Skip to content

chore(deps): bump github/codeql-action from 4.38.3 to 4.39.0 in the all-actions group across 1 directory - #1127

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/github_actions/all-actions-9adc00e088
Oct 20, 2026
Merged

github-actions[bot] merged 1 commit into
mainfrom
dependabot/github_actions/all-actions-9adc00e088

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the all-actions group with 1 update in the / directory: github/codeql-action.

Updates github/codeql-action from 4.38.3 to 4.39.0

Release notes

Sourced from github/codeql-action's releases.

v4.39.0

  • Breaking change: Bump the minimum required CodeQL bundle version to 2.20.7. #4205
  • The codeql-action/analyze step now validates that a correct argument for the checkout_path input has been provided. The checkout_path input must be set to the path where the repository that is being analyzed is checked out at on the runner, if that path is something other than the workspace root. If the path does not point to a repository checkout or is different from the path that was used by codeql-action/init, then the CodeQL Action now produces a warning. #4148
  • Resolved an issue with third-party caching implementations that prevented caches from being restored correctly. #4206
  • The codeql-action/start-proxy step that is used in Code Scanning Default Setup now finds CodeQL releases using the same logic as codeql-action/init. This primarily benefits customers who are using GitHub instances other than github.com where the codeql-action/start-proxy step may previously have been unable to locate recent releases and ended up using outdated versions of the private registry authentication proxy as a result. #4198
Changelog

Sourced from github/codeql-action's changelog.

4.39.0 - 15 Oct 2026

  • Breaking change: Bump the minimum required CodeQL bundle version to 2.20.7. #4205
  • The codeql-action/analyze step now validates that a correct argument for the checkout_path input has been provided. The checkout_path input must be set to the path where the repository that is being analyzed is checked out at on the runner, if that path is something other than the workspace root. If the path does not point to a repository checkout or is different from the path that was used by codeql-action/init, then the CodeQL Action now produces a warning. #4148
  • Resolved an issue with third-party caching implementations that prevented caches from being restored correctly. #4206
  • The codeql-action/start-proxy step that is used in Code Scanning Default Setup now finds CodeQL releases using the same logic as codeql-action/init. This primarily benefits customers who are using GitHub instances other than github.com where the codeql-action/start-proxy step may previously have been unable to locate recent releases and ended up using outdated versions of the private registry authentication proxy as a result. #4198
Commits
  • 6f2ac81 Merge pull request #4239 from github/update-v4.39.0-d63383a73
  • eb1c428 Trigger workflows
  • 4443333 Update changelog for v4.39.0
  • d63383a Merge pull request #4233 from github/mbg/start-proxy/report-version
  • 8dec0b9 Rename path to result in tests
  • 4eabea6 Merge remote-tracking branch 'origin/main' into mbg/start-proxy/report-version
  • 57938b8 Merge pull request #4201 from github/mario-campos/automate-changenotes-assemble
  • ee07b50 Merge pull request #4236 from github/mbg/add-missing-changenotes
  • a897ed5 Add change note for #4206
  • c8bd019 Add change note for #4198
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Dependency updates github-actions GitHub Actions updates labels Oct 19, 2026
@github-actions
github-actions Bot enabled auto-merge (squash) October 19, 2026 07:07

@jetbrains-air jetbrains-air Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good — clean, consistent version bump with CodeQL Analyze passing, so this is approved!


Produced by Air Automations. Name: Code review / Run: https://air.jetbrains.cloud/org/05cf1a7f-6ab5-713b-abd3-29d0c8a05e2d/automations/409567ec-d3a7-40ac-ba95-8518ec577ac2?run=e76d4e6b-5376-43f8-bdc6-a7acb17ee800

@devcrocod

Copy link
Copy Markdown
Contributor

@dependabot rebase

Bumps the all-actions group with 1 update in the / directory: [github/codeql-action](https://github.com/github/codeql-action).


Updates `github/codeql-action` from 4.38.3 to 4.39.0
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@v4.38.3...v4.39.0)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump github/codeql-action from 4.38.3 to 4.39.0 in the all-actions group chore(deps): bump github/codeql-action from 4.38.3 to 4.39.0 in the all-actions group across 1 directory Oct 20, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/all-actions-9adc00e088 branch from 3182272 to e2bb92b Compare October 20, 2026 09:25

@jetbrains-air jetbrains-air Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approving — this version bump looks good to merge!


Produced by Air Automations. Name: Code review / Run: https://air.jetbrains.cloud/org/05cf1a7f-6ab5-713b-abd3-29d0c8a05e2d/automations/409567ec-d3a7-40ac-ba95-8518ec577ac2?run=af706880-f64b-43ae-ae97-419a4b2c1ecb

@github-actions
github-actions Bot merged commit ec8bcd4 into main Oct 20, 2026
20 checks passed
@github-actions
github-actions Bot deleted the dependabot/github_actions/all-actions-9adc00e088 branch October 20, 2026 09:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency updates github-actions GitHub Actions updates

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant