From 59964c5dcaf4c1fbb2e4970ffb74c09c07bf62cc Mon Sep 17 00:00:00 2001 From: only-cli Date: Tue, 25 Aug 2026 07:54:03 -0400 Subject: [PATCH] ci: bump github/codeql-action to v4.37.8, group its Dependabot updates Dependabot opened separate PRs for init (#35) and analyze (#34). Each failed because the two steps must run the same version of the action. Bump init, analyze and upload-sarif together and add a Dependabot group so future codeql-action bumps arrive as one PR. Co-Authored-By: Claude Fable 5 --- .github/dependabot.yml | 5 +++++ .github/workflows/codeql.yml | 4 ++-- .github/workflows/scorecard.yml | 2 +- 3 files changed, 8 insertions(+), 3 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 9a42e0c..810e067 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -11,3 +11,8 @@ updates: directory: / schedule: interval: weekly + groups: + # init and analyze must run the same version, so bump them in one PR. + codeql-action: + patterns: + - github/codeql-action* diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index e3b7890..6b3d432 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -25,10 +25,10 @@ jobs: steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: github/codeql-action/init@42947a340483f03ba47bb1a039b2c519aab3df85 # v3.37.8 + - uses: github/codeql-action/init@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4.37.8 with: languages: javascript-typescript - - uses: github/codeql-action/analyze@42947a340483f03ba47bb1a039b2c519aab3df85 # v3.37.8 + - uses: github/codeql-action/analyze@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4.37.8 with: category: "/language:javascript-typescript" diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index cc79769..e97ad47 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -38,6 +38,6 @@ jobs: path: results.sarif retention-days: 5 - - uses: github/codeql-action/upload-sarif@42947a340483f03ba47bb1a039b2c519aab3df85 # v3.37.8 + - uses: github/codeql-action/upload-sarif@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4.37.8 with: sarif_file: results.sarif