From 288d41551e26a9b220431899d6e0423309555d3c Mon Sep 17 00:00:00 2001 From: Martin Vogel Date: Sun, 30 Aug 2026 16:39:49 +0200 Subject: [PATCH] chore(deps): bump github/codeql-action init+analyze to v4.37.9 together Dependabot split this bump across two PRs -- #1898 bumps init, #1900 bumps analyze -- but codeql-action requires every step in a workflow to run the same version. Either PR alone produces a mismatch and analyze fails with: Loaded a configuration file for version '4.37.4', but running version '4.37.9' so neither can be green on its own, and merging either would leave main's CodeQL job broken for every subsequent PR. Bump both pins in one commit. Pin verified: cdf488f595d80d6e07e03d4674febd5ab45fa938 is the commit that the annotated tag v4.37.9 dereferences to in github/codeql-action. Supersedes #1898 and #1900. Signed-off-by: Martin Vogel --- .github/workflows/codeql.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index c1e5b17e9..dbaa52a6c 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -29,7 +29,7 @@ jobs: run: sudo apt-get update && sudo apt-get install -y zlib1g-dev - name: Initialize CodeQL - uses: github/codeql-action/init@f205ea1c3313d32999d8d6a48b4f6530d4437b38 # v4.37.4 + uses: github/codeql-action/init@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9 with: languages: c-cpp build-mode: manual @@ -38,6 +38,6 @@ jobs: run: scripts/build.sh - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@f205ea1c3313d32999d8d6a48b4f6530d4437b38 # v4.37.4 + uses: github/codeql-action/analyze@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9 with: category: "/language:c-cpp"