From effabc17f846db5fa1cbc9f1eeabfb53832884b7 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 21 Jul 2026 10:04:48 +0000 Subject: [PATCH] ci: bump github/codeql-action init and analyze from 4.37.0 to 4.37.1 Bump codeql-action/init and codeql-action/analyze together. The analyze step rejects a database initialized by a different action version ("Loaded a configuration file for version '4.37.1', but running version '4.37.0'"), so init and analyze must always move in lockstep. This folds the sibling analyze-only bump into this pull request. --- updated-dependencies: - dependency-name: github/codeql-action/init dependency-version: 4.37.1 dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: github/codeql-action/analyze dependency-version: 4.37.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/codeql.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 4e95262f..97ebd770 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -37,7 +37,7 @@ jobs: uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: Initialize CodeQL - uses: github/codeql-action/init@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4 + uses: github/codeql-action/init@7188fc363630916deb702c7fdcf4e481b751f97a # v4 with: languages: csharp # Buildless extraction: no .NET SDK or build step is needed, and it sidesteps @@ -46,6 +46,6 @@ jobs: build-mode: none - name: Perform CodeQL analysis - uses: github/codeql-action/analyze@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4 + uses: github/codeql-action/analyze@7188fc363630916deb702c7fdcf4e481b751f97a # v4 with: category: "/language:csharp"