From fa41a1ba5c4aa54271add12b13c3e6c2f1f2d064 Mon Sep 17 00:00:00 2001 From: Claude Date: Wed, 29 Jul 2026 12:30:35 +0000 Subject: [PATCH] build(deps): bump github/codeql-action from 4.37.2 to 4.37.3 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Dependabot split this bump across two PRs — #291 for init and #288 for analyze — but the CodeQL action refuses a mixed pair: analyze aborts with "Loaded a configuration file for version '4.37.3', but running version '4.37.2'", so both PRs failed their Analyze jobs and neither could land on its own. Bump both refs in one commit instead. 4.37.3 has no user-facing changes. Closes #288 Closes #291 Co-Authored-By: Claude Opus 5 Claude-Session: https://claude.ai/code/session_01B1NFi5pLqgCswDdaSdRfEr --- .github/workflows/codeql.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 11f82c4..70ead2e 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -38,13 +38,13 @@ jobs: # Source (no-build) extraction for both languages — nothing to compile, # and the Python extractor does not need dependencies installed. - name: Initialize CodeQL - uses: github/codeql-action/init@e0647621c2984b5ed2f768cb892365bf2a616ad1 # v4.37.2 + uses: github/codeql-action/init@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3 with: languages: ${{ matrix.language }} # Default (security) query suite. Promote to "security-extended" later # if the extra queries prove worthwhile after triage. - name: Perform CodeQL analysis - uses: github/codeql-action/analyze@e0647621c2984b5ed2f768cb892365bf2a616ad1 # v4.37.2 + uses: github/codeql-action/analyze@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3 with: category: "/language:${{ matrix.language }}"