From 361ec85dc9a0cddaa69406097a2d16f32e81ece6 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 6 Jul 2026 10:09:29 +0000 Subject: [PATCH 1/2] chore(ci): bump github/codeql-action/analyze from 4.36.0 to 4.36.3 Bumps [github/codeql-action/analyze](https://github.com/github/codeql-action) from 4.36.0 to 4.36.3. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/7211b7c8077ea37d8641b6271f6a365a22a5fbfa...54f647b7e1bb85c95cddabcd46b0c578ec92bc1a) --- updated-dependencies: - dependency-name: github/codeql-action/analyze dependency-version: 4.36.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/sast.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/sast.yaml b/.github/workflows/sast.yaml index 4b046d3..f116044 100644 --- a/.github/workflows/sast.yaml +++ b/.github/workflows/sast.yaml @@ -55,6 +55,6 @@ jobs: - name: Build for CodeQL run: go build ./... - - uses: github/codeql-action/analyze@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4 + - uses: github/codeql-action/analyze@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4 with: category: /language:go From 920dce8b000c4637730deb611f43c58361c85999 Mon Sep 17 00:00:00 2001 From: Markus Waldheim Date: Mon, 6 Jul 2026 21:53:45 +0200 Subject: [PATCH 2/2] fix(ci): align codeql-action/init with analyze at v4.36.3 The dependabot bump in PR #238 only updated codeql-action/analyze to v4.36.3 while init remained pinned to v4.36.0, causing a CodeQL 'configuration error' since GitHub requires matching versions for all codeql-action steps within the same workflow run. Signed-off-by: Markus Waldheim --- .github/workflows/sast.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/sast.yaml b/.github/workflows/sast.yaml index f116044..95792c1 100644 --- a/.github/workflows/sast.yaml +++ b/.github/workflows/sast.yaml @@ -43,7 +43,7 @@ jobs: steps: - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - - uses: github/codeql-action/init@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4 + - uses: github/codeql-action/init@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4.36.3 with: languages: go @@ -55,6 +55,6 @@ jobs: - name: Build for CodeQL run: go build ./... - - uses: github/codeql-action/analyze@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4 + - uses: github/codeql-action/analyze@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4.36.3 with: category: /language:go