Skip to content

Commit c7a2e74

Browse files
chore(deps): bump github/codeql-action from 4.33.0 to 4.34.0 (#47)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.33.0 to 4.34.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/releases">github/codeql-action's releases</a>.</em></p> <blockquote> <h2>v4.34.0</h2> <ul> <li>Added an experimental change which disables TRAP caching when <a href="https://redirect.github.com/github/roadmap/issues/1158">improved incremental analysis</a> is enabled, since improved incremental analysis supersedes TRAP caching. This will improve performance and reduce Actions cache usage. We expect to roll this change out to everyone in March. <a href="https://redirect.github.com/github/codeql-action/pull/3569">#3569</a></li> <li>We are rolling out improved incremental analysis to C/C++ analyses that use build mode <code>none</code>. We expect this rollout to be complete by the end of April 2026. <a href="https://redirect.github.com/github/codeql-action/pull/3584">#3584</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.0">2.25.0</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3585">#3585</a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/github/codeql-action/commit/c6f931105cb2c34c8f901cc885ba1e2e259cf745"><code>c6f9311</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3588">#3588</a> from github/update-v4.34.0-30c555a52</li> <li><a href="https://github.com/github/codeql-action/commit/eeb9b3f4244c2945a20b9761dfa77f19d468d35f"><code>eeb9b3f</code></a> Update changelog for v4.34.0</li> <li><a href="https://github.com/github/codeql-action/commit/30c555a528e360aaf7570127a2440e1396c211cb"><code>30c555a</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3584">#3584</a> from github/idrissrio/cpp/overlay</li> <li><a href="https://github.com/github/codeql-action/commit/39191bd27fc8e967ed5dcceadbcf78177091aa3c"><code>39191bd</code></a> Merge branch 'main' into idrissrio/cpp/overlay</li> <li><a href="https://github.com/github/codeql-action/commit/147e93e5dc03f00298b26e52abd9964abdd807fc"><code>147e93e</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3585">#3585</a> from github/update-bundle/codeql-bundle-v2.25.0</li> <li><a href="https://github.com/github/codeql-action/commit/e6d83bce6d20689ff9fc25b4321d33a4ed81bc43"><code>e6d83bc</code></a> Update CHANGELOG.md</li> <li><a href="https://github.com/github/codeql-action/commit/0d057ccbceb05ef6fc6bf2273a4231791c81d5d0"><code>0d057cc</code></a> Add changelog note for C/C++ overlay</li> <li><a href="https://github.com/github/codeql-action/commit/074a0dbd16a3bdc1c2fe0ac6e3b454501716f1fc"><code>074a0db</code></a> Feature flag: update test without overlay support</li> <li><a href="https://github.com/github/codeql-action/commit/ab3b6fd19976dc97551864f5aaee06684f7cc4ad"><code>ab3b6fd</code></a> Feature flag: address copilot comment</li> <li><a href="https://github.com/github/codeql-action/commit/ce4a1feb6ac0e2c658e4e4ff0b57a1efa64039e5"><code>ce4a1fe</code></a> Feature flag: update generated lib after build</li> <li>Additional commits viewable in <a href="https://github.com/github/codeql-action/compare/b1bff81932f5cdfc8695c7752dcee935dcd061c8...c6f931105cb2c34c8f901cc885ba1e2e259cf745">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=4.33.0&new-version=4.34.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>
2 parents 10cbf6e + b90205f commit c7a2e74

3 files changed

Lines changed: 4 additions & 4 deletions

File tree

.github/workflows/codeql.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -29,12 +29,12 @@ jobs:
2929
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
3030

3131
- name: Initialize CodeQL
32-
uses: github/codeql-action/init@b1bff81932f5cdfc8695c7752dcee935dcd061c8 # v3.28.1
32+
uses: github/codeql-action/init@c6f931105cb2c34c8f901cc885ba1e2e259cf745 # v3.28.1
3333
with:
3434
languages: ${{ matrix.language }}
3535
build-mode: ${{ matrix.build-mode }}
3636

3737
- name: Perform CodeQL Analysis
38-
uses: github/codeql-action/analyze@b1bff81932f5cdfc8695c7752dcee935dcd061c8 # v3.28.1
38+
uses: github/codeql-action/analyze@c6f931105cb2c34c8f901cc885ba1e2e259cf745 # v3.28.1
3939
with:
4040
category: "/language:${{ matrix.language }}"

.github/workflows/scorecard-enforcer.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ jobs:
3030
publish_results: true
3131

3232
- name: Upload SARIF
33-
uses: github/codeql-action/upload-sarif@b1bff81932f5cdfc8695c7752dcee935dcd061c8 # v4
33+
uses: github/codeql-action/upload-sarif@c6f931105cb2c34c8f901cc885ba1e2e259cf745 # v4
3434
with:
3535
sarif_file: results.sarif
3636

.github/workflows/scorecard.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -27,6 +27,6 @@ jobs:
2727
results_format: sarif
2828

2929
- name: Upload results
30-
uses: github/codeql-action/upload-sarif@b1bff81932f5cdfc8695c7752dcee935dcd061c8 # v3.31.8
30+
uses: github/codeql-action/upload-sarif@c6f931105cb2c34c8f901cc885ba1e2e259cf745 # v3.31.8
3131
with:
3232
sarif_file: results.sarif

0 commit comments

Comments
 (0)