Bump github/codeql-action/autobuild from 4.36.2 to 4.36.3 #857

	# `dist/index.js` is a special file in Actions.
	# When you reference an action with `uses:` in a workflow,
	# `index.js` is the code that will run.
	# For our project, we generate this file through a build process from other source files.
	# We need to make sure the checked-in `index.js` actually matches what we expect it to be.
	name: Check dist/

	on:
	push:
	branches:
	- main
	paths-ignore:
	- '**.md'
	pull_request:
	paths-ignore:
	- '**.md'
	workflow_dispatch:

	permissions: {}

	jobs:
	check-dist:
	if: ${{ github.actor != 'dependabot[bot]' }}
	runs-on: ubuntu-latest

	steps:
	- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
	with:
	persist-credentials: false

	- name: Set up Node.js
	uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
	with:
	node-version: '24'

	- name: Install dependencies
	run: npm ci

	- name: Rebuild the dist/ directory
	run: \|
	npm run build
	npm run package

	- name: Compare the expected and actual dist/ directories
	run: \|
	if [ "$(git diff --ignore-space-at-eol dist/ \| wc -l)" -gt "0" ]; then
	echo "Detected uncommitted changes after build. See status below:"
	git diff
	exit 1
	fi
	id: diff

	# If index.js was different than expected, upload the expected version as an artifact
	- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
	if: ${{ failure() && steps.diff.conclusion == 'failure' }}
	with:
	name: dist
	path: dist/

Provide feedback