From b2b6ed241b8d158afc1ba2cf5472ebd0d89360f5 Mon Sep 17 00:00:00 2001 From: Hugo Date: Thu, 19 Feb 2026 08:27:12 +0100 Subject: [PATCH 1/5] Add python and go extension to publish workflow Add python and go extension to publish workflow --- .github/workflows/publish.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 6642153e..9773a555 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -103,7 +103,7 @@ jobs: strategy: fail-fast: false matrix: - language: ["csharp", "java"] + language: ["csharp", "java", "python", "go"] steps: - uses: actions/checkout@v5 From 27f3706b929d112500c0c302ba572f1f64d980c9 Mon Sep 17 00:00:00 2001 From: Chad Bentz <1760475+felickz@users.noreply.github.com> Date: Mon, 27 Jul 2026 16:26:14 -0400 Subject: [PATCH 2/5] Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> --- .github/workflows/publish.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 0106b71e..f858c631 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -191,7 +191,7 @@ jobs: strategy: fail-fast: false matrix: - language: ["csharp", "java", "python", "go"] + language: ["csharp", "go", "java", "python"] steps: - uses: actions/checkout@v7 From c0f49d44bd51c486473a5e30ece7fe8aa78e99b0 Mon Sep 17 00:00:00 2001 From: Chad Bentz <1760475+felickz@users.noreply.github.com> Date: Mon, 27 Jul 2026 16:36:30 -0400 Subject: [PATCH 3/5] Add Python and Go to CI workflow languages --- .github/workflows/ci.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 9c649cf1..e22a308a 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -165,7 +165,7 @@ jobs: strategy: fail-fast: false matrix: - language: [ 'csharp', 'java' ] + language: [ 'csharp', 'go', 'java', 'python' ] steps: - uses: actions/checkout@v7 @@ -250,4 +250,4 @@ jobs: env: GITHUB_TOKEN: ${{ github.token }} run: | - ./.github/scripts/pr-configs.sh "${{ github.event.number }}" \ No newline at end of file + ./.github/scripts/pr-configs.sh "${{ github.event.number }}" From 6a8642e637433446cd1a5f26b2871af08f1fd45d Mon Sep 17 00:00:00 2001 From: Chad Bentz <1760475+felickz@users.noreply.github.com> Date: Mon, 27 Jul 2026 16:41:06 -0400 Subject: [PATCH 4/5] Update EXT_LANGUAGES to include Python and Go --- .github/scripts/build-publish-summary.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/scripts/build-publish-summary.sh b/.github/scripts/build-publish-summary.sh index 69098e86..14a5292c 100755 --- a/.github/scripts/build-publish-summary.sh +++ b/.github/scripts/build-publish-summary.sh @@ -29,7 +29,7 @@ fi LANGUAGES=(cpp csharp go java javascript python ruby) TYPES=(src lib ext ext-library-sources) -EXT_LANGUAGES=(csharp java) +EXT_LANGUAGES=(csharp go java python) lang_label() { case "$1" in From b7948eb7d8e5f21a874788d0c3d656b5e4b71399 Mon Sep 17 00:00:00 2001 From: Chad Bentz <1760475+felickz@users.noreply.github.com> Date: Mon, 27 Jul 2026 16:51:30 -0400 Subject: [PATCH 5/5] Clarify supported languages for extensions Updated the supported languages for extensions in the contributing guidelines. --- CONTRIBUTING.md | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md index 6640302e..3d1f26c4 100644 --- a/CONTRIBUTING.md +++ b/CONTRIBUTING.md @@ -161,7 +161,7 @@ process for each; most of it is manual today. [`publish.yml`][publish-workflow] is organized as five jobs: four publish jobs, one per pack type (`queries` for `src`, `library` for `lib`, `extensions` for `ext`, `library_sources_extensions` for `ext-library-sources`), each matrixed over every language that has that pack type -(`ext`/`ext-library-sources` only run for `csharp`/`java` today, see [#144][pr-144]) - plus a fifth +(`ext` runs for `csharp`/`go`/`java`/`python`; `ext-library-sources` only runs for `csharp`/`java`, the only languages with that pack) - plus a fifth `summary` job that runs after the other four (`if: always()`, so it still runs even if one of them fails), aggregates their per-pack results into the publish-summary and CodeQL library/query pack version tables, and (on the release-cut `push` trigger only) upserts both tables into the GitHub @@ -184,7 +184,7 @@ To ship a change: - [ ] Make your change in the pack directory you intend to publish: `/src` (queries), `/lib` (library), or `/ext`/`/ext-library-sources` (extensions, - `csharp`/`java` only). + `csharp`/`go`/`java`/`python` only). - [ ] Bump `version:` in that pack's `qlpack.yml`, following [semver](https://semver.org/). Only bump the specific pack(s) you changed; other languages/pack types are unaffected and don't need touching. @@ -424,7 +424,6 @@ Please do get in touch (privacy@github.com) if you have any questions about this [pr-118]: https://github.com/GitHubSecurityLab/CodeQL-Community-Packs/pull/118 [pr-124]: https://github.com/GitHubSecurityLab/CodeQL-Community-Packs/pull/124 [pr-126]: https://github.com/GitHubSecurityLab/CodeQL-Community-Packs/pull/126 -[pr-144]: https://github.com/GitHubSecurityLab/CodeQL-Community-Packs/pull/144 [pr-155]: https://github.com/GitHubSecurityLab/CodeQL-Community-Packs/pull/155 [pr-158]: https://github.com/GitHubSecurityLab/CodeQL-Community-Packs/pull/158 [pr-159]: https://github.com/GitHubSecurityLab/CodeQL-Community-Packs/pull/159