From 4c9797bb01198201110f05614d48a9b29d36271a Mon Sep 17 00:00:00 2001
From: tonibergholm-codento
 <227145052+tonibergholm-codento@users.noreply.github.com>
Date: Thu, 27 Aug 2026 12:23:37 +0300
Subject: [PATCH] ci(deps): bump github/codeql-action init+analyze to 4.37.8
 together

Dependabot split the bump into #129 (init) and #130 (analyze), but both
actions run in the same job and the analyze post-action rejects a config
written by a mismatched version, so neither PR can go green on its own
(same failure mode as #110/#112, resolved the same way as #115).
---
 .github/workflows/codeql.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index de64c8e..b8b5fb2 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -33,7 +33,7 @@ jobs:
             build-mode: none
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-      - uses: github/codeql-action/init@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6
+      - uses: github/codeql-action/init@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4.37.8
         with:
           languages: ${{ matrix.language }}
           build-mode: ${{ matrix.build-mode }}
@@ -43,6 +43,6 @@ jobs:
           config: |
             paths-ignore:
               - vendor/glib-0.18.5-patched/**
-      - uses: github/codeql-action/analyze@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6
+      - uses: github/codeql-action/analyze@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4.37.8
         with:
           category: "/language:${{ matrix.language }}"