From 110d4f47dd825453fadd3a9eace3368610d884bc Mon Sep 17 00:00:00 2001 From: Ning Shang Date: Wed, 27 May 2026 16:45:44 -0700 Subject: [PATCH 1/2] Fix typo in codeql-analysis.yml Fix a typo in action version. --- .github/workflows/codeql-analysis.yml | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 1cdcbe6..3d67b57 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -2,10 +2,11 @@ name: 'CodeQL' on: push: - branches: [ master ] + branches: + - master pull_request: - # The branches below must be a subset of the branches above - branches: [ master ] + branches: + - master schedule: - cron: '45 0 * * 1' @@ -54,4 +55,4 @@ jobs: - name: 'Perform CodeQL analysis' # v2.25.5 - uses: github/codeql-action/analyze@v84498526a009a99c875e83ef4821a8ba52de7c22 + uses: github/codeql-action/analyze@84498526a009a99c875e83ef4821a8ba52de7c22 From 0a47a0eed77009711874fa63a3dbc3d37bd4f2c0 Mon Sep 17 00:00:00 2001 From: Ning Shang Date: Wed, 27 May 2026 17:04:18 -0700 Subject: [PATCH 2/2] Fix codql-action version Use v4.36.0 --- .github/workflows/codeql-analysis.yml | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 3d67b57..3ab974a 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -33,7 +33,8 @@ jobs: # Initializes the CodeQL tools for scanning. - name: 'Initialize CodeQL' - uses: github/codeql-action/init@v2 + # v4.36.0 + uses: github/codeql-action/init@7211b7c8077ea37d8641b6271f6a365a22a5fbfa with: languages: ${{ matrix.language }} @@ -54,5 +55,5 @@ jobs: ./scripts/build.sh - name: 'Perform CodeQL analysis' - # v2.25.5 - uses: github/codeql-action/analyze@84498526a009a99c875e83ef4821a8ba52de7c22 + # v4.36.0 + uses: github/codeql-action/analyze@7211b7c8077ea37d8641b6271f6a365a22a5fbfa