chore(deps): bump the actions-minor-patch group with 3 updates - #945
Merged
Conversation
…th 3 updates Bumps the actions-minor-patch group with 3 updates in the / directory: [github/codeql-action](https://github.com/github/codeql-action), [google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml](https://github.com/google/osv-scanner-action) and [dorny/paths-filter](https://github.com/dorny/paths-filter). Updates `github/codeql-action` from 4.37.5 to 4.37.7 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@v4.37.5...v4.37.7) Updates `google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml` from 2.3.8 to 2.5.1 - [Release notes](https://github.com/google/osv-scanner-action/releases) - [Commits](google/osv-scanner-action@v2.3.8...v2.5.1) Updates `dorny/paths-filter` from 3.0.3 to 3.0.4 - [Release notes](https://github.com/dorny/paths-filter/releases) - [Changelog](https://github.com/dorny/paths-filter/blob/master/CHANGELOG.md) - [Commits](dorny/paths-filter@d1c1ffe...0e4a8c6) --- updated-dependencies: - dependency-name: dorny/paths-filter dependency-version: 3.0.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-minor-patch - dependency-name: github/codeql-action dependency-version: 4.37.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-minor-patch - dependency-name: google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml dependency-version: 2.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>
|
freshtonic
approved these changes
Aug 26, 2026
freshtonic
left a comment
freshtonic
left a comment
Contributor
There was a problem hiding this comment.
Approved: the three action updates are correctly scoped, preserve the repository's reference conventions, and all checks pass.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Minor/patch bumps of 3 GitHub Actions:
github/codeql-action4.37.5 → 4.37.7,dorny/paths-filter, and the OSV scanner action, acrosscodeql.yml,osv-scanner.yml, andtest-eql.yml.This is Dependabot's #933 re-opened from a maintainer branch. Its CI failure (the EQL PG17 SQLx shards) was unrelated to this diff: Dependabot-triggered workflows read the Dependabot secrets store, whose CipherStash credentials belong to a different keyset, so the suite's pinned SteVec selector tests fail on every Dependabot PR. This PR touching only workflow files and failing the identical tests is what proved the failure environmental.
Changes
.github/workflows/codeql.yml,.github/workflows/osv-scanner.yml,.github/workflows/test-eql.yml: action version bumps (same commit as chore(deps): bump the actions-minor-patch group across 1 directory with 3 updates #933, cherry-picked)Verification
Related
https://claude.ai/code/session_01PS9J6pu3FmmQvJHxwTVJUc