Skip to content

Conversation

renovate-bot
Copy link
Contributor

@renovate-bot renovate-bot commented Sep 9, 2025

This PR contains the following updates:

Package Type Update Change
github/codeql-action action patch v3.30.1 -> v3.30.9
ossf/scorecard-action action patch v2.4.2 -> v2.4.3

Release Notes

github/codeql-action (github/codeql-action)

v3.30.9

Compare Source

v3.30.8

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.8 - 10 Oct 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.30.7

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.7 - 06 Oct 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.30.6

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.6 - 02 Oct 2025
  • Update default CodeQL bundle version to 2.23.2. #​3168

See the full CHANGELOG.md for more information.

v3.30.5

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.5 - 26 Sep 2025
  • We fixed a bug that was introduced in 3.30.4 with upload-sarif which resulted in files without a .sarif extension not getting uploaded. #​3160

See the full CHANGELOG.md for more information.

v3.30.4

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.4 - 25 Sep 2025

  • We have improved the CodeQL Action's ability to validate that the workflow it is used in does not use different versions of the CodeQL Action for different workflow steps. Mixing different versions of the CodeQL Action in the same workflow is unsupported and can lead to unpredictable results. A warning will now be emitted from the codeql-action/init step if different versions of the CodeQL Action are detected in the workflow file. Additionally, an error will now be thrown by the other CodeQL Action steps if they load a configuration file that was generated by a different version of the codeql-action/init step. #​3099 and #​3100
  • We added support for reducing the size of dependency caches for Java analyses, which will reduce cache usage and speed up workflows. This will be enabled automatically at a later time. #​3107
  • You can now run the latest CodeQL nightly bundle by passing tools: nightly to the init action. In general, the nightly bundle is unstable and we only recommend running it when directed by GitHub staff. #​3130
  • Update default CodeQL bundle version to 2.23.1. #​3118

See the full CHANGELOG.md for more information.

v3.30.3

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.3 - 10 Sep 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.30.2

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.2 - 09 Sep 2025

  • Fixed a bug which could cause language autodetection to fail. #​3084
  • Experimental: The quality-queries input that was added in 3.29.2 as part of an internal experiment is now deprecated and will be removed in an upcoming version of the CodeQL Action. It has been superseded by a new analysis-kinds input, which is part of the same internal experiment. Do not use this in production as it is subject to change at any time. #​3064

See the full CHANGELOG.md for more information.

ossf/scorecard-action (ossf/scorecard-action)

v2.4.3

Compare Source

What's Changed

This update bumps the Scorecard version to the v5.3.0 release. For a complete list of changes, please refer to the Scorecard v5.3.0 release notes.

Documentation

Other

New Contributors

Full Changelog: ossf/scorecard-action@v2.4.2...v2.4.3


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate-bot renovate-bot requested a review from a team as a code owner September 9, 2025 11:27
@renovate-bot renovate-bot changed the title deps: Update github/codeql-action action to v3.30.2 deps: Update github/codeql-action action to v3.30.3 Sep 10, 2025
@renovate-bot renovate-bot force-pushed the renovate/dependencies-for-github branch from 12c0659 to 609d8eb Compare September 10, 2025 19:13
@renovate-bot renovate-bot changed the title deps: Update github/codeql-action action to v3.30.3 deps: Update github/codeql-action action to v3.30.4 Sep 25, 2025
@renovate-bot renovate-bot force-pushed the renovate/dependencies-for-github branch from 609d8eb to 798c4f3 Compare September 25, 2025 12:04
@renovate-bot renovate-bot changed the title deps: Update github/codeql-action action to v3.30.4 deps: Update github/codeql-action action to v3.30.5 Sep 26, 2025
@renovate-bot renovate-bot force-pushed the renovate/dependencies-for-github branch from 798c4f3 to 8dfdb3e Compare September 26, 2025 19:41
@renovate-bot renovate-bot changed the title deps: Update github/codeql-action action to v3.30.5 deps: Update dependencies for github Oct 1, 2025
@renovate-bot renovate-bot force-pushed the renovate/dependencies-for-github branch 3 times, most recently from b7ac87e to 994fa36 Compare October 7, 2025 21:02
@renovate-bot renovate-bot force-pushed the renovate/dependencies-for-github branch from 994fa36 to 63158fc Compare October 10, 2025 19:34
@renovate-bot renovate-bot force-pushed the renovate/dependencies-for-github branch from 63158fc to dc316c2 Compare October 18, 2025 02:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants