Skip to content

Issue 32-12: Synchronize CodeQL actions at v4.37.7 - #1205

Merged
gacurl merged 1 commit into
mainfrom
issue-32-12-codeql-sync
Aug 23, 2026
Merged

Issue 32-12: Synchronize CodeQL actions at v4.37.7#1205
gacurl merged 1 commit into
mainfrom
issue-32-12-codeql-sync

Conversation

@gacurl

@gacurl gacurl commented Aug 23, 2026

Copy link
Copy Markdown
Owner

Summary

Synchronizes the CodeQL init and analyze actions at the same reviewed v4.37.7 commit SHA.

Related Issue

Closes #1204

Changes

  • Updates github/codeql-action/init to v4.37.7.
  • Updates github/codeql-action/analyze to v4.37.7.
  • Keeps both actions pinned to the same immutable commit SHA.
  • No other workflow or application changes.

Verification

  • git diff --check
  • Confirmed only .github/workflows/codeql.yml changed
  • Confirmed exactly two CodeQL references
  • Both references use the same v4.37.7 SHA
  • CI passes
  • Security Baseline / Trivy passes
  • CodeQL passes

Notes

This supersedes Dependabot PRs #1191 and #1192, which independently updated only one half of the CodeQL init/analyze pair and therefore produced version-mismatch failures.

@gacurl
gacurl merged commit 10bc204 into main Aug 23, 2026
8 checks passed
@gacurl
gacurl deleted the issue-32-12-codeql-sync branch August 23, 2026 18:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Issue 32-12: Synchronize CodeQL actions at v4.37.7

1 participant