From 2b5cddce89028f92c78bf34fd86ff5ff5649b868 Mon Sep 17 00:00:00 2001 From: abrichr Date: Wed, 19 Aug 2026 21:11:24 -0400 Subject: [PATCH] build(deps): bump both codeql-action pins to v4.37.7 together Dependabot opened these as two pull requests, #1100 for analyze and #1102 for init. Each alone leaves init and analyze on different versions, and CodeQL refuses that mismatch, so both failed Analyze (python) while looking like ordinary green-able dependency bumps. Bumping both pins in one commit is the only shape that passes. This replaces #1100 and #1102, which are closed. Co-Authored-By: Claude Opus 5 --- .github/workflows/codeql.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 92c62e354..a9061b54f 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -28,10 +28,10 @@ jobs: - name: Checkout uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Initialize CodeQL - uses: github/codeql-action/init@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6 + uses: github/codeql-action/init@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7 with: languages: ${{ matrix.language }} - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6 + uses: github/codeql-action/analyze@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7 with: category: "/language:${{ matrix.language }}"