[einari]

Removed

• The common workflow bootstrap no longer propagates .github/codeql/codeql-config.yml, and changes to it no longer trigger the bootstrap; CodeQL is turned off across the Cratis organization.

[woksin]

@einari, an update on this PR, which was never merged.

On 25 October 00:08Z, merging #210 triggered the bootstrap (run https://github.com/Cratis/Workflows/actions/runs/40145560859). Because this PR wasn't merged, the run put .github/codeql/codeql-config.yml back into 32 repositories, including Chronicle, where you had deleted it on purpose. 31 of those commits carry [skip ci]. None of the 32 repositories runs CodeQL (no advanced setup, no default setup), so the file is inert.

Next steps:

• This PR conflicts with Add java-version input to update-packages #209–Let a label added right after opening supersede the release-intent check #213. A superseding PR from current main carries this change and credits it with (#200). (The [skip ci] on bootstrap commits is a documented exception from Rolling out shared workflow files should not start builds and releases in every repository #163: only the canary commit runs CI, so a rollout doesn't start CI in every repository at once. It stays.)
• Removing the file again from the 32 repositories is a separate choice:
  • delete it now, which means up to 32 CI runs on main;
  • let each repository's next PR drop it (recommended, no extra CI);
  • leave it.

[woksin]

Superseded by #214, which re-applied this change on current main and is merged (6eb3729). The bootstrap run it triggered (https://github.com/Cratis/Workflows/actions/runs/40172402715) pushed 0 commits. Thanks @einari.

[einari]

@woksin Damn.. That was an oversight. Lets just get this in and disable codeql on everything again.