Update default bundle to 2.25.4 - #3881
Merged
Merged
Conversation
redsun82
approved these changes
May 7, 2026
Contributor
There was a problem hiding this comment.
Pull request overview
Updates the action’s default CodeQL bundle/CLI version to 2.25.4 so that tools: linked (and the GHES-linked default) uses the new bundle by default.
Changes:
- Bump
bundleVersion/cliVersiondefaults to 2.25.4 and roll forward theprior*versions. - Update the UNRELEASED changelog entry to reflect the new default bundle version.
- Regenerate the compiled
lib/artifacts to reflect the updated defaults.
Show a summary per file
| File | Description |
|---|---|
| src/defaults.json | Updates default and prior CodeQL bundle/CLI versions to 2.25.4/2.25.3. |
| CHANGELOG.md | Adds an UNRELEASED entry documenting the default bundle bump to 2.25.4. |
| lib/upload-sarif-action.js | Generated build output reflecting updated defaults. |
| lib/upload-lib.js | Generated build output reflecting updated defaults. |
| lib/start-proxy-action.js | Generated build output reflecting updated defaults. |
| lib/setup-codeql-action.js | Generated build output reflecting updated defaults. |
| lib/init-action.js | Generated build output reflecting updated defaults. |
| lib/init-action-post.js | Generated build output reflecting updated defaults. |
| lib/defaults.json | Generated copy of defaults reflecting updated versions. |
| lib/autobuild-action.js | Generated build output reflecting updated defaults. |
| lib/analyze-action.js | Generated build output reflecting updated defaults. |
Copilot's findings
- Files reviewed: 2/11 changed files
- Comments generated: 0
This pull request updates the default CodeQL bundle, as used with
tools: linkedand on GHES, to 2.25.4.