From a030a831df786eb77655b65c3ac74b6bce38dffa Mon Sep 17 00:00:00 2001 From: Martin Vogel Date: Sat, 26 Sep 2026 21:38:23 +0200 Subject: [PATCH] build(deps): bump github/codeql-action to 4.38.1 in one step Dependabot opened one PR per sub-action (#2363 init, #2365 analyze, #2364 upload-sarif). CodeQL refuses a split pin: with init at 4.38.1 and analyze at 4.38.0 the analyze post-step fails with "Loaded a configuration file for version '4.38.1', but running version '4.38.0'", so neither PR can pass the codeql gate alone and merging either one would break the gate on main. This bumps all three to 1c5b675653bb5c22dbe9b12b556ec555138e09fd, which is the commit the upstream v4.38.1 annotated tag points to. Signed-off-by: Martin Vogel --- .github/workflows/codeql.yml | 4 ++-- .github/workflows/scorecard.yml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index e83a82d06..2430c6712 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -29,7 +29,7 @@ jobs: run: sudo apt-get update && sudo apt-get install -y zlib1g-dev - name: Initialize CodeQL - uses: github/codeql-action/init@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4.38.0 + uses: github/codeql-action/init@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1 with: languages: c-cpp build-mode: manual @@ -38,6 +38,6 @@ jobs: run: scripts/build.sh - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4.38.0 + uses: github/codeql-action/analyze@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1 with: category: "/language:c-cpp" diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index f2d8bcb92..c2acbd8ac 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -27,6 +27,6 @@ jobs: publish_results: true - name: Upload SARIF results - uses: github/codeql-action/upload-sarif@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4 + uses: github/codeql-action/upload-sarif@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4 with: sarif_file: results.sarif