From a6efb6e5ee07573bbaea77d0d4b55166b49e379d Mon Sep 17 00:00:00 2001 From: Jaixii Date: Sun, 9 Aug 2026 19:34:41 -0400 Subject: [PATCH] chore(deps): bump github/codeql-action from 4.37.3 to 4.37.6 Bumps both init and analyze actions together to avoid version skew. --- .github/workflows/codeql.yml | 4 ++-- .github/workflows/release.yml | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 68d89f9c..3493f815 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -28,14 +28,14 @@ jobs: steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: Initialize CodeQL - uses: github/codeql-action/init@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4 + uses: github/codeql-action/init@5595ccaf912efad79be6eef63a5619ff05969be3 # v4 with: languages: ${{ matrix.language }} build-mode: none config-file: ./.github/codeql/codeql-config.yml - name: Analyze id: analyze - uses: github/codeql-action/analyze@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4 + uses: github/codeql-action/analyze@5595ccaf912efad79be6eef63a5619ff05969be3 # v4 with: output: codeql-results - name: Require clean CodeQL results diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 83be893d..0f9acac3 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -656,14 +656,14 @@ jobs: with: python-version: "3.11" - name: Initialize CodeQL - uses: github/codeql-action/init@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4 + uses: github/codeql-action/init@5595ccaf912efad79be6eef63a5619ff05969be3 # v4 with: languages: ${{ matrix.language }} build-mode: none config-file: ./.github/codeql/codeql-config.yml - name: Analyze complete source tree id: analyze - uses: github/codeql-action/analyze@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4 + uses: github/codeql-action/analyze@5595ccaf912efad79be6eef63a5619ff05969be3 # v4 with: output: codeql-results upload: never