René's URL Explorer Experiment


Title: Check for versions of macOS and Xcode that are unsupported for traced analysis by mbg · Pull Request #4221 · github/codeql-action · GitHub

Open Graph Title: Check for versions of macOS and Xcode that are unsupported for traced analysis by mbg · Pull Request #4221 · github/codeql-action

X Title: Check for versions of macOS and Xcode that are unsupported for traced analysis by mbg · Pull Request #4221 · github/codeql-action

Description: Traced analysis is unsupported on macOS 27 (or newer) or with Xcode 27 (or newer). This PR adds a check for traced analyses which checks whether the macOS version is < 27 and the Xcode version is < 27. The Xcode version check is only validated for GitHub-hosted runners in this PR and skipped on self-hosted runners (see #4278 for a follow-up). If either is >= 27, then we report this issue to the user with a suitable diagnostic. I have also added a FF which controls whether this is just a warning or a fatal error which aborts the analysis. Further, there is a new ToolsFeature for Swift which allows the CLI to indicate to us when it is ready to support swift on all platforms. Once the CLI reports that it supports this, we skip the macOS-only check for Swift. There are two new FFs: one which controls whether the new checks are performed and one which controls whether a failing check is a fatal error or not. Notes for reviewers We have to be careful about the checks in checkRunnerSupportsTracedAnalysis with respect to determining whether an analysis is traced. Risk assessment For internal use only. Please select the risk level of this change: Low risk: Changes are fully under feature flags, or have been fully tested and validated in pre-production environments and are highly observable, or are documentation or test only. Which use cases does this change impact? Workflow types: Advanced setup - Impacts users who have custom CodeQL workflows. Managed - Impacts users with dynamic workflows (Default Setup, Code Quality, ...). Products: Code Scanning - The changes impact analyses when analysis-kinds: code-scanning. Code Quality - The changes impact analyses when analysis-kinds: code-quality. Other first-party - The changes impact other first-party analyses. Environments: Dotcom - Impacts CodeQL workflows on github.com and/or GitHub Enterprise Cloud with Data Residency. GHES - Impacts CodeQL workflows on GitHub Enterprise Server. How did/will you validate this change? Unit tests - I am depending on unit test coverage (i.e. tests in .test.ts files). End-to-end tests - I am depending on PR checks (i.e. tests in pr-checks). If something goes wrong after this change is released, what are the mitigation and rollback strategies? Feature flags - All new or changed code paths can be fully disabled with corresponding feature flags. How will you know if something goes wrong after this change is released? Telemetry - I rely on existing telemetry or have made changes to the telemetry. Dashboards - I will watch relevant dashboards for issues after the release. Consider whether this requires this change to be released at a particular time rather than as part of a regular release. Alerts - New or existing monitors will trip if something goes wrong with this change. Are there any special considerations for merging or releasing this change? Special considerations - This change should only be merged once certain preconditions are met. Please provide details of those or link to this PR from an internal issue. Merge / deployment checklist Confirm this change is backwards compatible with existing workflows. Consider adding a changelog entry for this change. Confirm the readme and docs have been updated if necessary.

Open Graph Description: Traced analysis is unsupported on macOS 27 (or newer) or with Xcode 27 (or newer). This PR adds a check for traced analyses which checks whether the macOS version is < 27 and the Xcode version i...

X Description: Traced analysis is unsupported on macOS 27 (or newer) or with Xcode 27 (or newer). This PR adds a check for traced analyses which checks whether the macOS version is &lt; 27 and the Xcode versi...

Opengraph URL: https://github.com/github/codeql-action/pull/4221

X: @github

direct link

Domain: github.com

react-profiling0
react-import-mapreact,react-dom,react-dom/client,react-dom/profiling,react-is,react-reconciler,react/compiler-runtime,react/jsx-dev-runtime,react/jsx-runtime,scheduler@d5750093facf
route-pattern/:user_id/:repository/pull/:id/files(.:format)
route-controllerpull_requests
route-actionfiles
fetch-noncev2:af5990a8-bd19-5e2c-ad46-9f7b9ca9e865
current-catalog-service-hashae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b
request-idA8E0:1CAA92:89243F:B25A48:6AED37B9
html-safe-nonce7d1341d725b89bf0abd6a47193aa7841c22143c503f1b70b6c8395c91bfa4db7
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJBOEUwOjFDQUE5Mjo4OTI0M0Y6QjI1QTQ4OjZBRUQzN0I5IiwidmlzaXRvcl9pZCI6IjY2ODgzNjUwNDkyODc2MjA1MzciLCJyZWdpb25fZWRnZSI6ImlhZCIsInJlZ2lvbl9yZW5kZXIiOiJpYWQifQ==
visitor-hmac4d3beb28d94c47822bac02f0a75c6cbe5e55141875d17504ed89588641d1a500
hovercard-subject-tagpull_request:4803615346
github-keyboard-shortcutsrepository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///pull_requests/show/files
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/github/codeql-action/pull/4221/files
twitter:imagehttps://avatars.githubusercontent.com/u/278086?s=400&v=4
twitter:cardsummary_large_image
og:imagehttps://avatars.githubusercontent.com/u/278086?s=400&v=4
og:image:altTraced analysis is unsupported on macOS 27 (or newer) or with Xcode 27 (or newer). This PR adds a check for traced analyses which checks whether the macOS version is < 27 and the Xcode version i...
og:site_nameGitHub
og:typeobject
hostnamegithub.com
expected-hostnamegithub.com
None26c92a9388ddfad3fa88d132b5d5f0b4747030233dcc4e5efb05f1cbae152184
turbo-cache-controlno-preview
diff-viewunified
go-importgithub.com/github/codeql-action git https://github.com/github/codeql-action.git
octolytics-dimension-user_id9919
octolytics-dimension-user_logingithub
octolytics-dimension-repository_id259445878
octolytics-dimension-repository_nwogithub/codeql-action
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id259445878
octolytics-dimension-repository_network_root_nwogithub/codeql-action
turbo-body-classeslogged-out env-production page-responsive full-width
disable-turbotrue
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
releasec629ad99c254d306375fc8354d04321c2c362236
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://github.com/github/codeql-action/pull/4221/files#start-of-content
https://github.com/
Sign inhttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql-action%2Fpull%2F4221%2Ffiles
GitHubRepository hosting, code review, and collaborationhttps://github.com/platform
CopilotAI coding agent for tasks, projects, and automated workhttps://github.com/features/copilot
ActionsCI/CD and automationhttps://github.com/features/actions
Code QualityQuality analysis, fixes, and enforcementhttps://github.com/features/code-quality
CodespacesCloud development environmentshttps://github.com/features/codespaces
Code SecurityVulnerability detection and remediationhttps://github.com/security/advanced-security/code-security
Secret ProtectionSecret scanning and leak preventionhttps://github.com/security/advanced-security/secret-protection
All Featureshttps://github.com/features
Documentationhttps://docs.github.com/en
Traininghttps://learn.github.com/skills
Certificationshttps://learn.github.com/credentials
Build with Copilothttps://github.com/features/ai
Customize Copilothttps://docs.github.com/en/copilot/how-tos/copilot-on-github/customize-copilot/customize-copilot-overview
Integrationshttps://github.com/marketplace
Trending reposhttps://github.com/trending
GitHub Sponsorshttps://github.com/open-source/sponsors
Developer articleshttps://github.com/resources/articles
ChangelogYour source for the latest features, improvements, and fixes across GitHub products, all in one place.https://github.blog/changelog/
Enterpriseshttps://github.com/enterprise
Teamhttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
See all industrieshttps://github.com/solutions/industry
Why GitHubhttps://github.com/why-github
Customer Storieshttps://github.com/customer-stories
Business insightshttps://github.com/solutions/executive-insights
Trust Centerhttps://github.com/trust-center
GitHub Advanced SecurityEnterprise-grade code securityhttps://github.com/security/advanced-security
Copilot for businessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/enterprise/premium-support
Documentationhttps://docs.github.com/en
Resource centerhttps://github.com/resources
Bloghttps://github.blog/
Events & webinarshttps://github.com/resources/events
Community Forumhttps://github.com/orgs/community/discussions
Customer Storieshttps://github.com/customer-stories
Integrationshttps://github.com/marketplace
Customer supporthttps://help.github.com/
Traininghttps://learn.github.com/skills
GitHub Statushttps://www.githubstatus.com/
Abouthttps://github.com/about
Partnershttps://github.com/partners
Changeloghttps://github.blog/changelog/
GitHub UniverseThe event for developers, by developers — talks, workshops, and what’s next for GitHub.https://githubuniverse.com/
Pricinghttps://github.com/pricing
Sign inhttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql-action%2Fpull%2F4221%2Ffiles
Sign uphttps://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fpull_requests%2Fshow%2Ffiles&source=header-repo&source_repo=github%2Fcodeql-action
Reloadhttps://github.com/github/codeql-action/pull/4221/files
Reloadhttps://github.com/github/codeql-action/pull/4221/files
Reloadhttps://github.com/github/codeql-action/pull/4221/files
githubhttps://github.com/github
codeql-actionhttps://github.com/github/codeql-action
Codehttps://github.com/github/codeql-action
Issues165 (165)https://github.com/github/codeql-action/issues
Pull requests41 (41)https://github.com/github/codeql-action/pulls
Actionshttps://github.com/github/codeql-action/actions
Security and quality2 (2)https://github.com/github/codeql-action/security
Insightshttps://github.com/github/codeql-action/pulse
Sign up for GitHub https://github.com/signup?return_to=%2Fgithub%2Fcodeql-action%2Fissues%2Fnew%2Fchoose
terms of servicehttps://docs.github.com/terms
privacy statementhttps://docs.github.com/privacy
Sign inhttps://github.com/login?return_to=%2Fgithub%2Fcodeql-action%2Fissues%2Fnew%2Fchoose
mbghttps://github.com/mbg
mainhttps://github.com/github/codeql-action/tree/main
mbg/macos27/warnhttps://github.com/github/codeql-action/tree/mbg/macos27/warn
Conversation 48 https://github.com/github/codeql-action/pull/4221
Commits 37 https://github.com/github/codeql-action/pull/4221/commits
Checks 230 https://github.com/github/codeql-action/pull/4221/checks
Files changed 19 https://github.com/github/codeql-action/pull/4221/files
Check for versions of macOS and Xcode that are unsupported for traced analysis https://github.com/github/codeql-action/pull/4221/files#top
Show all changes 37 commits https://github.com/github/codeql-action/pull/4221/files
0d77461 Replace `Env` with `ReadOnlyEnv` in the `runTool` chain mbg Oct 28, 2026 https://github.com/github/codeql-action/pull/4221/commits/0d774618aa9a151885c6fba30e9bdcf6e919596d
f364105 Add `osRelease` to `BaseState` mbg Oct 9, 2026 https://github.com/github/codeql-action/pull/4221/commits/f3641059508e762bb311064d5dad36675743afa7
570e438 Add `macOSVersion` helper mbg Oct 16, 2026 https://github.com/github/codeql-action/pull/4221/commits/570e438cccd389884bc0d72493f5c4b368fbb2ec
e022017 Use `macOSVersion` in `isSwiftCompatible` mbg Oct 9, 2026 https://github.com/github/codeql-action/pull/4221/commits/e0220172c95ff367ea6e59e82bbfa22c5c4ee62b
9271dd2 Add `swiftSupportsAllPlatforms` to `ToolsFeature` mbg Oct 9, 2026 https://github.com/github/codeql-action/pull/4221/commits/9271dd21d565303911c55434c82577d11c589154
a962304 Skip Swift checks if tools feature is enabled mbg Oct 9, 2026 https://github.com/github/codeql-action/pull/4221/commits/a9623043dcb0be718bbea42be6d1a5745449afb3
45b8586 Check if macOS version is unsupported mbg Oct 9, 2026 https://github.com/github/codeql-action/pull/4221/commits/45b8586e1babe2e8e2daf172b99a98a649d436c5
5f65e35 Add FF to fail if macOS version is unsupported mbg Oct 9, 2026 https://github.com/github/codeql-action/pull/4221/commits/5f65e35fec2efabaeacdef372ac5b877693d1be9
242ea52 Add function to determine Xcode version based on symlink mbg Oct 28, 2026 https://github.com/github/codeql-action/pull/4221/commits/242ea52c053a1f486f451825bf91e7230fccd010
7121af2 Check if Xcode version is unsupported mbg Oct 9, 2026 https://github.com/github/codeql-action/pull/4221/commits/7121af21e18a5ea2cde8abb79370fdfed5834262
86bb853 Don't perform check for non-traced analyses mbg Oct 16, 2026 https://github.com/github/codeql-action/pull/4221/commits/86bb85349e6a39e16be0f94b22cf56e1b7b10ac0
156dc2c Include URL to announcement in diagnostic and log messages mbg Oct 19, 2026 https://github.com/github/codeql-action/pull/4221/commits/156dc2ce18f2cccb7ba87342d743e3eb3a3dfc14
7e5643a Accept paths containing only major version mbg Oct 19, 2026 https://github.com/github/codeql-action/pull/4221/commits/7e5643a58ebc717911e86a7ae622acad6588f84a
fe45268 Use `lstat` instead of `stat` mbg Oct 19, 2026 https://github.com/github/codeql-action/pull/4221/commits/fe45268b48e1b79045143cdfc794a9f5d1544751
97b9023 Clarify that we are looking at the Darwin version mbg Oct 28, 2026 https://github.com/github/codeql-action/pull/4221/commits/97b90230e5548caa99fc7149ed756e3b4e71a1ca
eff66e8 Make Xcode regex more flexible mbg Oct 28, 2026 https://github.com/github/codeql-action/pull/4221/commits/eff66e8fb1ca04760c1502ab0cc2b7b647122e7f
5547a35 Only create diagnostics for traced languages mbg Oct 28, 2026 https://github.com/github/codeql-action/pull/4221/commits/5547a3567fb87b011ac795c9af6ff35fc3f9ba76
84e80ce Avoid producing the same-ish message twice mbg Oct 28, 2026 https://github.com/github/codeql-action/pull/4221/commits/84e80cea7e53b85af543663db34bc71d690c1af0
87ef6f5 Return early if we are not on macOS to avoid unnecessary work mbg Oct 28, 2026 https://github.com/github/codeql-action/pull/4221/commits/87ef6f583408767b23acadf31ce1de192253039a
17685f3 Add e2e test mbg Oct 16, 2026 https://github.com/github/codeql-action/pull/4221/commits/17685f3ebaf046ff756eaca3182ef7fc6211be85
202d9f1 Add `CheckUnsupportedTracedAnalysis` FF mbg Oct 28, 2026 https://github.com/github/codeql-action/pull/4221/commits/202d9f1a6b796b5ff7e36bef959c35f56a832c0f
99971dd Gate checks behind FF mbg Oct 28, 2026 https://github.com/github/codeql-action/pull/4221/commits/99971dd136aecba06b031d54b7695b66be2b5ce2
ad2b30b Use new FF in e2e test mbg Oct 28, 2026 https://github.com/github/codeql-action/pull/4221/commits/ad2b30ba0f9445c3e95f18c6909e39f6b4500540
8cafec0 Skip checks on self-hosted runners mbg Oct 29, 2026 https://github.com/github/codeql-action/pull/4221/commits/8cafec0756c1db64e5213379ee031ac3525725b2
019a5ca Change log level of messages in `xcodeVersion` mbg Oct 29, 2026 https://github.com/github/codeql-action/pull/4221/commits/019a5caccdd41ccc55e6910c85f3797c5e98dcdd
3da9738 Add debug-level log messages when checks are skipped mbg Oct 29, 2026 https://github.com/github/codeql-action/pull/4221/commits/3da973862d42c4bb73cb9e05594860439be4a462
d37c313 Improve comment/log message wording mbg Oct 30, 2026 https://github.com/github/codeql-action/pull/4221/commits/d37c3131f400dc8edece7a0370ab26ddbee3f937
239b078 Only skip Xcode check on self-hosted runners mbg Oct 30, 2026 https://github.com/github/codeql-action/pull/4221/commits/239b07849dc23a339968dcbe4732e60cf55e2fbd
b2bb71b Set `tempDir` in all `createTestConfig` calls in `traced.test.ts` mbg Oct 30, 2026 https://github.com/github/codeql-action/pull/4221/commits/b2bb71bc61adc1ab23b8624aa6fb56b53ac0cc45
5bdb913 Rename FF to include "Abort" instead of "Skip" mbg Oct 30, 2026 https://github.com/github/codeql-action/pull/4221/commits/5bdb913da11ac3b7db87fced3be7d5b04d836809
688c04a Remove `if` option for validation jobs mbg Oct 30, 2026 https://github.com/github/codeql-action/pull/4221/commits/688c04ad4c79bd731d276fbc1c9b957771ad5aac
251f480 Use correct version constant in `handleUnsupportedVersion` `baseMessage` mbg Oct 30, 2026 https://github.com/github/codeql-action/pull/4221/commits/251f480fa345928ca302ff6228cd62dbf84bf319
c6cc137 Fix assertions and features for tests mbg Oct 30, 2026 https://github.com/github/codeql-action/pull/4221/commits/c6cc137b274d5fb60acc8e25119b2cc5d57ac65e
f583e03 Remove unnecessary `lstatSync` call mbg Oct 30, 2026 https://github.com/github/codeql-action/pull/4221/commits/f583e03df677f0c871214f2a65023d68eba889fb
3ecc7a9 Add change note mbg Oct 30, 2026 https://github.com/github/codeql-action/pull/4221/commits/3ecc7a9b7d5ff6d668a383a9c0963b03c7804b0c
b5b3ef7 Fix Xcode skip on `self-hosted` runner test mbg Oct 30, 2026 https://github.com/github/codeql-action/pull/4221/commits/b5b3ef7c6a1cb79be3bf0bfc836979d384501698
c56bb9b Fix checks if FF is disabled test using the wrong predicate mbg Oct 30, 2026 https://github.com/github/codeql-action/pull/4221/commits/c56bb9b85b02e18f4fe3941da23a6b0fa6ff9162
Clear filters https://github.com/github/codeql-action/pull/4221/files
Please reload this pagehttps://github.com/github/codeql-action/pull/4221/files
Please reload this pagehttps://github.com/github/codeql-action/pull/4221/files
__unsupported-macos.yml https://github.com/github/codeql-action/pull/4221/files#diff-f558e6760708af9d026ecb0f5dccc3d02974b7afa365644856aa4f8daa3e94d0
entry-points.js https://github.com/github/codeql-action/pull/4221/files#diff-73697317a7dd14441dcfb24bc586f637ae2b815b5e503a05a81816be74fcd815
unsupported-macos.yml https://github.com/github/codeql-action/pull/4221/files#diff-68acea3cbb9cb26ab1fb88125efd97a83e31eb3bb3bd0f29864b7cf944112e35
sync.ts https://github.com/github/codeql-action/pull/4221/files#diff-5b22528f10341e3c06cb28309cc814aaabb620eb17be5edd6aa9bbe94d1677ae
action-common.ts https://github.com/github/codeql-action/pull/4221/files#diff-ae4bdfbe2de7fb868f4c7100e281e16a6c7acda72bc8315c860602bd12f2a2d0
actions-util.ts https://github.com/github/codeql-action/pull/4221/files#diff-272a83a2815879238f61d8c6a4358a34cf98138946d7e7e950851282d8ca0b7d
codeql.ts https://github.com/github/codeql-action/pull/4221/files#diff-473ad8cf33ad034dc4f9ae468a3ce5d87106ace4f96f6a23a000261d46efaa60
doc-url.ts https://github.com/github/codeql-action/pull/4221/files#diff-7c6374f23baa67d5f51c00e4f3fabe52ff3ed506ca3393297fb84c6618142477
feature-flags.ts https://github.com/github/codeql-action/pull/4221/files#diff-d6ca7464724b1fe6094ce0912d338e79983058d9acda8717c0469d40f1ae3dbd
init-action.ts https://github.com/github/codeql-action/pull/4221/files#diff-87bf9e0a2a9244ba1f26eb01d404deaccbc9580479d2e2530a4ff2fd5bd91565
swift.test.ts https://github.com/github/codeql-action/pull/4221/files#diff-2021cde911421d29d7d308eaca6ee7b128f9ff37ee5135a7d9187efb0b3986ee
swift.ts https://github.com/github/codeql-action/pull/4221/files#diff-cec040463872793716c254e1c7e21acc5e67c1ae03bead69cd77acdd6f751184
traced.test.ts https://github.com/github/codeql-action/pull/4221/files#diff-339cba053cc412189d9e84bbf17b9673c2333f3d45626a97f3d0c261a7736b05
traced.ts https://github.com/github/codeql-action/pull/4221/files#diff-b1e2b19a6d18735582551ff1ab877d7a214188203da9ddca5b3f374e3f5dea1f
platform.test.ts https://github.com/github/codeql-action/pull/4221/files#diff-fa3147b5402161cbdd6f1b721b0210aab70571a3bd8b1403531820a0703325c7
platform.ts https://github.com/github/codeql-action/pull/4221/files#diff-8260ea6250f2a0f124153ffb1bddae058191ea4e8baf1de5d4746083f6c44d81
testing-utils.ts https://github.com/github/codeql-action/pull/4221/files#diff-b5e75f890eca9e7fbfff472427b39ce0f5628833109b50e7b2d165729bd8c124
tools-features.ts https://github.com/github/codeql-action/pull/4221/files#diff-a2b4f46aa09bd648db18893b59331e2e037dfb60954c80383d820703b09d2519
macos-xcode-deprecation.md https://github.com/github/codeql-action/pull/4221/files#diff-1f70e61902ee974a88abd4b39e8f6eb31c54c5c3e09d4645927bc065a7526fda
https://github.com/github/codeql-action/blob/main/CODEOWNERS#L1
.github/workflows/__unsupported-macos.ymlhttps://github.com/github/codeql-action/pull/4221/files#diff-f558e6760708af9d026ecb0f5dccc3d02974b7afa365644856aa4f8daa3e94d0
View file https://github.com/github/codeql-action/blob/c56bb9b85b02e18f4fe3941da23a6b0fa6ff9162/.github/workflows/__unsupported-macos.yml
Open in desktop https://desktop.github.com
how customized files appear on GitHubhttps://docs.github.com/github/administering-a-repository/customizing-how-changed-files-appear-on-github
Please reload this pagehttps://github.com/github/codeql-action/pull/4221/files
Please reload this pagehttps://github.com/github/codeql-action/pull/4221/files
Please reload this pagehttps://github.com/github/codeql-action/pull/4221/files
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.