deps(actions): bump github/codeql-action/init from 4.35.5 to 4.37.0#190
deps(actions): bump github/codeql-action/init from 4.35.5 to 4.37.0#190dependabot[bot] wants to merge 1 commit into
Conversation
--- updated-dependencies: - dependency-name: github/codeql-action/init dependency-version: 4.37.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
![datadog-prod-us1-4[bot]](https://avatars.githubusercontent.com/u/365230?s=60&v=4){kind=small}
There was a problem hiding this comment.
Security scans will run with incompatible CodeQL components, risking database format incompatibility, incomplete vulnerability detection, or workflow failures. Every PR security check will be affected.
Assertion details
- Input: Workflow runs CodeQL security scan with init@v4.37.0 and analyze@v4.35.5
- Expected:
Both CodeQL actions should be on the same major.minor version (e.g., both v4.37.0) to ensure database format compatibility - Actual:
Version skew between actions: init bumped to 4.37.0 while analyze remains at 4.35.5
Was this helpful? React 👍 or 👎
🤖 Datadog Autotest · What is Autotest? · Any feedback? Reach out in #autotest
There was a problem hiding this comment.
This PR bumps the CodeQL init action from 4.35.5 to 4.37.0 but leaves the analyze action at 4.35.5, creating a version mismatch between paired workflow actions. CodeQL init and analyze must be kept in sync to ensure database format compatibility; mismatched versions risk security scan failures or silent incompleteness.
📊 Validated against 1 scenarios · Open Bits AI session
🤖 Datadog Autotest · Commit 8d8aa95 · What is Autotest? · Any feedback? Reach out in #autotest
|
Superseded by #199. |
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)