Skip to content

Commit 861f83f

Browse files
build(deps): bump github/codeql-action from 4.33.0 to 4.34.0 (#2138)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.33.0 to 4.34.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/releases">github/codeql-action's releases</a>.</em></p> <blockquote> <h2>v4.34.0</h2> <ul> <li>Added an experimental change which disables TRAP caching when <a href="https://redirect.github.com/github/roadmap/issues/1158">improved incremental analysis</a> is enabled, since improved incremental analysis supersedes TRAP caching. This will improve performance and reduce Actions cache usage. We expect to roll this change out to everyone in March. <a href="https://redirect.github.com/github/codeql-action/pull/3569">#3569</a></li> <li>We are rolling out improved incremental analysis to C/C++ analyses that use build mode <code>none</code>. We expect this rollout to be complete by the end of April 2026. <a href="https://redirect.github.com/github/codeql-action/pull/3584">#3584</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.0">2.25.0</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3585">#3585</a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/github/codeql-action/commit/c6f931105cb2c34c8f901cc885ba1e2e259cf745"><code>c6f9311</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3588">#3588</a> from github/update-v4.34.0-30c555a52</li> <li><a href="https://github.com/github/codeql-action/commit/eeb9b3f4244c2945a20b9761dfa77f19d468d35f"><code>eeb9b3f</code></a> Update changelog for v4.34.0</li> <li><a href="https://github.com/github/codeql-action/commit/30c555a528e360aaf7570127a2440e1396c211cb"><code>30c555a</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3584">#3584</a> from github/idrissrio/cpp/overlay</li> <li><a href="https://github.com/github/codeql-action/commit/39191bd27fc8e967ed5dcceadbcf78177091aa3c"><code>39191bd</code></a> Merge branch 'main' into idrissrio/cpp/overlay</li> <li><a href="https://github.com/github/codeql-action/commit/147e93e5dc03f00298b26e52abd9964abdd807fc"><code>147e93e</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3585">#3585</a> from github/update-bundle/codeql-bundle-v2.25.0</li> <li><a href="https://github.com/github/codeql-action/commit/e6d83bce6d20689ff9fc25b4321d33a4ed81bc43"><code>e6d83bc</code></a> Update CHANGELOG.md</li> <li><a href="https://github.com/github/codeql-action/commit/0d057ccbceb05ef6fc6bf2273a4231791c81d5d0"><code>0d057cc</code></a> Add changelog note for C/C++ overlay</li> <li><a href="https://github.com/github/codeql-action/commit/074a0dbd16a3bdc1c2fe0ac6e3b454501716f1fc"><code>074a0db</code></a> Feature flag: update test without overlay support</li> <li><a href="https://github.com/github/codeql-action/commit/ab3b6fd19976dc97551864f5aaee06684f7cc4ad"><code>ab3b6fd</code></a> Feature flag: address copilot comment</li> <li><a href="https://github.com/github/codeql-action/commit/ce4a1feb6ac0e2c658e4e4ff0b57a1efa64039e5"><code>ce4a1fe</code></a> Feature flag: update generated lib after build</li> <li>Additional commits viewable in <a href="https://github.com/github/codeql-action/compare/b1bff81932f5cdfc8695c7752dcee935dcd061c8...c6f931105cb2c34c8f901cc885ba1e2e259cf745">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=4.33.0&new-version=4.34.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parent 1e0172f commit 861f83f

2 files changed

Lines changed: 4 additions & 4 deletions

File tree

.github/workflows/codeql.yaml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -34,12 +34,12 @@ jobs:
3434
check-latest: true
3535

3636
- name: Initialize CodeQL
37-
uses: github/codeql-action/init@b1bff81932f5cdfc8695c7752dcee935dcd061c8 # v4.33.0
37+
uses: github/codeql-action/init@c6f931105cb2c34c8f901cc885ba1e2e259cf745 # v4.34.0
3838
with:
3939
languages: go
4040

4141
- name: build
4242
run: make apko
4343

4444
- name: Perform CodeQL Analysis
45-
uses: github/codeql-action/analyze@b1bff81932f5cdfc8695c7752dcee935dcd061c8 # v4.33.0
45+
uses: github/codeql-action/analyze@c6f931105cb2c34c8f901cc885ba1e2e259cf745 # v4.34.0

.github/workflows/codeql.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -55,12 +55,12 @@ jobs:
5555
persist-credentials: false
5656

5757
- name: Initialize CodeQL
58-
uses: github/codeql-action/init@b1bff81932f5cdfc8695c7752dcee935dcd061c8 # v4.33.0
58+
uses: github/codeql-action/init@c6f931105cb2c34c8f901cc885ba1e2e259cf745 # v4.34.0
5959
with:
6060
languages: ${{ matrix.language }}
6161
build-mode: ${{ matrix.build-mode }}
6262

6363
- name: Perform CodeQL Analysis
64-
uses: github/codeql-action/analyze@b1bff81932f5cdfc8695c7752dcee935dcd061c8 # v4.33.0
64+
uses: github/codeql-action/analyze@c6f931105cb2c34c8f901cc885ba1e2e259cf745 # v4.34.0
6565
with:
6666
category: "/language:${{matrix.language}}"

0 commit comments

Comments
 (0)