Skip to content

Chore(deps): bump github/codeql-action from 2d2f57ed3a96a5c55ea34a02d2787de24943ebea to 148e76abb6f49e4dd9bf755fde127f30c252eee9#146

Closed
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/github_actions/github/codeql-action-148e76abb6f49e4dd9bf755fde127f30c252eee9
Closed

Chore(deps): bump github/codeql-action from 2d2f57ed3a96a5c55ea34a02d2787de24943ebea to 148e76abb6f49e4dd9bf755fde127f30c252eee9#146
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/github_actions/github/codeql-action-148e76abb6f49e4dd9bf755fde127f30c252eee9

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Sep 11, 2025

Bumps github/codeql-action from 2d2f57ed3a96a5c55ea34a02d2787de24943ebea to 148e76abb6f49e4dd9bf755fde127f30c252eee9.

Changelog

Sourced from github/codeql-action's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

  • We have improved the CodeQL Action's ability to validate that the workflow it is used in does not use different versions of the CodeQL Action for different workflow steps. Mixing different versions of the CodeQL Action in the same workflow is unsupported and can lead to unpredictable results. A warning will now be emitted from the codeql-action/init step if different versions of the CodeQL Action are detected in the workflow file. Additionally, an error will now be thrown by the other CodeQL Action steps if they load a configuration file that was generated by a different version of the codeql-action/init step. #3099 and #3100

3.30.3 - 10 Sep 2025

No user facing changes.

3.30.2 - 09 Sep 2025

  • Fixed a bug which could cause language autodetection to fail. #3084
  • Experimental: The quality-queries input that was added in 3.29.2 as part of an internal experiment is now deprecated and will be removed in an upcoming version of the CodeQL Action. It has been superseded by a new analysis-kinds input, which is part of the same internal experiment. Do not use this in production as it is subject to change at any time. #3064

3.30.1 - 05 Sep 2025

  • Update default CodeQL bundle version to 2.23.0. #3077

3.30.0 - 01 Sep 2025

  • Reduce the size of the CodeQL Action, speeding up workflows by approximately 4 seconds. #3054

3.29.11 - 21 Aug 2025

  • Update default CodeQL bundle version to 2.22.4. #3044

3.29.10 - 18 Aug 2025

No user facing changes.

3.29.9 - 12 Aug 2025

No user facing changes.

3.29.8 - 08 Aug 2025

  • Fix an issue where the Action would autodetect unsupported languages such as HTML. #3015

3.29.7 - 07 Aug 2025

This release rolls back 3.29.6 to address issues with language autodetection. It is identical to 3.29.5.

3.29.6 - 07 Aug 2025

  • The cleanup-level input to the analyze Action is now deprecated. The CodeQL Action has written a limited amount of intermediate results to the database since version 2.2.5, and now automatically manages cleanup. #2999
  • Update default CodeQL bundle version to 2.22.3. #3000

... (truncated)

Commits
  • 148e76a Merge pull request #3108 from github/mbg/changelog/workflow-validation
  • 21a1feb Add changenote for improved version consistency checks
  • 1479235 Merge pull request #3100 from github/mbg/config-version
  • 0d058cd Merge pull request #3099 from github/mbg/validate-action-version-in-workflow
  • 25e54df Merge pull request #3105 from github/mergeback/v3.30.3-to-main-192325c8
  • 25c3218 Rebuild
  • 191d3de Update changelog and version after v3.30.3
  • 192325c Merge pull request #3104 from github/update-v3.30.3-b660efdcf
  • e68956d Update changelog for v3.30.3
  • b660efd Merge pull request #3103 from github/mbg/fix/category-check
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2d2f57ed3a96a5c55ea34a02d2787de24943ebea to 148e76abb6f49e4dd9bf755fde127f30c252eee9.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@2d2f57e...148e76a)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 148e76abb6f49e4dd9bf755fde127f30c252eee9
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code labels Sep 11, 2025
@dependabot dependabot bot requested a review from nosborn as a code owner September 11, 2025 18:02
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code labels Sep 11, 2025
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Sep 12, 2025

Superseded by #147.

@dependabot dependabot bot closed this Sep 12, 2025
@dependabot dependabot bot deleted the dependabot/github_actions/github/codeql-action-148e76abb6f49e4dd9bf755fde127f30c252eee9 branch September 12, 2025 18:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants