Skip to content

Fix update-release-version.sh for explicit pack version updates#353

Merged
data-douser merged 2 commits intomainfrom
dd/fix-update-release-version/1
Mar 31, 2026
Merged

Fix update-release-version.sh for explicit pack version updates#353
data-douser merged 2 commits intomainfrom
dd/fix-update-release-version/1

Conversation

@data-douser
Copy link
Copy Markdown
Collaborator

Fixes the update-release-version.sh script to update CodeQL pack dependency versions in sync with CodeQL CLI version when a pack dependency points to an explicit pack version vice a semver range or (greater than) caret.

Fixes the cause of the version mismatch fixed by PR #352.

What This PR Contributes

Improvements to dependency version updating:

  • Enhanced the update_internal_deps() function to update dependencies regardless of whether the pack name or version is quoted or unquoted, covering all YAML key-value formats found in qlpack.yml files. [1] [2]
  • Updated the documentation/comments to reflect the expanded support for various YAML formats.

Future Works

Fixes the update-release-version.sh script to update CodeQL pack
dependency versions in sync with CodeQL CLI version when a pack
dependency points to an explicit pack version vice a semver range
or (greater than) caret.

Fixes the cause of the version mismatch fixed by PR #352.
@data-douser data-douser added the bug Something isn't working label Mar 31, 2026
@data-douser data-douser self-assigned this Mar 31, 2026
@data-douser data-douser marked this pull request as ready for review March 31, 2026 13:44
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates scripts/update-release-version.sh so internal CodeQL pack dependency versions are bumped reliably even when qlpack.yml uses quoted keys and/or quoted exact version strings (not just caret ranges).

Changes:

  • Expand update_internal_deps() to also update exact quoted versions ("2.3.0" -> "2.4.0").
  • Make internal dependency key matching tolerant of quoted vs unquoted pack names.
  • Update in-script documentation/comments to reflect the supported YAML formats.

@data-douser data-douser enabled auto-merge (squash) March 31, 2026 15:46
Copy link
Copy Markdown
Contributor

@knewbury01 knewbury01 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm!

@data-douser data-douser merged commit 0711aaa into main Mar 31, 2026
10 checks passed
@data-douser data-douser deleted the dd/fix-update-release-version/1 branch March 31, 2026 19:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug Something isn't working

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants