From be6c89cdbf34f735ec8646c0365337730bd4dadd Mon Sep 17 00:00:00 2001 From: nelsonduarte Date: Tue, 28 Jul 2026 17:51:11 +0100 Subject: [PATCH] chore(ci): bump codeql-action to 4.37.2 (init+analyze together) Bumps github/codeql-action init and analyze to the v4.37.2 SHA (e0647621c2984b5ed2f768cb892365bf2a616ad1) in a single commit. Dependabot split this bump into two PRs (#132 analyze, #133 init) touching the same workflow. Applying them independently would leave init and analyze on mismatched codeql-action versions, which breaks the CodeQL run. This combines both. Co-Authored-By: Claude Opus 4.8 --- .github/workflows/codeql.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 4fdbfbb..bae5c11 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -21,12 +21,12 @@ jobs: - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Initialize CodeQL - uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v3 + uses: github/codeql-action/init@e0647621c2984b5ed2f768cb892365bf2a616ad1 # v3 with: languages: python queries: security-and-quality - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v3 + uses: github/codeql-action/analyze@e0647621c2984b5ed2f768cb892365bf2a616ad1 # v3 with: category: "/language:python"