From f0569e9139bb8b88947d5a4f133aa7fb0edf1534 Mon Sep 17 00:00:00 2001 From: TianKai Ma Date: Thu, 27 Aug 2026 17:59:10 +0800 Subject: [PATCH] ci: align CodeQL actions at v4.37.9 --- .github/dependabot.yml | 5 +++++ .github/workflows/codeql.yml | 4 ++-- 2 files changed, 7 insertions(+), 2 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 5605dfd9ba..6aeced3b85 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -8,3 +8,8 @@ updates: directory: / schedule: interval: weekly + groups: + codeql-action: + patterns: + - github/codeql-action/init + - github/codeql-action/analyze diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 978555041e..841a4f1f4c 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -24,11 +24,11 @@ jobs: - name: Checkout uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Initialize CodeQL - uses: github/codeql-action/init@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6 + uses: github/codeql-action/init@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9 with: languages: python build-mode: none - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6 + uses: github/codeql-action/analyze@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9 with: category: "/language:python"