[vim/vim] CI: Bump github/codeql-action from 4.37.4 to 4.37.6 in the github-actions group across 1 directory (PR #21054)

1 view

Skip to first unread message

dependabot[bot]

unread,

Aug 14, 2026, 10:35:28 PM (2 days ago) Aug 14

to vim/vim, Subscribed

Bumps the github-actions group with 1 update in the / directory: github/codeql-action.

Updates github/codeql-action from 4.37.4 to 4.37.6

Release notes

Sourced from github/codeql-action's releases.

v4.37.6

Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to .github/codeql-config.yml to align it with the suggested path that is used elsewhere. #4070

v4.37.5

Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the init Action instead of falling back to downloading the bundle before extracting it. #4061

Changelog

Sourced from github/codeql-action's changelog.

4.37.6 - 04 Aug 2026

Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to .github/codeql-config.yml to align it with the suggested path that is used elsewhere. #4070

4.37.5 - 03 Aug 2026

Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the init Action instead of falling back to downloading the bundle before extracting it. #4061

Commits

5595cca Merge pull request #4071 from github/update-v4.37.6-6a9359a1b
ec9c757 Add change note for PR 4070
45c8742 Update changelog for v4.37.6
6a9359a Merge pull request #4070 from github/mbg/remote-address/change-file-default
065cdc0 Change DEFAULT_CONFIG_FILE_NAME
f99dd5a Merge pull request #4066 from github/dependabot/npm_and_yarn/js-yaml-5.2.2
1804b21 Merge pull request #4068 from github/mergeback/v4.37.5-to-main-d1ba80a1
3020a2f Rebuild
93c3a5a Update changelog and version after v4.37.5
d1ba80a Merge pull request #4067 from github/update-v4.37.5-1cd4d01d5
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

You can view, comment on, or merge this pull request online at:

https://github.com/vim/vim/pull/21054

Commit Summary

e732c6b CI: Bump github/codeql-action

File Changes

(1 file)

M .github/workflows/codeql-analysis.yml (6)

Patch Links:

—
Reply to this email directly, view it on GitHub, or unsubscribe.
Triage notifications, keep track of coding agent tasks and review pull requests on the go with GitHub Mobile for iOS and Android. Download it today!
You are receiving this because you are subscribed to this thread.

Reply all

Reply to author

Forward

0 new messages