Skip to content

ci: update CodeQL actions atomically to v4.38.3 - #83

Merged
LurigeLars merged 2 commits into
mainfrom
fix/codeql-lockstep-4.38.3
Oct 13, 2026
Merged

LurigeLars merged 2 commits into
mainfrom
fix/codeql-lockstep-4.38.3

Conversation

@LurigeLars

Copy link
Copy Markdown
Owner

What changed

  • Pin both github/codeql-action/init and github/codeql-action/analyze to the same reviewed v4.38.3 commit SHA (24c54180a607b1449ed407dd24f251e4e9147c8d).
  • Group github/codeql-action/* under Dependabot github-actions updates to avoid split upgrades and CodeQL version skew.

Why

Separate Dependabot PRs for init and analyze caused: Loaded a configuration file for version '4.38.3', but running version '4.38.2'.

Verification

  • Both references aligned to the identical full SHA; no application/runtime code changes.
  • CI and required CodeQL analysis must pass before merging.

Supersedes the two split Dependabot PRs for CodeQL v4.38.3.

@LurigeLars
LurigeLars merged commit 104dc54 into main Oct 13, 2026
10 checks passed
@LurigeLars
LurigeLars deleted the fix/codeql-lockstep-4.38.3 branch October 13, 2026 21:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant