Skip to content

ci: bump github/codeql-action to v4.39.1 in every step, and group its updates - #306

Merged
Defilan merged 2 commits into
mainfrom
ci/codeql-action-4.39.1
Oct 30, 2026
Merged

Defilan merged 2 commits into
mainfrom
ci/codeql-action-4.39.1

Conversation

@Defilan

@Defilan Defilan commented Oct 30, 2026

Copy link
Copy Markdown
Member

Supersedes #301, #302 and #303. Dependabot opened one PR per step of github/codeql-action, and each fails CodeQL on its own: analyze refuses a config written by an init of another version ("Loaded a configuration file for version '4.38.3', but running version '4.39.1'").

  • Moves init, analyze (codeql.yml) and upload-sarif (scorecard.yml) together to v4.39.1, pinned by commit 9b32540 (the v4.39.1 tag, dereferenced).
  • Adds a Dependabot group so future codeql-action bumps arrive as one PR.

Dependabot closes #301–#303 once this is on main.

… updates

Signed-off-by: Christopher Maher <chris@mahercode.io>
Signed-off-by: Christopher Maher <chris@mahercode.io>
@Defilan
Defilan merged commit 620fb06 into main Oct 30, 2026
16 checks passed
@Defilan
Defilan deleted the ci/codeql-action-4.39.1 branch October 30, 2026 08:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant