This is an automated email from the ASF dual-hosted git repository. jamesbognar pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/juneau.git
commit 116238d32fe12e5564487ecb278854c20d799466 Author: James Bognar <[email protected]> AuthorDate: Tue Aug 18 15:57:43 2026 -0400 Bump github/codeql-action init+analyze to 4.37.6 Consolidates Dependabot PRs #370 and #371, which each bumped only one of the two coupled steps, causing the CodeQL "not all steps use the same version" config error. Both init and analyze now pin to 4.37.6. --- .github/workflows/codeql-analysis.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 87b62691ea..dd46600ef8 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -48,7 +48,7 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@02c5e83432fe5497fd85b873b6c9f16a8578e1d9 # 3.37.0 + uses: github/codeql-action/init@5595ccaf912efad79be6eef63a5619ff05969be3 # 4.37.6 with: languages: ${{ matrix.language }} # If you wish to specify custom queries, you can do so here or in a config file. @@ -81,6 +81,6 @@ jobs: # make release - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@02c5e83432fe5497fd85b873b6c9f16a8578e1d9 # 3.37.0 + uses: github/codeql-action/analyze@5595ccaf912efad79be6eef63a5619ff05969be3 # 4.37.6 env: CODEQL_ACTION_EXTRA_OPTIONS: '{"database":{"run-queries":["--additional-packs=${{ github.workspace }}/.github/codeql","--extension-packs=apache/juneau-security-models"]}}' \ No newline at end of file
