Skip to content

Use platform-specific CodeQL bundles and support Linux ARM64 - #33

Open
mbaluda wants to merge 9 commits into
mainfrom
mbaluda/linux-arm64
Open

mbaluda wants to merge 9 commits into
mainfrom
mbaluda/linux-arm64

Conversation

@mbaluda

@mbaluda mbaluda commented Sep 24, 2026 •

Copy link
Copy Markdown

Summary

  • use platform-specific assets for release tags while retaining support for local all-platform archives
  • add native Linux ARM64 bundle and certificate handling
  • discover ARM64 assets when available, verify caches on ubuntu-24.04-arm, and include ARM64 in generated catalog entries
  • preserve cache-plan support for older releases without ARM64 assets
  • bump the package version to 0.6.0

Why

The all-platform CodeQL bundle is
deprecated
and will be removed in mid-March 2027. Linux ARM64 is already available only
through platform-specific downloads.

This also unblocks advanced-security/codeql-development-toolkit#42.

Important

This PR enables ARM64 publication and validation. After it merges, the
main-branch workflow should publish the actual cache release and open the
catalog-entry PR.

Validation

  • 29 unit tests
  • Python, workflow YAML, and catalog-schema validation
  • legacy and ARM64 matrix checks
  • wheel build
  • all PR checks pass

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@mbaluda
mbaluda requested a review from a team as a code owner September 24, 2026 23:00
@mbaluda
mbaluda marked this pull request as draft September 24, 2026 23:03
@mbaluda
mbaluda removed the request for review from a team September 24, 2026 23:04
Keep ARM64 compilation-cache publication out of scope and reuse the existing Linux filtering path for the platform-specific source archive.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

This comment was marked as resolved.

mbaluda and others added 2 commits September 25, 2026 12:17
Stop depending on the deprecated all-platform release asset and select the host-specific bundle for release tags. Also use the native Linux ARM64 Java tools when installing certificates.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Discover native ARM64 assets when available, verify the shared caches on an ARM64 runner, and include the platform in generated catalog entries while preserving older release backfills.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@mbaluda
mbaluda requested a lite review from Copilot September 25, 2026 10:40
@mbaluda mbaluda changed the title Add Linux ARM64 bundle support Use platform-specific CodeQL bundles and support Linux ARM64 Sep 25, 2026
@mbaluda
mbaluda requested a review from felickz September 25, 2026 10:41

This comment was marked as resolved.

mbaluda and others added 2 commits September 25, 2026 13:00
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

This comment was marked as resolved.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

This comment was marked as resolved.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@mbaluda
mbaluda requested a lite review from Copilot September 25, 2026 11:55

This comment was marked as resolved.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

This comment was marked as resolved.

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot review overview

🟢 Approval recommended

The platform handling, legacy compatibility, workflow integration, and targeted tests are consistent and complete.

Review effort: Balanced
Findings: None

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants