From 4b14301a345c792a569a631ac7d6c99e45a078e8 Mon Sep 17 00:00:00 2001 From: LucaCappelletti94 Date: Sat, 31 Oct 2026 10:55:39 +0100 Subject: [PATCH] Group codeql-action updates and bump them to v4.39.1 --- .github/dependabot.yml | 5 +++++ .github/workflows/codeql.yml | 4 ++-- 2 files changed, 7 insertions(+), 2 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 101d2d7..35e4947 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -7,6 +7,11 @@ updates: interval: weekly cooldown: default-days: 7 + # CodeQL refuses to run when its init and analyze steps differ, so they move in one pull request. + groups: + codeql-action: + patterns: + - github/codeql-action* - package-ecosystem: cargo directory: /smoke schedule: diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 88310d9..094e6e6 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -38,13 +38,13 @@ jobs: persist-credentials: false - name: Initialize CodeQL - uses: github/codeql-action/init@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1 + uses: github/codeql-action/init@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1 with: languages: ${{ matrix.language }} config-file: ./.github/codeql/codeql-config.yml build-mode: ${{ matrix.build-mode }} - name: Analyze - uses: github/codeql-action/analyze@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1 + uses: github/codeql-action/analyze@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1 with: category: /language:${{ matrix.language }}