Skip to content

chore: update codeql#2832

Merged
JasonYeMSFT merged 1 commit into
microsoft:mainfrom
JasonYeMSFT:chuye/codeql-upgrade
Jul 16, 2026
Merged

chore: update codeql#2832
JasonYeMSFT merged 1 commit into
microsoft:mainfrom
JasonYeMSFT:chuye/codeql-upgrade

Conversation

@JasonYeMSFT

Copy link
Copy Markdown
Member

Description

Upgrade codeql action

Checklist

  • Tests pass locally (cd tests && npm test)
  • Title has one of the prefixes: fix:, feat:, feature:, chore:, misc:, test:, eval:
  • If modifying skill descriptions: verified routing correctness with integration tests (In tests/, npm run test:integration -- <skill> or npm run test:vally -- --skill <skill>)

Related Issues

closes:
#2822
#2825
#2824

Copilot AI review requested due to automatic review settings July 13, 2026 22:07

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR upgrades the pinned github/codeql-action GitHub Actions used in the repository’s CodeQL workflow, keeping security scanning up to date while maintaining SHA pinning for supply-chain safety.

Changes:

  • Bump github/codeql-action/init from v4.36.0 to v4.37.0 (pinned to a new commit SHA).
  • Bump github/codeql-action/autobuild from v4.36.0 to v4.37.0 (pinned to the same commit SHA).
  • Bump github/codeql-action/analyze from v4.36.0 to v4.37.0 (pinned to the same commit SHA).
Show a summary per file
File Description
.github/workflows/codeql.yml Updates CodeQL action pins (init/autobuild/analyze) to v4.37.0 commit SHA.

Review details

  • Files reviewed: 1/1 changed files
  • Comments generated: 0
  • Review effort level: Low

@JasonYeMSFT
JasonYeMSFT merged commit 44f6f5b into microsoft:main Jul 16, 2026
10 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants