Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Sep 30, 2025

Bumps github/codeql-action from 2 to 3.

Release notes

Sourced from github/codeql-action's releases.

v2.28.1

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

This is the last planned release of the v2. To continue getting updates for the CodeQL Action, please switch to v3.

2.28.1 - 10 Jan 2025

  • CodeQL Action v2 is now deprecated, and is no longer updated or supported. For better performance, improved security, and new features, upgrade to v3. For more information, see this changelog post. #2677
  • Update default CodeQL bundle version to 2.20.1. #2678

See the full CHANGELOG.md for more information.

v2.28.0

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

This is the last planned release of the v2. To continue getting updates for the CodeQL Action, please switch to v3.

2.28.0 - 20 Dec 2024

  • Bump the minimum CodeQL bundle version to 2.15.5. #2655
  • Don't fail in the unusual case that a file is on the search path. #2660.

See the full CHANGELOG.md for more information.

v2.27.9

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

2.27.9 - 12 Dec 2024

No user facing changes.

See the full CHANGELOG.md for more information.

v2.27.7

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

... (truncated)

Changelog

Sourced from github/codeql-action's changelog.

3.30.5 - 26 Sep 2025

  • We fixed a bug that was introduced in 3.30.4 with upload-sarif which resulted in files without a .sarif extension not getting uploaded. #3160

3.30.4 - 25 Sep 2025

  • We have improved the CodeQL Action's ability to validate that the workflow it is used in does not use different versions of the CodeQL Action for different workflow steps. Mixing different versions of the CodeQL Action in the same workflow is unsupported and can lead to unpredictable results. A warning will now be emitted from the codeql-action/init step if different versions of the CodeQL Action are detected in the workflow file. Additionally, an error will now be thrown by the other CodeQL Action steps if they load a configuration file that was generated by a different version of the codeql-action/init step. #3099 and #3100
  • We added support for reducing the size of dependency caches for Java analyses, which will reduce cache usage and speed up workflows. This will be enabled automatically at a later time. #3107
  • You can now run the latest CodeQL nightly bundle by passing tools: nightly to the init action. In general, the nightly bundle is unstable and we only recommend running it when directed by GitHub staff. #3130
  • Update default CodeQL bundle version to 2.23.1. #3118

3.30.3 - 10 Sep 2025

No user facing changes.

3.30.2 - 09 Sep 2025

  • Fixed a bug which could cause language autodetection to fail. #3084
  • Experimental: The quality-queries input that was added in 3.29.2 as part of an internal experiment is now deprecated and will be removed in an upcoming version of the CodeQL Action. It has been superseded by a new analysis-kinds input, which is part of the same internal experiment. Do not use this in production as it is subject to change at any time. #3064

3.30.1 - 05 Sep 2025

  • Update default CodeQL bundle version to 2.23.0. #3077

3.30.0 - 01 Sep 2025

  • Reduce the size of the CodeQL Action, speeding up workflows by approximately 4 seconds. #3054

3.29.11 - 21 Aug 2025

  • Update default CodeQL bundle version to 2.22.4. #3044

3.29.10 - 18 Aug 2025

No user facing changes.

3.29.9 - 12 Aug 2025

No user facing changes.

3.29.8 - 08 Aug 2025

  • Fix an issue where the Action would autodetect unsupported languages such as HTML. #3015

3.29.7 - 07 Aug 2025

This release rolls back 3.29.6 to address issues with language autodetection. It is identical to 3.29.5.

3.29.6 - 07 Aug 2025

... (truncated)

Commits
  • 3599b3b Merge pull request #3161 from github/update-v3.30.5-0a67bd46a
  • 2ca0085 Update changelog for v3.30.5
  • 0a67bd4 Merge pull request #3160 from github/mbg/fix/upload-sarif
  • 8e34f2f Add changelog
  • 0b7fc56 Fix upload-sarif not uploading non-.sarif files
  • 94a9b7a Merge pull request #3155 from github/mbg/node/no-install-in-actions
  • a0ae9ba Log what the script is doing
  • b27a8ef Exit if running in an Actions workflow
  • 6592567 Merge pull request #3139 from github/henrymercer/fix-log-message
  • fa64a7d Merge pull request #3154 from github/mbg/node/check-up-to-date-deps
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

aisiri-murulidhar and others added 30 commits November 24, 2021 11:40
Change neighborhood from field to dropdown.
This commit adds an import script that reads availability xml generated
from a Realpages report.
…lability-report

feat: import Realpages availability report
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 2.4.1 to 2.5.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v2.4.1...v2.5.0)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
It seems the query builder logic doesn't return lists of the specified
entity type, so it's necessary to map the returned query result to the
entity type. Otherwise, `get` accessors don't work, since those are
only defined on the entity type, and not on the generic objects that
the query returns.
In order for a listing to be active, there are more required fields.
This commit adds these required fields, and relaxes one of the
requirements on the "units" field.
…actions/setup-node-2.5.0

Bump actions/setup-node from 2.4.1 to 2.5.0
fix: pass waitlist + other info from backend
chore: add Martin Luther King II to seed script
Adds translations to the Latest listing section and the Neighborhoods
section.
Sources some images from Google maps, some from rentlinx, and some from
stock photos. It's noted in a comment whenever stock photos are used.
ludtkemorgan and others added 23 commits December 13, 2022 09:09
* feat: change management company to contact information (#1507)

* feat: add verified at field to listings (#1501)

* fix: adding home type to model (#1502)

* fix: wip adding home type to model

* fix: update for swagger changes

* fix: backend swagger updates

* fix: wip migration

* fix: updated migration, detail + summary view

* fix: clean up

* fix: seeding + figma alignment

* fix: added null default

* fix: cleanup per pr feedback

Co-authored-by: Yazeed Loonat <[email protected]>

* 1482/home type filter (#1510)

* fix: wip adding home type to model

* fix: update for swagger changes

* fix: backend swagger updates

* fix: wip migration

* fix: updated migration, detail + summary view

* fix: clean up

* fix: seeding + figma alignment

* fix: added null default

* fix: home type filtering

* fix: merge clean up

* fix: single looping on home types

Co-authored-by: Yazeed Loonat <[email protected]>

* 1480/home types labels (#1511)

* feat: add home type label to listing card

* feat: add home type label to listing view

* feat: add home type tag to existing listing tags array

* feat: remove redundant homeType prop from ListingCard

* feat: add translations (#1513)

* feat: change leasing agent contact translations (#1517)

Co-authored-by: Krzysztof Zięcina <[email protected]>
Co-authored-by: ColinBuyck <[email protected]>
Co-authored-by: Yazeed Loonat <[email protected]>
* fix: missing translation script updates (#1519)

* fix: missing translation script updates

* fix: remove output

* fix: code clean up

* Detroit GA4 Tracking (#1520)

* fix: copy of hba tracking

* fix: remove prod key

Co-authored-by: ColinBuyck <[email protected]>
* Revert "feat: release 2023-19-1 (#1523)"

This reverts commit 88555ab.

* fix: remove confusing footer h tags (#1526)

* fix: correct get-assistance headings (#1527)

* fix: corrected heading use (#1529)

* feat: add translations for expired password (#1531)

* feat: add translations for missing password

* feat: use link from translation file

* feat: remove unused "here" link

* feat: add missing translations (#1532)

* refactor: remove components from local uic if matching base uic (#1542)

* fix: tabIndex approach (#1549)

* fix: tabIndex approach

* fix: negative tabIndex value

* fix: storybook build attempt

* fix: naming + skip link focus

* fix: component clean up

* 3268/listing card headers (#1555)

* fix: minimum changes solution

* fix: implementation of updated props

* fix: aria role description

* fix: release issue with filter grid (#1557)

* feat: add meaningful aria label to view on map link (#1552)

* feat: add meaningful aria label to view on map link

* feat: remove opens in new window label

* feat: use get direction as link label

* feat: remove redundant aria-label

* feat: release 2023-19-1 (#1523) (#1553)

* fix: prettier fixes

---------

Co-authored-by: ColinBuyck <[email protected]>
Co-authored-by: Krzysztof Zięcina <[email protected]>
Co-authored-by: Emily Jablonski <[email protected]>
* fix: reset focus for NVDA (#1556)

* fix: first attempt to reset focus for nvda

* fix: attemmpt with asPath approach

* fix: reset focus in application file

* fix: missing tabIndex value

* fix: hidden new page approach

* fix: new page with state

* fix: functional navigation announcement

* fix: cleaned up css approach

* fix: remove unused css

* fix: remove space typo

* fix: nvda testing without alert

* fix: re-instate alert

* fix: simpler solution for cross browser support

* fix: remove alert since focused

* fix: announcement clean up

* fix: variable naming

* fix: announcement updates pr LH feedback

* fix: heading level typo

* fix: clean up string handling

* fix: clean up rebase

* feat: change labels for no min/max rent (#1569)

* fix: release ux issues (#1571)

* refactor: uptake uic siteheader (#1565)

* fix: show all listings button labels (#1568)

* feat: add meaningful labels to filter buttons

* feat: change reset button label

* fix: add missing filter translations for spanish

* fix: cherry-picked forgot-password from core (#1566)

* fix: cherry-picked commit from core

* fix: update testing approach to mirror core

* fix: undo core test mirroring

* fix: resolve testing error

* fix: revert unrelated changes

* fix: space cleanup

* fix: space cleanup pt 2

* fix: translations added

* fix: custom focus management (#1572)

* fix: custom focus management

* fix: clean up + commenting

* fix: remove auto fix from linter

* fix: add missing screen reader only  labels to fields (#1573)

* fix: update to community type draggability (#1578)

* fix: description grid misalignment (#1581)

* fix: description grid misalignment

* fix: description misalignment

---------

Co-authored-by: ColinBuyck <[email protected]>
Co-authored-by: Krzysztof Zięcina <[email protected]>
Co-authored-by: Emily Jablonski <[email protected]>
Co-authored-by: Yazeed Loonat <[email protected]>
* feat: add user csv export (#1560)

* feat: listing export (#1548)

* feat: starting listing export

* fix: wip building listing query

* fix: csv support

* fix: adding column definitions wip

* fix: wip address query

* fix: updates to fix query

* fix: wip listing selects

* fix: reformatted testing output

* fix: completed select statements

* fix: exporter service wip

* fix: a11y features formatting

* fix: wip adding to exporter

* fix: wip lottery info formatting

* fix: wip date formatting

* fix: listings exporter service fields (95%)

* fix: complete units csv building

* fix: functioning zip download

* fix: req.user type casting

* fix: refactor to config approach

* fix: various csv bugs

* fix: debugging column values

* fix: user access array

* fix: clean up

* fix: clean up pt 2

* fix: ui content and error handling

* fix: ui content and error handling actually

* fix: cleanup + cypress test

* fix: cypress test and naming clean up

* fix: unit test draft

* fix: error handling fix

* fix: removed unused seed

* fix: functional cypress and wip unit tests

* fix: one functional unit test

* fix: functional unit tests

* fix: wip error test

* fix: error message test

* fix: wip module mocking

* fix: generateAsnyc readded to test

* fix: controller cleanup

* fix: functional success message testing

* fix: testing cleanup

* fix: further testing and comment cleanup

* fix: toast timeout

* fix: clean up formatting

* fix: column cleanup

* fix: console log cleanup

* fix: rebase cleanup

* fix: wip bug fixes

* fix: wip data bug resolutions

* fix: unit bug fixes

* fix: formatting contd

* fix: clean up

* fix: button focus issue

* fix: testing repository error

* fix: include csv exporter service in test

* fix: refined testing fix

* fix: button color correction

* fix: align sizing and export language

---------

Co-authored-by: Yazeed Loonat <[email protected]>

* fix: listings export clean up (#1590)

* fix: local import

* fix: unit tests fix

* fix: add aria label to min/max rent fields (#1582)

* fix: remove the due date question (#1584)

* 1525/user access issue (#1592)

* fix: include admin who are not partners

* fix: correct user seed

* fix: remove admin from permissions column

* fix: testing cleanup

* fix: change test location

* fix: add undefined check

* fix: add aria label to table (#1585)

* fix: add aria label to table

* fix: add aria labels to detail tables

* fix: unit labeling on detailed page

* fix: add aria-label to grouped table

* fix: add descriptive alt tags to listings images (#1587)

* fix: add descriptive alt tags to listings images

* fix: add empty value to alt text

* fix: remove redundant photo string

* fix: remove redundant image string from translations

* fix: change min/max rent inputs from number to text with only numbers (#1599)

* fix: resolve bugs from bash (#1597)

* fix: resolve bugs from bash

* fix: paper app helper

* fix: refine helper

* fix: user export fixes (#1600)

* fix: user export fixes

* fix: fix tests

* fix: add cypress downloads to gitignore file

* fix: release scrub (#1604)

* fix: align csv error messages

* fix: timezone temporary approach

* fix: align application export

* fix: formatting case consistency

* fix: missing UTC

* feat: focus title on modal open (#1558)

* feat: focus title on modal open

* feat: bring back id to h1 in modal header

* fix: add a11y statement (#1601)

* fix: added english a11y statement

* fix: formatting feedback

* fix: spanish added

* fix: add ar and bn

* fix: remove unused div and styling

---------

Co-authored-by: ColinBuyck <[email protected]>
Co-authored-by: Yazeed Loonat <[email protected]>
Co-authored-by: Krzysztof Zięcina <[email protected]>
Co-authored-by: Emily Jablonski <[email protected]>
* fix: under construction (#1607)

* fix: add new strings

* fix: text and ui implementation

* fix: text and remaining ui implementation

* fix: update metadata formatter

* fix: variable naming cleanup

* fix: remove markdown files from prettier

---------

Co-authored-by: ColinBuyck <[email protected]>
* fix: add missing line (#1613)

* fix: passing tz as param (#1612)

* fix: passing tz as param

* fix: cleaned up naming

* fix: test updates

* fix: update user export

* fix: users testing update

* fix: align helper approach

* fix: cleaner param approach

* fix: testing update

* fix: fully updating tests

* fix: testing and cleaned up logic

* fix: console log removal

* 1602/export memory improvements (#1614)

* fix: remove unnecessary db call

* refactor: unit formatting approach

* fix: undo formatting changes

* fix: include verifiedAt in listing create (#1616)

---------

Co-authored-by: ColinBuyck <[email protected]>
* feat: update major dependencies (#1589)

* fix: update bull version (#1620)

* 1577/download button can show and be non functional (#1621)

* fix: display paper application button download when application is present

* fix: hide redundant sections when data not provided

* refactor: use paperMethod prop to decide if display download button

* feat: uptake uic components (#1586)

* fix: change reset to setValue for disableUnitsAccordion (#1628)

* fix: various arabic layout fixes (#1629)

* fix: run correct node version

* fix: remove missed detroit-ui-components

* fix: prettier fixes

---------

Co-authored-by: Krzysztof Zięcina <[email protected]>
Co-authored-by: Emily Jablonski <[email protected]>
* fix: flip min rent with max rent (#1634)

* fix: format currency before filter form submit (#1635)

---------

Co-authored-by: Krzysztof Zięcina <[email protected]>
* fix: testing support

* fix: testing support

* fix: new var

* fix: try support toggle

* fix: try support toggle 2

* fix: try support toggle 2

* fix: try support toggle 2
* fix: force users to resign-in

* fix: unrelated testing fix
* fix: explicitly pass token

* fix: replace temp error messaging
* fix: add mshda 2024 chart

* fix: longitude matching

* fix: lat test update
* fix: add 2025 ami charts

* fix: use the correct ami chart
* fix: add transition banner (#1680)

* fix: add transition banner

* fix: make ar more readable

* fix: use boundToLayout prop

* fix: lower case email

* fix: remove tailwind
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2 to 3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@v2...v3)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 30, 2025
@netlify
Copy link

netlify bot commented Sep 30, 2025

Deploy Preview for detroit-public-prod ready!

Name Link
🔨 Latest commit 5a1856d
🔍 Latest deploy log https://app.netlify.com/projects/detroit-public-prod/deploys/68dbed7d02f44300071ce787
😎 Deploy Preview https://deploy-preview-1687--detroit-public-prod.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@netlify
Copy link

netlify bot commented Sep 30, 2025

Deploy Preview for detroit-partners-prod ready!

Name Link
🔨 Latest commit 5a1856d
🔍 Latest deploy log https://app.netlify.com/projects/detroit-partners-prod/deploys/68dbed7df26fda00090b2bd9
😎 Deploy Preview https://deploy-preview-1687--detroit-partners-prod.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.