Skip to content

Chore(deps): Bump github/codeql-action init and analyze to v4.37.5 - #498

Merged
baijum merged 1 commit into
mainfrom
fix/codeql-action-version-sync
Aug 6, 2026
Merged

Chore(deps): Bump github/codeql-action init and analyze to v4.37.5#498
baijum merged 1 commit into
mainfrom
fix/codeql-action-version-sync

Conversation

@baijum

@baijum baijum commented Aug 6, 2026

Copy link
Copy Markdown
Owner

Summary

Test plan

  • CI CodeQL Analyze check passes

Made with Cursor

Summary by CodeRabbit

  • Chores
    • Updated CodeQL analysis actions to a newer version for improved security scanning reliability.

Dependabot PR #489 only bumped the analyze step, which broke CI because
init and analyze must run the same codeql-action version. Bump both
together and supersede #489.

Co-authored-by: Cursor <cursoragent@cursor.com>
@chatgpt-codex-connector

Copy link
Copy Markdown

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

@coderabbitai

coderabbitai Bot commented Aug 6, 2026

Copy link
Copy Markdown

Review Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 97bc1332-6a22-4a71-bf78-de837fbeb314

📥 Commits

Reviewing files that changed from the base of the PR and between 20d988d and f4a3044.

📒 Files selected for processing (1)
  • .github/workflows/codeql.yml

Walkthrough

The CodeQL workflow updates its initialization and analysis action references from v4.36.2 to v4.37.5. Both references use the new pinned commit.

Changes

CodeQL workflow update

Layer / File(s) Summary
Update CodeQL action references
.github/workflows/codeql.yml
The workflow updates the CodeQL initialization and analysis actions to the v4.37.5 pinned commit.

Estimated code review effort: 1 (Trivial) | ~2 minutes

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly and concisely describes updating both CodeQL action components to version v4.37.5.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch fix/codeql-action-version-sync

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@baijum
baijum merged commit aa14033 into main Aug 6, 2026
15 checks passed
@baijum
baijum deleted the fix/codeql-action-version-sync branch August 6, 2026 11:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant