René's URL Explorer Experiment


Title: Migrate bundle update workflow to new changenote tooling by henrymercer · Pull Request #4285 · github/codeql-action · GitHub

Open Graph Title: Migrate bundle update workflow to new changenote tooling by henrymercer · Pull Request #4285 · github/codeql-action

X Title: Migrate bundle update workflow to new changenote tooling by henrymercer · Pull Request #4285 · github/codeql-action

Description: The "Update default CodeQL bundle" workflow currently adds its "Update default CodeQL bundle version" entry directly to the [UNRELEASED] section of CHANGELOG.md. This PR changes pr-checks/bundle-changelog.ts to write the entry to a changenote file in unreleased-change-notes/ instead, so that it's added to the changelog with the other changenotes when we release. The workflow now stages the unreleased-change-notes directory, since git commit -a doesn't pick up new files. With this change, bundle update PRs no longer modify CHANGELOG.md, so they won't need to be excluded from the check added in #4217. Risk assessment For internal use only. Please select the risk level of this change: Low risk: Changes are fully under feature flags, or have been fully tested and validated in pre-production environments and are highly observable, or are documentation or test only. Which use cases does this change impact? Workflow types: N/A Products: N/A Environments: Testing/None - This change does not impact any CodeQL workflows in production. How did/will you validate this change? Unit tests - I am depending on unit test coverage (i.e. tests in .test.ts files). Other - I ran pr-checks/bundle-changelog.ts locally and checked that npx tsx pr-checks/changenotes.ts validate accepts the generated note and that npx tsx pr-checks/changenotes.ts assemble adds it to the [UNRELEASED] section of CHANGELOG.md. The workflow only runs when a CodeQL bundle prerelease is published, so the next bundle update will be its first run. If something goes wrong after this change is released, what are the mitigation and rollback strategies? Development/testing only - This change cannot cause any failures in production. How will you know if something goes wrong after this change is released? Other - The "Update default CodeQL bundle" workflow run would fail, or the bundle update PR would be missing its changenote. Are there any special considerations for merging or releasing this change? No special considerations - This change can be merged at any time. Merge / deployment checklist Confirm this change is backwards compatible with existing workflows. Consider adding a changelog entry for this change. Confirm the readme and docs have been updated if necessary.

Open Graph Description: The "Update default CodeQL bundle" workflow currently adds its "Update default CodeQL bundle version" entry directly to the [UNRELEASED] section of CHANGELOG.md. This PR changes...

X Description: The "Update default CodeQL bundle" workflow currently adds its "Update default CodeQL bundle version" entry directly to the [UNRELEASED] section of CHANGELOG.md....

Opengraph URL: https://github.com/github/codeql-action/pull/4285

X: @github

direct link

Domain: github.com

react-profiling0
react-import-mapreact,react-dom,react-dom/client,react-dom/profiling,react-is,react-reconciler,react/compiler-runtime,react/jsx-dev-runtime,react/jsx-runtime,scheduler@d5750093facf
route-pattern/:user_id/:repository/pull/:id/files(.:format)
route-controllerpull_requests
route-actionfiles
fetch-noncev2:b3d86e0d-a479-b7a4-81cb-872a7f9af465
current-catalog-service-hashae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b
request-id9E60:1E27AA:98AF8C:CCA9E0:6AED2EAF
html-safe-nonce41779f2a1b05885bbef1a6068fa2a8f0d7777770bb12329dbfc0cdb0e43e24c9
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiI5RTYwOjFFMjdBQTo5OEFGOEM6Q0NBOUUwOjZBRUQyRUFGIiwidmlzaXRvcl9pZCI6Ijc0OTgxMjU1MDAyMzcwMzMxMzUiLCJyZWdpb25fZWRnZSI6ImlhZCIsInJlZ2lvbl9yZW5kZXIiOiJpYWQifQ==
visitor-hmac79e54bb620bc6feb96c21f6b66d17c62efc995e4beaf1d122455aff9358d3616
hovercard-subject-tagpull_request:5124847377
github-keyboard-shortcutsrepository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///pull_requests/show/files
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/github/codeql-action/pull/4285/files
twitter:imagehttps://avatars.githubusercontent.com/u/14129055?s=400&v=4
twitter:cardsummary_large_image
og:imagehttps://avatars.githubusercontent.com/u/14129055?s=400&v=4
og:image:altThe "Update default CodeQL bundle" workflow currently adds its "Update default CodeQL bundle version" entry directly to the [UNRELEASED] section of CHANGELOG.md. This PR changes...
og:site_nameGitHub
og:typeobject
hostnamegithub.com
expected-hostnamegithub.com
Nonee51d0b7b5ab34b1688c05b54c3ed17b8658b2fa9bca973a9c740683ccb12cf4a
turbo-cache-controlno-preview
diff-viewunified
go-importgithub.com/github/codeql-action git https://github.com/github/codeql-action.git
octolytics-dimension-user_id9919
octolytics-dimension-user_logingithub
octolytics-dimension-repository_id259445878
octolytics-dimension-repository_nwogithub/codeql-action
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id259445878
octolytics-dimension-repository_network_root_nwogithub/codeql-action
turbo-body-classeslogged-out env-production page-responsive full-width
disable-turbotrue
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
release59ebb7b901cc154ecc179a44f266fcf69f343b30
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://github.com/github/codeql-action/pull/4285/files#start-of-content
https://github.com/
Sign inhttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql-action%2Fpull%2F4285%2Ffiles
GitHubRepository hosting, code review, and collaborationhttps://github.com/platform
CopilotAI coding agent for tasks, projects, and automated workhttps://github.com/features/copilot
ActionsCI/CD and automationhttps://github.com/features/actions
Code QualityQuality analysis, fixes, and enforcementhttps://github.com/features/code-quality
CodespacesCloud development environmentshttps://github.com/features/codespaces
Code SecurityVulnerability detection and remediationhttps://github.com/security/advanced-security/code-security
Secret ProtectionSecret scanning and leak preventionhttps://github.com/security/advanced-security/secret-protection
All Featureshttps://github.com/features
Documentationhttps://docs.github.com/en
Traininghttps://learn.github.com/skills
Certificationshttps://learn.github.com/credentials
Build with Copilothttps://github.com/features/ai
Customize Copilothttps://docs.github.com/en/copilot/how-tos/copilot-on-github/customize-copilot/customize-copilot-overview
Integrationshttps://github.com/marketplace
Trending reposhttps://github.com/trending
GitHub Sponsorshttps://github.com/open-source/sponsors
Developer articleshttps://github.com/resources/articles
ChangelogYour source for the latest features, improvements, and fixes across GitHub products, all in one place.https://github.blog/changelog/
Enterpriseshttps://github.com/enterprise
Teamhttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
See all industrieshttps://github.com/solutions/industry
Why GitHubhttps://github.com/why-github
Customer Storieshttps://github.com/customer-stories
Business insightshttps://github.com/solutions/executive-insights
Trust Centerhttps://github.com/trust-center
GitHub Advanced SecurityEnterprise-grade code securityhttps://github.com/security/advanced-security
Copilot for businessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/enterprise/premium-support
Documentationhttps://docs.github.com/en
Resource centerhttps://github.com/resources
Bloghttps://github.blog/
Events & webinarshttps://github.com/resources/events
Community Forumhttps://github.com/orgs/community/discussions
Customer Storieshttps://github.com/customer-stories
Integrationshttps://github.com/marketplace
Customer supporthttps://help.github.com/
Traininghttps://learn.github.com/skills
GitHub Statushttps://www.githubstatus.com/
Abouthttps://github.com/about
Partnershttps://github.com/partners
Changeloghttps://github.blog/changelog/
GitHub UniverseThe event for developers, by developers — talks, workshops, and what’s next for GitHub.https://githubuniverse.com/
Pricinghttps://github.com/pricing
Sign inhttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql-action%2Fpull%2F4285%2Ffiles
Sign uphttps://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fpull_requests%2Fshow%2Ffiles&source=header-repo&source_repo=github%2Fcodeql-action
Reloadhttps://github.com/github/codeql-action/pull/4285/files
Reloadhttps://github.com/github/codeql-action/pull/4285/files
Reloadhttps://github.com/github/codeql-action/pull/4285/files
githubhttps://github.com/github
codeql-actionhttps://github.com/github/codeql-action
Codehttps://github.com/github/codeql-action
Issues165 (165)https://github.com/github/codeql-action/issues
Pull requests41 (41)https://github.com/github/codeql-action/pulls
Actionshttps://github.com/github/codeql-action/actions
Security and quality2 (2)https://github.com/github/codeql-action/security
Insightshttps://github.com/github/codeql-action/pulse
Sign up for GitHub https://github.com/signup?return_to=%2Fgithub%2Fcodeql-action%2Fissues%2Fnew%2Fchoose
terms of servicehttps://docs.github.com/terms
privacy statementhttps://docs.github.com/privacy
Sign inhttps://github.com/login?return_to=%2Fgithub%2Fcodeql-action%2Fissues%2Fnew%2Fchoose
henrymercerhttps://github.com/henrymercer
mainhttps://github.com/github/codeql-action/tree/main
henrymercer/automated-change-noteshttps://github.com/github/codeql-action/tree/henrymercer/automated-change-notes
Conversation 1 https://github.com/github/codeql-action/pull/4285
Commits 2 https://github.com/github/codeql-action/pull/4285/commits
Checks 230 https://github.com/github/codeql-action/pull/4285/checks
Files changed https://github.com/github/codeql-action/pull/4285/files
Please reload this pagehttps://github.com/github/codeql-action/pull/4285/files
Migrate bundle update workflow to new changenote tooling https://github.com/github/codeql-action/pull/4285/files#top
Show all changes 2 commits https://github.com/github/codeql-action/pull/4285/files
9bc74b1 Create a changenote for bundle updates instead of editing the changelog henrymercer Nov 2, 2026 https://github.com/github/codeql-action/pull/4285/commits/9bc74b13fbdd76ff0b3f4c2c7d42aab9ed9b1c90
3952845 Remove unused `updateChangelog` from `bundle-changelog.ts` henrymercer Nov 2, 2026 https://github.com/github/codeql-action/pull/4285/commits/39528452cf2bd96d334804b15d2b36bd8bc7d2c2
Clear filters https://github.com/github/codeql-action/pull/4285/files
Please reload this pagehttps://github.com/github/codeql-action/pull/4285/files
Please reload this pagehttps://github.com/github/codeql-action/pull/4285/files
update-bundle.yml https://github.com/github/codeql-action/pull/4285/files#diff-3ab5ad85df4cea2b93b48a4a9385799b713cdd5dfe53c3eeaf26af55d7fa5007
bundle-changelog.test.ts https://github.com/github/codeql-action/pull/4285/files#diff-0f3ad85482c107de1c682580325116a602bd4815e176a1fe2d611d9090503535
bundle-changelog.ts https://github.com/github/codeql-action/pull/4285/files#diff-ba68bb1a3c74a827a1bc932ed616640e5abb5f0225ca0ee37fbf050a8ee38e32
https://github.com/github/codeql-action/blob/main/CODEOWNERS#L1
.github/workflows/update-bundle.ymlhttps://github.com/github/codeql-action/pull/4285/files#diff-3ab5ad85df4cea2b93b48a4a9385799b713cdd5dfe53c3eeaf26af55d7fa5007
View file https://github.com/github/codeql-action/blob/39528452cf2bd96d334804b15d2b36bd8bc7d2c2/.github/workflows/update-bundle.yml
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql-action/pull/4285/{{ revealButtonHref }}
https://github.com/github/codeql-action/pull/4285/files#diff-3ab5ad85df4cea2b93b48a4a9385799b713cdd5dfe53c3eeaf26af55d7fa5007
https://github.com/github/codeql-action/blob/main/CODEOWNERS#L1
pr-checks/bundle-changelog.test.tshttps://github.com/github/codeql-action/pull/4285/files#diff-0f3ad85482c107de1c682580325116a602bd4815e176a1fe2d611d9090503535
View file https://github.com/github/codeql-action/blob/39528452cf2bd96d334804b15d2b36bd8bc7d2c2/pr-checks/bundle-changelog.test.ts
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql-action/pull/4285/{{ revealButtonHref }}
https://github.com/github/codeql-action/pull/4285/files#diff-0f3ad85482c107de1c682580325116a602bd4815e176a1fe2d611d9090503535
https://github.com/github/codeql-action/pull/4285/files#diff-0f3ad85482c107de1c682580325116a602bd4815e176a1fe2d611d9090503535
https://github.com/github/codeql-action/pull/4285/files#diff-0f3ad85482c107de1c682580325116a602bd4815e176a1fe2d611d9090503535
https://github.com/github/codeql-action/blob/main/CODEOWNERS#L1
pr-checks/bundle-changelog.tshttps://github.com/github/codeql-action/pull/4285/files#diff-ba68bb1a3c74a827a1bc932ed616640e5abb5f0225ca0ee37fbf050a8ee38e32
View file https://github.com/github/codeql-action/blob/39528452cf2bd96d334804b15d2b36bd8bc7d2c2/pr-checks/bundle-changelog.ts
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql-action/pull/4285/{{ revealButtonHref }}
https://github.com/github/codeql-action/pull/4285/files#diff-ba68bb1a3c74a827a1bc932ed616640e5abb5f0225ca0ee37fbf050a8ee38e32
https://github.com/github/codeql-action/pull/4285/files#diff-ba68bb1a3c74a827a1bc932ed616640e5abb5f0225ca0ee37fbf050a8ee38e32
https://github.com/github/codeql-action/pull/4285/files#diff-ba68bb1a3c74a827a1bc932ed616640e5abb5f0225ca0ee37fbf050a8ee38e32
Please reload this pagehttps://github.com/github/codeql-action/pull/4285/files
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.