From 0c78d8589921d8e9500de4ebe59643d9dcf77744 Mon Sep 17 00:00:00 2001 From: PAN CHAO <193720202+arthurpanhku@users.noreply.github.com> Date: Wed, 22 Jul 2026 09:25:29 +0800 Subject: [PATCH] build(deps): bump codeql-action init+analyze to v4.37.1 together MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Supersedes #126 and #127. Dependabot split the init and analyze bumps into separate PRs, but the two steps must run at the same codeql-action version — bumping one alone fails with "Loaded a configuration file for version '4.37.1', but running version '4.37.0'". Bump both SHAs to 7188fc363630916deb702c7fdcf4e481b751f97a (v4.37.1) in one commit and correct the previously mismatched version comments. Co-Authored-By: Claude Opus 4.8 --- .github/workflows/codeql.yml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 5fe4052..5a3c060 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -25,13 +25,13 @@ jobs: persist-credentials: false - name: Initialize CodeQL - # github/codeql-action/init v4.36.2 - uses: github/codeql-action/init@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 + # github/codeql-action/init v4.37.1 + uses: github/codeql-action/init@7188fc363630916deb702c7fdcf4e481b751f97a with: languages: javascript-typescript - name: Perform CodeQL analysis - # github/codeql-action/analyze v4.37.0 - uses: github/codeql-action/analyze@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 + # github/codeql-action/analyze v4.37.1 + uses: github/codeql-action/analyze@7188fc363630916deb702c7fdcf4e481b751f97a with: category: '/language:javascript-typescript'