From 9b30618cec4246a52a11725cd7a097a3fad049a9 Mon Sep 17 00:00:00 2001 From: DBarr3 <143002219+DBarr3@users.noreply.github.com> Date: Mon, 17 Aug 2026 07:55:34 -0400 Subject: [PATCH] chore(deps): bump github/codeql-action to 4.37.7 in one step Dependabot split this bump across two pull requests, one for init and one for analyze. Either one alone leaves the workflow with two different codeql-action versions, and the analyze post-action step then fails with "Loaded a configuration file for version '4.37.1', but running version '4.37.7'". Bumping both pins together is the only state that runs. Supersedes #68 and #69. Co-Authored-By: Claude Fable 5 --- .github/workflows/codeql.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index aef8f0a..05ec65e 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -33,10 +33,10 @@ jobs: persist-credentials: false - name: Initialize CodeQL - uses: github/codeql-action/init@7188fc363630916deb702c7fdcf4e481b751f97a # v4.37.1 + uses: github/codeql-action/init@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7 with: languages: javascript-typescript build-mode: none - name: Analyze - uses: github/codeql-action/analyze@7188fc363630916deb702c7fdcf4e481b751f97a # v4.37.1 + uses: github/codeql-action/analyze@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7