build(deps): update github/codeql-action action to v4 (#17)

renovate[bot] · web-flow · commit 5143c05ffac6 · 2026-02-14T11:09:31.000Z
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github/codeql-action](https://redirect.github.com/github/codeql-action) | action | major | `v3.29.5` → `v4.32.3` | --- ### Release Notes <details> <summary>github/codeql-action (github/codeql-action)</summary> ### [`v4.32.3`](https://redirect.github.com/github/codeql-action/releases/tag/v4.32.3) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.32.2...v4.32.3) - Added experimental support for testing connections to [private package registries](https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries). This feature is not currently enabled for any analysis. In the future, it may be enabled by default for Default Setup. [#&#8203;3466](https://redirect.github.com/github/codeql-action/pull/3466) ### [`v4.32.2`](https://redirect.github.com/github/codeql-action/compare/v4.32.1...v4.32.2) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.32.1...v4.32.2) ### [`v4.32.1`](https://redirect.github.com/github/codeql-action/releases/tag/v4.32.1) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.32.0...v4.32.1) - A warning is now shown in Default Setup workflow logs if a [private package registry is configured](https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries) using a GitHub Personal Access Token (PAT), but no username is configured. [#&#8203;3422](https://redirect.github.com/github/codeql-action/pull/3422) - Fixed a bug which caused the CodeQL Action to fail when repository properties cannot successfully be retrieved. [#&#8203;3421](https://redirect.github.com/github/codeql-action/pull/3421) ### [`v4.32.0`](https://redirect.github.com/github/codeql-action/releases/tag/v4.32.0) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.31.11...v4.32.0) - Update default CodeQL bundle version to [2.24.0](https://redirect.github.com/github/codeql-action/releases/tag/codeql-bundle-v2.24.0). [#&#8203;3425](https://redirect.github.com/github/codeql-action/pull/3425) ### [`v4.31.11`](https://redirect.github.com/github/codeql-action/releases/tag/v4.31.11) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.31.10...v4.31.11) - When running a Default Setup workflow with [Actions debugging enabled](https://docs.github.com/en/actions/how-tos/monitor-workflows/enable-debug-logging), the CodeQL Action will now use more unique names when uploading logs from the Dependabot authentication proxy as workflow artifacts. This ensures that the artifact names do not clash between multiple jobs in a build matrix. [#&#8203;3409](https://redirect.github.com/github/codeql-action/pull/3409) - Improved error handling throughout the CodeQL Action. [#&#8203;3415](https://redirect.github.com/github/codeql-action/pull/3415) - Added experimental support for automatically excluding [generated files](https://docs.github.com/en/repositories/working-with-files/managing-files/customizing-how-changed-files-appear-on-github) from the analysis. This feature is not currently enabled for any analysis. In the future, it may be enabled by default for some GitHub-managed analyses. [#&#8203;3318](https://redirect.github.com/github/codeql-action/pull/3318) - The changelog extracts that are included with releases of the CodeQL Action are now shorter to avoid duplicated information from appearing in Dependabot PRs. [#&#8203;3403](https://redirect.github.com/github/codeql-action/pull/3403) ### [`v4.31.10`](https://redirect.github.com/github/codeql-action/releases/tag/v4.31.10) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.31.9...v4.31.10) ##### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. ##### 4.31.10 - 12 Jan 2026 - Update default CodeQL bundle version to 2.23.9. [#&#8203;3393](https://redirect.github.com/github/codeql-action/pull/3393) See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v4.31.10/CHANGELOG.md) for more information. ### [`v4.31.9`](https://redirect.github.com/github/codeql-action/compare/v4.31.8...v4.31.9) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.31.8...v4.31.9) ### [`v4.31.8`](https://redirect.github.com/github/codeql-action/releases/tag/v4.31.8) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.31.7...v4.31.8) ##### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. ##### 4.31.8 - 11 Dec 2025 - Update default CodeQL bundle version to 2.23.8. [#&#8203;3354](https://redirect.github.com/github/codeql-action/pull/3354) See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v4.31.8/CHANGELOG.md) for more information. ### [`v4.31.7`](https://redirect.github.com/github/codeql-action/releases/tag/v4.31.7) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.31.6...v4.31.7) ##### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. ##### 4.31.7 - 05 Dec 2025 - Update default CodeQL bundle version to 2.23.7. [#&#8203;3343](https://redirect.github.com/github/codeql-action/pull/3343) See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v4.31.7/CHANGELOG.md) for more information. ### [`v4.31.6`](https://redirect.github.com/github/codeql-action/releases/tag/v4.31.6) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.31.5...v4.31.6) ##### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. ##### 4.31.6 - 01 Dec 2025 No user facing changes. See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v4.31.6/CHANGELOG.md) for more information. ### [`v4.31.5`](https://redirect.github.com/github/codeql-action/releases/tag/v4.31.5) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.31.4...v4.31.5) ##### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. ##### 4.31.5 - 24 Nov 2025 - Update default CodeQL bundle version to 2.23.6. [#&#8203;3321](https://redirect.github.com/github/codeql-action/pull/3321) See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v4.31.5/CHANGELOG.md) for more information. ### [`v4.31.4`](https://redirect.github.com/github/codeql-action/releases/tag/v4.31.4) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.31.3...v4.31.4) ##### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. ##### 4.31.4 - 18 Nov 2025 No user facing changes. See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v4.31.4/CHANGELOG.md) for more information. ### [`v4.31.3`](https://redirect.github.com/github/codeql-action/releases/tag/v4.31.3) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.31.2...v4.31.3) ##### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. ##### 4.31.3 - 13 Nov 2025 - CodeQL Action v3 will be deprecated in December 2026. The Action now logs a warning for customers who are running v3 but could be running v4. For more information, see [Upcoming deprecation of CodeQL Action v3](https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/). - Update default CodeQL bundle version to 2.23.5. [#&#8203;3288](https://redirect.github.com/github/codeql-action/pull/3288) See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v4.31.3/CHANGELOG.md) for more information. ### [`v4.31.2`](https://redirect.github.com/github/codeql-action/compare/v4.31.1...v4.31.2) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.31.1...v4.31.2) ### [`v4.31.1`](https://redirect.github.com/github/codeql-action/compare/v4.31.0...v4.31.1) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.31.0...v4.31.1) ### [`v4.31.0`](https://redirect.github.com/github/codeql-action/compare/v4.30.9...v4.31.0) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.30.9...v4.31.0) ### [`v4.30.9`](https://redirect.github.com/github/codeql-action/releases/tag/v4.30.9) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.30.8...v4.30.9) ##### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. ##### 4.30.9 - 17 Oct 2025 - Update default CodeQL bundle version to 2.23.3. [#&#8203;3205](https://redirect.github.com/github/codeql-action/pull/3205) - Experimental: A new `setup-codeql` action has been added which is similar to `init`, except it only installs the CodeQL CLI and does not initialize a database. Do not use this in production as it is part of an internal experiment and subject to change at any time. [#&#8203;3204](https://redirect.github.com/github/codeql-action/pull/3204) See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v4.30.9/CHANGELOG.md) for more information. ### [`v4.30.8`](https://redirect.github.com/github/codeql-action/releases/tag/v4.30.8) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.30.7...v4.30.8) ### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. #### 4.30.8 - 10 Oct 2025 No user facing changes. See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v4.30.8/CHANGELOG.md) for more information. ### [`v4.30.7`](https://redirect.github.com/github/codeql-action/releases/tag/v4.30.7) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.32.3...v4.30.7) ### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. #### 4.30.7 - 06 Oct 2025 - \[v4+ only] The CodeQL Action now runs on Node.js v24. [#&#8203;3169](https://redirect.github.com/github/codeql-action/pull/3169) See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v4.30.7/CHANGELOG.md) for more information. ### [`v3.32.3`](https://redirect.github.com/github/codeql-action/releases/tag/v3.32.3) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.32.2...v3.32.3) - Added experimental support for testing connections to [private package registries](https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries). This feature is not currently enabled for any analysis. In the future, it may be enabled by default for Default Setup. [#&#8203;3466](https://redirect.github.com/github/codeql-action/pull/3466) ### [`v3.32.2`](https://redirect.github.com/github/codeql-action/releases/tag/v3.32.2) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.32.1...v3.32.2) - Update default CodeQL bundle version to [2.24.1](https://redirect.github.com/github/codeql-action/releases/tag/codeql-bundle-v2.24.1). [#&#8203;3460](https://redirect.github.com/github/codeql-action/pull/3460) ### [`v3.32.1`](https://redirect.github.com/github/codeql-action/releases/tag/v3.32.1) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.32.0...v3.32.1) - A warning is now shown in Default Setup workflow logs if a [private package registry is configured](https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries) using a GitHub Personal Access Token (PAT), but no username is configured. [#&#8203;3422](https://redirect.github.com/github/codeql-action/pull/3422) - Fixed a bug which caused the CodeQL Action to fail when repository properties cannot successfully be retrieved. [#&#8203;3421](https://redirect.github.com/github/codeql-action/pull/3421) ### [`v3.32.0`](https://redirect.github.com/github/codeql-action/releases/tag/v3.32.0) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.31.11...v3.32.0) - Update default CodeQL bundle version to [2.24.0](https://redirect.github.com/github/codeql-action/releases/tag/codeql-bundle-v2.24.0). [#&#8203;3425](https://redirect.github.com/github/codeql-action/pull/3425) ### [`v3.31.11`](https://redirect.github.com/github/codeql-action/releases/tag/v3.31.11) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.31.10...v3.31.11) - When running a Default Setup workflow with [Actions debugging enabled](https://docs.github.com/en/actions/how-tos/monitor-workflows/enable-debug-logging), the CodeQL Action will now use more unique names when uploading logs from the Dependabot authentication proxy as workflow artifacts. This ensures that the artifact names do not clash between multiple jobs in a build matrix. [#&#8203;3409](https://redirect.github.com/github/codeql-action/pull/3409) - Improved error handling throughout the CodeQL Action. [#&#8203;3415](https://redirect.github.com/github/codeql-action/pull/3415) - Added experimental support for automatically excluding [generated files](https://docs.github.com/en/repositories/working-with-files/managing-files/customizing-how-changed-files-appear-on-github) from the analysis. This feature is not currently enabled for any analysis. In the future, it may be enabled by default for some GitHub-managed analyses. [#&#8203;3318](https://redirect.github.com/github/codeql-action/pull/3318) - The changelog extracts that are included with releases of the CodeQL Action are now shorter to avoid duplicated information from appearing in Dependabot PRs. [#&#8203;3403](https://redirect.github.com/github/codeql-action/pull/3403) ### [`v3.31.10`](https://redirect.github.com/github/codeql-action/releases/tag/v3.31.10) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.31.9...v3.31.10) ##### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. ##### 3.31.10 - 12 Jan 2026 - Update default CodeQL bundle version to 2.23.9. [#&#8203;3393](https://redirect.github.com/github/codeql-action/pull/3393) See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.31.10/CHANGELOG.md) for more information. ### [`v3.31.9`](https://redirect.github.com/github/codeql-action/releases/tag/v3.31.9) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.31.8...v3.31.9) ##### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. ##### 3.31.9 - 16 Dec 2025 No user facing changes. See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.31.9/CHANGELOG.md) for more information. ### [`v3.31.8`](https://redirect.github.com/github/codeql-action/releases/tag/v3.31.8) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.31.7...v3.31.8) ##### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. ##### 3.31.8 - 11 Dec 2025 - Update default CodeQL bundle version to 2.23.8. [#&#8203;3354](https://redirect.github.com/github/codeql-action/pull/3354) See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.31.8/CHANGELOG.md) for more information. ### [`v3.31.7`](https://redirect.github.com/github/codeql-action/releases/tag/v3.31.7) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.31.6...v3.31.7) ##### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. ##### 3.31.7 - 05 Dec 2025 - Update default CodeQL bundle version to 2.23.7. [#&#8203;3343](https://redirect.github.com/github/codeql-action/pull/3343) See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.31.7/CHANGELOG.md) for more information. ### [`v3.31.6`](https://redirect.github.com/github/codeql-action/releases/tag/v3.31.6) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.31.5...v3.31.6) ### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. #### 3.31.6 - 01 Dec 2025 No user facing changes. See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.31.6/CHANGELOG.md) for more information. ### [`v3.31.5`](https://redirect.github.com/github/codeql-action/releases/tag/v3.31.5) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.31.4...v3.31.5) ### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. #### 3.31.5 - 24 Nov 2025 - Update default CodeQL bundle version to 2.23.6. [#&#8203;3321](https://redirect.github.com/github/codeql-action/pull/3321) See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.31.5/CHANGELOG.md) for more information. ### [`v3.31.4`](https://redirect.github.com/github/codeql-action/releases/tag/v3.31.4) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.31.3...v3.31.4) ### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. #### 3.31.4 - 18 Nov 2025 No user facing changes. See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.31.4/CHANGELOG.md) for more information. ### [`v3.31.3`](https://redirect.github.com/github/codeql-action/releases/tag/v3.31.3) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.31.2...v3.31.3) ### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. #### 3.31.3 - 13 Nov 2025 - CodeQL Action v3 will be deprecated in December 2026. The Action now logs a warning for customers who are running v3 but could be running v4. For more information, see [Upcoming deprecation of CodeQL Action v3](https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/). - Update default CodeQL bundle version to 2.23.5. [#&#8203;3288](https://redirect.github.com/github/codeql-action/pull/3288) See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.31.3/CHANGELOG.md) for more information. ### [`v3.31.2`](https://redirect.github.com/github/codeql-action/compare/v3.31.1...v3.31.2) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.31.1...v3.31.2) ### [`v3.31.1`](https://redirect.github.com/github/codeql-action/compare/v3.31.0...v3.31.1) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.31.0...v3.31.1) ### [`v3.31.0`](https://redirect.github.com/github/codeql-action/releases/tag/v3.31.0) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.30.9...v3.31.0) ##### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. ##### 3.31.0 - 24 Oct 2025 - Bump minimum CodeQL bundle version to 2.17.6. [#&#8203;3223](https://redirect.github.com/github/codeql-action/pull/3223) - When SARIF files are uploaded by the `analyze` or `upload-sarif` actions, the CodeQL Action automatically performs post-processing steps to prepare the data for the upload. Previously, these post-processing steps were only performed before an upload took place. We are now changing this so that the post-processing steps will always be performed, even when the SARIF files are not uploaded. This does not change anything for the `upload-sarif` action. For `analyze`, this may affect Advanced Setup for CodeQL users who specify a value other than `always` for the `upload` input. [#&#8203;3222](https://redirect.github.com/github/codeql-action/pull/3222) See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.31.0/CHANGELOG.md) for more information. ### [`v3.30.9`](https://redirect.github.com/github/codeql-action/releases/tag/v3.30.9) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.30.8...v3.30.9) ##### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. ##### 3.30.9 - 17 Oct 2025 - Update default CodeQL bundle version to 2.23.3. [#&#8203;3205](https://redirect.github.com/github/codeql-action/pull/3205) - Experimental: A new `setup-codeql` action has been added which is similar to `init`, except it only installs the CodeQL CLI and does not initialize a database. Do not use this in production as it is part of an internal experiment and subject to change at any time. [#&#8203;3204](https://redirect.github.com/github/codeql-action/pull/3204) See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.30.9/CHANGELOG.md) for more information. ### [`v3.30.8`](https://redirect.github.com/github/codeql-action/releases/tag/v3.30.8) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.30.7...v3.30.8) ### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. #### 3.30.8 - 10 Oct 2025 No user facing changes. See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.30.8/CHANGELOG.md) for more information. ### [`v3.30.7`](https://redirect.github.com/github/codeql-action/releases/tag/v3.30.7) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.30.6...v3.30.7) ### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. #### 3.30.7 - 06 Oct 2025 No user facing changes. See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.30.7/CHANGELOG.md) for more information. ### [`v3.30.6`](https://redirect.github.com/github/codeql-action/releases/tag/v3.30.6) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.30.5...v3.30.6) ### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. #### 3.30.6 - 02 Oct 2025 - Update default CodeQL bundle version to 2.23.2. [#&#8203;3168](https://redirect.github.com/github/codeql-action/pull/3168) See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.30.6/CHANGELOG.md) for more information. ### [`v3.30.5`](https://redirect.github.com/github/codeql-action/releases/tag/v3.30.5) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.30.4...v3.30.5) ### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. #### 3.30.5 - 26 Sep 2025 - We fixed a bug that was introduced in `3.30.4` with `upload-sarif` which resulted in files without a `.sarif` extension not getting uploaded. [#&#8203;3160](https://redirect.github.com/github/codeql-action/pull/3160) See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.30.5/CHANGELOG.md) for more information. ### [`v3.30.4`](https://redirect.github.com/github/codeql-action/releases/tag/v3.30.4) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.30.3...v3.30.4) ### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. #### 3.30.4 - 25 Sep 2025 - We have improved the CodeQL Action's ability to validate that the workflow it is used in does not use different versions of the CodeQL Action for different workflow steps. Mixing different versions of the CodeQL Action in the same workflow is unsupported and can lead to unpredictable results. A warning will now be emitted from the `codeql-action/init` step if different versions of the CodeQL Action are detected in the workflow file. Additionally, an error will now be thrown by the other CodeQL Action steps if they load a configuration file that was generated by a different version of the `codeql-action/init` step. [#&#8203;3099](https://redirect.github.com/github/codeql-action/pull/3099) and [#&#8203;3100](https://redirect.github.com/github/codeql-action/pull/3100) - We added support for reducing the size of dependency caches for Java analyses, which will reduce cache usage and speed up workflows. This will be enabled automatically at a later time. [#&#8203;3107](https://redirect.github.com/github/codeql-action/pull/3107) - You can now run the latest CodeQL nightly bundle by passing `tools: nightly` to the `init` action. In general, the nightly bundle is unstable and we only recommend running it when directed by GitHub staff. [#&#8203;3130](https://redirect.github.com/github/codeql-action/pull/3130) - Update default CodeQL bundle version to 2.23.1. [#&#8203;3118](https://redirect.github.com/github/codeql-action/pull/3118) See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.30.4/CHANGELOG.md) for more information. ### [`v3.30.3`](https://redirect.github.com/github/codeql-action/releases/tag/v3.30.3) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.30.2...v3.30.3) ### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. #### 3.30.3 - 10 Sep 2025 No user facing changes. See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.30.3/CHANGELOG.md) for more information. ### [`v3.30.2`](https://redirect.github.com/github/codeql-action/releases/tag/v3.30.2) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.30.1...v3.30.2) ### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. #### 3.30.2 - 09 Sep 2025 - Fixed a bug which could cause language autodetection to fail. [#&#8203;3084](https://redirect.github.com/github/codeql-action/pull/3084) - Experimental: The `quality-queries` input that was added in `3.29.2` as part of an internal experiment is now deprecated and will be removed in an upcoming version of the CodeQL Action. It has been superseded by a new `analysis-kinds` input, which is part of the same internal experiment. Do not use this in production as it is subject to change at any time. [#&#8203;3064](https://redirect.github.com/github/codeql-action/pull/3064) See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.30.2/CHANGELOG.md) for more information. ### [`v3.30.1`](https://redirect.github.com/github/codeql-action/releases/tag/v3.30.1) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.30.0...v3.30.1) ### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. #### 3.30.1 - 05 Sep 2025 - Update default CodeQL bundle version to 2.23.0. [#&#8203;3077](https://redirect.github.com/github/codeql-action/pull/3077) See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.30.1/CHANGELOG.md) for more information. ### [`v3.30.0`](https://redirect.github.com/github/codeql-action/releases/tag/v3.30.0) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.29.11...v3.30.0) ### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. #### 3.30.0 - 01 Sep 2025 - Reduce the size of the CodeQL Action, speeding up workflows by approximately 4 seconds. [#&#8203;3054](https://redirect.github.com/github/codeql-action/pull/3054) See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.30.0/CHANGELOG.md) for more information. ### [`v3.29.11`](https://redirect.github.com/github/codeql-action/releases/tag/v3.29.11) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.29.10...v3.29.11) ### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. #### 3.29.11 - 21 Aug 2025 - Update default CodeQL bundle version to 2.22.4. [#&#8203;3044](https://redirect.github.com/github/codeql-action/pull/3044) See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.29.11/CHANGELOG.md) for more information. ### [`v3.29.10`](https://redirect.github.com/github/codeql-action/releases/tag/v3.29.10) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.29.9...v3.29.10) ### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. #### 3.29.10 - 18 Aug 2025 No user facing changes. See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.29.10/CHANGELOG.md) for more information. ### [`v3.29.9`](https://redirect.github.com/github/codeql-action/releases/tag/v3.29.9) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.29.8...v3.29.9) ### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. #### 3.29.9 - 12 Aug 2025 No user facing changes. See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.29.9/CHANGELOG.md) for more information. ### [`v3.29.8`](https://redirect.github.com/github/codeql-action/releases/tag/v3.29.8) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.29.7...v3.29.8) ### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. #### 3.29.8 - 08 Aug 2025 - Fix an issue where the Action would autodetect unsupported languages such as HTML. [#&#8203;3015](https://redirect.github.com/github/codeql-action/pull/3015) See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.29.8/CHANGELOG.md) for more information. ### [`v3.29.7`](https://redirect.github.com/github/codeql-action/releases/tag/v3.29.7) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.29.6...v3.29.7) This is a re-release of v3.29.5 to mitigate an issue that was discovered with v3.29.6. ### [`v3.29.6`](https://redirect.github.com/github/codeql-action/releases/tag/v3.29.6) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.29.5...v3.29.6) ### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. #### 3.29.6 - 07 Aug 2025 - The `cleanup-level` input to the `analyze` Action is now deprecated. The CodeQL Action has written a limited amount of intermediate results to the database since version 2.2.5, and now automatically manages cleanup. [#&#8203;2999](https://redirect.github.com/github/codeql-action/pull/2999) - Update default CodeQL bundle version to 2.22.3. [#&#8203;3000](https://redirect.github.com/github/codeql-action/pull/3000) See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.29.6/CHANGELOG.md) for more information. </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/go-krb5/x).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -34,12 +34,12 @@ jobs:
       - name: 'Checkout'
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: 'Initialize CodeQL'
-        uses: github/codeql-action/init@45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2 # v3.29.5
+        uses: github/codeql-action/init@9e907b5e64f6b83e7804b09294d44122997950d6 # v4.32.3
         with:
           languages: ${{ matrix.language }}
       - name: 'Build'
-        uses: github/codeql-action/autobuild@45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2 # v3.29.5
+        uses: github/codeql-action/autobuild@9e907b5e64f6b83e7804b09294d44122997950d6 # v4.32.3
       - name: 'Perform CodeQL Analysis'
-        uses: github/codeql-action/analyze@45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2 # v3.29.5
+        uses: github/codeql-action/analyze@9e907b5e64f6b83e7804b09294d44122997950d6 # v4.32.3
         with:
           category: "/language:${{matrix.language}}"
diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml
@@ -38,6 +38,6 @@ jobs:
           path: 'results.sarif'
           retention-days: 5
       - name: 'Upload to Code Scanning Dashboard'
-        uses: github/codeql-action/upload-sarif@45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2 # v3.29.5
+        uses: github/codeql-action/upload-sarif@9e907b5e64f6b83e7804b09294d44122997950d6 # v4.32.3
         with:
           sarif_file: 'results.sarif'
