflows/scorecards-analysis.yml
@@ -66,6 +66,6 @@ jobs:
retention-days: 5
- name: "Upload to code-scanning"
- uses:
github/codeql-action/upload-sarif@74483a38d39275f33fcff5f35b679b5ca4a26a99 #
2.1.22
+ uses:
github/codeql-action/upload-sarif@689fdc5193eeb735ecb2e52e819e3382876f93f4 #
2.1.22
with:
sarif_file: results.sarif
diff --git a/src/changelog/.2.x.x/update_github_codeql_action.xml
b/src/changelog/.2.x.x/update_github_codeql_action.xml
new file mode 100644
index 0000000000..134388dd01
--- /dev/null
+++ b/src/changelog/.2.x.x/update_github_codeql_action.xml
@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<entry xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+ xmlns="http://logging.apache.org/log4j/changelog"
+ xsi:schemaLocation="http://logging.apache.org/log4j/changelog
https://logging.apache.org/log4j/changelog-0.1.2.xsd"
+ type="changed">
+ <issue id="1971" link="https://github.com/apache/logging-log4j2/pull/1971"/>
+ <description format="asciidoc">Update `github/codeql-action` to version
`2.22.6`</description>
+</entry>
diff --git a/src/site/_release-notes/_2.x.x.adoc
b/src/site/_release-notes/_2.x.x.adoc
index 492bff330d..bca681eb14 100644
--- a/src/site/_release-notes/_2.x.x.adoc
+++ b/src/site/_release-notes/_2.x.x.adoc
@@ -56,6 +56,7 @@ The module name of four bridges (`log4j-slf4j-impl`,
`log4j-slf4j2-impl`, `log4j
* Update `com.h2database:h2` to version `2.2.224`
(https://github.com/apache/logging-log4j2/pull/1880[1880])
* Update `de.flapdoodle.embed:de.flapdoodle.embed.mongo` to version `4.9.0`
(https://github.com/apache/logging-log4j2/pull/1945[1945])
* Update `de.flapdoodle.reverse:de.flapdoodle.reverse` to version `1.7.0`
(https://github.com/apache/logging-log4j2/pull/1965[1965])
+* Update `github/codeql-action` to version `2.22.6`
(https://github.com/apache/logging-log4j2/pull/1971[1971])
* Update `io.netty:netty-bom` to version `4.1.101.Final`
(https://github.com/apache/logging-log4j2/pull/1960[1960])
* Update `net.bytebuddy:byte-buddy` to version `1.14.9`
(https://github.com/apache/logging-log4j2/pull/1891[1891])
* Update `org.eclipse.persistence:org.eclipse.persistence.jpa` to version
`2.7.13` (https://github.com/apache/logging-log4j2/pull/1900[1900])