Skip to content

chore(deps): update CodeQL uploader and record audit - #100

Merged
amavashev merged 2 commits into
mainfrom
dependabot/github_actions/github/codeql-action/upload-sarif-4.38.0
Sep 24, 2026
Merged

amavashev merged 2 commits into
mainfrom
dependabot/github_actions/github/codeql-action/upload-sarif-4.38.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 13, 2026 •

Copy link
Copy Markdown
Contributor

Consolidates the reviewed Dependabot changes and records the scope in AUDIT.md.

Update the SHA-pinned CodeQL SARIF uploader to 4.38.0.

Validation: all PR CI, integration/conformance, coverage, and applicable security checks passed on commit d1550fd. Existing coverage gates are unchanged. Application source and YAML protocol specifications are unchanged.

Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) from 4.37.9 to 4.38.0.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@cdf488f...b96794f)

---
updated-dependencies:
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 13, 2026
@dependabot
dependabot Bot requested a review from amavashev as a code owner September 13, 2026 10:04
@amavashev amavashev changed the title chore(deps): bump github/codeql-action/upload-sarif from 4.37.9 to 4.38.0 chore(deps): update CodeQL uploader and record audit Sep 24, 2026
@amavashev
amavashev merged commit d71295f into main Sep 24, 2026
8 checks passed
@amavashev
amavashev deleted the dependabot/github_actions/github/codeql-action/upload-sarif-4.38.0 branch September 24, 2026 10:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant