From f2e5d44b3026b147429076ff3a4e482006c58c65 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 20 Aug 2026 17:07:20 +0000 Subject: [PATCH] build(deps): bump the gha group across 1 directory with 3 updates Bumps the gha group with 3 updates in the / directory: [GitHubSecurityLab/actions-permissions/monitor](https://github.com/githubsecuritylab/actions-permissions), [github/codeql-action/init](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action). Updates `GitHubSecurityLab/actions-permissions/monitor` from 56b81d5792a64ef3925978f6c0695ddc41685c27 to bf82d13b9b10051d224345ab9184f5ede0a94289 - [Release notes](https://github.com/githubsecuritylab/actions-permissions/releases) - [Commits](https://github.com/githubsecuritylab/actions-permissions/compare/56b81d5792a64ef3925978f6c0695ddc41685c27...bf82d13b9b10051d224345ab9184f5ede0a94289) Updates `github/codeql-action/init` from 4.37.4 to 4.37.7 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/f205ea1c3313d32999d8d6a48b4f6530d4437b38...ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd) Updates `github/codeql-action/analyze` from 4.37.4 to 4.37.7 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/f205ea1c3313d32999d8d6a48b4f6530d4437b38...ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd) --- updated-dependencies: - dependency-name: GitHubSecurityLab/actions-permissions/monitor dependency-version: bf82d13b9b10051d224345ab9184f5ede0a94289 dependency-type: direct:production dependency-group: gha - dependency-name: github/codeql-action/init dependency-version: 4.37.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gha - dependency-name: github/codeql-action/analyze dependency-version: 4.37.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gha ... Signed-off-by: dependabot[bot] --- .github/workflows/codeql.yml | 8 ++++---- .github/workflows/common.yml | 2 +- .github/workflows/main.yml | 2 +- 3 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 9e635ab..d242560 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -20,7 +20,7 @@ jobs: security-events: write steps: - - uses: GitHubSecurityLab/actions-permissions/monitor@56b81d5792a64ef3925978f6c0695ddc41685c27 + - uses: GitHubSecurityLab/actions-permissions/monitor@bf82d13b9b10051d224345ab9184f5ede0a94289 - name: Checkout repository uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 @@ -39,15 +39,15 @@ jobs: security-events: write steps: - - uses: GitHubSecurityLab/actions-permissions/monitor@56b81d5792a64ef3925978f6c0695ddc41685c27 + - uses: GitHubSecurityLab/actions-permissions/monitor@bf82d13b9b10051d224345ab9184f5ede0a94289 - name: Checkout repository uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 - name: Initialize CodeQL - uses: github/codeql-action/init@f205ea1c3313d32999d8d6a48b4f6530d4437b38 + uses: github/codeql-action/init@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd with: languages: python - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@f205ea1c3313d32999d8d6a48b4f6530d4437b38 + uses: github/codeql-action/analyze@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd diff --git a/.github/workflows/common.yml b/.github/workflows/common.yml index 1f62933..184a956 100644 --- a/.github/workflows/common.yml +++ b/.github/workflows/common.yml @@ -16,7 +16,7 @@ jobs: - "3.14" steps: - - uses: GitHubSecurityLab/actions-permissions/monitor@56b81d5792a64ef3925978f6c0695ddc41685c27 + - uses: GitHubSecurityLab/actions-permissions/monitor@bf82d13b9b10051d224345ab9184f5ede0a94289 - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index 86df377..930e312 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -17,7 +17,7 @@ jobs: id-token: write steps: - - uses: GitHubSecurityLab/actions-permissions/monitor@56b81d5792a64ef3925978f6c0695ddc41685c27 + - uses: GitHubSecurityLab/actions-permissions/monitor@bf82d13b9b10051d224345ab9184f5ede0a94289 - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1