From d7e041fa8ca40bf3a3c5264958c62db98e9cd600 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 3 Aug 2026 19:03:26 +0000
Subject: [PATCH] Bump github/codeql-action from 4 to 4.37.4

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4 to 4.37.4.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v4...v4.37.4)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.37.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/codeql-analysis.yml        | 6 +++---
 .github/workflows/owasp-dependency-check.yml | 2 +-
 .github/workflows/trivy.yml                  | 2 +-
 3 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 4c6d6831df..c0450239fe 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -42,7 +42,7 @@ jobs:
             maven-
 
       - name: 'Initialize CodeQL'
-        uses: github/codeql-action/init@v4
+        uses: github/codeql-action/init@v4.37.4
         with:
           languages: ${{ matrix.language }}
           # If you wish to specify custom queries, you can do so here or in a config file.
@@ -70,7 +70,7 @@ jobs:
           mvn clean install -Dmaven.test.skip=true -Ddocker.skip=true -Dtest.onlyITs= -B -V -e -fae -q -DskipQA=true
 
       - name: 'Perform CodeQL Analysis'
-        uses: github/codeql-action/analyze@v4
+        uses: github/codeql-action/analyze@v4.37.4
         with:
           category: "/language:${{ matrix.language }}"
           upload: false
@@ -89,7 +89,7 @@ jobs:
           output: "sarif-results/${{ matrix.language }}.sarif"
 
       - name: 'Upload sarif files'
-        uses: github/codeql-action/upload-sarif@v4
+        uses: github/codeql-action/upload-sarif@v4.37.4
         with:
           sarif_file: "sarif-results/${{ matrix.language }}.sarif"
 
diff --git a/.github/workflows/owasp-dependency-check.yml b/.github/workflows/owasp-dependency-check.yml
index dea2213136..32ffebe14d 100644
--- a/.github/workflows/owasp-dependency-check.yml
+++ b/.github/workflows/owasp-dependency-check.yml
@@ -72,7 +72,7 @@ jobs:
           files: 'target/dependency-check-report.sarif'
 
       - name: 'Upload result to GitHub Code Scanning'
-        uses: github/codeql-action/upload-sarif@v4
+        uses: github/codeql-action/upload-sarif@v4.37.4
         if: steps.check_files.outputs.files_exists == 'true'
         with:
           sarif_file: target/dependency-check-report.sarif
diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml
index 0f41068844..7fdb706bba 100644
--- a/.github/workflows/trivy.yml
+++ b/.github/workflows/trivy.yml
@@ -57,7 +57,7 @@ jobs:
           files: "${{ matrix.docker-image }}-trivy-results.sarif"
 
       - name: 'Upload Trivy scan results to GitHub Security tab'
-        uses: github/codeql-action/upload-sarif@v4
+        uses: github/codeql-action/upload-sarif@v4.37.4
         if: steps.check_files.outputs.files_exists == 'true'
         with:
           sarif_file: "${{ matrix.docker-image }}-trivy-results.sarif"