From e2c722dfe78d4e83aba581056a5f80feb0a58810 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 3 Aug 2026 15:13:49 +0000 Subject: [PATCH 1/2] Bump github/codeql-action from 4 to 4.37.4 Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4 to 4.37.4. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v4...v4.37.4) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.37.4 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/code-analysis-built-module.yml | 2 +- .github/workflows/code-analysis.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/code-analysis-built-module.yml b/.github/workflows/code-analysis-built-module.yml index 8780efe9c..8ae9880f2 100644 --- a/.github/workflows/code-analysis-built-module.yml +++ b/.github/workflows/code-analysis-built-module.yml @@ -67,6 +67,6 @@ jobs: Write-Information -MessageData 'Analyzing done.' -InformationAction 'Continue' - name: Upload SARIF results - uses: github/codeql-action/upload-sarif@v4 + uses: github/codeql-action/upload-sarif@v4.37.4 with: sarif_file: results.sarif diff --git a/.github/workflows/code-analysis.yml b/.github/workflows/code-analysis.yml index a070e8707..9a1cd2e4d 100644 --- a/.github/workflows/code-analysis.yml +++ b/.github/workflows/code-analysis.yml @@ -77,6 +77,6 @@ jobs: Write-Information -MessageData 'Analyzing done.' -InformationAction 'Continue' - name: Upload SARIF results - uses: github/codeql-action/upload-sarif@v4 + uses: github/codeql-action/upload-sarif@v4.37.4 with: sarif_file: results.sarif From c3f584a9b121958e1449d61e0f286b028a108750 Mon Sep 17 00:00:00 2001 From: Johan Ljunggren Date: Thu, 6 Aug 2026 21:20:15 +0200 Subject: [PATCH 2/2] fix log --- CHANGELOG.md | 1 + 1 file changed, 1 insertion(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 7c8d97d34..bd4f6b141 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -43,6 +43,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 - SqlServerDsc - Bump GitHub actions checkout to v7 - Bump action Stale to v11 + - Bump codeql-action/upload-sarif to v4.37.4 - Update tests to Pester 6 syntax where supported. - Added Windows user credential format guidance to the credential overview documentation. ([issue #1768](https://github.com/dsccommunity/SqlServerDsc/issues/1768))