Repository navigation
build(deps): bump github/codeql-action/upload-sarif from 3.38.1 to 4.38.3 - #15
Open
dependabot[bot] wants to merge 2 commits into
Open
dependabot[bot] wants to merge 2 commits into
dependabot[bot] wants to merge 2 commits into
Conversation
dependabot
Bot
added
dependencies
Deploying codewhip with
|
| Latest commit: |
5b394b5
|
| Status: | ✅ Deploy successful! |
| Preview URL: | https://42ff04ef.codewhip.pages.dev |
| Branch Preview URL: | https://dependabot-github-actions-gi-0ojs.codewhip.pages.dev |
allocateChildBudgets clamped each share at Math.max(1, …), so four children on a two-token remainder each drew 1 and the SUM exceeded the pool while parentBudget still reported 2 — false exactly when the budget was tight enough for the split to matter. The clamps are gone; the fix is their deletion. The remainder stays in the coordination reserve, a 0 allocation is dropped and NAMED in the tool output rather than re-floored into a run (the child runner no longer re-floors a 0 either, which is how the floor used to get back in), and delegate's pool-exhausted case is a refusal with the numbers instead of a 1-token child. src/budget.test.ts is new — the module had no test file while it owned the arithmetic that was wrong — and pins the invariant over a table of (parent, count) pairs, not the examples that follow it. Two more in the same seam: delegate_many's "[agent] started:" lines sat inside the `budget !== undefined` branch, so a fan-out on a run with no token budget went quiet between the last parent event and the first report (the exact silence the line exists to prevent); and a single child carried no costCheck at all, so delegate under --max-budget-usd spent its whole 85% share before the parent re-read the ceiling at its next turn. The ceiling is forwarded to a single child only — a fan-out holding the same closure would have four holders each seeing only their own buckets, each believing it alone owns the cap. Signed-off-by: Hasit Bhatt <7106317-hasitpbhatt@users.noreply.replit.com>
Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) from 3.38.1 to 4.38.3. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@3ea0661...24c5418) --- updated-dependencies: - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.38.2 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
changed the title
dependabot
Bot
force-pushed
the
dependabot/github_actions/github/codeql-action/upload-sarif-4.38.2
branch
from
October 11, 2026 09:31
66ab67d to
5b394b5
Compare
Author
|
A newer version of github/codeql-action/upload-sarif exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged. |
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps github/codeql-action/upload-sarif from 3.38.1 to 4.38.3.
Release notes
Sourced from github/codeql-action/upload-sarif's releases.
... (truncated)
Changelog
Sourced from github/codeql-action/upload-sarif's changelog.
... (truncated)
Commits
24c5418Merge pull request #4214 from github/update-v4.38.3-e0b52dbdc69e87c5Add changelog note for #418423b6828Update changelog for v4.38.3e0b52dbMerge pull request #4210 from github/henrymercer/pin-python-for-older-clis-in-ci6b99698Pin Python 3.13.15 for older CLI versions in multi-language check63d3d63Merge pull request #4203 from github/update-bundle/codeql-bundle-v2.27.27377a10Add changelog notec1a30cdUpdate default bundle to codeql-bundle-v2.27.2d208ec7Merge pull request #4200 from github/mbg/esm/migrate-pr-checksa71b0c6Replace__dirnameinsync.ts