Fix CI with standard macOS runners and update brace-expansion

.github/workflows/codeql.yml

@@ -74,6 +74,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
+        os: [ubuntu-22.04,ubuntu-24.04,windows-2022,windows-2025,macos-14,macos-15]
         os:
           - ubuntu-22.04
           - ubuntu-24.04
@@ -88,6 +89,26 @@ jobs:
       security-events: write
 
     steps:
+    - name: Checkout
+      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+    - name: Initialize CodeQL
+      uses: ./init
+      id: init
+      with:
+        languages: javascript
+        config-file: ./.github/codeql/codeql-config-javascript.yml
+        tools: ${{ matrix.tools }}
+    # confirm steps.init.outputs.codeql-path points to the codeql binary
+    - name: Print CodeQL Version
+      run: >
+        "$CODEQL" version --format=json
+      env:
+        CODEQL: ${{steps.init.outputs.codeql-path}}
+    - name: Perform CodeQL Analysis
+      uses: ./analyze
+      with:
+        category: "/language:javascript"
+        upload: ${{ (github.repository == 'github/codeql-action' && matrix.os == 'ubuntu-24.04' && !matrix.tools && github.event_name != 'merge_group' && 'always' ) || 'never' }}
       - name: Checkout
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Initialize CodeQL
@@ -124,6 +145,24 @@ jobs:
       security-events: write
 
     steps:
+    - name: Checkout
+      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+    - name: Initialize CodeQL
+      uses: ./init
+      with:
+        languages: ${{ matrix.language }}
+        build-mode: none
+        config: >
+          paths-ignore:
+            - lib
+            - tests
+          queries:
+            - uses: security-and-quality
+    - name: Perform CodeQL Analysis
+      uses: ./analyze
+      with:
+        category: "/language:${{ matrix.language }}"
+        upload: ${{ (github.repository == 'github/codeql-action' && github.event_name != 'merge_group' && 'always') || 'never' }}
       - name: Checkout
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Initialize CodeQL

pr-checks/checks/all-platform-bundle.yml

@@ -3,6 +3,7 @@ description: "Tests using an all-platform CodeQL Bundle"
 operatingSystems:
   - ubuntu
   - os: macos
+    runner-image: macos-latest
     runner-image: macos-26-xlarge
   - windows
 versions:

pr-checks/checks/multi-language-autodetect.yml

@@ -3,12 +3,13 @@ description: "An end-to-end integration test of a multi-language repository usin
 operatingSystems:
   - ubuntu
   - os: macos
+    runner-image: macos-latest
     runner-image: macos-26-xlarge
   # Older CodeQL CLI versions only support Swift up to 6.1, which requires Xcode 16. That is
   # not available on macOS 26, so run these versions on macOS 15 where we select Xcode 16
   # below. See https://github.com/actions/runner-images/issues/14167.
   - os: macos
-    runner-image: macos-15-xlarge
+    runner-image: macos-15
     codeql-versions:
       - stable-v2.20.7
       - stable-v2.21.4
@@ -29,7 +30,7 @@ steps:
 
   - name: Use Xcode 16
     # Only the older CodeQL CLI versions need Xcode 16, and these run on macOS 15.
-    if: matrix.os == 'macos-15-xlarge'
+    if: matrix.os == 'macos-15'
     run: sudo xcode-select -s "/Applications/Xcode_16.app"
 
   - uses: ./../action/init

pr-checks/checks/per-language-bundle-validation.yml

@@ -37,6 +37,8 @@ matrix:
       os: ubuntu-26.04
       version: linked
     - language: swift
+      os: macos-latest
+      version: nightly-latest
       os: macos-26-xlarge
       version: linked
       build-mode: autobuild

pr-checks/checks/swift-autobuild.yml

@@ -4,6 +4,7 @@ versions:
   - nightly-latest
 operatingSystems:
   - os: macos
+    runner-image: macos-latest
     runner-image: macos-26-xlarge
 steps:
   - uses: ./../action/init

pr-checks/checks/swift-custom-build.yml

@@ -6,6 +6,7 @@ versions:
   - nightly-latest
 operatingSystems:
   - os: macos
+    runner-image: macos-latest
     runner-image: macos-26-xlarge
 installGo: true
 installDotNet: true