chore(deps): bump github/codeql-action from 3 to 4#3

Closed

dependabot[bot] wants to merge 580 commits into

mainfrom

dependabot/github_actions/github/codeql-action-4

This pull request is big! We're only showing the most recent 250 commits

Commits on Mar 27, 2026

Add Gap 4 implementation plan: 6 tasks, per-cell metrics + conformance evidence

tachyon-beep
and
claude
committed
Replace _RuleStats with _CellStats keyed by (rule, taint_state)

tachyon-beep
and
claude
committed
feat(corpus): add --json assessment artefact output with per-cell verdicts

tachyon-beep
and
claude
committed
feat(corpus): add 'corpus publish' command generating wardline.conformance.json

tachyon-beep
and
claude
committed
feat(sarif): wire conformanceGaps from generated wardline.conformance.json
tachyon-beep
committed
feat(self-hosting): add real compliance gate — zero unexcepted findings for implemented rules

tachyon-beep
and
claude
committed
Fix four review findings: staleness check, determinism, error handling, exec regression

tachyon-beep
and
claude
committed
Fix review findings: document self_hosting_input_hash validation, report all 72 matrix cells

tachyon-beep
and
claude
committed
Fix: validate self_hosting_input_hash by hashing source files on disk

tachyon-beep
and
claude
committed
feat(corpus): complete adversarial corpus milestone + review fixes

tachyon-beep
and
claude
committed
fix(self-hosting): narrow 7 broad exception handlers (PY-WL-004)

tachyon-beep
and
claude
committed
feat(self-hosting): register 32 exceptions for PY-WL-004/005 + fix exception matching

tachyon-beep
and
claude
committed
fix(scanner): resolve module_tiers paths for taint assignment

tachyon-beep
and
claude
committed
fix(scanner): correct taint assignment + SUPPRESS exclusion from self-hosting gate

tachyon-beep
and
claude
committed
docs(adr): propose taint state + decorator rename to posture vocabulary

tachyon-beep
and
claude
committed
fix(adr): correct TAINT_TO_TIER location to core/tiers.py

tachyon-beep
and
claude
committed
docs(adr): update to INTEGRAL vocabulary (was STRICT)

tachyon-beep
and
claude
committed
docs(adr): incorporate review feedback on ADR-001/002

tachyon-beep
and
claude
committed

Commits on Mar 28, 2026

Commits on Mar 29, 2026

Commits on Apr 8, 2026

Commits on Apr 9, 2026

Commits on Apr 10, 2026

Commits on Apr 11, 2026

Commits on Apr 12, 2026