[GitHub Actions] CodeQL Action v3 will be deprecated in December 2026

[MMilosz]

Describe the bug

• Backend [GitHub Actions] CodeQL Action v3 will be deprecated in December 2026 DSpace#11998

For the past several weeks, GitHub Actions has been showing a deprecation warning for CodeQL Action v3 in our workflow runs:

CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/

While this doesn't currently break our builds, we need to address this before the December 2026 deprecation date.

In DSpace/dspace-angular, codeql-action is used only in the .github/workflows/codescan.yml, 3 steps total:

dspace-angular/.github/workflows/codescan.yml

Lines 42 to 45 in 7e4e662

	- name: Initialize CodeQL
	uses: github/codeql-action/init@v3
	with:
	languages: javascript

dspace-angular/.github/workflows/codescan.yml

Lines 47 to 49 in 7e4e662

	# Autobuild attempts to build any compiled languages
	- name: Autobuild
	uses: github/codeql-action/autobuild@v3

dspace-angular/.github/workflows/codescan.yml

Lines 51 to 53 in 7e4e662

	# Perform GitHub Code Scanning.
	- name: Perform CodeQL Analysis
	uses: github/codeql-action/analyze@v3

To Reproduce

1. Navigate to any recent GitHub Actions workflow run in this repository
2. Observe the deprecation warning message in the bottom of the page

Expected behavior

All references to codeql-action should use v4 instead of v3.

Related work

• CodeQL Action v3 deprecation announcement
• [GitHub Actions] CodeQL Action v3 will be deprecated in December 2026 DSpace#11998