From 6e795245e0db5a30c36c624173c2b9e798d943c1 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 17 Jul 2026 04:14:36 +0000 Subject: [PATCH 1/2] chore(deps): bump github/codeql-action/init from 4.37.0 to 4.37.1 Bumps [github/codeql-action/init](https://github.com/github/codeql-action) from 4.37.0 to 4.37.1. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/99df26d4f13ea111d4ec1a7dddef6063f76b97e9...7188fc363630916deb702c7fdcf4e481b751f97a) --- updated-dependencies: - dependency-name: github/codeql-action/init dependency-version: 4.37.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/codeql.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 444605088d..d5c5066cd9 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -48,7 +48,7 @@ jobs: persist-credentials: false - name: Initialize CodeQL - uses: github/codeql-action/init@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4 + uses: github/codeql-action/init@7188fc363630916deb702c7fdcf4e481b751f97a # v4 with: languages: actions From fb252344fdd242260c35fe399c01d7ede7c155df Mon Sep 17 00:00:00 2001 From: Martin Tzvetanov Grigorov Date: Fri, 17 Jul 2026 11:22:33 +0300 Subject: [PATCH 2/2] Group updates for github/codeql-action/** Use commit prefixes for deps/action updates --- .github/dependabot.yml | 28 +++++++++++++++++++--------- .github/workflows/codeql.yml | 2 +- 2 files changed, 20 insertions(+), 10 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index dd4929e8fb..b9067d7413 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -23,33 +23,43 @@ updates: interval: daily open-pull-requests-limit: 10 target-branch: main - labels: [auto-dependencies] + labels: [ auto-dependencies ] + commit-message: + prefix: "chore(deps): " ignore: # arrow and datafusion are bumped manually - dependency-name: "arrow*" - update-types: ["version-update:semver-major"] + update-types: [ "version-update:semver-major" ] - dependency-name: "datafusion*" - update-types: ["version-update:semver-major"] + update-types: [ "version-update:semver-major" ] - dependency-name: "sqlparser" - update-types: ["version-update:semver-major"] + update-types: [ "version-update:semver-major" ] - package-ecosystem: cargo directory: "/python" schedule: interval: daily open-pull-requests-limit: 10 target-branch: main - labels: [auto-dependencies] + labels: [ auto-dependencies ] + commit-message: + prefix: "chore(deps): " ignore: # arrow and datafusion are bumped manually - dependency-name: "arrow*" - update-types: ["version-update:semver-major"] + update-types: [ "version-update:semver-major" ] - dependency-name: "datafusion*" - update-types: ["version-update:semver-major"] + update-types: [ "version-update:semver-major" ] - dependency-name: "sqlparser" - update-types: ["version-update:semver-major"] + update-types: [ "version-update:semver-major" ] - package-ecosystem: "github-actions" directory: "/" schedule: interval: "daily" open-pull-requests-limit: 10 - labels: [auto-dependencies] + labels: [ auto-dependencies ] + commit-message: + prefix: "chore(ci): " + groups: + github-codeql: + patterns: + - "github/codeql-action/*" diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index d5c5066cd9..9ffe8e38a6 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -53,6 +53,6 @@ jobs: languages: actions - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4 + uses: github/codeql-action/analyze@7188fc363630916deb702c7fdcf4e481b751f97a # v4 with: category: "/language:actions"