chore: bump github/codeql-action from 4.37.6 to 4.37.7 - #6205
chore: bump github/codeql-action from 4.37.6 to 4.37.7#6205dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.37.6 to 4.37.7. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@v4.37.6...v4.37.7) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.37.7 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
github_actions
prql-bot
left a comment
prql-bot
left a comment
There was a problem hiding this comment.
All three github/codeql-action pins in .github/workflows/nightly.yaml (init, autobuild, analyze) moved together, and no other reference to the action exists elsewhere in the repo. v4.37.7 is a real non-prerelease tag whose only change is a default CodeQL bundle bump to 2.26.3 — no config change needed here.
The check-ok-to-merge red on this commit is superseded: its run (32057059218) has conclusion cancelled, from the concurrency cascade when the Dependabot batch landed. The replacement tests run is still working through the queue, so a number of checks are unverified at the time of this approval.
Checks still pending at approval time
build-prqlc (macos/musl/windows), check-links-book, check-links-markdown, measure-code-cov, nightly / check-unused-dependencies, nightly / code-ql (javascript), nightly / code-ql (python), nightly / time-compilation (false), the nightly / nightly-release build-prqlc, build-prqlc-c, build-python-wheels, test-publish-js and test-publish-to-cargo matrices, test-deps-min-versions, test-grammars, test-java / test (macos-15), test-js / test (macos-15), test-msrv, test-python / test (macos-15, windows-latest), and the three test-rust-main matrix legs.
nightly / code-ql is the one that exercises this change directly.
1 participant
Bumps github/codeql-action from 4.37.6 to 4.37.7.
Release notes
Sourced from github/codeql-action's releases.
Changelog
Sourced from github/codeql-action's changelog.
Commits
ff2f1c6Merge pull request #4093 from github/update-v4.37.7-be7a3dbb8951a133Update changelog for v4.37.7be7a3dbMerge pull request #4087 from github/dependabot/npm_and_yarn/npm-minor-0aa561...9310334Merge pull request #4086 from github/mbg/thread-action-state-to-codeqlb4d8a54Rebuildab5db25Bump the npm-minor group across 1 directory with 8 updates38055a3DroploggerfromdatabaseInitClusterin interface1f87aedMerge pull request #4085 from github/update-bundle/codeql-bundle-v2.26.3dc1b98aMakeloggeravailable togetCodeQLForCmd6f0220eMerge pull request #4084 from github/navntoft/bump-undiciDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)