Merge pull request github#2778 from github/update-v3.28.10-9856c48b1

Merge main into releases/v3

Author: igfoo

.github/workflows/__go-tracing-autobuilder.yml

@@ -168,7 +168,7 @@ jobs:
             --draft
 
       - name: Generate token
-        uses: actions/create-github-app-token@136412a57a7081aa63c935a2cc2918f76c34f514
+        uses: actions/create-github-app-token@0d564482f06ca65fa9e77e2510873638c82206f2
         id: app-token
         with:
           app-id: ${{ vars.AUTOMATION_APP_ID }}

.github/workflows/__go-tracing-custom-build-steps.yml

@@ -124,7 +124,7 @@ jobs:
       pull-requests: write # needed to create pull request
     steps:
     - name: Generate token
-      uses: actions/create-github-app-token@136412a57a7081aa63c935a2cc2918f76c34f514
+      uses: actions/create-github-app-token@0d564482f06ca65fa9e77e2510873638c82206f2
       id: app-token
       with:
         app-id: ${{ vars.AUTOMATION_APP_ID }}

.github/workflows/__go-tracing-legacy-workflow.yml

@@ -16,5 +16,5 @@ repos:
         name: Synchronize PR check workflows
         files: ^.github/workflows/__.*\.yml$|^pr-checks
         language: system
-        entry: python3 pr-checks/sync.py
+        entry: pr-checks/sync.sh
         pass_filenames: false

.github/workflows/__rubocop-multi-language.yml

@@ -2,6 +2,11 @@
 
 See the [releases page](https://github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs.
 
+## 3.28.10 - 21 Feb 2025
+
+- Update default CodeQL bundle version to 2.20.5. [#2772](https://github.com/github/codeql-action/pull/2772)
+- Address an issue where the CodeQL Bundle would occasionally fail to decompress on macOS. [#2768](https://github.com/github/codeql-action/pull/2768)
+
 ## 3.28.9 - 07 Feb 2025
 
 - Update default CodeQL bundle version to 2.20.4. [#2753](https://github.com/github/codeql-action/pull/2753)

.github/workflows/__rust.yml

@@ -0,0 +1,10 @@
+# Sync generated files (javascript and PR checks)
+sync: build update-pr-checks
+
+# Perform all necessary steps to update the PR checks
+update-pr-checks:
+    pr-checks/sync.sh
+
+# Transpile typescript code into javascript
+build:
+    npm run build