Merge pull request #1707 from github/mergeback/v2.3.5-to-main-0225834c

Mergeback v2.3.5 refs/heads/releases/v2 into main

CHANGELOG.md

@@ -2,7 +2,12 @@
 
 ## [UNRELEASED]
 
+No user facing changes.
+
+## 2.3.5 - 25 May 2023
+
 - Allow invalid URIs to be used as values to `artifactLocation.uri` properties. This reverses a change from [#1668](https://github.com/github/codeql-action/pull/1668) that inadvertently led to stricter validation of some URI values. [#1705](https://github.com/github/codeql-action/pull/1705)
+- Gracefully handle invalid URIs when fingerprinting. [#1694](https://github.com/github/codeql-action/pull/1694)
 
 ## 2.3.4 - 24 May 2023
 

node_modules/.package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "codeql",
-  "version": "2.3.5",
+  "version": "2.3.6",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {

package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "codeql",
-  "version": "2.3.5",
+  "version": "2.3.6",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "codeql",
-      "version": "2.3.5",
+      "version": "2.3.6",
       "license": "MIT",
       "dependencies": {
         "@actions/artifact": "^1.1.0",

package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeql",
-  "version": "2.3.5",
+  "version": "2.3.6",
   "private": true,
   "description": "CodeQL action",
   "scripts": {