From 74d06e2e369e2223e3b445d551b5d7eb53d202f1 Mon Sep 17 00:00:00 2001 From: Asher Date: Mon, 2 Nov 2026 13:18:54 -0900 Subject: [PATCH] Update remaining codeql actions Also add a group since they have to all be updated together. --- .github/dependabot.yaml | 4 ++++ .github/workflows/security.yaml | 6 +++--- 2 files changed, 7 insertions(+), 3 deletions(-) diff --git a/.github/dependabot.yaml b/.github/dependabot.yaml index d39541471..54f2ddd56 100644 --- a/.github/dependabot.yaml +++ b/.github/dependabot.yaml @@ -9,6 +9,10 @@ updates: cooldown: default-days: 7 labels: [] + groups: + codeql-action: + patterns: + - "github/codeql-action/*" - package-ecosystem: "npm" directory: "/" diff --git a/.github/workflows/security.yaml b/.github/workflows/security.yaml index 96161b8e8..f1600995f 100644 --- a/.github/workflows/security.yaml +++ b/.github/workflows/security.yaml @@ -62,7 +62,7 @@ jobs: severity: "HIGH,CRITICAL" - name: Upload Trivy scan results to GitHub Security tab - uses: github/codeql-action/upload-sarif@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4 + uses: github/codeql-action/upload-sarif@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1 with: sarif_file: "trivy-repo-results.sarif" @@ -80,13 +80,13 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2 + uses: github/codeql-action/init@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1 with: config-file: ./.github/codeql-config.yml languages: javascript - name: Autobuild - uses: github/codeql-action/autobuild@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2 + uses: github/codeql-action/autobuild@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1 - name: Perform CodeQL Analysis uses: github/codeql-action/analyze@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1