Skip to content

ci(deps): update github/codeql-action action to v4.39.0 - #1649

Merged
bfra-me[bot] merged 1 commit into
mainfrom
renovate/github-codeql-action-4.x
Oct 15, 2026
Merged

bfra-me[bot] merged 1 commit into
mainfrom
renovate/github-codeql-action-4.x

Conversation

@bfra-me

@bfra-me bfra-me Bot commented Oct 15, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change OpenSSF
github/codeql-action action minor v4.38.3 → v4.39.0 OpenSSF Scorecard

Release Notes

github/codeql-action

v4.39.0

Compare Source

  • Breaking change: Bump the minimum required CodeQL bundle version to 2.20.7. #​4205
  • The codeql-action/analyze step now validates that a correct argument for the checkout_path input has been provided. The checkout_path input must be set to the path where the repository that is being analyzed is checked out at on the runner, if that path is something other than the workspace root. If the path does not point to a repository checkout or is different from the path that was used by codeql-action/init, then the CodeQL Action now produces a warning. #​4148
  • Resolved an issue with third-party caching implementations that prevented caches from being restored correctly. #​4206
  • The codeql-action/start-proxy step that is used in Code Scanning Default Setup now finds CodeQL releases using the same logic as codeql-action/init. This primarily benefits customers who are using GitHub instances other than github.com where the codeql-action/start-proxy step may previously have been unable to locate recent releases and ended up using outdated versions of the private registry authentication proxy as a result. #​4198

Configuration

📅 Schedule: (in timezone America/Phoenix)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

@bfra-me bfra-me Bot added the action GitHub Actions dependency updates label Oct 15, 2026
@bfra-me
bfra-me Bot requested a review from a team as a code owner October 15, 2026 14:05
@bfra-me bfra-me Bot added automerge Automated merge approved dependencies Dependency updates or security alerts github-actions GitHub Actions workflows minor Minor version changes renovate Renovate bot updates labels Oct 15, 2026
@bfra-me
bfra-me Bot enabled auto-merge (squash) October 15, 2026 14:05
@bfra-me
bfra-me Bot merged commit 24b894b into main Oct 15, 2026
10 checks passed
@bfra-me
bfra-me Bot deleted the renovate/github-codeql-action-4.x branch October 15, 2026 14:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

action GitHub Actions dependency updates automerge Automated merge approved dependencies Dependency updates or security alerts github-actions GitHub Actions workflows minor Minor version changes renovate Renovate bot updates

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants