Skip to content

chore(deps): bump the minor-and-patch group across 1 directory with 3 updates - #296

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/github_actions/minor-and-patch-13f03c3a78
Open

chore(deps): bump the minor-and-patch group across 1 directory with 3 updates#296
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/github_actions/minor-and-patch-13f03c3a78

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 6, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 3 updates in the / directory: github/codeql-action/init, github/codeql-action/analyze and github/codeql-action/upload-sarif.

Updates github/codeql-action/init from 3.37.4 to 3.37.7

Release notes

Sourced from github/codeql-action/init's releases.

v3.37.7

  • Update default CodeQL bundle version to 2.26.3. #4085

v3.37.6

  • Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to .github/codeql-config.yml to align it with the suggested path that is used elsewhere. #4070

v3.37.5

  • Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the init Action instead of falling back to downloading the bundle before extracting it. #4061
Commits
  • f371297 Merge pull request #4095 from github/backport-v3.37.7-ff2f1c621
  • 2a073c8 Rebuild
  • 5f47b57 Update version and changelog for v3.37.7
  • 272e6d3 Merge remote-tracking branch 'origin/releases/v4' into backport-v3.37.7-ff2f1...
  • 4da5eae Revert "Rebuild"
  • 8b2ec47 Revert "Update version and changelog for v3.37.6"
  • ff2f1c6 Merge pull request #4093 from github/update-v4.37.7-be7a3dbb8
  • 951a133 Update changelog for v4.37.7
  • be7a3db Merge pull request #4087 from github/dependabot/npm_and_yarn/npm-minor-0aa561...
  • 9310334 Merge pull request #4086 from github/mbg/thread-action-state-to-codeql
  • Additional commits viewable in compare view

Updates github/codeql-action/analyze from 3.37.4 to 3.37.7

Release notes

Sourced from github/codeql-action/analyze's releases.

v3.37.7

  • Update default CodeQL bundle version to 2.26.3. #4085

v3.37.6

  • Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to .github/codeql-config.yml to align it with the suggested path that is used elsewhere. #4070

v3.37.5

  • Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the init Action instead of falling back to downloading the bundle before extracting it. #4061
Commits
  • f371297 Merge pull request #4095 from github/backport-v3.37.7-ff2f1c621
  • 2a073c8 Rebuild
  • 5f47b57 Update version and changelog for v3.37.7
  • 272e6d3 Merge remote-tracking branch 'origin/releases/v4' into backport-v3.37.7-ff2f1...
  • 4da5eae Revert "Rebuild"
  • 8b2ec47 Revert "Update version and changelog for v3.37.6"
  • ff2f1c6 Merge pull request #4093 from github/update-v4.37.7-be7a3dbb8
  • 951a133 Update changelog for v4.37.7
  • be7a3db Merge pull request #4087 from github/dependabot/npm_and_yarn/npm-minor-0aa561...
  • 9310334 Merge pull request #4086 from github/mbg/thread-action-state-to-codeql
  • Additional commits viewable in compare view

Updates github/codeql-action/upload-sarif from 3.37.4 to 3.37.7

Release notes

Sourced from github/codeql-action/upload-sarif's releases.

v3.37.7

  • Update default CodeQL bundle version to 2.26.3. #4085

v3.37.6

  • Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to .github/codeql-config.yml to align it with the suggested path that is used elsewhere. #4070

v3.37.5

  • Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the init Action instead of falling back to downloading the bundle before extracting it. #4061
Commits
  • f371297 Merge pull request #4095 from github/backport-v3.37.7-ff2f1c621
  • 2a073c8 Rebuild
  • 5f47b57 Update version and changelog for v3.37.7
  • 272e6d3 Merge remote-tracking branch 'origin/releases/v4' into backport-v3.37.7-ff2f1...
  • 4da5eae Revert "Rebuild"
  • 8b2ec47 Revert "Update version and changelog for v3.37.6"
  • ff2f1c6 Merge pull request #4093 from github/update-v4.37.7-be7a3dbb8
  • 951a133 Update changelog for v4.37.7
  • be7a3db Merge pull request #4087 from github/dependabot/npm_and_yarn/npm-minor-0aa561...
  • 9310334 Merge pull request #4086 from github/mbg/thread-action-state-to-codeql
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 6, 2026
@dependabot dependabot Bot changed the title chore(deps): bump the minor-and-patch group with 3 updates chore(deps): bump the minor-and-patch group across 1 directory with 3 updates Aug 18, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/minor-and-patch-13f03c3a78 branch 2 times, most recently from 6df8297 to f32f14b Compare August 19, 2026 01:12
@dependabot
chore(deps): bump the minor-and-patch group across 1 directory with 3…
a852f1d 
… updates

Bumps the minor-and-patch group with 3 updates in the / directory: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/analyze](https://github.com/github/codeql-action) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action).


Updates `github/codeql-action/init` from 3.37.4 to 3.37.7
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@a2983b8...f371297)

Updates `github/codeql-action/analyze` from 3.37.4 to 3.37.7
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@a2983b8...f371297)

Updates `github/codeql-action/upload-sarif` from 3.37.4 to 3.37.7
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@a2983b8...f371297)

---
updated-dependencies:
- dependency-name: github/codeql-action/analyze
  dependency-version: 3.37.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: github/codeql-action/init
  dependency-version: 3.37.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 3.37.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/minor-and-patch-13f03c3a78 branch from f32f14b to a852f1d Compare August 20, 2026 01:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants