Skip to content

[release/v7.7.0] Bump github/codeql-action from 4.38.3 to 4.39.1 - #28344

Closed
Justin Chung (jshigetomi) wants to merge 1 commit into
PowerShell:release/v7.7.0from
jshigetomi:backport-28270-to-7.7.0
Closed

Justin Chung (jshigetomi) wants to merge 1 commit into
PowerShell:release/v7.7.0from
jshigetomi:backport-28270-to-7.7.0

Conversation

@jshigetomi

Copy link
Copy Markdown
Collaborator

Backport of #28270 to release/v7.7.0.

@jshigetomi
Justin Chung (jshigetomi) requested a review from a team as a code owner November 5, 2026 00:26
Copilot AI balanced review requested due to automatic review settings November 5, 2026 00:26
@azure-pipelines

Copy link
Copy Markdown
Azure Pipelines:
There may be pipelines that require an authorized user to comment /azp run to run.

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

No active review issues are reported for the CodeQL action version backport.

No open issues 🎉

What changed in this PR

Backports #28270 to release/v7.7.0, updating the reusable CodeQL security-scanning workflow from action version 4.38.3 to 4.39.1.

Changes:

  • Updates both CodeQL initialization and analysis to the same pinned commit, keeping the two actions aligned.
File Description
.github/​workflows/​analyze-reusable.yml Updates the commit pins for github/codeql-action/init and github/codeql-action/analyze.

Review effort: Balanced

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants