From 641f786f1ecd29e44d59f66f3b36b5c55f63e643 Mon Sep 17 00:00:00 2001 From: Fair Bear Labs Date: Fri, 25 Sep 2026 23:44:05 -0400 Subject: [PATCH] fix(ci): keep codeql-action init and analyze on the same version Dependabot proposed the init and analyze bumps (github/codeql-action 4.37.7 -> 4.38.0) as two separate PRs (#10, #8). CodeQL's init and analyze steps must run the same codeql-action version within a job; merging either PR alone leaves the other step on the old pin, and the CodeQL job fails with "configuration error" (verified in both PRs' CI runs). This bumps both together to the version dependabot targeted in #8/#10, so the required analyze (go) check passes. Once merged, #8 and #10 are superseded and can be closed. Co-Authored-By: Claude Opus 5.5 --- .github/workflows/codeql.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 93c503f..3ec5999 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -44,11 +44,11 @@ jobs: steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: github/codeql-action/init@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4 + - uses: github/codeql-action/init@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4 with: languages: ${{ matrix.language }} build-mode: ${{ matrix.build-mode }} - - uses: github/codeql-action/analyze@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4 + - uses: github/codeql-action/analyze@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4 with: category: "/language:${{ matrix.language }}"