From 88ed09838f5ef4e729825280a71d55e8a17a4794 Mon Sep 17 00:00:00 2001 From: Martin Vogel Date: Tue, 4 Aug 2026 19:17:29 +0200 Subject: [PATCH] ci(codeql): bump init and analyze together to v4.37.4 Same treatment as v4.37.3 (#1434): dependabot splits the codeql-action bump into init-only and analyze-only PRs (#1398, #1399 after their rebase to 4.37.4), but the two actions must run at the same version, so each split PR fails its own analyze job. SHA verified against the upstream v4.37.4 tag. Signed-off-by: Martin Vogel --- .github/workflows/codeql.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 6b678c860..c1e5b17e9 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -29,7 +29,7 @@ jobs: run: sudo apt-get update && sudo apt-get install -y zlib1g-dev - name: Initialize CodeQL - uses: github/codeql-action/init@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3 + uses: github/codeql-action/init@f205ea1c3313d32999d8d6a48b4f6530d4437b38 # v4.37.4 with: languages: c-cpp build-mode: manual @@ -38,6 +38,6 @@ jobs: run: scripts/build.sh - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3 + uses: github/codeql-action/analyze@f205ea1c3313d32999d8d6a48b4f6530d4437b38 # v4.37.4 with: category: "/language:c-cpp"