PR Checks: Use tools: linked rather than tools: latest

Also changes the input and output in the `prepare-test` Action to use `linked`.

pr-checks/checks/autobuild-action.yml

@@ -1,6 +1,6 @@
 name: "autobuild-action"
 description: "Tests that the C# autobuild action works"
-versions: ["latest"]
+versions: ["linked"]
 steps:
   - uses: ./../action/init
     with:

pr-checks/checks/autobuild-direct-tracing.yml

@@ -1,7 +1,7 @@
 name: "Autobuild direct tracing"
 description: "An end-to-end integration test of a Java repository built using 'build-mode: autobuild', with direct tracing enabled"
 operatingSystems: ["ubuntu", "windows"]
-versions: ["latest", "nightly-latest"]
+versions: ["linked", "nightly-latest"]
 env:
   CODEQL_ACTION_AUTOBUILD_BUILD_MODE_DIRECT_TRACING: true
 steps:

pr-checks/checks/build-mode-none.yml

@@ -1,7 +1,7 @@
 name: "Build mode none"
 description: "An end-to-end integration test of a Java repository built using 'build-mode: none'"
 operatingSystems: ["ubuntu"]
-versions: ["latest", "nightly-latest"]
+versions: ["linked", "nightly-latest"]
 steps:
   - uses: ./../action/init
     id: init

pr-checks/checks/config-export.yml

@@ -1,6 +1,6 @@
 name: "Config export"
 description: "Tests that the code scanning configuration file is exported to SARIF correctly."
-versions: ["latest", "nightly-latest"]
+versions: ["linked", "nightly-latest"]
 steps:
   - uses: ./../action/init
     with:

pr-checks/checks/config-input.yml

@@ -1,7 +1,7 @@
 name: "Config input"
 description: "Tests specifying configuration using the config input"
 operatingSystems: ["ubuntu"]
-versions: ["latest"]
+versions: ["linked"]
 steps:
   - name: Copy queries into workspace
     run: |

pr-checks/checks/cpp-deptrace-disabled.yml

@@ -1,7 +1,7 @@
 name: "C/C++: disabling autoinstalling dependencies (Linux)"
 description: "Checks that running C/C++ autobuild with autoinstalling dependencies explicitly disabled works"
 operatingSystems: ["ubuntu"]
-versions: ["latest", "default", "nightly-latest"] # This feature is not compatible with CLIs < 2.15.0
+versions: ["linked", "default", "nightly-latest"] # This feature is not compatible with CLIs < 2.15.0
 env:
   DOTNET_GENERATE_ASPNET_CERTIFICATE: "false"
 steps:

pr-checks/checks/cpp-deptrace-enabled.yml

@@ -1,7 +1,7 @@
 name: "C/C++: autoinstalling dependencies (Linux)"
 description: "Checks that running C/C++ autobuild with autoinstalling dependencies works"
 operatingSystems: ["ubuntu"]
-versions: ["latest", "default", "nightly-latest"] # This feature is not compatible with CLIs < 2.15.0
+versions: ["linked", "default", "nightly-latest"] # This feature is not compatible with CLIs < 2.15.0
 env:
   DOTNET_GENERATE_ASPNET_CERTIFICATE: "false"
 steps:

pr-checks/checks/diagnostics-export.yml

@@ -2,7 +2,7 @@ name: "Diagnostic export"
 description: "Tests that manually added diagnostics are correctly exported to SARIF."
 # Test on 2.12.6 (which requires a workaround in the Action), the latest release, and the latest
 # nightly.
-versions: ["stable-20230403", "latest", "nightly-latest"]
+versions: ["stable-20230403", "linked", "nightly-latest"]
 env:
   CODEQL_ACTION_EXPORT_DIAGNOSTICS: true
 steps:

pr-checks/checks/extractor-ram-threads.yml

@@ -1,6 +1,6 @@
 name: "Extractor ram and threads options test"
 description: "Tests passing RAM and threads limits to extractors"
-versions: ["latest"]
+versions: ["linked"]
 operatingSystems: ["ubuntu"]
 steps:
   - uses: ./../action/init

pr-checks/checks/init-with-registries.yml

@@ -7,7 +7,7 @@ description: "Checks that specifying a registries block and associated auth work
 versions: [
     # This feature is not compatible with older CLIs
     "default",
-    "latest",
+    "linked",
     "nightly-latest",
 ]
 

pr-checks/checks/javascript-source-root.yml

@@ -1,6 +1,6 @@
 name: "Custom source root"
 description: "Checks that the argument specifying a non-default source root works"
-versions: ["latest", "default", "nightly-latest"] # This feature is not compatible with old CLIs
+versions: ["linked", "default", "nightly-latest"] # This feature is not compatible with old CLIs
 operatingSystems: ["ubuntu"]
 steps:
   - name: Move codeql-action

pr-checks/checks/language-aliases.yml

@@ -1,6 +1,6 @@
 name: "Language aliases"
 description: "Tests that language aliases are resolved correctly"
-versions: ["latest"]
+versions: ["linked"]
 operatingSystems: ["ubuntu"]
 steps:
   - uses: ./../action/init

pr-checks/checks/packaging-codescanning-config-inputs-js.yml

@@ -1,6 +1,6 @@
 name: "Packaging: Config and input passed to the CLI"
 description: "Checks that specifying packages using a combination of a config file and input to the Action works"
-versions: ["latest", "default", "nightly-latest"] # This feature is not compatible with old CLIs
+versions: ["linked", "default", "nightly-latest"] # This feature is not compatible with old CLIs
 steps:
   - uses: ./../action/init
     with:

pr-checks/checks/packaging-config-inputs-js.yml

@@ -1,6 +1,6 @@
 name: "Packaging: Config and input"
 description: "Checks that specifying packages using a combination of a config file and input to the Action works"
-versions: ["latest", "default", "nightly-latest"] # This feature is not compatible with old CLIs
+versions: ["linked", "default", "nightly-latest"] # This feature is not compatible with old CLIs
 steps:
   - uses: ./../action/init
     with:

pr-checks/checks/packaging-config-js.yml

@@ -1,6 +1,6 @@
 name: "Packaging: Config file"
 description: "Checks that specifying packages using only a config file works"
-versions: ["latest", "default", "nightly-latest"] # This feature is not compatible with old CLIs
+versions: ["linked", "default", "nightly-latest"] # This feature is not compatible with old CLIs
 steps:
   - uses: ./../action/init
     with:

pr-checks/checks/packaging-inputs-js.yml

@@ -1,6 +1,6 @@
 name: "Packaging: Action input"
 description: "Checks that specifying packages using the input to the Action works"
-versions: ["latest", "default", "nightly-latest"] # This feature is not compatible with old CLIs
+versions: ["linked", "default", "nightly-latest"] # This feature is not compatible with old CLIs
 steps:
   - uses: ./../action/init
     with:

pr-checks/checks/resolve-environment-action.yml

@@ -1,6 +1,6 @@
 name: "Resolve environment"
 description: "Tests that the resolve-environment action works for Go and JavaScript/TypeScript"
-versions: ["stable-v2.13.4", "default", "latest", "nightly-latest"]
+versions: ["stable-v2.13.4", "default", "linked", "nightly-latest"]
 steps:
   - uses: ./../action/init
     with:

pr-checks/checks/ruby.yml

@@ -1,6 +1,6 @@
 name: "Ruby analysis"
 description: "Tests creation of a Ruby database"
-versions: ["latest", "default", "nightly-latest"]
+versions: ["linked", "default", "nightly-latest"]
 operatingSystems: ["ubuntu", "macos"]
 steps:
   - uses: ./../action/init

pr-checks/checks/split-workflow.yml

@@ -1,7 +1,7 @@
 name: "Split workflow"
 description: "Tests a split-up workflow in which we first build a database and later analyze it"
 operatingSystems: ["ubuntu", "macos"]
-versions: ["latest", "default", "nightly-latest"] # This feature is not compatible with old CLIs
+versions: ["linked", "default", "nightly-latest"] # This feature is not compatible with old CLIs
 steps:
   - uses: ./../action/init
     with:

pr-checks/checks/submit-sarif-failure.yml

@@ -1,6 +1,6 @@
 name: Submit SARIF after failure
 description: Check that a SARIF file is submitted for the workflow run if it fails
-versions: ["latest", "default", "nightly-latest"]
+versions: ["linked", "default", "nightly-latest"]
 operatingSystems: ["ubuntu"]
 
 env:

pr-checks/checks/swift-custom-build.yml

@@ -1,6 +1,6 @@
 name: "Swift analysis using a custom build command"
 description: "Tests creation of a Swift database using custom build"
-versions: ["latest", "default", "nightly-latest"]
+versions: ["linked", "default", "nightly-latest"]
 # TODO: Add ubuntu back for `nightly-latest` and `latest` once CLI v2.17.4 is available.
 operatingSystems: ["macos"] 
 env:

pr-checks/checks/test-autobuild-working-dir.yml

@@ -1,6 +1,6 @@
 name: "Autobuild working directory"
 description: "Tests working-directory input of autobuild action"
-versions: ["latest"]
+versions: ["linked"]
 operatingSystems: ["ubuntu"]
 steps:
   - name: Test setup

pr-checks/checks/test-proxy.yml

@@ -1,6 +1,6 @@
 name: "Proxy test"
 description: "Tests using a proxy specified by the https_proxy environment variable"
-versions: ["latest"]
+versions: ["linked"]
 operatingSystems: ["ubuntu"]
 container:
   image: ubuntu:22.04

pr-checks/checks/unset-environment.yml

@@ -1,7 +1,7 @@
 name: "Test unsetting environment variables"
 description: "An end-to-end integration test that unsets some environment variables"
 # TODO: Switch back to all versions once CLI v2.17.4 is available and running on ubuntu again.
-versions: ["stable-v2.14.6", "stable-v2.15.5", "stable-v2.16.6", "latest", "default", "nightly-latest"] 
+versions: ["stable-v2.14.6", "stable-v2.15.5", "stable-v2.16.6", "linked", "default", "nightly-latest"] 
 operatingSystems: ["macos"] # TODO: Switch back to ubuntu for `nightly-latest` and `latest` once CLI v2.17.4 is available.
 steps:
   - uses: ./../action/init

pr-checks/checks/with-checkout-path.yml

@@ -1,6 +1,6 @@
 name: "Use a custom `checkout_path`"
 description: "Checks that a custom `checkout_path` will find the proper commit_oid"
-versions: ["latest"]
+versions: ["linked"]
 steps:
   # This ensures we don't accidentally use the original checkout for any part of the test.
   - name: Delete original checkout

pr-checks/sync.py

@@ -22,7 +22,7 @@ defaultTestVersions = [
     # The version of CodeQL shipped with the Action in `defaults.json`. During the release process
     # for a new CodeQL release, there will be a period of time during which this will be newer than
     # the default version on Dotcom.
-    "latest",
+    "linked",
     # A nightly build directly from the our private repo, built in the last 24 hours.
     "nightly-latest"
 ]