chore(deps): bump github/codeql-action/analyze from 4.36.2 to 4.37.7 - #914
chore(deps): bump github/codeql-action/analyze from 4.36.2 to 4.37.7#914dependabot[bot] wants to merge 7 commits into
Conversation
Bumps [github/codeql-action/analyze](https://github.com/github/codeql-action) from 4.36.2 to 4.37.7. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@8aad20d...ff2f1c6) --- updated-dependencies: - dependency-name: github/codeql-action/analyze dependency-version: 4.37.7 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
![opencode-agent[bot]](https://avatars.githubusercontent.com/in/1549082?s=60&v=4){kind=small}
There was a problem hiding this comment.
Pull request overview
OpenCode could not approve from deterministic current-head evidence because GitHub Checks have failed.
Findings
1. HIGH Current-head GitHub Checks - Fix failed required checks before approval
- Problem: Failed same-head checks remain for
44eabdfeb8990850c136c89d474116bea70039a8. - Root cause: The model-unavailable evidence fallback is allowed only when peer GitHub Checks are complete and clean.
- Fix: Read and fix the failed check logs below, then rerun the current-head checks.
- Regression test: Keep the model-unavailable fallback gated on an empty failed-check rollup.
Failed checks:
- Close Empty PR/close-empty: CANCELLED (https://github.com/ContextualWisdomLab/pg-erd-cloud/actions/runs/31969293944/job/95219063565)
- SAST Semgrep/Semgrep (multi-language SAST): CANCELLED (https://github.com/ContextualWisdomLab/pg-erd-cloud/actions/runs/31969294697/job/95219065214)
- Security Scan/dependency-review: CANCELLED (https://github.com/ContextualWisdomLab/pg-erd-cloud/actions/runs/31969294708/job/95219065306)
- Security Scan/osv-scan: CANCELLED (https://github.com/ContextualWisdomLab/pg-erd-cloud/actions/runs/31969294708/job/95219065185)
- Security Scan/scorecard: CANCELLED (https://github.com/ContextualWisdomLab/pg-erd-cloud/actions/runs/31969294708/job/95219065203)
- Security Scan/trivy-fs: CANCELLED (https://github.com/ContextualWisdomLab/pg-erd-cloud/actions/runs/31969294708/job/95219065173)
- Semgrep (multi-language SAST) check run: cancelled (https://github.com/ContextualWisdomLab/pg-erd-cloud/actions/runs/31969294697/job/95219065214)
- Strix Security Scan/publish-manual-pr-evidence-status: CANCELLED (https://github.com/ContextualWisdomLab/pg-erd-cloud/actions/runs/31969293934/job/95221423090)
- Strix Security Scan/strix: CANCELLED (https://github.com/ContextualWisdomLab/pg-erd-cloud/actions/runs/31969293934/job/95219063667)
- Strix Security Scan/strix: cancelled (https://github.com/ContextualWisdomLab/pg-erd-cloud/actions/runs/31969293934/job/95219063667)
- backend check run: cancelled (https://github.com/ContextualWisdomLab/pg-erd-cloud/actions/runs/31969294716/job/95219065055)
- ci/backend: CANCELLED (https://github.com/ContextualWisdomLab/pg-erd-cloud/actions/runs/31969294716/job/95219065055)
- ci/frontend: CANCELLED (https://github.com/ContextualWisdomLab/pg-erd-cloud/actions/runs/31969294716/job/95219065053)
- close-empty check run: cancelled (https://github.com/ContextualWisdomLab/pg-erd-cloud/actions/runs/31969293944/job/95219063565)
- coverage-source-tree check run: cancelled (https://github.com/ContextualWisdomLab/pg-erd-cloud/actions/runs/31969293908/job/95221425265)
- dependency-review check run: cancelled (https://github.com/ContextualWisdomLab/pg-erd-cloud/actions/runs/31969294708/job/95219065306)
- frontend check run: cancelled (https://github.com/ContextualWisdomLab/pg-erd-cloud/actions/runs/31969294716/job/95219065053)
- osv-scan check run: cancelled (https://github.com/ContextualWisdomLab/pg-erd-cloud/actions/runs/31969294708/job/95219065185)
- publish-manual-pr-evidence-status check run: cancelled (https://github.com/ContextualWisdomLab/pg-erd-cloud/actions/runs/31969293934/job/95221423090)
- required-workflow-bootstrap check run: cancelled (https://github.com/ContextualWisdomLab/pg-erd-cloud/actions/runs/31969293908/job/95219063577)
- scorecard check run: cancelled (https://github.com/ContextualWisdomLab/pg-erd-cloud/actions/runs/31969294708/job/95219065203)
- trivy-fs check run: cancelled (https://github.com/ContextualWisdomLab/pg-erd-cloud/actions/runs/31969294708/job/95219065173)
Changed-File Evidence Map
flowchart LR
PR["PR changed files"] --> Evidence["OpenCode bounded evidence"]
Evidence --> S1["Workflow: codeql-backfill.yml"]
S1 --> I1["GitHub Actions review job"]
I1 --> R1["Review risk: Workflow: codeql-backfill.yml"]
R1 --> V1["actionlint plus required checks"]
…on/analyze-4.37.7
|
@opencode-agent review Current HEAD is |
|
@coderabbitai review Please review exact current HEAD |
|
|
|
Warning Review limit reached
Next review available in: 51 minutes Limit details: You’ve used the included review currently available. You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository. How can I continue?Wait for the limit to reset, then comment An organization admin can change what happens after included review limits in Billing. How do review limits work?CodeRabbit enforces per-developer PR review limits within each organization. For paid Pro and Pro+ reviews, CodeRabbit uses a developer's included PR review attempts over the past 7 days to set the current hourly allowance. At typical activity levels, the full plan allowance applies. Higher sustained activity can lower the allowance until earlier attempts leave the 7-day window. Please refer docs for additional details. Review details⚙️ Run configurationConfiguration used: Organization UI Review profile: CHILL Plan: Pro Plus Run ID: 📒 Files selected for processing (3)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
|
Current-head review request for df336c0. The branch now includes current main, including merged PR 836 node 26.7.0. This removes the historical Strix CRITICAL finding against node 26.5.0 and keeps the CodeQL action update intact. Please review only this current head after Checks complete. |
|
|
|
@opencode-agent review current head df336c0 |
1 participant
Bumps github/codeql-action/analyze from 4.36.2 to 4.37.7.
Release notes
Sourced from github/codeql-action/analyze's releases.
Changelog
Sourced from github/codeql-action/analyze's changelog.
... (truncated)
Commits
ff2f1c6Merge pull request #4093 from github/update-v4.37.7-be7a3dbb8951a133Update changelog for v4.37.7be7a3dbMerge pull request #4087 from github/dependabot/npm_and_yarn/npm-minor-0aa561...9310334Merge pull request #4086 from github/mbg/thread-action-state-to-codeqlb4d8a54Rebuildab5db25Bump the npm-minor group across 1 directory with 8 updates38055a3DroploggerfromdatabaseInitClusterin interface1f87aedMerge pull request #4085 from github/update-bundle/codeql-bundle-v2.26.3dc1b98aMakeloggeravailable togetCodeQLForCmd6f0220eMerge pull request #4084 from github/navntoft/bump-undiciDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)