René's URL Explorer Experiment


Title: Separate CodeQL bundle resolution from installation by henrymercer · Pull Request #4145 · github/codeql-action · GitHub

Open Graph Title: Separate CodeQL bundle resolution from installation by henrymercer · Pull Request #4145 · github/codeql-action

X Title: Separate CodeQL bundle resolution from installation by henrymercer · Pull Request #4145 · github/codeql-action

Description: Pass a resolved bundle source to the downloader instead of separate URL, compression, and version arguments. Keep version reporting in setup and move toolcache cleanup into download orchestration. Bundle selection, cache keys, and local installation behavior are unchanged. Risk assessment For internal use only. Please select the risk level of this change: Low risk: Narrow refactor with no intended behavior changes. Unit tests cover bundle resolution, installation, and toolcache cleanup. Which use cases does this change impact? Workflow types: Advanced setup - Impacts users who have custom CodeQL workflows. Managed - Impacts users with dynamic workflows (Default Setup, Code Quality, ...). Products: Code Scanning - The changes impact analyses when analysis-kinds: code-scanning. Code Quality - The changes impact analyses when analysis-kinds: code-quality. Other first-party - The changes impact other first-party analyses. Environments: Dotcom - Impacts CodeQL workflows on github.com and/or GitHub Enterprise Cloud with Data Residency. GHES - Impacts CodeQL workflows on GitHub Enterprise Server. How did/will you validate this change? Unit tests - I am depending on unit test coverage (i.e. tests in .test.ts files). All 101 tests in the combined setup-codeql, codeql, and tools-download suites passed. TypeScript compilation, runtime generation, and scoped lint also passed. If something goes wrong after this change is released, what are the mitigation and rollback strategies? Rollback - Change can only be disabled by rolling back the release or releasing a new version with a fix. How will you know if something goes wrong after this change is released? Telemetry - I rely on existing telemetry or have made changes to the telemetry. Are there any special considerations for merging or releasing this change? No special considerations - This change can be merged at any time. Merge / deployment checklist Confirm this change is backwards compatible with existing workflows. Consider adding a changelog entry for this change. Confirm the readme and docs have been updated if necessary.

Open Graph Description: Pass a resolved bundle source to the downloader instead of separate URL, compression, and version arguments. Keep version reporting in setup and move toolcache cleanup into download orchestration. ...

X Description: Pass a resolved bundle source to the downloader instead of separate URL, compression, and version arguments. Keep version reporting in setup and move toolcache cleanup into download orchestration. ...

Opengraph URL: https://github.com/github/codeql-action/pull/4145

X: @github

direct link

Domain: github.com

react-profiling0
react-import-mapreact,react-dom,react-dom/client,react-dom/profiling,react-is,react-reconciler,react/compiler-runtime,react/jsx-dev-runtime,react/jsx-runtime,scheduler@d5750093facf
route-pattern/:user_id/:repository/pull/:id/files(.:format)
route-controllerpull_requests
route-actionfiles
fetch-noncev2:f3655fdf-0cc5-4bde-04cf-b52a861217a2
current-catalog-service-hashae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b
request-idDE5A:195268:629710:7FA360:6AED2BF3
html-safe-nonce561019f74c2c17712aea5acc5451acea0b960fa7e7da49afc84b4e220dff51f9
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJERTVBOjE5NTI2ODo2Mjk3MTA6N0ZBMzYwOjZBRUQyQkYzIiwidmlzaXRvcl9pZCI6IjIwMzI1ODcyMzU5MDE5MTAwMDMiLCJyZWdpb25fZWRnZSI6ImlhZCIsInJlZ2lvbl9yZW5kZXIiOiJpYWQifQ==
visitor-hmacf5cc05bbaa1e08804ae226b403a5ee14cecf73701eeb4bc9215b780c750bea0d
hovercard-subject-tagpull_request:4538074700
github-keyboard-shortcutsrepository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///pull_requests/show/files
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/github/codeql-action/pull/4145/files
twitter:imagehttps://avatars.githubusercontent.com/u/14129055?s=400&v=4
twitter:cardsummary_large_image
og:imagehttps://avatars.githubusercontent.com/u/14129055?s=400&v=4
og:image:altPass a resolved bundle source to the downloader instead of separate URL, compression, and version arguments. Keep version reporting in setup and move toolcache cleanup into download orchestration. ...
og:site_nameGitHub
og:typeobject
hostnamegithub.com
expected-hostnamegithub.com
None9d95365dda0576efe9b71f45807595e396bd0ca9286fba5367a05048e6ddf8f2
turbo-cache-controlno-preview
diff-viewunified
go-importgithub.com/github/codeql-action git https://github.com/github/codeql-action.git
octolytics-dimension-user_id9919
octolytics-dimension-user_logingithub
octolytics-dimension-repository_id259445878
octolytics-dimension-repository_nwogithub/codeql-action
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id259445878
octolytics-dimension-repository_network_root_nwogithub/codeql-action
turbo-body-classeslogged-out env-production page-responsive full-width
disable-turbotrue
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
release98b41fa4b5635ceb45a4c54320fced73817ff290
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://github.com/github/codeql-action/pull/4145/files#start-of-content
https://github.com/
Sign inhttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql-action%2Fpull%2F4145%2Ffiles
GitHubRepository hosting, code review, and collaborationhttps://github.com/platform
CopilotAI coding agent for tasks, projects, and automated workhttps://github.com/features/copilot
ActionsCI/CD and automationhttps://github.com/features/actions
Code QualityQuality analysis, fixes, and enforcementhttps://github.com/features/code-quality
CodespacesCloud development environmentshttps://github.com/features/codespaces
Code SecurityVulnerability detection and remediationhttps://github.com/security/advanced-security/code-security
Secret ProtectionSecret scanning and leak preventionhttps://github.com/security/advanced-security/secret-protection
All Featureshttps://github.com/features
Documentationhttps://docs.github.com/en
Traininghttps://learn.github.com/skills
Certificationshttps://learn.github.com/credentials
Build with Copilothttps://github.com/features/ai
Customize Copilothttps://docs.github.com/en/copilot/how-tos/copilot-on-github/customize-copilot/customize-copilot-overview
Integrationshttps://github.com/marketplace
Trending reposhttps://github.com/trending
GitHub Sponsorshttps://github.com/open-source/sponsors
Developer articleshttps://github.com/resources/articles
ChangelogYour source for the latest features, improvements, and fixes across GitHub products, all in one place.https://github.blog/changelog/
Enterpriseshttps://github.com/enterprise
Teamhttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
See all industrieshttps://github.com/solutions/industry
Why GitHubhttps://github.com/why-github
Customer Storieshttps://github.com/customer-stories
Business insightshttps://github.com/solutions/executive-insights
Trust Centerhttps://github.com/trust-center
GitHub Advanced SecurityEnterprise-grade code securityhttps://github.com/security/advanced-security
Copilot for businessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/enterprise/premium-support
Documentationhttps://docs.github.com/en
Resource centerhttps://github.com/resources
Bloghttps://github.blog/
Events & webinarshttps://github.com/resources/events
Community Forumhttps://github.com/orgs/community/discussions
Customer Storieshttps://github.com/customer-stories
Integrationshttps://github.com/marketplace
Customer supporthttps://help.github.com/
Traininghttps://learn.github.com/skills
GitHub Statushttps://www.githubstatus.com/
Abouthttps://github.com/about
Partnershttps://github.com/partners
Changeloghttps://github.blog/changelog/
GitHub UniverseThe event for developers, by developers — talks, workshops, and what’s next for GitHub.https://githubuniverse.com/
Pricinghttps://github.com/pricing
Sign inhttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql-action%2Fpull%2F4145%2Ffiles
Sign uphttps://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fpull_requests%2Fshow%2Ffiles&source=header-repo&source_repo=github%2Fcodeql-action
Reloadhttps://github.com/github/codeql-action/pull/4145/files
Reloadhttps://github.com/github/codeql-action/pull/4145/files
Reloadhttps://github.com/github/codeql-action/pull/4145/files
githubhttps://github.com/github
codeql-actionhttps://github.com/github/codeql-action
Codehttps://github.com/github/codeql-action
Issues165 (165)https://github.com/github/codeql-action/issues
Pull requests41 (41)https://github.com/github/codeql-action/pulls
Actionshttps://github.com/github/codeql-action/actions
Security and quality2 (2)https://github.com/github/codeql-action/security
Insightshttps://github.com/github/codeql-action/pulse
Sign up for GitHub https://github.com/signup?return_to=%2Fgithub%2Fcodeql-action%2Fissues%2Fnew%2Fchoose
terms of servicehttps://docs.github.com/terms
privacy statementhttps://docs.github.com/privacy
Sign inhttps://github.com/login?return_to=%2Fgithub%2Fcodeql-action%2Fissues%2Fnew%2Fchoose
henrymercerhttps://github.com/henrymercer
mainhttps://github.com/github/codeql-action/tree/main
henrymercer/bundle-resolution-prhttps://github.com/github/codeql-action/tree/henrymercer/bundle-resolution-pr
Conversation 25 https://github.com/github/codeql-action/pull/4145
Commits 4 https://github.com/github/codeql-action/pull/4145/commits
Checks 223 https://github.com/github/codeql-action/pull/4145/checks
Files changed https://github.com/github/codeql-action/pull/4145/files
Please reload this pagehttps://github.com/github/codeql-action/pull/4145/files
Separate CodeQL bundle resolution from installation https://github.com/github/codeql-action/pull/4145/files#top
Show all changes 4 commits https://github.com/github/codeql-action/pull/4145/files
1970c45 Separate CodeQL bundle resolution from installation henrymercer Sep 15, 2026 https://github.com/github/codeql-action/pull/4145/commits/1970c450ec62e7ac4fbd7c1e3b02596eaf3994cf
f3e0c87 Clarify resolved bundle handling henrymercer Sep 16, 2026 https://github.com/github/codeql-action/pull/4145/commits/f3e0c870be80dbd6efb827e32fa3bec0e935b4d1
06f4ce7 Isolate bundle cleanup test environments henrymercer Sep 17, 2026 https://github.com/github/codeql-action/pull/4145/commits/06f4ce74f983f882bcc2a705ea96868225f26d7e
41c04be Use initAllState in bundle cleanup tests henrymercer Sep 17, 2026 https://github.com/github/codeql-action/pull/4145/commits/41c04be873c46b18f4fa7705e5eb5452964fc8a7
Clear filters https://github.com/github/codeql-action/pull/4145/files
Please reload this pagehttps://github.com/github/codeql-action/pull/4145/files
Please reload this pagehttps://github.com/github/codeql-action/pull/4145/files
entry-points.js https://github.com/github/codeql-action/pull/4145/files#diff-73697317a7dd14441dcfb24bc586f637ae2b815b5e503a05a81816be74fcd815
codeql.test.ts https://github.com/github/codeql-action/pull/4145/files#diff-a59b656ff6cb8e9e4da88f2f927636ffc66ffadca08a86eb1024f9c2690d8ad9
setup-codeql.test.ts https://github.com/github/codeql-action/pull/4145/files#diff-f306d28dd1b1b19631643393e111cbf6e6dad30ad83d9eca67f08a64e5e8c324
setup-codeql.ts https://github.com/github/codeql-action/pull/4145/files#diff-1cfeb61aadfc528c554a41781d61b9aea3ea35902cc52b2e1b0ba8d49eb6cda1
https://github.com/github/codeql-action/blob/main/CODEOWNERS#L1
lib/entry-points.jshttps://github.com/github/codeql-action/pull/4145/files#diff-73697317a7dd14441dcfb24bc586f637ae2b815b5e503a05a81816be74fcd815
View file https://github.com/github/codeql-action/blob/41c04be873c46b18f4fa7705e5eb5452964fc8a7/lib/entry-points.js
Open in desktop https://desktop.github.com
how customized files appear on GitHubhttps://docs.github.com/github/administering-a-repository/customizing-how-changed-files-appear-on-github
Please reload this pagehttps://github.com/github/codeql-action/pull/4145/files
https://github.com/github/codeql-action/blob/main/CODEOWNERS#L1
src/codeql.test.tshttps://github.com/github/codeql-action/pull/4145/files#diff-a59b656ff6cb8e9e4da88f2f927636ffc66ffadca08a86eb1024f9c2690d8ad9
View file https://github.com/github/codeql-action/blob/41c04be873c46b18f4fa7705e5eb5452964fc8a7/src/codeql.test.ts
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql-action/pull/4145/{{ revealButtonHref }}
https://github.com/github/codeql-action/pull/4145/files#diff-a59b656ff6cb8e9e4da88f2f927636ffc66ffadca08a86eb1024f9c2690d8ad9
https://github.com/github/codeql-action/pull/4145/files#diff-a59b656ff6cb8e9e4da88f2f927636ffc66ffadca08a86eb1024f9c2690d8ad9
https://github.com/github/codeql-action/pull/4145/files#diff-a59b656ff6cb8e9e4da88f2f927636ffc66ffadca08a86eb1024f9c2690d8ad9
https://github.com/github/codeql-action/pull/4145/files#diff-a59b656ff6cb8e9e4da88f2f927636ffc66ffadca08a86eb1024f9c2690d8ad9
Please reload this pagehttps://github.com/github/codeql-action/pull/4145/files
Please reload this pagehttps://github.com/github/codeql-action/pull/4145/files
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width


URLs of crawlers that visited me.