From 64d1d1fe74f3a598a1914f3bb63d316480667c81 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 15 Jul 2026 02:24:02 +0000 Subject: [PATCH 1/2] ci: bump github/codeql-action/init from 4.36.3 to 4.37.0 Bumps [github/codeql-action/init](https://github.com/github/codeql-action) from 4.36.3 to 4.37.0. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/54f647b7e1bb85c95cddabcd46b0c578ec92bc1a...99df26d4f13ea111d4ec1a7dddef6063f76b97e9) --- updated-dependencies: - dependency-name: github/codeql-action/init dependency-version: 4.37.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/codeql.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 3df5a4e..be04a4c 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -53,7 +53,7 @@ jobs: - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: persist-credentials: false - - uses: github/codeql-action/init@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4 + - uses: github/codeql-action/init@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4 with: languages: ${{ matrix.language }} queries: ${{ matrix.queries }} From df0428545dc018c5597802640ac220d93b9cadb3 Mon Sep 17 00:00:00 2001 From: Chelsea KR <3114598+ChelseaKR@users.noreply.github.com> Date: Fri, 17 Jul 2026 01:30:27 -0700 Subject: [PATCH 2/2] ci: bump codeql-action/analyze to the same 4.37.0 SHA as init Dependabot bumped init and analyze in separate PRs (#92/#95); each alone fails CI with 'Loaded a configuration file for version 4.37.0, but running version 4.36.3'. Pin both steps to the same SHA per the repo's single-bump rule (roadmap BUG-5/M-3). Supersedes #95. Co-Authored-By: Claude Fable 5 Claude-Session: https://claude.ai/code/session_01GsfrFmhRgdMkrfy87zU8VG --- .github/workflows/codeql.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index be04a4c..a416cc4 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -57,4 +57,4 @@ jobs: with: languages: ${{ matrix.language }} queries: ${{ matrix.queries }} - - uses: github/codeql-action/analyze@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4 + - uses: github/codeql-action/analyze@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4