From 8b47d126f96455322afc3c69e7d90cacc7addd38 Mon Sep 17 00:00:00 2001 From: Renn F Date: Sun, 25 Oct 2026 18:08:05 +0100 Subject: [PATCH] chore(deps): bump workflow actions together Workflow refs: autobuild v4.39.0->v4.39.1,init v4.39.0->v4.39.1,analyze v4.39.0->v4.39.1. All references of each multi-step action move in one commit so workflows such as CodeQL run against a single action version; single-step Dependabot PRs leave the steps of one workflow on different versions and fail their own CI. I also grouped github-actions updates in .github/dependabot.yml so future action bumps arrive as one weekly PR instead of one PR per workflow step. --- .github/dependabot.yml | 4 ++++ .github/workflows/code-ql.yml | 6 +++--- 2 files changed, 7 insertions(+), 3 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 5043979..786726c 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -7,6 +7,10 @@ updates: day: "monday" time: "02:00" timezone: "UTC" + groups: + actions: + patterns: + - "*" - package-ecosystem: "gomod" directory: "/" diff --git a/.github/workflows/code-ql.yml b/.github/workflows/code-ql.yml index ab35d1d..6685816 100644 --- a/.github/workflows/code-ql.yml +++ b/.github/workflows/code-ql.yml @@ -29,15 +29,15 @@ jobs: persist-credentials: false - name: Initialize CodeQL - uses: github/codeql-action/init@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0 + uses: github/codeql-action/init@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1 with: languages: go,actions - name: Autobuild - uses: github/codeql-action/autobuild@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0 + uses: github/codeql-action/autobuild@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0 + uses: github/codeql-action/analyze@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1 with: # The category of the earlier `analyze` job, so the existing analyses and alerts carry over. category: .github/workflows/code-ql.yml:analyze