Skip to content

chore(deps): bump the minor-and-patch group across 1 directory with 3 updates - #294

Merged
github-actions[bot] merged 1 commit into
developfrom
dependabot/github_actions/minor-and-patch-1ff776f924
Aug 5, 2026
Merged

chore(deps): bump the minor-and-patch group across 1 directory with 3 updates#294
github-actions[bot] merged 1 commit into
developfrom
dependabot/github_actions/minor-and-patch-1ff776f924

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 3, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 3 updates in the / directory: github/codeql-action/init, github/codeql-action/analyze and github/codeql-action/upload-sarif.

Updates github/codeql-action/init from 3.37.3 to 3.37.4

Release notes

Sourced from github/codeql-action/init's releases.

v3.37.4

  • This version of the CodeQL Action adds support for the tools input for the codeql-action/init step to be specified using a github-codeql-tools repository property. This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to toolcache to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for tools in the workflow definition always takes precedence unless the value of the repository property starts with !. #4037
  • Update default CodeQL bundle version to 2.26.2. #4051
Commits
  • a2983b8 Merge pull request #4058 from github/backport-v3.37.4-f205ea1c3
  • 30d6d12 Rebuild
  • 14e2e60 Update version and changelog for v3.37.4
  • 5d3f01e Merge remote-tracking branch 'origin/releases/v4' into backport-v3.37.4-f205e...
  • 3f405c7 Revert "Rebuild"
  • 19d11a3 Revert "Update version and changelog for v3.37.3"
  • f205ea1 Merge pull request #4053 from github/update-v4.37.4-9130ce0f7
  • e40d079 Update changelog for v4.37.4
  • 9130ce0 Merge pull request #4051 from github/update-bundle/codeql-bundle-v2.26.2
  • c62d824 Add changelog note
  • Additional commits viewable in compare view

Updates github/codeql-action/analyze from 3.37.3 to 3.37.4

Release notes

Sourced from github/codeql-action/analyze's releases.

v3.37.4

  • This version of the CodeQL Action adds support for the tools input for the codeql-action/init step to be specified using a github-codeql-tools repository property. This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to toolcache to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for tools in the workflow definition always takes precedence unless the value of the repository property starts with !. #4037
  • Update default CodeQL bundle version to 2.26.2. #4051
Commits
  • a2983b8 Merge pull request #4058 from github/backport-v3.37.4-f205ea1c3
  • 30d6d12 Rebuild
  • 14e2e60 Update version and changelog for v3.37.4
  • 5d3f01e Merge remote-tracking branch 'origin/releases/v4' into backport-v3.37.4-f205e...
  • 3f405c7 Revert "Rebuild"
  • 19d11a3 Revert "Update version and changelog for v3.37.3"
  • f205ea1 Merge pull request #4053 from github/update-v4.37.4-9130ce0f7
  • e40d079 Update changelog for v4.37.4
  • 9130ce0 Merge pull request #4051 from github/update-bundle/codeql-bundle-v2.26.2
  • c62d824 Add changelog note
  • Additional commits viewable in compare view

Updates github/codeql-action/upload-sarif from 3.37.3 to 3.37.4

Release notes

Sourced from github/codeql-action/upload-sarif's releases.

v3.37.4

  • This version of the CodeQL Action adds support for the tools input for the codeql-action/init step to be specified using a github-codeql-tools repository property. This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to toolcache to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for tools in the workflow definition always takes precedence unless the value of the repository property starts with !. #4037
  • Update default CodeQL bundle version to 2.26.2. #4051
Commits
  • a2983b8 Merge pull request #4058 from github/backport-v3.37.4-f205ea1c3
  • 30d6d12 Rebuild
  • 14e2e60 Update version and changelog for v3.37.4
  • 5d3f01e Merge remote-tracking branch 'origin/releases/v4' into backport-v3.37.4-f205e...
  • 3f405c7 Revert "Rebuild"
  • 19d11a3 Revert "Update version and changelog for v3.37.3"
  • f205ea1 Merge pull request #4053 from github/update-v4.37.4-9130ce0f7
  • e40d079 Update changelog for v4.37.4
  • 9130ce0 Merge pull request #4051 from github/update-bundle/codeql-bundle-v2.26.2
  • c62d824 Add changelog note
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 3, 2026
@arasHi87

arasHi87 commented Aug 5, 2026

Copy link
Copy Markdown
Collaborator

@dependabot rebase

@dependabot
chore(deps): bump the minor-and-patch group across 1 directory with 3…
74b10f2 
… updates

Bumps the minor-and-patch group with 3 updates in the / directory: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/analyze](https://github.com/github/codeql-action) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action).


Updates `github/codeql-action/init` from 3.37.3 to 3.37.4
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@4187e74...a2983b8)

Updates `github/codeql-action/analyze` from 3.37.3 to 3.37.4
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@4187e74...a2983b8)

Updates `github/codeql-action/upload-sarif` from 3.37.3 to 3.37.4
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@4187e74...a2983b8)

---
updated-dependencies:
- dependency-name: github/codeql-action/analyze
  dependency-version: 3.37.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: github/codeql-action/init
  dependency-version: 3.37.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 3.37.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump the minor-and-patch group with 3 updates chore(deps): bump the minor-and-patch group across 1 directory with 3 updates Aug 5, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/minor-and-patch-1ff776f924 branch from 0350eb6 to 74b10f2 Compare August 5, 2026 01:47
@arasHi87 arasHi87 added the done Mark a PR ready to merge (triggers auto-merge once CI + reviews pass) label Aug 5, 2026
@github-actions
github-actions Bot merged commit da9dfd2 into develop Aug 5, 2026
10 checks passed
@github-actions
github-actions Bot deleted the dependabot/github_actions/minor-and-patch-1ff776f924 branch August 5, 2026 03:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file done Mark a PR ready to merge (triggers auto-merge once CI + reviews pass) github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@arasHi87