From 9dd4c720069a08b367404dc0f7e501f2a7a9747a Mon Sep 17 00:00:00 2001
From: Guilherme Moreira Rodrigues <gui.rodrigues@lerian.studio>
Date: Fri, 7 Aug 2026 13:18:41 -0300
Subject: [PATCH] fix(codeql): align init/analyze to autobuild's codeql-action
 SHA

init+analyze were pinned to c10b8064 (CodeQL 4.35.1) while autobuild+upload-sarif
use e4fba868 (CodeQL 4.37.3). The version skew made Go autobuild fail: "Loaded a
configuration file for version '4.37.3', but running version '4.35.1'". Bump
init+analyze to e4fba868 so every codeql-action step runs the same CodeQL.
---
 src/security/codeql-analyze/action.yml | 2 +-
 src/security/codeql-init/action.yml    | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/security/codeql-analyze/action.yml b/src/security/codeql-analyze/action.yml
index 4ef880bb..96131cf1 100644
--- a/src/security/codeql-analyze/action.yml
+++ b/src/security/codeql-analyze/action.yml
@@ -18,7 +18,7 @@ runs:
   using: composite
   steps:
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@c10b8064de6f491fea524254123dbe5e09572f13  # v4
+      uses: github/codeql-action/analyze@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81  # v4
       with:
         category: ${{ inputs.category }}
         output: ${{ inputs.output }}
diff --git a/src/security/codeql-init/action.yml b/src/security/codeql-init/action.yml
index c605f319..0af1606a 100644
--- a/src/security/codeql-init/action.yml
+++ b/src/security/codeql-init/action.yml
@@ -18,7 +18,7 @@ runs:
   using: composite
   steps:
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@c10b8064de6f491fea524254123dbe5e09572f13  # v4
+      uses: github/codeql-action/init@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81  # v4
       with:
         languages: ${{ inputs.languages }}
         queries: ${{ inputs.queries }}