From 5fe4ace8a98da802d7bc88acb2a50a5c33bace69 Mon Sep 17 00:00:00 2001 From: xavidop Date: Mon, 14 Sep 2026 20:58:40 +0900 Subject: [PATCH] chore(ci): bump github/codeql-action from 4.37.9 to 4.38.0 Bumps both the init and analyze sub-actions together. Dependabot opened these as two separate PRs (#343 and #348); merging either alone leaves the two steps on different codeql-action versions, which fails the Analyze job with a CodeQL configuration error. --- .github/workflows/codeql.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 11472698d..f605c4ed2 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -34,7 +34,7 @@ jobs: cache: maven - name: Initialize CodeQL - uses: github/codeql-action/init@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4 + uses: github/codeql-action/init@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4 with: languages: ${{ matrix.language }} @@ -42,6 +42,6 @@ jobs: run: mvn clean install -DskipTests - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4 + uses: github/codeql-action/analyze@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4 with: category: "/language:${{matrix.language}}"