Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: codellm-devkit/codeanalyzer-java
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v2.4.1
Choose a base ref
...
head repository: codellm-devkit/codeanalyzer-java
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: main
Choose a head ref
  • 3 commits
  • 3 files changed
  • 1 contributor

Commits on Jun 23, 2026

  1. ci(release): bump actions off deprecated Node 20 runtime 

    actions/checkout v4->v5, mikepenz/release-changelog-builder-action v5->v6,
softprops/action-gh-release v1->v3 — all now run on Node 24, clearing the
Node-20 deprecation warning in the Java Release workflow.
    @rahlk
    rahlk committed Jun 23, 2026
    Configuration menu
    Copy the full SHA
    753915e View commit details
    Browse the repository at this point in the history

  2. ci: add Dependabot config scoped to the project (exclude vendored tes… 

    …t fixtures)

Configure weekly Gradle and GitHub Actions updates for the analyzer itself, and
deliberately leave src/test/resources/test-applications/** out so Dependabot does
not raise update PRs against the vendored sample apps used as analysis fixtures.
    @rahlk
    rahlk committed Jun 23, 2026
    Configuration menu
    Copy the full SHA
    ab69ae2 View commit details
    Browse the repository at this point in the history

  3. ci: add SDK lockstep release on codeanalyzer-java release 

    On every published release, update [tool.backend-versions].codeanalyzer-java in
codellm-devkit/python-sdk, patch-bump the SDK's own version, and push a matching
tag to trigger the SDK's release/PyPI publish. Uses secrets.CLDK_AUTH_TOKEN.
Idempotent: skips when the SDK already records the released backend version.
    @rahlk
    rahlk committed Jun 23, 2026
    Configuration menu
    Copy the full SHA
    56b044f View commit details
    Browse the repository at this point in the history
Loading