Skip to content

Bump github/codeql-action from 4.38.3 to 4.39.1 - #28270

Merged
Dongbo Wang (daxian-dbw) merged 1 commit into
PowerShell:masterfrom
daxian-dbw:codeql-action
Oct 27, 2026
Merged

Dongbo Wang (daxian-dbw) merged 1 commit into
PowerShell:masterfrom
daxian-dbw:codeql-action

Conversation

@daxian-dbw

Copy link
Copy Markdown
Member

PR Summary

Bumps github/codeql-action/analyze and github/codeql-action/init from 4.38.3 to 4.39.1.

Those 2 changes need to be in the same PR. Otherwise, the CodeQL CI will fail.
Supersede #28264 and #28263

Copilot AI balanced review requested due to automatic review settings October 27, 2026 21:39
@azure-pipelines

Copy link
Copy Markdown
Azure Pipelines:
There may be pipelines that require an authorized user to comment /azp run to run.

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

Both pins match the verified v4.39.1 release, with no identified compatibility issues or unresolved findings.

No open issues 🎉

What changed in this PR

Updates the reusable CodeQL workflow from v4.38.3 to v4.39.1, combining the upgrades from #28263 and #28264 to keep initialization and analysis aligned.

Changes:

  • Updates both init and analyze to the same v4.39.1 commit SHA.
  • Preserves the existing workflow configuration.
File Description
.github/​workflows/​analyze-reusable.yml Updates both CodeQL action pins together.

Review effort: Balanced

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Backport-7.4.x-Consider Backport-7.5.x-Consider Backport-7.6.x-Done Backport-7.7.x-Migrated CL-BuildPackaging Indicates that a PR should be marked as a build or packaging change in the Change Log

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants