opensource/RSSHub
3
0
Fork 0
mirror of https://github.com/DIYgod/RSSHub.git synced 2026-10-24 02:08:55 +08:00
Code Issues Packages Projects Releases Wiki Activity
15,560 Commits 10 Branches 70 Tags
c78612645f1364f4a1692d7d794e8fb37ecbc7cd
Commit Graph
471 Commits
Author SHA1 Message Date
dependabot[bot] 5126f15cc3 chore(deps): bump actions/setup-node from 6.0.0 to 6.1.0 (#20627) 
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6.0.0 to 6.1.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/2028fbc5c25fe9cf00d9f06a71cc4710d4507903...395ad3262231945c25e8478fd5baf05154b1d79f)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-12-03 16:31:27 +08:00
dependabot[bot] e6195d48fa chore(deps): bump actions/checkout from 6.0.0 to 6.0.1 (#20628) 
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.0 to 6.0.1.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/1af3b93b6815bc44a9784bd300feb67ff0d1eeb3...8e8c483db84b4bee98b60c0593521ed34d9990e8)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-12-03 08:21:12 +00:00
dependabot[bot] cafd6fbdbf chore(deps): bump actions/stale from 10.1.0 to 10.1.1 (#20626) 
Bumps [actions/stale](https://github.com/actions/stale) from 10.1.0 to 10.1.1.
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/stale/compare/5f858e3efba33a5ca4407a664cc011ad407f2008...997185467fa4f803885201cee163a9f38240193d)

---
updated-dependencies:
- dependency-name: actions/stale
  dependency-version: 10.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-12-03 08:17:52 +00:00
Tony 27cd651d58 fix(vercel): update build process to include patches directory 2025-12-03 04:24:28 +08:00
dependabot[bot] a51c4cfb6f chore(deps): bump actions/ai-inference from 2.0.3 to 2.0.4 (#20609) 
Bumps [actions/ai-inference](https://github.com/actions/ai-inference) from 2.0.3 to 2.0.4.
- [Release notes](https://github.com/actions/ai-inference/releases)
- [Commits](https://github.com/actions/ai-inference/compare/02c6cc30ae592ce65ee356387748dfc2fd5f7993...334892bb203895caaed82ec52d23c1ed9385151e)

---
updated-dependencies:
- dependency-name: actions/ai-inference
  dependency-version: 2.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-12-01 09:00:49 +00:00
dependabot[bot] b8c36d2619 chore(deps): bump docker/metadata-action from 5.9.0 to 5.10.0 (#20594) 
Bumps [docker/metadata-action](https://github.com/docker/metadata-action) from 5.9.0 to 5.10.0.
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](https://github.com/docker/metadata-action/compare/318604b99e75e41977312d83839a89be02ca4893...c299e40c65443455700f0fdfc63efafe5b349051)

---
updated-dependencies:
- dependency-name: docker/metadata-action
  dependency-version: 5.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-11-28 19:00:59 +08:00
dependabot[bot] e9d05ad8cb chore(deps): bump actions/ai-inference from 2.0.2 to 2.0.3 (#20593) 
Bumps [actions/ai-inference](https://github.com/actions/ai-inference) from 2.0.2 to 2.0.3.
- [Release notes](https://github.com/actions/ai-inference/releases)
- [Commits](https://github.com/actions/ai-inference/compare/5022b33bc1431add9b2831934daf8147a2ad9331...02c6cc30ae592ce65ee356387748dfc2fd5f7993)

---
updated-dependencies:
- dependency-name: actions/ai-inference
  dependency-version: 2.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-11-28 08:12:39 +00:00
Stephen Zhou be83ac8be4 chore: fix prettier config 2025-11-27 14:32:29 +08:00
Tony 680abcc008 chore: remove redundant provenance flag 
trusted publishing publishes provenance attestations by default
https://docs.npmjs.com/trusted-publishers#automatic-provenance-generation
 2025-11-27 10:17:37 +08:00
Tony ec8afe2f00 ci(npm): use trusted publishing (#20206) 
* ci(npm): use trusted publishing

* ci: remove redundant npm installation

* ci: update GitHub Action user configuration for npm publish
 2025-11-27 10:05:41 +08:00
Stephen Zhou d3b8c48e94 ci: npm tag latest 2025-11-26 21:34:57 +08:00
Stephen Zhou 6d8b81fd19 ci: npm publish path check 2025-11-26 21:29:46 +08:00
dependabot[bot] d814f3fa6b chore(deps): bump actions/ai-inference from 2.0.1 to 2.0.2 (#20562) 
Bumps [actions/ai-inference](https://github.com/actions/ai-inference) from 2.0.1 to 2.0.2.
- [Release notes](https://github.com/actions/ai-inference/releases)
- [Commits](https://github.com/actions/ai-inference/compare/a1c11829223a786afe3b5663db904a3aa1eac3a2...5022b33bc1431add9b2831934daf8147a2ad9331)

---
updated-dependencies:
- dependency-name: actions/ai-inference
  dependency-version: 2.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-11-24 08:19:00 +00:00
dependabot[bot] 0c57bd3f17 chore(deps): bump actions/checkout from 5.0.1 to 6.0.0 (#20536) 
Bumps [actions/checkout](https://github.com/actions/checkout) from 5.0.1 to 6.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/93cb6efe18208431cddfb8368fd83d5badbf9bfd...1af3b93b6815bc44a9784bd300feb67ff0d1eeb3)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-11-21 19:07:32 +08:00
Rongrong 3ede128c55 fix(route/picnob): bring back support for diygod/rsshub:chromium-bundled (#20504) 
* ci(docker-release): enable ZRAM to reduce memory pressure

This should hopefully help reduce stuck build jobs. Note that this can't
completely eliminate stuck builds since this is usually caused by
synchronization issues in QEMU.

Signed-off-by: Rongrong <i@rong.moe>

* build(Dockerfile): Add support for puppeteer-real-browser

Sets CHROMIUM_EXECUTABLE_PATH on AMD64 and installs essential
dependencies.

Signed-off-by: Rongrong <i@rong.moe>

* fix(route/picnob): bring back support for diygod/rsshub:chromium-bundled

The support for puppeteer-real-browser on diygod/rsshub:chromium-bundled
was improperly implemented in 400fb1fa49 ("fix(route/picnob): use
puppeteer-real-browser to pass cf check (#20478)") and was then removed
in 2cb11d7c7e ("fix(route/picnob): support img not in slide").

With proper support for puppeteer-real-browser added to Dockerfile, this
patch brings back the support for diygod/rsshub:chromium-bundled.

This partially reverts commit 2cb11d7c7e ("fix(route/picnob): support
img not in slide").

Signed-off-by: Rongrong <i@rong.moe>

* chore(route/picnob): add myself as maintainer

This route explicitly consult CHROMIUM_EXECUTABLE_PATH from the docker
image variant `diygod/rsshub:chromium-bundled`. Since I am the author of
the image variant, add myself as one of route maintainers so that I am
mentioned when the route is broken.

Signed-off-by: Rongrong <i@rong.moe>

# Conflicts:
#	lib/routes/picnob/user.ts

---------

Signed-off-by: Rongrong <i@rong.moe>
 2025-11-21 01:23:22 +08:00
dependabot[bot] df15548a31 chore(deps): bump actions/checkout from 5.0.0 to 5.0.1 (#20509) 
Bumps [actions/checkout](https://github.com/actions/checkout) from 5.0.0 to 5.0.1.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/08c6903cd8c0fde910a37f88322edcfb5dd907a8...93cb6efe18208431cddfb8368fd83d5badbf9bfd)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 5.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-11-18 19:30:56 +08:00
Tony e3c18adc71 chore: bump to node 24 (#20486) 2025-11-15 03:56:04 +08:00
dependabot[bot] 3ff18f388b chore(deps): bump actions-cool/issues-helper from 3.7.1 to 3.7.2 (#20457) 
Bumps [actions-cool/issues-helper](https://github.com/actions-cool/issues-helper) from 3.7.1 to 3.7.2.
- [Release notes](https://github.com/actions-cool/issues-helper/releases)
- [Changelog](https://github.com/actions-cool/issues-helper/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions-cool/issues-helper/compare/564cd9b1baacd7a9cd634e8039a149901ee5f600...9861779a695cf1898bd984c727f685f351cfc372)

---
updated-dependencies:
- dependency-name: actions-cool/issues-helper
  dependency-version: 3.7.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-11-10 17:36:43 +08:00
dependabot[bot] 675a836f9e chore(deps): bump docker/setup-qemu-action from 3.6.0 to 3.7.0 (#20439) 
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 3.6.0 to 3.7.0.
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](https://github.com/docker/setup-qemu-action/compare/29109295f81e9208d7d86ff1c6c12d2833863392...c7c53464625b32c7a7e944ae62b3e17d2b600130)

---
updated-dependencies:
- dependency-name: docker/setup-qemu-action
  dependency-version: 3.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-11-06 16:16:08 +08:00
dependabot[bot] 27e0b8b290 chore(deps): bump docker/metadata-action from 5.8.0 to 5.9.0 (#20433) 
Bumps [docker/metadata-action](https://github.com/docker/metadata-action) from 5.8.0 to 5.9.0.
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](https://github.com/docker/metadata-action/compare/c1e51972afc2121e065aed6d45c65596fe445f3f...318604b99e75e41977312d83839a89be02ca4893)

---
updated-dependencies:
- dependency-name: docker/metadata-action
  dependency-version: 5.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-11-05 18:39:37 +08:00
dependabot[bot] 49af486984 chore(deps): bump actions-cool/issues-helper from 3.7.0 to 3.7.1 (#20424) 
Bumps [actions-cool/issues-helper](https://github.com/actions-cool/issues-helper) from 3.7.0 to 3.7.1.
- [Release notes](https://github.com/actions-cool/issues-helper/releases)
- [Changelog](https://github.com/actions-cool/issues-helper/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions-cool/issues-helper/compare/ca1b238fecb728f25584d2beb288d7f1727f9fa6...564cd9b1baacd7a9cd634e8039a149901ee5f600)

---
updated-dependencies:
- dependency-name: actions-cool/issues-helper
  dependency-version: 3.7.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-11-04 08:16:10 +00:00
King-of-Infinite-Space 2b951ca938 chore(workflow): prevent similar issue being the current issue (#20410) 2025-11-03 09:23:03 +00:00
dependabot[bot] 9cd93191df chore(deps): bump actions-cool/issues-helper from 3.6.3 to 3.7.0 (#20415) 
Bumps [actions-cool/issues-helper](https://github.com/actions-cool/issues-helper) from 3.6.3 to 3.7.0.
- [Release notes](https://github.com/actions-cool/issues-helper/releases)
- [Changelog](https://github.com/actions-cool/issues-helper/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions-cool/issues-helper/compare/45d75b6cf72bf4f254be6230cb887ad002702491...ca1b238fecb728f25584d2beb288d7f1727f9fa6)

---
updated-dependencies:
- dependency-name: actions-cool/issues-helper
  dependency-version: 3.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-11-03 16:59:02 +08:00
dependabot[bot] d7366764e3 chore(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 (#20379) 
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.6.2 to 5.0.0.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/ea165f8d65b6e75b540449e92b4886f43607fa02...330a01c490aca151604b8cf639adc76d48f6c5d4)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-10-27 17:18:34 +08:00
Tony b93c7935e1 chore(docker): use zstd to compress image 
instead of gzip
 2025-10-26 00:49:55 +08:00
Tony 79aa90d09b chore: switch to dataaxiom/ghcr-cleanup-action 2025-10-25 01:56:19 +08:00
Tony 048b8e8ac2 chore: add user parameter to action-ghcr-prune step 2025-10-25 01:25:31 +08:00
Tony c32ccb348c chore: switch to action-ghcr-prune 2025-10-25 01:16:50 +08:00
Tony 884f38156d chore: use personal token instead 2025-10-25 01:12:52 +08:00
Tony 4c3591265f chore: use lower case image name 2025-10-25 00:36:32 +08:00
Tony 63c82c76f7 chore: add container retention policy workflow 2025-10-25 00:32:59 +08:00
zhenlonghe 95bd51e321 chore(workflow): enhance GHCR cleanup script with error handling improvements 
- Updated the deletion function to prevent process termination on errors by using 'set +e'.
- Improved error handling for file operations and command outputs to ensure robustness.
- Ensured that the script continues execution even if certain commands fail, enhancing overall reliability.
 2025-10-24 22:20:54 +08:00
zhenlonghe 3a3f47fd07 chore(workflow): improve GHCR cleanup process with independent result logging 
- Added a results directory to store success and error logs for each deletion attempt, preventing concurrent write conflicts.
- Updated the deletion function to create individual success and error files for better tracking of processed versions.
- Modified the result counting mechanism to utilize the new results directory structure.
 2025-10-24 21:35:42 +08:00
zhenlonghe cdf285d44a chore(workflow): introduce GHCR cleanup workflow with enhanced performance 
- Added a new workflow for cleaning up old GHCR package versions, scheduled to run hourly and triggered by Docker releases.
- Implemented a high-performance deletion process using parallel processing to optimize rate limits.
- Removed the previous daily retention workflow, consolidating cleanup functionality into this new workflow.
 2025-10-24 21:06:52 +08:00
Tony 0e3e88fa6f style: format code 2025-10-24 20:02:42 +08:00
zhenlonghe f03ac833a6 chore(workflow): update GHCR retention policy to use PAT instead of generated token 
- Removed the token generation step for GitHub App authentication.
- Updated the deletion process to utilize a personal access token (PAT) for authentication.
- Maintained the functionality to delete container versions older than 30 days while keeping the 5 most recent versions.
 2025-10-24 19:27:52 +08:00
zhenlonghe 6351b49991 chore(workflow): enhance GHCR retention policy with token generation 
- Added a step to generate a GitHub App token for authentication.
- Updated the deletion process to use the generated token instead of the default GITHUB_TOKEN.
- Changed the image-names parameter to delete all images instead of just "rsshub".
 2025-10-24 19:00:32 +08:00
zhenlonghe fde72d9275 chore(workflow): replace hourly GHCR cleanup with daily retention policy 
- Removed the existing hourly cleanup workflow for GHCR packages.
- Introduced a new daily retention workflow that deletes container versions older than 30 days while keeping the 5 most recent versions.
- Updated the scheduling to run at UTC 00:00 for better resource management.
 2025-10-24 18:27:10 +08:00
Tony 616be4b278 style: format workflow 2025-10-24 18:14:11 +08:00
zhenlonghe 75d946e36a chore(workflow): update GHCR cleanup schedule and optimize deletion process 
- Changed the cleanup schedule to run hourly for faster package management.
- Adjusted the default dry run mode to false for actual deletions.
- Enhanced logging to provide clearer insights on deletions and remaining versions.
- Implemented limits on deletions per run to avoid rate limits and ensure efficient processing.
 2025-10-24 14:39:30 +08:00
zhenlonghe 4c2169610e chore(workflow): optimize GHCR package cleanup process 
- Updated the cleanup script to use a more efficient method for fetching package versions with pagination.
- Enhanced version processing by utilizing jq for batch operations, improving performance and clarity.
- Added detailed logging for versions to be deleted and kept, along with error handling for deletion failures.
- Introduced a dry run mode to preview deletions without executing them.
 2025-10-24 13:57:48 +08:00
zhenlonghe 6cee4dc294 chore(workflow): change ghcr cleanup timeout to 120min 2025-10-24 10:47:08 +08:00
zhenlonghe 587e9bfb67 chore(workflow): add ghcr cleanup workflow 2025-10-24 09:02:45 +08:00
Tony 09a1afb05e feat: increase max HTTP header size (#20337) 2025-10-20 22:19:32 +08:00
Tony 0d37072355 chore: clean up vercel build patches 2025-10-18 13:39:17 +08:00
Tony d6606fc111 chore(deps): update bbob packages to version 4.3.1 and clean up patches (#20323) 
* chore(deps): update @bbob packages to version 4.3.1 and clean up patches

* fix: ensure Docker logs command does not fail the workflow

* fix: simplify Dockerfile cleanup step by removing entire lib directory
 2025-10-18 05:35:49 +08:00
dependabot[bot] 9c247d3d0e chore(deps): bump sigstore/cosign-installer from 3.10.0 to 4.0.0 (#20322) 
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.10.0 to 4.0.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/d7543c93d881b35a8faa02e8e3605f69b7a1ce62...faadad0cce49287aee09b3a48701e75088a2c6ad)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-10-18 00:31:15 +08:00
dependabot[bot] 9149b5ebf1 chore(deps): bump actions/setup-node from 5.0.0 to 6.0.0 (#20293) 
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 5.0.0 to 6.0.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/a0853c24544627f65ddf259abe73b1d18a591444...2028fbc5c25fe9cf00d9f06a71cc4710d4507903)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-10-16 21:58:10 +08:00
dependabot[bot] 22f49dc2e6 chore(deps): bump pnpm/action-setup from 4.1.0 to 4.2.0 (#20260) 
Bumps [pnpm/action-setup](https://github.com/pnpm/action-setup) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/pnpm/action-setup/releases)
- [Commits](https://github.com/pnpm/action-setup/compare/a7487c7e89a18df4991f7f222e4898a00d66ddda...41ff72655975bd51cab0327fa583b6e92b6d3061)

---
updated-dependencies:
- dependency-name: pnpm/action-setup
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-10-09 17:03:17 +08:00
dependabot[bot] b5623a8f11 chore(deps): bump github/codeql-action from 3 to 4 (#20256) 
* chore(deps): bump github/codeql-action from 3 to 4

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3 to 4.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Commits](https://github.com/github/codeql-action/compare/v3...v4)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(ci): pin to tag instead

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-10-08 22:46:14 +08:00