From 794b98b81ede7f1fa0ab456dde600f0cb66f48ac Mon Sep 17 00:00:00 2001
From: Muhammad Labeeb Aryan Bin Mohd Lokman
 <93521146+Labeeb2339@users.noreply.github.com>
Date: Sun, 16 Aug 2026 19:17:22 +0800
Subject: [PATCH] ci: bump codeql-action to v4.37.7 (fix version-skew failure)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Pinned v4.37.6 hit 'Loaded a configuration file for version 4.37.7, but running
version 4.37.6' — GitHub's CodeQL backend moved to 4.37.7. Bump init + analyze.
---
 .github/workflows/codeql.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index f78d0d0..1121cfd 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -30,7 +30,7 @@ jobs:
           dotnet-version: 10.0.101
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6
+        uses: github/codeql-action/init@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7
         with:
           languages: csharp
           build-mode: manual
@@ -42,6 +42,6 @@ jobs:
         run: dotnet build PortCVE.sln -c Release --no-restore
 
       - name: Analyze
-        uses: github/codeql-action/analyze@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6
+        uses: github/codeql-action/analyze@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7
         with:
           category: /language:csharp