Bump github/codeql-action/init from 4.37.0 to 4.37.3#75
Conversation
Bumps [github/codeql-action/init](https://github.com/github/codeql-action) from 4.37.0 to 4.37.3. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@99df26d...e4fba86) --- updated-dependencies: - dependency-name: github/codeql-action/init dependency-version: 4.37.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
📝 WalkthroughWalkthroughThe CodeQL workflow updates the pinned commit SHA used by the CodeQL initialization action. No other workflow settings or analysis configuration changes. ChangesCodeQL workflow
Estimated code review effort: 1 (Trivial) | ~2 minutes Suggested reviewers: 🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
✨ Finishing Touches📝 Generate docstrings
🧪 Generate unit tests (beta)
Comment |
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 1
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In @.github/workflows/codeql.yml:
- Line 38: Update the inline version comment on the github/codeql-action/init
step to match the pinned action revision’s intended version, v4.37.3, while
leaving the commit pin unchanged.
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: defaults
Review profile: CHILL
Plan: Pro Plus
Run ID: 8593ab84-31eb-4d7d-a167-9756a4aa817b
📒 Files selected for processing (1)
.github/workflows/codeql.yml
|
|
||
| - name: Initialize CodeQL | ||
| uses: github/codeql-action/init@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # Lukittu versioon v4.37.0. | ||
| uses: github/codeql-action/init@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # Lukittu versioon v4.37.0. |
There was a problem hiding this comment.
📐 Maintainability & Code Quality | 🟡 Minor | ⚡ Quick win
🧩 Analysis chain
🏁 Script executed:
sed -n '30,45p' .github/workflows/codeql.yml | cat -nRepository: Insaner1980/dBcheck
Length of output: 822
🏁 Script executed:
python3 - <<'PY'
import subprocess, textwrap, re, os, sys, json
path = '.github/workflows/codeql.yml'
with open(path, 'r', encoding='utf-8') as f:
lines = f.readlines()
for i in range(34, 43):
if i <= len(lines):
print(f"{i:>4}: {lines[i-1].rstrip()}")
PYRepository: Insaner1980/dBcheck
Length of output: 502
🏁 Script executed:
python3 - <<'PY'
from pathlib import Path
p = Path('.github/workflows/codeql.yml')
print(p.read_text(encoding='utf-8'))
PYRepository: Insaner1980/dBcheck
Length of output: 1541
🏁 Script executed:
python3 - <<'PY'
from pathlib import Path
p = Path('.github/workflows/codeql.yml')
for n, line in enumerate(p.read_text(encoding='utf-8').splitlines(), 1):
if 34 <= n <= 42:
print(f"{n}: {line}")
PYRepository: Insaner1980/dBcheck
Length of output: 484
🌐 Web query:
github/codeql-action e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 v4.37.3
💡 Result:
The string e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 refers to a git commit hash in the github/codeql-action repository [1][2]. This commit, merged as pull request #4031, corresponds to the release of version v4.37.3 of the CodeQL Action [1][2]. CodeQL Action v4.37.3 was released on July 22, 2026 [3][1]. The release notes for this version indicate that there were no user-facing changes [3][4]. The commit specifically contained a fix related to proxy configuration (PR #4030) [1][2].
Citations:
- 1: chore(action): bump github/codeql-action from 4.37.1 to 4.37.3 Kronos-Integration/service-authenticator#1682
- 2: chore(action): bump github/codeql-action from 4.37.1 to 4.37.3 arlac77/expression-expander#2047
- 3: https://github.com/github/codeql-action/releases
- 4: chore(deps): update github/codeql-action action to v4.37.3 bodgit/sevenzip#477
Update the version comment. The pin targets v4.37.3, but the inline note still says v4.37.0.
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In @.github/workflows/codeql.yml at line 38, Update the inline version comment
on the github/codeql-action/init step to match the pinned action revision’s
intended version, v4.37.3, while leaving the commit pin unchanged.
|
Korvaava PR #87 päivitti CodeQL init- ja analyze-toiminnot yhdessä versioon 4.37.3 ja korjasi Kotlin 2.4.10 -yhteensopivuuden. Tämä erillinen PR on nyt tarpeeton. |
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
1 participant
Rebasing might not happen immediately, so don't worry if this takes some time.
Note: if you make any changes to this PR yourself, they will take precedence over the rebase.
Bumps github/codeql-action/init from 4.37.0 to 4.37.3.
Release notes
Sourced from github/codeql-action/init's releases.
Changelog
Sourced from github/codeql-action/init's changelog.
... (truncated)
Commits
e4fba86Merge pull request #4031 from github/update-v4.37.3-72f6a9da0fb50ab5Update changelog for v4.37.372f6a9dMerge pull request #4030 from github/mbg/fix/no-proxy3b5ee58Use defaultrequestoptions instead ofundefinedbfb6be4Merge pull request #4028 from github/mergeback/v4.37.2-to-main-e0647621526ab84Rebuildd6217b9Update changelog and version after v4.37.2e064762Merge pull request #4027 from github/update-v4.37.2-385bcdc5ae0faed8Add a couple of change notes73aad0eUpdate changelog for v4.37.2Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)Summary by CodeRabbit