From 1a83fe5ba848eacc3b80479604d801640da7b7ae Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 15 Oct 2026 07:10:26 +0000 Subject: [PATCH] chore(deps): bump the version-updates group across 1 directory with 3 updates Bumps the version-updates group with 3 updates in the / directory: [github/codeql-action/upload-sarif](https://github.com/github/codeql-action), [github/codeql-action/init](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action). Updates `github/codeql-action/upload-sarif` from 4.38.0 to 4.38.2 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/b96794f015dfd88f77b49b1c93e0fa7110f94c63...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2) Updates `github/codeql-action/init` from 4.38.0 to 4.38.2 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/b96794f015dfd88f77b49b1c93e0fa7110f94c63...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2) Updates `github/codeql-action/analyze` from 4.38.0 to 4.38.2 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/b96794f015dfd88f77b49b1c93e0fa7110f94c63...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2) --- updated-dependencies: - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.38.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: version-updates - dependency-name: github/codeql-action/init dependency-version: 4.38.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: version-updates - dependency-name: github/codeql-action/analyze dependency-version: 4.38.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: version-updates ... Signed-off-by: dependabot[bot] --- .github/workflows/cluster-fuzz-lite.yaml | 2 +- .github/workflows/code-ql-actions.yaml | 4 ++-- .github/workflows/code-ql-javascript-typescript.yaml | 4 ++-- .github/workflows/code-ql-python.yaml | 4 ++-- .github/workflows/ossf-scorecard.yaml | 2 +- 5 files changed, 8 insertions(+), 8 deletions(-) diff --git a/.github/workflows/cluster-fuzz-lite.yaml b/.github/workflows/cluster-fuzz-lite.yaml index 7b45260bc2..b8253d2a94 100644 --- a/.github/workflows/cluster-fuzz-lite.yaml +++ b/.github/workflows/cluster-fuzz-lite.yaml @@ -55,7 +55,7 @@ jobs: - name: Upload SARIF to code scanning if: always() && hashFiles('artifacts/fuzz-latest/fuzzing-report.sarif') != '' - uses: github/codeql-action/upload-sarif@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4.38.0 + uses: github/codeql-action/upload-sarif@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2 with: category: cluster-fuzz-lite sarif_file: artifacts/fuzz-latest/fuzzing-report.sarif diff --git a/.github/workflows/code-ql-actions.yaml b/.github/workflows/code-ql-actions.yaml index 4d015aa62b..4da7b11e15 100644 --- a/.github/workflows/code-ql-actions.yaml +++ b/.github/workflows/code-ql-actions.yaml @@ -39,12 +39,12 @@ jobs: persist-credentials: false - name: Initialize CodeQL - uses: github/codeql-action/init@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4.38.0 + uses: github/codeql-action/init@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2 with: languages: actions - name: Perform CodeQL analysis - uses: github/codeql-action/analyze@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4.38.0 + uses: github/codeql-action/analyze@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2 with: category: /language:actions timeout-minutes: 5 diff --git a/.github/workflows/code-ql-javascript-typescript.yaml b/.github/workflows/code-ql-javascript-typescript.yaml index 70dd65fdf7..c3e8d0b9da 100644 --- a/.github/workflows/code-ql-javascript-typescript.yaml +++ b/.github/workflows/code-ql-javascript-typescript.yaml @@ -55,7 +55,7 @@ jobs: persist-credentials: false - name: Initialize CodeQL - uses: github/codeql-action/init@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4.38.0 + uses: github/codeql-action/init@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2 with: languages: javascript-typescript @@ -63,7 +63,7 @@ jobs: uses: ./.github/actions/install-frontend-dependencies - name: Perform CodeQL analysis - uses: github/codeql-action/analyze@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4.38.0 + uses: github/codeql-action/analyze@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2 with: category: /language:javascript-typescript timeout-minutes: 5 diff --git a/.github/workflows/code-ql-python.yaml b/.github/workflows/code-ql-python.yaml index 5fd0a8443d..c3eaa92d6c 100644 --- a/.github/workflows/code-ql-python.yaml +++ b/.github/workflows/code-ql-python.yaml @@ -45,7 +45,7 @@ jobs: persist-credentials: false - name: Initialize CodeQL - uses: github/codeql-action/init@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4.38.0 + uses: github/codeql-action/init@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2 with: languages: python @@ -53,7 +53,7 @@ jobs: uses: ./.github/actions/install-backend-dependencies - name: Perform CodeQL analysis - uses: github/codeql-action/analyze@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4.38.0 + uses: github/codeql-action/analyze@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2 with: category: /language:python timeout-minutes: 5 diff --git a/.github/workflows/ossf-scorecard.yaml b/.github/workflows/ossf-scorecard.yaml index 19e1befa20..8711116c0b 100644 --- a/.github/workflows/ossf-scorecard.yaml +++ b/.github/workflows/ossf-scorecard.yaml @@ -45,7 +45,7 @@ jobs: retention-days: 5 - name: Upload SARIF to code scanning - uses: github/codeql-action/upload-sarif@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4.38.0 + uses: github/codeql-action/upload-sarif@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2 with: category: ossf-scorecard sarif_file: results.sarif