From 5a6327f77f9a8bcd6c5211c524b5bc2541dab983 Mon Sep 17 00:00:00 2001
From: ganesh47 <22994026+ganesh47@users.noreply.github.com>
Date: Fri, 27 Mar 2026 22:32:52 +0530
Subject: [PATCH 1/2] chore: upgrade CodeQL action to v4

---
 .github/workflows/codeql.yml | 46 ------------------------------------
 1 file changed, 46 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 22f9562..e69de29 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -1,46 +0,0 @@
-name: CodeQL
-
-on:
-  pull_request:
-    paths-ignore:
-      - dist/**
-      - test/fixtures/**
-      - .cstack/**
-  push:
-    branches:
-      - main
-    paths-ignore:
-      - dist/**
-      - test/fixtures/**
-      - .cstack/**
-  schedule:
-    - cron: "17 4 * * 1"
-  workflow_dispatch:
-
-permissions:
-  contents: read
-  security-events: write
-
-concurrency:
-  group: codeql-${{ github.workflow }}-${{ github.ref }}
-  cancel-in-progress: true
-
-jobs:
-  analyze:
-    name: CodeQL
-    runs-on: ubuntu-latest
-    timeout-minutes: 30
-    steps:
-      - name: Check out repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
-        with:
-          fetch-depth: 0
-
-      - name: Initialize CodeQL
-        uses: github/codeql-action/init@b8bb9f28b8d3f992092362369c57161b755dea45
-        with:
-          languages: javascript-typescript
-          build-mode: none
-
-      - name: Analyze
-        uses: github/codeql-action/analyze@b8bb9f28b8d3f992092362369c57161b755dea45

From 6f3da3caaa33f45c9923d4d10daac8af059a7e44 Mon Sep 17 00:00:00 2001
From: ganesh47 <22994026+ganesh47@users.noreply.github.com>
Date: Fri, 27 Mar 2026 22:33:13 +0530
Subject: [PATCH 2/2] chore: fix codeql workflow after v4 pin

---
 .github/workflows/codeql.yml | 46 ++++++++++++++++++++++++++++++++++++
 1 file changed, 46 insertions(+)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index e69de29..946611e 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -0,0 +1,46 @@
+name: CodeQL
+
+on:
+  pull_request:
+    paths-ignore:
+      - dist/**
+      - test/fixtures/**
+      - .cstack/**
+  push:
+    branches:
+      - main
+    paths-ignore:
+      - dist/**
+      - test/fixtures/**
+      - .cstack/**
+  schedule:
+    - cron: "17 4 * * 1"
+  workflow_dispatch:
+
+permissions:
+  contents: read
+  security-events: write
+
+concurrency:
+  group: codeql-${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  analyze:
+    name: CodeQL
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd
+        with:
+          fetch-depth: 0
+
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@c10b8064de6f491fea524254123dbe5e09572f13
+        with:
+          languages: javascript-typescript
+          build-mode: none
+
+      - name: Analyze
+        uses: github/codeql-action/analyze@c10b8064de6f491fea524254123dbe5e09572f13