From 72c31120ead65acf38755e2ce98ecbcef6bfd8de Mon Sep 17 00:00:00 2001 From: tbaur Date: Fri, 2 Oct 2026 15:46:43 -0700 Subject: [PATCH] ci: bump github/codeql-action from 4.38.1 to 4.38.2 init, autobuild, and analyze have to share one version or CodeQL fails. Group GitHub Actions updates so Dependabot stops opening one PR per action. --- .github/dependabot.yml | 6 ++++++ .github/workflows/codeql.yml | 6 +++--- 2 files changed, 9 insertions(+), 3 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index a41edaa..fdba3eb 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -4,6 +4,12 @@ updates: directory: "/" schedule: interval: "weekly" + groups: + # init, autobuild, and analyze must move together. Separate PRs fail + # CodeQL because it loads one action version and runs another. + github-actions: + patterns: + - "*" - package-ecosystem: "pip" directory: "/" diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 72e083f..10ce685 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -27,14 +27,14 @@ jobs: uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Initialize CodeQL - uses: github/codeql-action/init@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1 + uses: github/codeql-action/init@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2 with: languages: ${{ matrix.language }} - name: Autobuild - uses: github/codeql-action/autobuild@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1 + uses: github/codeql-action/autobuild@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1 + uses: github/codeql-action/analyze@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2 with: category: "/language:${{ matrix.language }}"