From 43b54c874bcaf1371c834054dcd8565accf54492 Mon Sep 17 00:00:00 2001 From: Claude Date: Thu, 2 Jul 2026 15:52:24 +0000 Subject: [PATCH] Align codeql-action/analyze with the v4 init pin The dependabot bump of github/codeql-action/init to v4.36.2 left analyze on the old v3 SHA, and mixed CodeQL action majors fail the Analyze (cpp) job on master. Pin analyze to the same v4.36.2 commit already used by init and scorecard's upload-sarif. Co-Authored-By: Claude Fable 5 Claude-Session: https://claude.ai/code/session_01Ai9gkWPczQLa8CY5rQ3Nsd --- .github/workflows/codeql.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index e09b2d2..144201c 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -35,4 +35,4 @@ jobs: working-directory: vs.proj run: msbuild MarkdownTableEditor.vcxproj /m /p:configuration=Release /p:platform=x64 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@dd903d2e4f5405488e5ef1422510ee31c8b32357 # v3 + uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2