From 181eafba9acc09c8e5605204636a03f3eea5220a Mon Sep 17 00:00:00 2001 From: Martin Vogel Date: Tue, 4 Aug 2026 17:16:51 +0200 Subject: [PATCH] ci(codeql): bump init and analyze together to v4.37.3 Dependabot split the codeql-action bump into two PRs (#1398 init, #1399 analyze), but init and analyze must run the same action version: each PR alone fails its own analyze job with "Loaded a configuration file for version '4.37.3', but running version '4.36.2'". Bump both pins in one change instead. SHA verified against the upstream v4.37.3 tag. Signed-off-by: Martin Vogel --- .github/workflows/codeql.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index bcf5bc57..6b678c86 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -29,7 +29,7 @@ jobs: run: sudo apt-get update && sudo apt-get install -y zlib1g-dev - name: Initialize CodeQL - uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4 + uses: github/codeql-action/init@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3 with: languages: c-cpp build-mode: manual @@ -38,6 +38,6 @@ jobs: run: scripts/build.sh - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4 + uses: github/codeql-action/analyze@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3 with: category: "/language:c-cpp"