Skip to content

fix(ci): keep codeql-action init and analyze on the same version - #11

Open
fairbearlab wants to merge 1 commit into
mainfrom
fix/codeql-action-init-analyze-version-match
Open

fairbearlab wants to merge 1 commit into
mainfrom
fix/codeql-action-init-analyze-version-match

Conversation

@fairbearlab

Copy link
Copy Markdown
Owner

Summary

After merge

Close #8 and #10 as superseded (their diffs are now included here).

Test plan

  • CI on this branch — confirm `analyze (go)` passes with both steps matched.

🤖 Generated with Claude Code

Dependabot proposed the init and analyze bumps (github/codeql-action
4.37.7 -> 4.38.0) as two separate PRs (#10, #8). CodeQL's init and
analyze steps must run the same codeql-action version within a job;
merging either PR alone leaves the other step on the old pin, and the
CodeQL job fails with "configuration error" (verified in both PRs'
CI runs). This bumps both together to the version dependabot targeted
in #8/#10, so the required analyze (go) check passes.

Once merged, #8 and #10 are superseded and can be closed.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant