From 20536f9753fb84058dfcf7481a740459ce155f66 Mon Sep 17 00:00:00 2001 From: PhiLily <252857470+PhiLily@users.noreply.github.com> Date: Mon, 5 Oct 2026 10:36:33 +0300 Subject: [PATCH] Bump github/codeql-action from 4.38.1 to 4.38.2 Update github/codeql-action/init and github/codeql-action/analyze together. CodeQL fails when init and analyze run different versions. --- .github/workflows/security.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 505c384..91b97d1 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -55,11 +55,11 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: persist-credentials: false - - uses: github/codeql-action/init@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1 + - uses: github/codeql-action/init@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2 with: languages: python queries: security-extended - - uses: github/codeql-action/analyze@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1 + - uses: github/codeql-action/analyze@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2 # Note: there is no separate bandit job. The same rule family runs as ruff's # `S` selector inside the existing lint job, which is faster and one tool