From 4b4089be6d8112b9c577956e91f5e30483021b75 Mon Sep 17 00:00:00 2001 From: Kurt Overmier Date: Sun, 20 Sep 2026 06:19:21 -0500 Subject: [PATCH] chore(ci): bump github/codeql-action to v4.37.6 in one commit Dependabot opened init (#278), autobuild (#276), and analyze (#279) as three separate PRs, each bumping one step of .github/workflows/codeql.yml to 5595ccaf (v4.37.6). CodeQL requires every codeql-action step in a run to be the same version, so each PR on its own left init/autobuild/analyze mismatched and the Analyze (javascript-typescript) job failed on all three. They also all edit the same file, so merging any one makes the other two conflict. Bumping all three refs together is the only form of this change that can pass CI. Supersedes #276, #278, and #279. --- .github/workflows/codeql.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index bce451a..645eea6 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -28,12 +28,12 @@ jobs: uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Initialize CodeQL - uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4 + uses: github/codeql-action/init@5595ccaf912efad79be6eef63a5619ff05969be3 # v4 with: languages: ${{ matrix.language }} - name: Autobuild - uses: github/codeql-action/autobuild@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4 + uses: github/codeql-action/autobuild@5595ccaf912efad79be6eef63a5619ff05969be3 # v4 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4 + uses: github/codeql-action/analyze@5595ccaf912efad79be6eef63a5619ff05969be3 # v4