Repository navigation
Bump github/codeql-action/analyze from 4.38.2 to 4.38.3 - #1923
Merged
garrytrinder merged 3 commits intoOct 15, 2026
Merged
garrytrinder merged 3 commits into
garrytrinder merged 3 commits into
Conversation
dependabot
Bot
added
dependencies
Bumps [github/codeql-action/analyze](https://github.com/github/codeql-action) from 4.38.2 to 4.38.3. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@2892aa5...24c5418) --- updated-dependencies: - dependency-name: github/codeql-action/analyze dependency-version: 4.38.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/github_actions/github/codeql-action/analyze-4.38.3
branch
from
October 15, 2026 07:04
f0cca7b to
c81eda7
Compare
…on/analyze-4.38.3
Keep the init and analyze actions on the same version so CodeQL can run successfully.\n\nCo-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>\nCopilot-Session: ad85fd2b-9a2f-489e-96f4-5aa4484f4035
waldekmastykarz
approved these changes
Oct 15, 2026
Contributor
There was a problem hiding this comment.
🟢 Approval recommended
Both pins match the verified upstream release, with no identified compatibility or correctness issues.
0 open findings
What changed in this PR
Updates Dev Proxy’s CodeQL workflow to version 4.38.3.
Changes:
- Updates both
initandanalyzeto the same release commit. - Preserves commit-SHA pinning and updates version comments.
| File | Description |
|---|---|
.github/workflows/codeql-analysis.yml |
Updates both CodeQL action pins from 4.38.2 to 4.38.3. |
🧠 Review effort: Balanced
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
Collaborator
|
The separate CodeQL action bumps must be applied together because CodeQL rejects mixed init/analyze versions. I added the matching init 4.38.3 update; all checks pass. The repository requires approval from someone other than the last pusher, so an independent approval is needed before this can merge. |
waldekmastykarz
enabled auto-merge (squash)
October 15, 2026 07:44
garrytrinder
approved these changes
Oct 15, 2026
garrytrinder
left a comment
garrytrinder
left a comment
Collaborator
There was a problem hiding this comment.
Dependabot patch update; required checks are passing.
garrytrinder
deleted the
dependabot/github_actions/github/codeql-action/analyze-4.38.3
branch
October 15, 2026 08:04
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps github/codeql-action/analyze from 4.38.2 to 4.38.3.
Release notes
Sourced from github/codeql-action/analyze's releases.
Changelog
Sourced from github/codeql-action/analyze's changelog.
... (truncated)
Commits
24c5418Merge pull request #4214 from github/update-v4.38.3-e0b52dbdc69e87c5Add changelog note for #418423b6828Update changelog for v4.38.3e0b52dbMerge pull request #4210 from github/henrymercer/pin-python-for-older-clis-in-ci6b99698Pin Python 3.13.15 for older CLI versions in multi-language check63d3d63Merge pull request #4203 from github/update-bundle/codeql-bundle-v2.27.27377a10Add changelog notec1a30cdUpdate default bundle to codeql-bundle-v2.27.2d208ec7Merge pull request #4200 from github/mbg/esm/migrate-pr-checksa71b0c6Replace__dirnameinsync.ts