From b56e1b2b45bb3fab33ff125943f272de80f651d5 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 1 Jul 2025 23:13:48 +0000 Subject: [PATCH 1/3] Bump github/codeql-action from 3.28.18 to 3.29.2 Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.18 to 3.29.2. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/ff0a06e83cb2de871e5a09832bc6a81e7276941f...181d5eefc20863364f96762470ba6f862bdef56b) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 3.29.2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/gha_security.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/gha_security.yml b/.github/workflows/gha_security.yml index ff207f3e8b7..8114087d237 100644 --- a/.github/workflows/gha_security.yml +++ b/.github/workflows/gha_security.yml @@ -27,7 +27,7 @@ jobs: env: GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} - name: Upload SARIF file - uses: github/codeql-action/upload-sarif@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18 + uses: github/codeql-action/upload-sarif@181d5eefc20863364f96762470ba6f862bdef56b # v3.29.2 with: sarif_file: results.sarif category: zizmor \ No newline at end of file From 19c10c32f34498f6c38b600be413fa6b050f5bc8 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 1 Jul 2025 23:14:15 +0000 Subject: [PATCH 2/3] Add chango fragment for PR #4841 --- changes/unreleased/4841.HHVCCXXZbYAaaQVmKHCJm2.toml | 6 ++++++ 1 file changed, 6 insertions(+) create mode 100644 changes/unreleased/4841.HHVCCXXZbYAaaQVmKHCJm2.toml diff --git a/changes/unreleased/4841.HHVCCXXZbYAaaQVmKHCJm2.toml b/changes/unreleased/4841.HHVCCXXZbYAaaQVmKHCJm2.toml new file mode 100644 index 00000000000..7934a611e61 --- /dev/null +++ b/changes/unreleased/4841.HHVCCXXZbYAaaQVmKHCJm2.toml @@ -0,0 +1,6 @@ +dependencies = "Bump github/codeql-action from 3.28.18 to 3.29.2" +internal = "Bump github/codeql-action from 3.28.18 to 3.29.2" +[[pull_requests]] +uid = "4841" +author_uid = "dependabot[bot]" +closes_threads = [] From 51892ce0813561eccb5c9da312b104578707ea1e Mon Sep 17 00:00:00 2001 From: Bibo-Joshi <22366557+Bibo-Joshi@users.noreply.github.com> Date: Wed, 2 Jul 2025 19:16:25 +0200 Subject: [PATCH 3/3] Update 4841.HHVCCXXZbYAaaQVmKHCJm2.toml --- changes/unreleased/4841.HHVCCXXZbYAaaQVmKHCJm2.toml | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/changes/unreleased/4841.HHVCCXXZbYAaaQVmKHCJm2.toml b/changes/unreleased/4841.HHVCCXXZbYAaaQVmKHCJm2.toml index 7934a611e61..5959a63505f 100644 --- a/changes/unreleased/4841.HHVCCXXZbYAaaQVmKHCJm2.toml +++ b/changes/unreleased/4841.HHVCCXXZbYAaaQVmKHCJm2.toml @@ -1,6 +1,5 @@ -dependencies = "Bump github/codeql-action from 3.28.18 to 3.29.2" internal = "Bump github/codeql-action from 3.28.18 to 3.29.2" [[pull_requests]] uid = "4841" -author_uid = "dependabot[bot]" +author_uid = "dependabot" closes_threads = []