only-cliandClaude Fable 5 59964c5dca ci: bump github/codeql-action to v4.37.8, group its Dependabot updates ...

Dependabot opened separate PRs for init (#35) and analyze (#34). Each
failed because the two steps must run the same version of the action.
Bump init, analyze and upload-sarif together and add a Dependabot group
so future codeql-action bumps arrive as one PR.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-08-25 07:54:03 -04:00

..

workflows

ci: bump github/codeql-action to v4.37.8, group its Dependabot updates

2026-08-25 07:54:03 -04:00

dependabot.yml

ci: bump github/codeql-action to v4.37.8, group its Dependabot updates

2026-08-25 07:54:03 -04:00