From 29a22bf1806834cecfab8594948aa27418b0cc45 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 26 Aug 2026 14:23:38 +0000
Subject: [PATCH] chore(deps): update dependency github/codeql-cli-binaries to
 v2.26.4

---
 scripts/install-codeql.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/scripts/install-codeql.sh b/scripts/install-codeql.sh
index 983917bd3..9daa58329 100755
--- a/scripts/install-codeql.sh
+++ b/scripts/install-codeql.sh
@@ -41,7 +41,7 @@ NC='\033[0m'
 # deliberately and re-validate `lefthook run codeql` locally before raising
 # this — an exact pin (not "latest") keeps local scans reproducible, per
 # CLAUDE.md's "use exact dependency versions" convention.
-CODEQL_VERSION="${CODEQL_VERSION:-v2.26.3}"
+CODEQL_VERSION="${CODEQL_VERSION:-v2.26.4}"
 
 # Where to install the `codeql` PATH shim. Defaults to the first writable,
 # user-owned directory already on PATH so no sudo is required.