This is an automated email from the ASF dual-hosted git repository. garydgregory pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/commons-parent.git
commit ba1b0e40ae5fc183a444ff4bcda33ce293d5940e Author: Gary Gregory <[email protected]> AuthorDate: Thu Oct 15 09:20:49 2026 -0400 Bump github/codeql-action/analyze from 4.37.5 to 4.38.3 --- .github/workflows/codeql-analysis-reusable.yml | 6 +++--- .github/workflows/scorecards-analysis-reusable.yml | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/codeql-analysis-reusable.yml b/.github/workflows/codeql-analysis-reusable.yml index f746c53..178829e 100644 --- a/.github/workflows/codeql-analysis-reusable.yml +++ b/.github/workflows/codeql-analysis-reusable.yml @@ -56,12 +56,12 @@ jobs: ${{ runner.os }}-maven- - name: Initialize CodeQL - uses: github/codeql-action/init@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2 + uses: github/codeql-action/init@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3 with: languages: ${{ matrix.language }} - name: Autobuild - uses: github/codeql-action/autobuild@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2 + uses: github/codeql-action/autobuild@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2 + uses: github/codeql-action/analyze@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3 diff --git a/.github/workflows/scorecards-analysis-reusable.yml b/.github/workflows/scorecards-analysis-reusable.yml index a8b28b8..54d9b22 100644 --- a/.github/workflows/scorecards-analysis-reusable.yml +++ b/.github/workflows/scorecards-analysis-reusable.yml @@ -57,6 +57,6 @@ jobs: retention-days: 5 - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2 + uses: github/codeql-action/upload-sarif@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3 with: sarif_file: results.sarif
