From 90907b2477db6bcba8d8c1586dc225dd73b9afbc Mon Sep 17 00:00:00 2001 From: cjimti Date: Sun, 19 Jul 2026 19:16:17 -0700 Subject: [PATCH] chore(ci): bump github/codeql-action to 4.37.0 Rollup of Dependabot PRs #107, #108, #109, #110. All four bump a github/codeql-action sub-action to the same commit SHA, so they are combined into a single change. - init: 4.36.2 -> 4.37.0 - autobuild: 4.36.2 -> 4.37.0 - analyze: 4.36.2 -> 4.37.0 - upload-sarif: 4.36.3 -> 4.37.0 Closes #107 Closes #108 Closes #109 Closes #110 --- .github/workflows/codeql.yml | 6 +++--- .github/workflows/scorecard.yml | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 31e8945..b6a4938 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -21,12 +21,12 @@ jobs: - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Initialize CodeQL - uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v3 + uses: github/codeql-action/init@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v3 with: languages: go - name: Autobuild - uses: github/codeql-action/autobuild@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v3 + uses: github/codeql-action/autobuild@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v3 - name: Perform Analysis - uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v3 + uses: github/codeql-action/analyze@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v3 diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index ced51d5..b677058 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -28,6 +28,6 @@ jobs: results_format: sarif - name: Upload results - uses: github/codeql-action/upload-sarif@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v3 + uses: github/codeql-action/upload-sarif@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v3 with: sarif_file: results.sarif