Skip to content

build(deps): bump CodeQL actions to 4.39.3 and action-gh-release to 3.0.4 - #41

Merged
timmaurice merged 7 commits into
masterfrom
deps/actions-codeql-4.39.3
Nov 13, 2026
Merged

timmaurice merged 7 commits into
masterfrom
deps/actions-codeql-4.39.3

Conversation

@timmaurice

Copy link
Copy Markdown
Owner

Combines the Dependabot PRs #37, #38, #39 and #40 into one.

Dependabot opened one PR per CodeQL sub-action. init and analyze must run on the same CodeQL version, so #37 and #38 each failed on their own ("Analyze (python)"). Here all three CodeQL actions move to 4.39.3 together (same pinned SHA 33d7b85), plus softprops/action-gh-release 3.0.4 from #40. The four original Dependabot commits are kept as they are.

dependabot Bot and others added 7 commits November 13, 2026 21:23
Bumps [github/codeql-action/analyze](https://github.com/github/codeql-action) from 4.39.2 to 4.39.3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@1fc58d0...33d7b85)

---
updated-dependencies:
- dependency-name: github/codeql-action/analyze
  dependency-version: 4.39.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [github/codeql-action/init](https://github.com/github/codeql-action) from 4.39.2 to 4.39.3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@1fc58d0...33d7b85)

---
updated-dependencies:
- dependency-name: github/codeql-action/init
  dependency-version: 4.39.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [github/codeql-action/autobuild](https://github.com/github/codeql-action) from 4.39.2 to 4.39.3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@1fc58d0...33d7b85)

---
updated-dependencies:
- dependency-name: github/codeql-action/autobuild
  dependency-version: 4.39.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 3.0.3 to 3.0.4.
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](softprops/action-gh-release@efb3536...8a0cd65)

---
updated-dependencies:
- dependency-name: softprops/action-gh-release
  dependency-version: 3.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
…/codeql-action/init-4.39.3' into deps/actions-codeql-4.39.3
…/codeql-action/autobuild-4.39.3' into deps/actions-codeql-4.39.3
…ops/action-gh-release-3.0.4' into deps/actions-codeql-4.39.3
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant