Skip to content

chore(deps): update github/codeql-action action to v4.37.9 - #175

Open
renovate-sh-app[bot] wants to merge 1 commit into
mainfrom
renovate/github-codeql-action-4.x
Open

chore(deps): update github/codeql-action action to v4.37.9#175
renovate-sh-app[bot] wants to merge 1 commit into
mainfrom
renovate/github-codeql-action-4.x

Conversation

@renovate-sh-app

@renovate-sh-apprenovate-sh-appBot commented May 31, 2026•
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

PackageTypeUpdateChange
github/codeql-actionactionminorv4.35.2 → v4.37.9

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

github/codeql-action (github/codeql-action)

v4.37.9

Compare Source

v4.37.8

Compare Source

No user facing changes.

v4.37.7

Compare Source

v4.37.6

Compare Source

  • Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to .github/codeql-config.yml to align it with the suggested path that is used elsewhere. #​4070

v4.37.5

Compare Source

  • Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the init Action instead of falling back to downloading the bundle before extracting it. #​4061

v4.37.4

Compare Source

  • This version of the CodeQL Action adds support for the tools input for the codeql-action/init step to be specified using a github-codeql-toolsrepository property. This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to toolcache to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for tools in the workflow definition always takes precedence unless the value of the repository property starts with !. #​4037
  • Update default CodeQL bundle version to 2.26.2. #​4051

v4.37.3

Compare Source

No user facing changes.

v4.37.2

Compare Source

  • The new address format for the config-file input that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, the remote= prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. #​4023
  • The CodeQL Action can now make use of configured private registries in Default Setup to retrieve CodeQL configuration files from remote repositories that require authentication. This will allow customers to store their CodeQL configuration in a single repository that can then be referenced by Default Setup workflows in other repositories. We expect to roll this and other, related changes out to everyone in July. #​4007

v4.37.1

Compare Source

  • Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.20.6 and earlier. These versions of CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and will be unsupported by the next minor release of the CodeQL Action. #​3956
  • Update default CodeQL bundle version to 2.26.1. #​4019

v4.37.0

Compare Source

  • Update default CodeQL bundle version to 2.26.0. #​3995
  • In addition to the existing input format, the config-file input for the codeql-action/init step will soon support a new [owner/]repo[@ref][:path] format. All components except the repository name are optional. If omitted, owner defaults to the same owner as the repository the analysis is running for, ref to main, and path to .github/codeql-action.yaml. Support for this format ships in this version of the CodeQL Action, but will only be enabled over the coming weeks. #​3973

v4.36.3

Compare Source

No user facing changes.

v4.36.2

Compare Source

  • Cache CodeQL CLI version information across Actions steps. #​3943
  • Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. #​3937
  • Update default CodeQL bundle version to 2.25.6. #​3948

v4.36.1

Compare Source

No user facing changes.

v4.36.0

Compare Source

  • Breaking change: Bump the minimum required CodeQL bundle version to 2.19.4. #​3894
  • Add support for SHA-256 Git object IDs. #​3893
  • Update default CodeQL bundle version to 2.25.5. #​3926

v4.35.5

Compare Source

  • We have improved how the JavaScript bundles for the CodeQL Action are generated to avoid duplication across bundles and reduce the size of the repository by around 70%. This should have no effect on the runtime behaviour of the CodeQL Action. #​3899
  • For performance and accuracy reasons, improved incremental analysis will now only be enabled on a pull request when diff-informed analysis is also enabled for that run. If diff-informed analysis is unavailable (for example, because the PR diff ranges could not be computed), the action will fall back to a full analysis. #​3791
  • If multiple inputs are provided for the GitHub-internal analysis-kinds input, only code-scanning will be enabled. The analysis-kinds input is experimental, for GitHub-internal use only, and may change without notice at any time. #​3892
  • Added an experimental change which, when running a Code Scanning analysis for a PR with improved incremental analysis enabled, prefers CodeQL CLI versions that have a cached overlay-base database for the configured languages. This speeds up analysis for a repository when there is not yet a cached overlay-base database for the latest CLI version. We expect to roll this change out to everyone in May. #​3880

v4.35.4

Compare Source

v4.35.3

Compare Source

  • Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.19.3 and earlier. These versions of CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise Server 3.15, and will be unsupported by the next minor release of the CodeQL Action. #​3837
  • Configurations for private registries that use Cloudsmith or GCP OIDC are now accepted. #​3850
  • Best-effort connection tests for private registries now use GET requests instead of HEAD for better compatibility with various registry implementations. For NuGet feeds, the test is now always performed against the service index. #​3853
  • Fixed a bug where two diagnostics produced within the same millisecond could overwrite each other on disk, causing one of them to be lost. #​3852
  • Update default CodeQL bundle version to 2.25.3. #​3865

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.

@renovate-sh-app
renovate-sh-appBot enabled auto-merge (squash) May 31, 2026 04:11
@renovate-sh-app
renovate-sh-appBotforce-pushed the renovate/github-codeql-action-4.x branch from bff065e to 71e27d3CompareJune 5, 2026 10:11
@renovate-sh-apprenovate-sh-appBot changed the title chore(deps): update github/codeql-action action to v4.36.0chore(deps): update github/codeql-action action to v4.36.1Jun 5, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed the renovate/github-codeql-action-4.x branch from 71e27d3 to b2df3d7CompareJune 7, 2026 16:09
@renovate-sh-apprenovate-sh-appBot changed the title chore(deps): update github/codeql-action action to v4.36.1chore(deps): update github/codeql-action action to v4.36.2Jun 7, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed the renovate/github-codeql-action-4.x branch from b2df3d7 to 856856bCompareJuly 5, 2026 10:10
@renovate-sh-apprenovate-sh-appBot changed the title chore(deps): update github/codeql-action action to v4.36.2chore(deps): update github/codeql-action action to v4.36.3Jul 5, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed the renovate/github-codeql-action-4.x branch from 856856b to 54fa32aCompareJuly 11, 2026 14:11
@renovate-sh-apprenovate-sh-appBot changed the title chore(deps): update github/codeql-action action to v4.36.3chore(deps): update github/codeql-action action to v4.37.0Jul 11, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed the renovate/github-codeql-action-4.x branch from 54fa32a to 7308642CompareJuly 19, 2026 17:10
@renovate-sh-apprenovate-sh-appBot changed the title chore(deps): update github/codeql-action action to v4.37.0chore(deps): update github/codeql-action action to v4.37.1Jul 19, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed the renovate/github-codeql-action-4.x branch from 7308642 to 7a3019dCompareJuly 24, 2026 17:12
@renovate-sh-apprenovate-sh-appBot changed the title chore(deps): update github/codeql-action action to v4.37.1chore(deps): update github/codeql-action action to v4.37.2Jul 24, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed the renovate/github-codeql-action-4.x branch from 7a3019d to 4802b33CompareJuly 25, 2026 08:13
@renovate-sh-apprenovate-sh-appBot changed the title chore(deps): update github/codeql-action action to v4.37.2chore(deps): update github/codeql-action action to v4.37.3Jul 25, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed the renovate/github-codeql-action-4.x branch from 4802b33 to 5068a76CompareAugust 2, 2026 11:12
@renovate-sh-apprenovate-sh-appBot changed the title chore(deps): update github/codeql-action action to v4.37.3chore(deps): update github/codeql-action action to v4.37.4Aug 2, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed the renovate/github-codeql-action-4.x branch from 5068a76 to 09e4962CompareAugust 6, 2026 11:15
@renovate-sh-apprenovate-sh-appBot changed the title chore(deps): update github/codeql-action action to v4.37.4chore(deps): update github/codeql-action action to v4.37.5Aug 6, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed the renovate/github-codeql-action-4.x branch from 09e4962 to 6f2274cCompareAugust 7, 2026 14:13
@renovate-sh-apprenovate-sh-appBot changed the title chore(deps): update github/codeql-action action to v4.37.5chore(deps): update github/codeql-action action to v4.37.6Aug 7, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed the renovate/github-codeql-action-4.x branch from 6f2274c to 9a83a26CompareAugust 16, 2026 14:12
@renovate-sh-apprenovate-sh-appBot changed the title chore(deps): update github/codeql-action action to v4.37.6chore(deps): update github/codeql-action action to v4.37.7Aug 16, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed the renovate/github-codeql-action-4.x branch from 9a83a26 to 14a0423CompareAugust 24, 2026 14:15
@renovate-sh-apprenovate-sh-appBot changed the title chore(deps): update github/codeql-action action to v4.37.7chore(deps): update github/codeql-action action to v4.37.8Aug 24, 2026
@renovate-sh-app
chore(deps): update github/codeql-action action to v4.37.9
535a039
| datasource | package | from | to |
| ----------- | -------------------- | ------- | ------- |
| github-tags | github/codeql-action | v4.35.2 | v4.37.9 |
Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
@renovate-sh-app
renovate-sh-appBotforce-pushed the renovate/github-codeql-action-4.x branch from 14a0423 to 535a039CompareAugust 29, 2026 17:14
@renovate-sh-apprenovate-sh-appBot changed the title chore(deps): update github/codeql-action action to v4.37.8chore(deps): update github/codeql-action action to v4.37.9Aug 29, 2026
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

github-actionsupdate-minor

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants

, 'i'); if (__m === '*' || __re.test(location.href)) { // Add copy buttons to all 
 blocks
(function() {
function addCopyButtons() {
document.querySelectorAll('pre code').forEach(function(codeBlock) {
if (codeBlock.parentElement.hasAttribute('data-copy-added')) return;
codeBlock.parentElement.setAttribute('data-copy-added', 'true');
var btn = document.createElement('button');
btn.textContent = 'Copy';
btn.style.cssText = 'position:absolute;top:4px;right:4px;padding:2px 8px;font-size:11px;background:#4ecdc4;border:none;border-radius:4px;color:#1a1a2e;cursor:pointer;opacity:0.7;transition:opacity 0.2s;';
btn.onmouseover = function() { this.style.opacity = '1'; };
btn.onmouseout = function() { this.style.opacity = '0.7'; };
btn.onclick = function() {
navigator.clipboard.writeText(codeBlock.textContent).then(function() {
btn.textContent = 'Copied!';
setTimeout(function() { btn.textContent = 'Copy'; }, 1500);
});
};
codeBlock.parentElement.style.position = 'relative';
codeBlock.parentElement.appendChild(btn);
});
}
addCopyButtons();
// Re-run on dynamic content
var observer = new MutationObserver(addCopyButtons);
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Add Copy Buttons to Code Blocks]', __e); }
})();
(function(){
try {
var __m = "github.com";
var __re = new RegExp('^' + "github\\.com" + '
chore(deps): update github/codeql-action action to v4.37.9 by renovate-sh-app[bot] · Pull Request #175 · grafana/lambda-promtail · GitHub
Skip to content
chore(deps): update github/codeql-action action to v4.37.9 - #175
Open
renovate-sh-app[bot] wants to merge 1 commit into
mainfrom 
renovate/github-codeql-action-4.x
Open
chore(deps): update github/codeql-action action to v4.37.9#175
renovate-sh-app[bot] wants to merge 1 commit into
mainfrom 
renovate/github-codeql-action-4.x
Conversation
@renovate-sh-app
@renovate-sh-apprenovate-sh-appBot
commented
May 31, 2026•

edited

Loading

Copy link


Copy Markdown

Contributor
This PR contains the following updates:
PackageTypeUpdateChange
github/codeql-actionactionminorv4.35.2 → v4.37.9
Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
github/codeql-action (github/codeql-action)
v4.37.9
Compare Source
v4.37.8
Compare Source
No user facing changes.
v4.37.7
Compare Source
v4.37.6
Compare Source
  • Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to .github/codeql-config.yml to align it with the suggested path that is used elsewhere. #​4070
v4.37.5
Compare Source
  • Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the init Action instead of falling back to downloading the bundle before extracting it. #​4061
v4.37.4
Compare Source
  • This version of the CodeQL Action adds support for the tools input for the codeql-action/init step to be specified using a github-codeql-toolsrepository property. This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to toolcache to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for tools in the workflow definition always takes precedence unless the value of the repository property starts with !. #​4037
  • Update default CodeQL bundle version to 2.26.2. #​4051
v4.37.3
Compare Source
No user facing changes.
v4.37.2
Compare Source
  • The new address format for the config-file input that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, the remote= prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. #​4023
  • The CodeQL Action can now make use of configured private registries in Default Setup to retrieve CodeQL configuration files from remote repositories that require authentication. This will allow customers to store their CodeQL configuration in a single repository that can then be referenced by Default Setup workflows in other repositories. We expect to roll this and other, related changes out to everyone in July. #​4007
v4.37.1
Compare Source
  • Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.20.6 and earlier. These versions of CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and will be unsupported by the next minor release of the CodeQL Action. #​3956
  • Update default CodeQL bundle version to 2.26.1. #​4019
v4.37.0
Compare Source
  • Update default CodeQL bundle version to 2.26.0. #​3995
  • In addition to the existing input format, the config-file input for the codeql-action/init step will soon support a new [owner/]repo[@ref][:path] format. All components except the repository name are optional. If omitted, owner defaults to the same owner as the repository the analysis is running for, ref to main, and path to .github/codeql-action.yaml. Support for this format ships in this version of the CodeQL Action, but will only be enabled over the coming weeks. #​3973
v4.36.3
Compare Source
No user facing changes.
v4.36.2
Compare Source
  • Cache CodeQL CLI version information across Actions steps. #​3943
  • Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. #​3937
  • Update default CodeQL bundle version to 2.25.6. #​3948
v4.36.1
Compare Source
No user facing changes.
v4.36.0
Compare Source
  • Breaking change: Bump the minimum required CodeQL bundle version to 2.19.4. #​3894
  • Add support for SHA-256 Git object IDs. #​3893
  • Update default CodeQL bundle version to 2.25.5. #​3926
v4.35.5
Compare Source
  • We have improved how the JavaScript bundles for the CodeQL Action are generated to avoid duplication across bundles and reduce the size of the repository by around 70%. This should have no effect on the runtime behaviour of the CodeQL Action. #​3899
  • For performance and accuracy reasons, improved incremental analysis will now only be enabled on a pull request when diff-informed analysis is also enabled for that run. If diff-informed analysis is unavailable (for example, because the PR diff ranges could not be computed), the action will fall back to a full analysis. #​3791
  • If multiple inputs are provided for the GitHub-internal analysis-kinds input, only code-scanning will be enabled. The analysis-kinds input is experimental, for GitHub-internal use only, and may change without notice at any time. #​3892
  • Added an experimental change which, when running a Code Scanning analysis for a PR with improved incremental analysis enabled, prefers CodeQL CLI versions that have a cached overlay-base database for the configured languages. This speeds up analysis for a repository when there is not yet a cached overlay-base database for the latest CLI version. We expect to roll this change out to everyone in May. #​3880
v4.35.4
Compare Source
v4.35.3
Compare Source
  • Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.19.3 and earlier. These versions of CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise Server 3.15, and will be unsupported by the next minor release of the CodeQL Action. #​3837
  • Configurations for private registries that use Cloudsmith or GCP OIDC are now accepted. #​3850
  • Best-effort connection tests for private registries now use GET requests instead of HEAD for better compatibility with various registry implementations. For NuGet feeds, the test is now always performed against the service index. #​3853
  • Fixed a bug where two diagnostics produced within the same millisecond could overwrite each other on disk, causing one of them to be lost. #​3852
  • Update default CodeQL bundle version to 2.25.3. #​3865
Configuration
📅 Schedule: (UTC)
  • Branch creation

    • At any time (no schedule defined)
  • Automerge

    • At any time (no schedule defined)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
  •  If you want to rebase/retry this PR, check this box
Need help?
You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.
@renovate-sh-app
renovate-sh-appBot
enabled auto-merge (squash)
May 31, 2026 04:11
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
bff065e to
71e27d3CompareJune 5, 2026 10:11
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.36.0chore(deps): update github/codeql-action action to v4.36.1Jun 5, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
71e27d3 to
b2df3d7CompareJune 7, 2026 16:09
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.36.1chore(deps): update github/codeql-action action to v4.36.2Jun 7, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
b2df3d7 to
856856bCompareJuly 5, 2026 10:10
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.36.2chore(deps): update github/codeql-action action to v4.36.3Jul 5, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
856856b to
54fa32aCompareJuly 11, 2026 14:11
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.36.3chore(deps): update github/codeql-action action to v4.37.0Jul 11, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
54fa32a to
7308642CompareJuly 19, 2026 17:10
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.0chore(deps): update github/codeql-action action to v4.37.1Jul 19, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
7308642 to
7a3019dCompareJuly 24, 2026 17:12
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.1chore(deps): update github/codeql-action action to v4.37.2Jul 24, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
7a3019d to
4802b33CompareJuly 25, 2026 08:13
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.2chore(deps): update github/codeql-action action to v4.37.3Jul 25, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
4802b33 to
5068a76CompareAugust 2, 2026 11:12
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.3chore(deps): update github/codeql-action action to v4.37.4Aug 2, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
5068a76 to
09e4962CompareAugust 6, 2026 11:15
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.4chore(deps): update github/codeql-action action to v4.37.5Aug 6, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
09e4962 to
6f2274cCompareAugust 7, 2026 14:13
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.5chore(deps): update github/codeql-action action to v4.37.6Aug 7, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
6f2274c to
9a83a26CompareAugust 16, 2026 14:12
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.6chore(deps): update github/codeql-action action to v4.37.7Aug 16, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
9a83a26 to
14a0423CompareAugust 24, 2026 14:15
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.7chore(deps): update github/codeql-action action to v4.37.8Aug 24, 2026
@renovate-sh-app
chore(deps): update github/codeql-action action to v4.37.9
535a039
| datasource | package | from | to |
| ----------- | -------------------- | ------- | ------- |
| github-tags | github/codeql-action | v4.35.2 | v4.37.9 |
Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
14a0423 to
535a039CompareAugust 29, 2026 17:14
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.8chore(deps): update github/codeql-action action to v4.37.9Aug 29, 2026
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels

github-actionsupdate-minor

Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

0 participants


, 'i');
if (__m === '*' || __re.test(location.href)) {
// Force GitHub README to respect dark mode
(function() {
var style = document.createElement('style');
style.textContent = '
.markdown-body {
color-scheme: dark light;
}
.markdown-body pre { background: #161b22 !important; }
.markdown-body code { background: rgba(110, 118, 129, 0.4) !important; }
.markdown-body table th, .markdown-body table td { border-color: #30363d !important; }
.markdown-body img { background: #0d1117; }
.markdown-body blockquote { border-left-color: #8b949e; }
.markdown-body hr { border-color: #30363d; }
';
document.head.appendChild(style);
})();
}
} catch(__e) { console.warn('[Userscript:GitHub Dark Mode README Fix]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '
chore(deps): update github/codeql-action action to v4.37.9 by renovate-sh-app[bot] · Pull Request #175 · grafana/lambda-promtail · GitHub
Skip to content
chore(deps): update github/codeql-action action to v4.37.9 - #175
Open
renovate-sh-app[bot] wants to merge 1 commit into
mainfrom 
renovate/github-codeql-action-4.x
Open
chore(deps): update github/codeql-action action to v4.37.9#175
renovate-sh-app[bot] wants to merge 1 commit into
mainfrom 
renovate/github-codeql-action-4.x
Conversation
@renovate-sh-app
@renovate-sh-apprenovate-sh-appBot
commented
May 31, 2026•

edited

Loading

Copy link


Copy Markdown

Contributor
This PR contains the following updates:
PackageTypeUpdateChange
github/codeql-actionactionminorv4.35.2 → v4.37.9
Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
github/codeql-action (github/codeql-action)
v4.37.9
Compare Source
v4.37.8
Compare Source
No user facing changes.
v4.37.7
Compare Source
v4.37.6
Compare Source
  • Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to .github/codeql-config.yml to align it with the suggested path that is used elsewhere. #​4070
v4.37.5
Compare Source
  • Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the init Action instead of falling back to downloading the bundle before extracting it. #​4061
v4.37.4
Compare Source
  • This version of the CodeQL Action adds support for the tools input for the codeql-action/init step to be specified using a github-codeql-toolsrepository property. This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to toolcache to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for tools in the workflow definition always takes precedence unless the value of the repository property starts with !. #​4037
  • Update default CodeQL bundle version to 2.26.2. #​4051
v4.37.3
Compare Source
No user facing changes.
v4.37.2
Compare Source
  • The new address format for the config-file input that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, the remote= prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. #​4023
  • The CodeQL Action can now make use of configured private registries in Default Setup to retrieve CodeQL configuration files from remote repositories that require authentication. This will allow customers to store their CodeQL configuration in a single repository that can then be referenced by Default Setup workflows in other repositories. We expect to roll this and other, related changes out to everyone in July. #​4007
v4.37.1
Compare Source
  • Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.20.6 and earlier. These versions of CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and will be unsupported by the next minor release of the CodeQL Action. #​3956
  • Update default CodeQL bundle version to 2.26.1. #​4019
v4.37.0
Compare Source
  • Update default CodeQL bundle version to 2.26.0. #​3995
  • In addition to the existing input format, the config-file input for the codeql-action/init step will soon support a new [owner/]repo[@ref][:path] format. All components except the repository name are optional. If omitted, owner defaults to the same owner as the repository the analysis is running for, ref to main, and path to .github/codeql-action.yaml. Support for this format ships in this version of the CodeQL Action, but will only be enabled over the coming weeks. #​3973
v4.36.3
Compare Source
No user facing changes.
v4.36.2
Compare Source
  • Cache CodeQL CLI version information across Actions steps. #​3943
  • Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. #​3937
  • Update default CodeQL bundle version to 2.25.6. #​3948
v4.36.1
Compare Source
No user facing changes.
v4.36.0
Compare Source
  • Breaking change: Bump the minimum required CodeQL bundle version to 2.19.4. #​3894
  • Add support for SHA-256 Git object IDs. #​3893
  • Update default CodeQL bundle version to 2.25.5. #​3926
v4.35.5
Compare Source
  • We have improved how the JavaScript bundles for the CodeQL Action are generated to avoid duplication across bundles and reduce the size of the repository by around 70%. This should have no effect on the runtime behaviour of the CodeQL Action. #​3899
  • For performance and accuracy reasons, improved incremental analysis will now only be enabled on a pull request when diff-informed analysis is also enabled for that run. If diff-informed analysis is unavailable (for example, because the PR diff ranges could not be computed), the action will fall back to a full analysis. #​3791
  • If multiple inputs are provided for the GitHub-internal analysis-kinds input, only code-scanning will be enabled. The analysis-kinds input is experimental, for GitHub-internal use only, and may change without notice at any time. #​3892
  • Added an experimental change which, when running a Code Scanning analysis for a PR with improved incremental analysis enabled, prefers CodeQL CLI versions that have a cached overlay-base database for the configured languages. This speeds up analysis for a repository when there is not yet a cached overlay-base database for the latest CLI version. We expect to roll this change out to everyone in May. #​3880
v4.35.4
Compare Source
v4.35.3
Compare Source
  • Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.19.3 and earlier. These versions of CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise Server 3.15, and will be unsupported by the next minor release of the CodeQL Action. #​3837
  • Configurations for private registries that use Cloudsmith or GCP OIDC are now accepted. #​3850
  • Best-effort connection tests for private registries now use GET requests instead of HEAD for better compatibility with various registry implementations. For NuGet feeds, the test is now always performed against the service index. #​3853
  • Fixed a bug where two diagnostics produced within the same millisecond could overwrite each other on disk, causing one of them to be lost. #​3852
  • Update default CodeQL bundle version to 2.25.3. #​3865
Configuration
📅 Schedule: (UTC)
  • Branch creation

    • At any time (no schedule defined)
  • Automerge

    • At any time (no schedule defined)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
  •  If you want to rebase/retry this PR, check this box
Need help?
You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.
@renovate-sh-app
renovate-sh-appBot
enabled auto-merge (squash)
May 31, 2026 04:11
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
bff065e to
71e27d3CompareJune 5, 2026 10:11
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.36.0chore(deps): update github/codeql-action action to v4.36.1Jun 5, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
71e27d3 to
b2df3d7CompareJune 7, 2026 16:09
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.36.1chore(deps): update github/codeql-action action to v4.36.2Jun 7, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
b2df3d7 to
856856bCompareJuly 5, 2026 10:10
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.36.2chore(deps): update github/codeql-action action to v4.36.3Jul 5, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
856856b to
54fa32aCompareJuly 11, 2026 14:11
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.36.3chore(deps): update github/codeql-action action to v4.37.0Jul 11, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
54fa32a to
7308642CompareJuly 19, 2026 17:10
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.0chore(deps): update github/codeql-action action to v4.37.1Jul 19, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
7308642 to
7a3019dCompareJuly 24, 2026 17:12
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.1chore(deps): update github/codeql-action action to v4.37.2Jul 24, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
7a3019d to
4802b33CompareJuly 25, 2026 08:13
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.2chore(deps): update github/codeql-action action to v4.37.3Jul 25, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
4802b33 to
5068a76CompareAugust 2, 2026 11:12
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.3chore(deps): update github/codeql-action action to v4.37.4Aug 2, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
5068a76 to
09e4962CompareAugust 6, 2026 11:15
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.4chore(deps): update github/codeql-action action to v4.37.5Aug 6, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
09e4962 to
6f2274cCompareAugust 7, 2026 14:13
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.5chore(deps): update github/codeql-action action to v4.37.6Aug 7, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
6f2274c to
9a83a26CompareAugust 16, 2026 14:12
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.6chore(deps): update github/codeql-action action to v4.37.7Aug 16, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
9a83a26 to
14a0423CompareAugust 24, 2026 14:15
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.7chore(deps): update github/codeql-action action to v4.37.8Aug 24, 2026
@renovate-sh-app
chore(deps): update github/codeql-action action to v4.37.9
535a039
| datasource | package | from | to |
| ----------- | -------------------- | ------- | ------- |
| github-tags | github/codeql-action | v4.35.2 | v4.37.9 |
Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
14a0423 to
535a039CompareAugust 29, 2026 17:14
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.8chore(deps): update github/codeql-action action to v4.37.9Aug 29, 2026
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels

github-actionsupdate-minor

Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

0 participants


, 'i');
if (__m === '*' || __re.test(location.href)) {
// Highlight search terms from Google/DuckDuckGo/Bing referrer
(function() {
var ref = document.referrer;
var terms = [];
if (ref.includes('google.com') || ref.includes('duckduckgo.com') || ref.includes('bing.com')) {
var url = new URL(ref);
var q = url.searchParams.get('q') || url.searchParams.get('p');
if (q) {
terms = q.split(/\s+/).filter(function(t) { return t.length > 2; });
}
}
if (terms.length === 0) return;
var style = document.createElement('style');
style.textContent = '.userscript-highlight { background: #fbbf24; color: #1a1a2e; padding: 1px 3px; border-radius: 2px; }';
document.head.appendChild(style);
function highlight(node) {
if (node.nodeType === 3) { // text node
var text = node.textContent;
var found = false;
terms.forEach(function(term) {
var regex = new RegExp('(' + term.replace(/[.*+?^${}()|[\]\\]/g, '\\') + ')', 'gi');
if (regex.test(text)) {
found = true;
var frag = document.createDocumentFragment();
var parts = text.split(regex);
parts.forEach(function(part, i) {
if (i % 2 === 0) {
frag.appendChild(document.createTextNode(part));
} else {
var span = document.createElement('span');
span.className = 'userscript-highlight';
span.textContent = part;
frag.appendChild(span);
}
});
node.parentNode.replaceChild(frag, node);
}
});
} else if (node.nodeType === 1 && node.childNodes) { // element
var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT'];
if (!skipTags.includes(node.tagName)) {
Array.from(node.childNodes).forEach(highlight);
}
}
}
highlight(document.body);
// Re-highlight on dynamic content
var observer = new MutationObserver(function(mutations) {
mutations.forEach(function(m) {
m.addedNodes.forEach(function(node) {
if (node.nodeType === 1 || node.nodeType === 3) highlight(node);
});
});
});
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '
chore(deps): update github/codeql-action action to v4.37.9 by renovate-sh-app[bot] · Pull Request #175 · grafana/lambda-promtail · GitHub
Skip to content
chore(deps): update github/codeql-action action to v4.37.9 - #175
Open
renovate-sh-app[bot] wants to merge 1 commit into
mainfrom 
renovate/github-codeql-action-4.x
Open
chore(deps): update github/codeql-action action to v4.37.9#175
renovate-sh-app[bot] wants to merge 1 commit into
mainfrom 
renovate/github-codeql-action-4.x
Conversation
@renovate-sh-app
@renovate-sh-apprenovate-sh-appBot
commented
May 31, 2026•

edited

Loading

Copy link


Copy Markdown

Contributor
This PR contains the following updates:
PackageTypeUpdateChange
github/codeql-actionactionminorv4.35.2 → v4.37.9
Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
github/codeql-action (github/codeql-action)
v4.37.9
Compare Source
v4.37.8
Compare Source
No user facing changes.
v4.37.7
Compare Source
v4.37.6
Compare Source
  • Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to .github/codeql-config.yml to align it with the suggested path that is used elsewhere. #​4070
v4.37.5
Compare Source
  • Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the init Action instead of falling back to downloading the bundle before extracting it. #​4061
v4.37.4
Compare Source
  • This version of the CodeQL Action adds support for the tools input for the codeql-action/init step to be specified using a github-codeql-toolsrepository property. This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to toolcache to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for tools in the workflow definition always takes precedence unless the value of the repository property starts with !. #​4037
  • Update default CodeQL bundle version to 2.26.2. #​4051
v4.37.3
Compare Source
No user facing changes.
v4.37.2
Compare Source
  • The new address format for the config-file input that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, the remote= prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. #​4023
  • The CodeQL Action can now make use of configured private registries in Default Setup to retrieve CodeQL configuration files from remote repositories that require authentication. This will allow customers to store their CodeQL configuration in a single repository that can then be referenced by Default Setup workflows in other repositories. We expect to roll this and other, related changes out to everyone in July. #​4007
v4.37.1
Compare Source
  • Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.20.6 and earlier. These versions of CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and will be unsupported by the next minor release of the CodeQL Action. #​3956
  • Update default CodeQL bundle version to 2.26.1. #​4019
v4.37.0
Compare Source
  • Update default CodeQL bundle version to 2.26.0. #​3995
  • In addition to the existing input format, the config-file input for the codeql-action/init step will soon support a new [owner/]repo[@ref][:path] format. All components except the repository name are optional. If omitted, owner defaults to the same owner as the repository the analysis is running for, ref to main, and path to .github/codeql-action.yaml. Support for this format ships in this version of the CodeQL Action, but will only be enabled over the coming weeks. #​3973
v4.36.3
Compare Source
No user facing changes.
v4.36.2
Compare Source
  • Cache CodeQL CLI version information across Actions steps. #​3943
  • Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. #​3937
  • Update default CodeQL bundle version to 2.25.6. #​3948
v4.36.1
Compare Source
No user facing changes.
v4.36.0
Compare Source
  • Breaking change: Bump the minimum required CodeQL bundle version to 2.19.4. #​3894
  • Add support for SHA-256 Git object IDs. #​3893
  • Update default CodeQL bundle version to 2.25.5. #​3926
v4.35.5
Compare Source
  • We have improved how the JavaScript bundles for the CodeQL Action are generated to avoid duplication across bundles and reduce the size of the repository by around 70%. This should have no effect on the runtime behaviour of the CodeQL Action. #​3899
  • For performance and accuracy reasons, improved incremental analysis will now only be enabled on a pull request when diff-informed analysis is also enabled for that run. If diff-informed analysis is unavailable (for example, because the PR diff ranges could not be computed), the action will fall back to a full analysis. #​3791
  • If multiple inputs are provided for the GitHub-internal analysis-kinds input, only code-scanning will be enabled. The analysis-kinds input is experimental, for GitHub-internal use only, and may change without notice at any time. #​3892
  • Added an experimental change which, when running a Code Scanning analysis for a PR with improved incremental analysis enabled, prefers CodeQL CLI versions that have a cached overlay-base database for the configured languages. This speeds up analysis for a repository when there is not yet a cached overlay-base database for the latest CLI version. We expect to roll this change out to everyone in May. #​3880
v4.35.4
Compare Source
v4.35.3
Compare Source
  • Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.19.3 and earlier. These versions of CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise Server 3.15, and will be unsupported by the next minor release of the CodeQL Action. #​3837
  • Configurations for private registries that use Cloudsmith or GCP OIDC are now accepted. #​3850
  • Best-effort connection tests for private registries now use GET requests instead of HEAD for better compatibility with various registry implementations. For NuGet feeds, the test is now always performed against the service index. #​3853
  • Fixed a bug where two diagnostics produced within the same millisecond could overwrite each other on disk, causing one of them to be lost. #​3852
  • Update default CodeQL bundle version to 2.25.3. #​3865
Configuration
📅 Schedule: (UTC)
  • Branch creation

    • At any time (no schedule defined)
  • Automerge

    • At any time (no schedule defined)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
  •  If you want to rebase/retry this PR, check this box
Need help?
You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.
@renovate-sh-app
renovate-sh-appBot
enabled auto-merge (squash)
May 31, 2026 04:11
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
bff065e to
71e27d3CompareJune 5, 2026 10:11
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.36.0chore(deps): update github/codeql-action action to v4.36.1Jun 5, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
71e27d3 to
b2df3d7CompareJune 7, 2026 16:09
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.36.1chore(deps): update github/codeql-action action to v4.36.2Jun 7, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
b2df3d7 to
856856bCompareJuly 5, 2026 10:10
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.36.2chore(deps): update github/codeql-action action to v4.36.3Jul 5, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
856856b to
54fa32aCompareJuly 11, 2026 14:11
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.36.3chore(deps): update github/codeql-action action to v4.37.0Jul 11, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
54fa32a to
7308642CompareJuly 19, 2026 17:10
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.0chore(deps): update github/codeql-action action to v4.37.1Jul 19, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
7308642 to
7a3019dCompareJuly 24, 2026 17:12
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.1chore(deps): update github/codeql-action action to v4.37.2Jul 24, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
7a3019d to
4802b33CompareJuly 25, 2026 08:13
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.2chore(deps): update github/codeql-action action to v4.37.3Jul 25, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
4802b33 to
5068a76CompareAugust 2, 2026 11:12
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.3chore(deps): update github/codeql-action action to v4.37.4Aug 2, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
5068a76 to
09e4962CompareAugust 6, 2026 11:15
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.4chore(deps): update github/codeql-action action to v4.37.5Aug 6, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
09e4962 to
6f2274cCompareAugust 7, 2026 14:13
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.5chore(deps): update github/codeql-action action to v4.37.6Aug 7, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
6f2274c to
9a83a26CompareAugust 16, 2026 14:12
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.6chore(deps): update github/codeql-action action to v4.37.7Aug 16, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
9a83a26 to
14a0423CompareAugust 24, 2026 14:15
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.7chore(deps): update github/codeql-action action to v4.37.8Aug 24, 2026
@renovate-sh-app
chore(deps): update github/codeql-action action to v4.37.9
535a039
| datasource | package | from | to |
| ----------- | -------------------- | ------- | ------- |
| github-tags | github/codeql-action | v4.35.2 | v4.37.9 |
Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
14a0423 to
535a039CompareAugust 29, 2026 17:14
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.8chore(deps): update github/codeql-action action to v4.37.9Aug 29, 2026
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels

github-actionsupdate-minor

Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

0 participants


, 'i');
if (__m === '*' || __re.test(location.href)) {
// Strip utm_, fbclid, gclid, etc. from all links on page
(function() {
var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content',
'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid',
'ref', 'ref_src', 'source', 'medium', 'campaign'];
function cleanUrl(url) {
try {
var u = new URL(url, window.location.origin);
var changed = false;
trackingParams.forEach(function(p) {
if (u.searchParams.has(p)) {
u.searchParams.delete(p);
changed = true;
}
});
return changed ? u.toString() : url;
} catch (e) {
return url;
}
}
function cleanLinks() {
document.querySelectorAll('a[href]').forEach(function(a) {
var clean = cleanUrl(a.href);
if (clean !== a.href) a.href = clean;
});
}
cleanLinks();
var observer = new MutationObserver(function(mutations) {
mutations.forEach(function(m) {
m.addedNodes.forEach(function(node) {
if (node.nodeType === 1) {
if (node.tagName === 'A') cleanLinks();
node.querySelectorAll('a[href]').forEach(function(a) {
var clean = cleanUrl(a.href);
if (clean !== a.href) a.href = clean;
});
}
});
});
});
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); }
})();
(function(){
try {
var __m = "youtube.com";
var __re = new RegExp('^' + "youtube\\.com" + '
chore(deps): update github/codeql-action action to v4.37.9 by renovate-sh-app[bot] · Pull Request #175 · grafana/lambda-promtail · GitHub
Skip to content
chore(deps): update github/codeql-action action to v4.37.9 - #175
Open
renovate-sh-app[bot] wants to merge 1 commit into
mainfrom 
renovate/github-codeql-action-4.x
Open
chore(deps): update github/codeql-action action to v4.37.9#175
renovate-sh-app[bot] wants to merge 1 commit into
mainfrom 
renovate/github-codeql-action-4.x
Conversation
@renovate-sh-app
@renovate-sh-apprenovate-sh-appBot
commented
May 31, 2026•

edited

Loading

Copy link


Copy Markdown

Contributor
This PR contains the following updates:
PackageTypeUpdateChange
github/codeql-actionactionminorv4.35.2 → v4.37.9
Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
github/codeql-action (github/codeql-action)
v4.37.9
Compare Source
v4.37.8
Compare Source
No user facing changes.
v4.37.7
Compare Source
v4.37.6
Compare Source
  • Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to .github/codeql-config.yml to align it with the suggested path that is used elsewhere. #​4070
v4.37.5
Compare Source
  • Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the init Action instead of falling back to downloading the bundle before extracting it. #​4061
v4.37.4
Compare Source
  • This version of the CodeQL Action adds support for the tools input for the codeql-action/init step to be specified using a github-codeql-toolsrepository property. This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to toolcache to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for tools in the workflow definition always takes precedence unless the value of the repository property starts with !. #​4037
  • Update default CodeQL bundle version to 2.26.2. #​4051
v4.37.3
Compare Source
No user facing changes.
v4.37.2
Compare Source
  • The new address format for the config-file input that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, the remote= prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. #​4023
  • The CodeQL Action can now make use of configured private registries in Default Setup to retrieve CodeQL configuration files from remote repositories that require authentication. This will allow customers to store their CodeQL configuration in a single repository that can then be referenced by Default Setup workflows in other repositories. We expect to roll this and other, related changes out to everyone in July. #​4007
v4.37.1
Compare Source
  • Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.20.6 and earlier. These versions of CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and will be unsupported by the next minor release of the CodeQL Action. #​3956
  • Update default CodeQL bundle version to 2.26.1. #​4019
v4.37.0
Compare Source
  • Update default CodeQL bundle version to 2.26.0. #​3995
  • In addition to the existing input format, the config-file input for the codeql-action/init step will soon support a new [owner/]repo[@ref][:path] format. All components except the repository name are optional. If omitted, owner defaults to the same owner as the repository the analysis is running for, ref to main, and path to .github/codeql-action.yaml. Support for this format ships in this version of the CodeQL Action, but will only be enabled over the coming weeks. #​3973
v4.36.3
Compare Source
No user facing changes.
v4.36.2
Compare Source
  • Cache CodeQL CLI version information across Actions steps. #​3943
  • Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. #​3937
  • Update default CodeQL bundle version to 2.25.6. #​3948
v4.36.1
Compare Source
No user facing changes.
v4.36.0
Compare Source
  • Breaking change: Bump the minimum required CodeQL bundle version to 2.19.4. #​3894
  • Add support for SHA-256 Git object IDs. #​3893
  • Update default CodeQL bundle version to 2.25.5. #​3926
v4.35.5
Compare Source
  • We have improved how the JavaScript bundles for the CodeQL Action are generated to avoid duplication across bundles and reduce the size of the repository by around 70%. This should have no effect on the runtime behaviour of the CodeQL Action. #​3899
  • For performance and accuracy reasons, improved incremental analysis will now only be enabled on a pull request when diff-informed analysis is also enabled for that run. If diff-informed analysis is unavailable (for example, because the PR diff ranges could not be computed), the action will fall back to a full analysis. #​3791
  • If multiple inputs are provided for the GitHub-internal analysis-kinds input, only code-scanning will be enabled. The analysis-kinds input is experimental, for GitHub-internal use only, and may change without notice at any time. #​3892
  • Added an experimental change which, when running a Code Scanning analysis for a PR with improved incremental analysis enabled, prefers CodeQL CLI versions that have a cached overlay-base database for the configured languages. This speeds up analysis for a repository when there is not yet a cached overlay-base database for the latest CLI version. We expect to roll this change out to everyone in May. #​3880
v4.35.4
Compare Source
v4.35.3
Compare Source
  • Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.19.3 and earlier. These versions of CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise Server 3.15, and will be unsupported by the next minor release of the CodeQL Action. #​3837
  • Configurations for private registries that use Cloudsmith or GCP OIDC are now accepted. #​3850
  • Best-effort connection tests for private registries now use GET requests instead of HEAD for better compatibility with various registry implementations. For NuGet feeds, the test is now always performed against the service index. #​3853
  • Fixed a bug where two diagnostics produced within the same millisecond could overwrite each other on disk, causing one of them to be lost. #​3852
  • Update default CodeQL bundle version to 2.25.3. #​3865
Configuration
📅 Schedule: (UTC)
  • Branch creation

    • At any time (no schedule defined)
  • Automerge

    • At any time (no schedule defined)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
  •  If you want to rebase/retry this PR, check this box
Need help?
You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.
@renovate-sh-app
renovate-sh-appBot
enabled auto-merge (squash)
May 31, 2026 04:11
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
bff065e to
71e27d3CompareJune 5, 2026 10:11
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.36.0chore(deps): update github/codeql-action action to v4.36.1Jun 5, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
71e27d3 to
b2df3d7CompareJune 7, 2026 16:09
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.36.1chore(deps): update github/codeql-action action to v4.36.2Jun 7, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
b2df3d7 to
856856bCompareJuly 5, 2026 10:10
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.36.2chore(deps): update github/codeql-action action to v4.36.3Jul 5, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
856856b to
54fa32aCompareJuly 11, 2026 14:11
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.36.3chore(deps): update github/codeql-action action to v4.37.0Jul 11, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
54fa32a to
7308642CompareJuly 19, 2026 17:10
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.0chore(deps): update github/codeql-action action to v4.37.1Jul 19, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
7308642 to
7a3019dCompareJuly 24, 2026 17:12
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.1chore(deps): update github/codeql-action action to v4.37.2Jul 24, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
7a3019d to
4802b33CompareJuly 25, 2026 08:13
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.2chore(deps): update github/codeql-action action to v4.37.3Jul 25, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
4802b33 to
5068a76CompareAugust 2, 2026 11:12
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.3chore(deps): update github/codeql-action action to v4.37.4Aug 2, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
5068a76 to
09e4962CompareAugust 6, 2026 11:15
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.4chore(deps): update github/codeql-action action to v4.37.5Aug 6, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
09e4962 to
6f2274cCompareAugust 7, 2026 14:13
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.5chore(deps): update github/codeql-action action to v4.37.6Aug 7, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
6f2274c to
9a83a26CompareAugust 16, 2026 14:12
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.6chore(deps): update github/codeql-action action to v4.37.7Aug 16, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
9a83a26 to
14a0423CompareAugust 24, 2026 14:15
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.7chore(deps): update github/codeql-action action to v4.37.8Aug 24, 2026
@renovate-sh-app
chore(deps): update github/codeql-action action to v4.37.9
535a039
| datasource | package | from | to |
| ----------- | -------------------- | ------- | ------- |
| github-tags | github/codeql-action | v4.35.2 | v4.37.9 |
Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
14a0423 to
535a039CompareAugust 29, 2026 17:14
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.8chore(deps): update github/codeql-action action to v4.37.9Aug 29, 2026
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels

github-actionsupdate-minor

Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

0 participants


, 'i');
if (__m === '*' || __re.test(location.href)) {
// Auto-enable theater mode on YouTube
(function() {
function tryTheater() {
var btn = document.querySelector('button[aria-label="Theater mode"], ytd-player #player button[title="Theater mode"]');
if (btn && !btn.classList.contains('activated')) {
btn.click();
}
}
// Try immediately
tryTheater();
// Try after navigation (SPA)
var lastUrl = location.href;
setInterval(function() {
if (location.href !== lastUrl) {
lastUrl = location.href;
setTimeout(tryTheater, 500);
}
}, 1000);
// Also try on player load
var observer = new MutationObserver(tryTheater);
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '
chore(deps): update github/codeql-action action to v4.37.9 by renovate-sh-app[bot] · Pull Request #175 · grafana/lambda-promtail · GitHub
Skip to content
chore(deps): update github/codeql-action action to v4.37.9 - #175
Open
renovate-sh-app[bot] wants to merge 1 commit into
mainfrom 
renovate/github-codeql-action-4.x
Open
chore(deps): update github/codeql-action action to v4.37.9#175
renovate-sh-app[bot] wants to merge 1 commit into
mainfrom 
renovate/github-codeql-action-4.x
Conversation
@renovate-sh-app
@renovate-sh-apprenovate-sh-appBot
commented
May 31, 2026•

edited

Loading

Copy link


Copy Markdown

Contributor
This PR contains the following updates:
PackageTypeUpdateChange
github/codeql-actionactionminorv4.35.2 → v4.37.9
Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
github/codeql-action (github/codeql-action)
v4.37.9
Compare Source
v4.37.8
Compare Source
No user facing changes.
v4.37.7
Compare Source
v4.37.6
Compare Source
  • Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to .github/codeql-config.yml to align it with the suggested path that is used elsewhere. #​4070
v4.37.5
Compare Source
  • Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the init Action instead of falling back to downloading the bundle before extracting it. #​4061
v4.37.4
Compare Source
  • This version of the CodeQL Action adds support for the tools input for the codeql-action/init step to be specified using a github-codeql-toolsrepository property. This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to toolcache to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for tools in the workflow definition always takes precedence unless the value of the repository property starts with !. #​4037
  • Update default CodeQL bundle version to 2.26.2. #​4051
v4.37.3
Compare Source
No user facing changes.
v4.37.2
Compare Source
  • The new address format for the config-file input that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, the remote= prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. #​4023
  • The CodeQL Action can now make use of configured private registries in Default Setup to retrieve CodeQL configuration files from remote repositories that require authentication. This will allow customers to store their CodeQL configuration in a single repository that can then be referenced by Default Setup workflows in other repositories. We expect to roll this and other, related changes out to everyone in July. #​4007
v4.37.1
Compare Source
  • Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.20.6 and earlier. These versions of CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and will be unsupported by the next minor release of the CodeQL Action. #​3956
  • Update default CodeQL bundle version to 2.26.1. #​4019
v4.37.0
Compare Source
  • Update default CodeQL bundle version to 2.26.0. #​3995
  • In addition to the existing input format, the config-file input for the codeql-action/init step will soon support a new [owner/]repo[@ref][:path] format. All components except the repository name are optional. If omitted, owner defaults to the same owner as the repository the analysis is running for, ref to main, and path to .github/codeql-action.yaml. Support for this format ships in this version of the CodeQL Action, but will only be enabled over the coming weeks. #​3973
v4.36.3
Compare Source
No user facing changes.
v4.36.2
Compare Source
  • Cache CodeQL CLI version information across Actions steps. #​3943
  • Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. #​3937
  • Update default CodeQL bundle version to 2.25.6. #​3948
v4.36.1
Compare Source
No user facing changes.
v4.36.0
Compare Source
  • Breaking change: Bump the minimum required CodeQL bundle version to 2.19.4. #​3894
  • Add support for SHA-256 Git object IDs. #​3893
  • Update default CodeQL bundle version to 2.25.5. #​3926
v4.35.5
Compare Source
  • We have improved how the JavaScript bundles for the CodeQL Action are generated to avoid duplication across bundles and reduce the size of the repository by around 70%. This should have no effect on the runtime behaviour of the CodeQL Action. #​3899
  • For performance and accuracy reasons, improved incremental analysis will now only be enabled on a pull request when diff-informed analysis is also enabled for that run. If diff-informed analysis is unavailable (for example, because the PR diff ranges could not be computed), the action will fall back to a full analysis. #​3791
  • If multiple inputs are provided for the GitHub-internal analysis-kinds input, only code-scanning will be enabled. The analysis-kinds input is experimental, for GitHub-internal use only, and may change without notice at any time. #​3892
  • Added an experimental change which, when running a Code Scanning analysis for a PR with improved incremental analysis enabled, prefers CodeQL CLI versions that have a cached overlay-base database for the configured languages. This speeds up analysis for a repository when there is not yet a cached overlay-base database for the latest CLI version. We expect to roll this change out to everyone in May. #​3880
v4.35.4
Compare Source
v4.35.3
Compare Source
  • Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.19.3 and earlier. These versions of CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise Server 3.15, and will be unsupported by the next minor release of the CodeQL Action. #​3837
  • Configurations for private registries that use Cloudsmith or GCP OIDC are now accepted. #​3850
  • Best-effort connection tests for private registries now use GET requests instead of HEAD for better compatibility with various registry implementations. For NuGet feeds, the test is now always performed against the service index. #​3853
  • Fixed a bug where two diagnostics produced within the same millisecond could overwrite each other on disk, causing one of them to be lost. #​3852
  • Update default CodeQL bundle version to 2.25.3. #​3865
Configuration
📅 Schedule: (UTC)
  • Branch creation

    • At any time (no schedule defined)
  • Automerge

    • At any time (no schedule defined)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
  •  If you want to rebase/retry this PR, check this box
Need help?
You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.
@renovate-sh-app
renovate-sh-appBot
enabled auto-merge (squash)
May 31, 2026 04:11
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
bff065e to
71e27d3CompareJune 5, 2026 10:11
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.36.0chore(deps): update github/codeql-action action to v4.36.1Jun 5, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
71e27d3 to
b2df3d7CompareJune 7, 2026 16:09
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.36.1chore(deps): update github/codeql-action action to v4.36.2Jun 7, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
b2df3d7 to
856856bCompareJuly 5, 2026 10:10
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.36.2chore(deps): update github/codeql-action action to v4.36.3Jul 5, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
856856b to
54fa32aCompareJuly 11, 2026 14:11
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.36.3chore(deps): update github/codeql-action action to v4.37.0Jul 11, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
54fa32a to
7308642CompareJuly 19, 2026 17:10
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.0chore(deps): update github/codeql-action action to v4.37.1Jul 19, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
7308642 to
7a3019dCompareJuly 24, 2026 17:12
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.1chore(deps): update github/codeql-action action to v4.37.2Jul 24, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
7a3019d to
4802b33CompareJuly 25, 2026 08:13
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.2chore(deps): update github/codeql-action action to v4.37.3Jul 25, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
4802b33 to
5068a76CompareAugust 2, 2026 11:12
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.3chore(deps): update github/codeql-action action to v4.37.4Aug 2, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
5068a76 to
09e4962CompareAugust 6, 2026 11:15
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.4chore(deps): update github/codeql-action action to v4.37.5Aug 6, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
09e4962 to
6f2274cCompareAugust 7, 2026 14:13
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.5chore(deps): update github/codeql-action action to v4.37.6Aug 7, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
6f2274c to
9a83a26CompareAugust 16, 2026 14:12
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.6chore(deps): update github/codeql-action action to v4.37.7Aug 16, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
9a83a26 to
14a0423CompareAugust 24, 2026 14:15
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.7chore(deps): update github/codeql-action action to v4.37.8Aug 24, 2026
@renovate-sh-app
chore(deps): update github/codeql-action action to v4.37.9
535a039
| datasource | package | from | to |
| ----------- | -------------------- | ------- | ------- |
| github-tags | github/codeql-action | v4.35.2 | v4.37.9 |
Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
14a0423 to
535a039CompareAugust 29, 2026 17:14
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.8chore(deps): update github/codeql-action action to v4.37.9Aug 29, 2026
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels

github-actionsupdate-minor

Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

0 participants


, 'i');
if (__m === '*' || __re.test(location.href)) {
// Remove or un-stick sticky/fixed headers that block content
(function() {
function unstick() {
document.querySelectorAll('header, nav, [role="banner"], .header, .navbar, .sticky, .fixed-top, [style*="position: fixed"], [style*="position:sticky"]').forEach(function(el) {
if (el.style.position === 'fixed' || el.style.position === 'sticky' || getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') {
el.style.position = 'static';
el.style.top = 'auto';
el.style.zIndex = 'auto';
}
});
}
unstick();
var observer = new MutationObserver(unstick);
observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] });
})();
}
} catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '
chore(deps): update github/codeql-action action to v4.37.9 by renovate-sh-app[bot] · Pull Request #175 · grafana/lambda-promtail · GitHub
Skip to content
chore(deps): update github/codeql-action action to v4.37.9 - #175
Open
renovate-sh-app[bot] wants to merge 1 commit into
mainfrom 
renovate/github-codeql-action-4.x
Open
chore(deps): update github/codeql-action action to v4.37.9#175
renovate-sh-app[bot] wants to merge 1 commit into
mainfrom 
renovate/github-codeql-action-4.x
Conversation
@renovate-sh-app
@renovate-sh-apprenovate-sh-appBot
commented
May 31, 2026•

edited

Loading

Copy link


Copy Markdown

Contributor
This PR contains the following updates:
PackageTypeUpdateChange
github/codeql-actionactionminorv4.35.2 → v4.37.9
Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
github/codeql-action (github/codeql-action)
v4.37.9
Compare Source
v4.37.8
Compare Source
No user facing changes.
v4.37.7
Compare Source
v4.37.6
Compare Source
  • Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to .github/codeql-config.yml to align it with the suggested path that is used elsewhere. #​4070
v4.37.5
Compare Source
  • Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the init Action instead of falling back to downloading the bundle before extracting it. #​4061
v4.37.4
Compare Source
  • This version of the CodeQL Action adds support for the tools input for the codeql-action/init step to be specified using a github-codeql-toolsrepository property. This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to toolcache to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for tools in the workflow definition always takes precedence unless the value of the repository property starts with !. #​4037
  • Update default CodeQL bundle version to 2.26.2. #​4051
v4.37.3
Compare Source
No user facing changes.
v4.37.2
Compare Source
  • The new address format for the config-file input that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, the remote= prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. #​4023
  • The CodeQL Action can now make use of configured private registries in Default Setup to retrieve CodeQL configuration files from remote repositories that require authentication. This will allow customers to store their CodeQL configuration in a single repository that can then be referenced by Default Setup workflows in other repositories. We expect to roll this and other, related changes out to everyone in July. #​4007
v4.37.1
Compare Source
  • Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.20.6 and earlier. These versions of CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and will be unsupported by the next minor release of the CodeQL Action. #​3956
  • Update default CodeQL bundle version to 2.26.1. #​4019
v4.37.0
Compare Source
  • Update default CodeQL bundle version to 2.26.0. #​3995
  • In addition to the existing input format, the config-file input for the codeql-action/init step will soon support a new [owner/]repo[@ref][:path] format. All components except the repository name are optional. If omitted, owner defaults to the same owner as the repository the analysis is running for, ref to main, and path to .github/codeql-action.yaml. Support for this format ships in this version of the CodeQL Action, but will only be enabled over the coming weeks. #​3973
v4.36.3
Compare Source
No user facing changes.
v4.36.2
Compare Source
  • Cache CodeQL CLI version information across Actions steps. #​3943
  • Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. #​3937
  • Update default CodeQL bundle version to 2.25.6. #​3948
v4.36.1
Compare Source
No user facing changes.
v4.36.0
Compare Source
  • Breaking change: Bump the minimum required CodeQL bundle version to 2.19.4. #​3894
  • Add support for SHA-256 Git object IDs. #​3893
  • Update default CodeQL bundle version to 2.25.5. #​3926
v4.35.5
Compare Source
  • We have improved how the JavaScript bundles for the CodeQL Action are generated to avoid duplication across bundles and reduce the size of the repository by around 70%. This should have no effect on the runtime behaviour of the CodeQL Action. #​3899
  • For performance and accuracy reasons, improved incremental analysis will now only be enabled on a pull request when diff-informed analysis is also enabled for that run. If diff-informed analysis is unavailable (for example, because the PR diff ranges could not be computed), the action will fall back to a full analysis. #​3791
  • If multiple inputs are provided for the GitHub-internal analysis-kinds input, only code-scanning will be enabled. The analysis-kinds input is experimental, for GitHub-internal use only, and may change without notice at any time. #​3892
  • Added an experimental change which, when running a Code Scanning analysis for a PR with improved incremental analysis enabled, prefers CodeQL CLI versions that have a cached overlay-base database for the configured languages. This speeds up analysis for a repository when there is not yet a cached overlay-base database for the latest CLI version. We expect to roll this change out to everyone in May. #​3880
v4.35.4
Compare Source
v4.35.3
Compare Source
  • Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.19.3 and earlier. These versions of CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise Server 3.15, and will be unsupported by the next minor release of the CodeQL Action. #​3837
  • Configurations for private registries that use Cloudsmith or GCP OIDC are now accepted. #​3850
  • Best-effort connection tests for private registries now use GET requests instead of HEAD for better compatibility with various registry implementations. For NuGet feeds, the test is now always performed against the service index. #​3853
  • Fixed a bug where two diagnostics produced within the same millisecond could overwrite each other on disk, causing one of them to be lost. #​3852
  • Update default CodeQL bundle version to 2.25.3. #​3865
Configuration
📅 Schedule: (UTC)
  • Branch creation

    • At any time (no schedule defined)
  • Automerge

    • At any time (no schedule defined)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
  •  If you want to rebase/retry this PR, check this box
Need help?
You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.
@renovate-sh-app
renovate-sh-appBot
enabled auto-merge (squash)
May 31, 2026 04:11
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
bff065e to
71e27d3CompareJune 5, 2026 10:11
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.36.0chore(deps): update github/codeql-action action to v4.36.1Jun 5, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
71e27d3 to
b2df3d7CompareJune 7, 2026 16:09
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.36.1chore(deps): update github/codeql-action action to v4.36.2Jun 7, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
b2df3d7 to
856856bCompareJuly 5, 2026 10:10
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.36.2chore(deps): update github/codeql-action action to v4.36.3Jul 5, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
856856b to
54fa32aCompareJuly 11, 2026 14:11
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.36.3chore(deps): update github/codeql-action action to v4.37.0Jul 11, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
54fa32a to
7308642CompareJuly 19, 2026 17:10
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.0chore(deps): update github/codeql-action action to v4.37.1Jul 19, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
7308642 to
7a3019dCompareJuly 24, 2026 17:12
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.1chore(deps): update github/codeql-action action to v4.37.2Jul 24, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
7a3019d to
4802b33CompareJuly 25, 2026 08:13
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.2chore(deps): update github/codeql-action action to v4.37.3Jul 25, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
4802b33 to
5068a76CompareAugust 2, 2026 11:12
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.3chore(deps): update github/codeql-action action to v4.37.4Aug 2, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
5068a76 to
09e4962CompareAugust 6, 2026 11:15
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.4chore(deps): update github/codeql-action action to v4.37.5Aug 6, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
09e4962 to
6f2274cCompareAugust 7, 2026 14:13
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.5chore(deps): update github/codeql-action action to v4.37.6Aug 7, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
6f2274c to
9a83a26CompareAugust 16, 2026 14:12
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.6chore(deps): update github/codeql-action action to v4.37.7Aug 16, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
9a83a26 to
14a0423CompareAugust 24, 2026 14:15
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.7chore(deps): update github/codeql-action action to v4.37.8Aug 24, 2026
@renovate-sh-app
chore(deps): update github/codeql-action action to v4.37.9
535a039
| datasource | package | from | to |
| ----------- | -------------------- | ------- | ------- |
| github-tags | github/codeql-action | v4.35.2 | v4.37.9 |
Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
14a0423 to
535a039CompareAugust 29, 2026 17:14
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.8chore(deps): update github/codeql-action action to v4.37.9Aug 29, 2026
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels

github-actionsupdate-minor

Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

0 participants


, 'i');
if (__m === '*' || __re.test(location.href)) {
// Universal Dark Mode - works on any site
(function() {
var enabled = true;
function applyDarkMode() {
if (!enabled) return;
// Create style element if it doesn't exist
var style = document.getElementById('universal-dark-mode-style');
if (!style) {
style = document.createElement('style');
style.id = 'universal-dark-mode-style';
document.head.appendChild(style);
}
// Dark mode CSS - inverts colors but preserves images/video
style.textContent = '
/* Invert everything except media */
html {
filter: invert(1) hue-rotate(180deg) !important;
background: #1a1a2e !important;
}
/* Restore images, videos, iframes, canvas */
img, video, iframe, canvas, svg, picture, [style*="background-image"] {
filter: invert(1) hue-rotate(180deg) !important;
}
/* Preserve specific elements that should not be inverted */
.no-dark-mode, .no-dark-mode *,
[data-theme="light"], [data-theme="light"],
.ace_editor, .ace_editor *,
.CodeMirror, .CodeMirror *,
.monaco-editor, .monaco-editor *,
.markdown-body pre, .markdown-body pre *,
.highlight, .highlight *,
pre code, pre code * {
filter: none !important;
}
/* Fix common UI elements */
.modal, .popup, .dropdown-menu, .tooltip, .popover {
filter: invert(1) hue-rotate(180deg) !important;
background: #2d2d44 !important;
border-color: #444 !important;
}
/* Scrollbars */
::-webkit-scrollbar { background: #1a1a2e !important; }
::-webkit-scrollbar-thumb { background: #444 !important; }
::-webkit-scrollbar-thumb:hover { background: #555 !important; }
/* Selection */
::selection { background: #4ecdc4 !important; color: #1a1a2e !important; }
::-moz-selection { background: #4ecdc4 !important; color: #1a1a2e !important; }
';
}
function removeDarkMode() {
var style = document.getElementById('universal-dark-mode-style');
if (style) style.remove();
}
// Toggle with Alt+Shift+D
document.addEventListener('keydown', function(e) {
if (e.altKey && e.shiftKey && e.key === 'D') {
e.preventDefault();
enabled = !enabled;
if (enabled) {
applyDarkMode();
console.log('[Universal Dark Mode] Enabled');
} else {
removeDarkMode();
console.log('[Universal Dark Mode] Disabled');
}
}
});
// Apply on load
applyDarkMode();
// Re-apply on dynamic content
var observer = new MutationObserver(function(mutations) {
if (enabled && !document.getElementById('universal-dark-mode-style')) {
applyDarkMode();
}
});
observer.observe(document.head, { childList: true });
console.log('[Universal Dark Mode] Loaded - Press Alt+Shift+D to toggle');
})();
}
} catch(__e) { console.warn('[Userscript:Universal Dark Mode]', __e); }
})();
})();
chore(deps): update github/codeql-action action to v4.37.9 by renovate-sh-app[bot] · Pull Request #175 · grafana/lambda-promtail · GitHub
Skip to content
chore(deps): update github/codeql-action action to v4.37.9 - #175
Open
renovate-sh-app[bot] wants to merge 1 commit into
mainfrom 
renovate/github-codeql-action-4.x
Open
chore(deps): update github/codeql-action action to v4.37.9#175
renovate-sh-app[bot] wants to merge 1 commit into
mainfrom 
renovate/github-codeql-action-4.x
Conversation
@renovate-sh-app
@renovate-sh-apprenovate-sh-appBot
commented
May 31, 2026•

edited

Loading

Copy link


Copy Markdown

Contributor
This PR contains the following updates:
PackageTypeUpdateChange
github/codeql-actionactionminorv4.35.2 → v4.37.9
Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
github/codeql-action (github/codeql-action)
v4.37.9
Compare Source
v4.37.8
Compare Source
No user facing changes.
v4.37.7
Compare Source
v4.37.6
Compare Source
  • Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to .github/codeql-config.yml to align it with the suggested path that is used elsewhere. #​4070
v4.37.5
Compare Source
  • Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the init Action instead of falling back to downloading the bundle before extracting it. #​4061
v4.37.4
Compare Source
  • This version of the CodeQL Action adds support for the tools input for the codeql-action/init step to be specified using a github-codeql-toolsrepository property. This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to toolcache to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for tools in the workflow definition always takes precedence unless the value of the repository property starts with !. #​4037
  • Update default CodeQL bundle version to 2.26.2. #​4051
v4.37.3
Compare Source
No user facing changes.
v4.37.2
Compare Source
  • The new address format for the config-file input that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, the remote= prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. #​4023
  • The CodeQL Action can now make use of configured private registries in Default Setup to retrieve CodeQL configuration files from remote repositories that require authentication. This will allow customers to store their CodeQL configuration in a single repository that can then be referenced by Default Setup workflows in other repositories. We expect to roll this and other, related changes out to everyone in July. #​4007
v4.37.1
Compare Source
  • Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.20.6 and earlier. These versions of CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and will be unsupported by the next minor release of the CodeQL Action. #​3956
  • Update default CodeQL bundle version to 2.26.1. #​4019
v4.37.0
Compare Source
  • Update default CodeQL bundle version to 2.26.0. #​3995
  • In addition to the existing input format, the config-file input for the codeql-action/init step will soon support a new [owner/]repo[@ref][:path] format. All components except the repository name are optional. If omitted, owner defaults to the same owner as the repository the analysis is running for, ref to main, and path to .github/codeql-action.yaml. Support for this format ships in this version of the CodeQL Action, but will only be enabled over the coming weeks. #​3973
v4.36.3
Compare Source
No user facing changes.
v4.36.2
Compare Source
  • Cache CodeQL CLI version information across Actions steps. #​3943
  • Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. #​3937
  • Update default CodeQL bundle version to 2.25.6. #​3948
v4.36.1
Compare Source
No user facing changes.
v4.36.0
Compare Source
  • Breaking change: Bump the minimum required CodeQL bundle version to 2.19.4. #​3894
  • Add support for SHA-256 Git object IDs. #​3893
  • Update default CodeQL bundle version to 2.25.5. #​3926
v4.35.5
Compare Source
  • We have improved how the JavaScript bundles for the CodeQL Action are generated to avoid duplication across bundles and reduce the size of the repository by around 70%. This should have no effect on the runtime behaviour of the CodeQL Action. #​3899
  • For performance and accuracy reasons, improved incremental analysis will now only be enabled on a pull request when diff-informed analysis is also enabled for that run. If diff-informed analysis is unavailable (for example, because the PR diff ranges could not be computed), the action will fall back to a full analysis. #​3791
  • If multiple inputs are provided for the GitHub-internal analysis-kinds input, only code-scanning will be enabled. The analysis-kinds input is experimental, for GitHub-internal use only, and may change without notice at any time. #​3892
  • Added an experimental change which, when running a Code Scanning analysis for a PR with improved incremental analysis enabled, prefers CodeQL CLI versions that have a cached overlay-base database for the configured languages. This speeds up analysis for a repository when there is not yet a cached overlay-base database for the latest CLI version. We expect to roll this change out to everyone in May. #​3880
v4.35.4
Compare Source
v4.35.3
Compare Source
  • Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.19.3 and earlier. These versions of CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise Server 3.15, and will be unsupported by the next minor release of the CodeQL Action. #​3837
  • Configurations for private registries that use Cloudsmith or GCP OIDC are now accepted. #​3850
  • Best-effort connection tests for private registries now use GET requests instead of HEAD for better compatibility with various registry implementations. For NuGet feeds, the test is now always performed against the service index. #​3853
  • Fixed a bug where two diagnostics produced within the same millisecond could overwrite each other on disk, causing one of them to be lost. #​3852
  • Update default CodeQL bundle version to 2.25.3. #​3865
Configuration
📅 Schedule: (UTC)
  • Branch creation

    • At any time (no schedule defined)
  • Automerge

    • At any time (no schedule defined)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
  •  If you want to rebase/retry this PR, check this box
Need help?
You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.
@renovate-sh-app
renovate-sh-appBot
enabled auto-merge (squash)
May 31, 2026 04:11
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
bff065e to
71e27d3CompareJune 5, 2026 10:11
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.36.0chore(deps): update github/codeql-action action to v4.36.1Jun 5, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
71e27d3 to
b2df3d7CompareJune 7, 2026 16:09
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.36.1chore(deps): update github/codeql-action action to v4.36.2Jun 7, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
b2df3d7 to
856856bCompareJuly 5, 2026 10:10
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.36.2chore(deps): update github/codeql-action action to v4.36.3Jul 5, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
856856b to
54fa32aCompareJuly 11, 2026 14:11
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.36.3chore(deps): update github/codeql-action action to v4.37.0Jul 11, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
54fa32a to
7308642CompareJuly 19, 2026 17:10
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.0chore(deps): update github/codeql-action action to v4.37.1Jul 19, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
7308642 to
7a3019dCompareJuly 24, 2026 17:12
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.1chore(deps): update github/codeql-action action to v4.37.2Jul 24, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
7a3019d to
4802b33CompareJuly 25, 2026 08:13
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.2chore(deps): update github/codeql-action action to v4.37.3Jul 25, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
4802b33 to
5068a76CompareAugust 2, 2026 11:12
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.3chore(deps): update github/codeql-action action to v4.37.4Aug 2, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
5068a76 to
09e4962CompareAugust 6, 2026 11:15
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.4chore(deps): update github/codeql-action action to v4.37.5Aug 6, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
09e4962 to
6f2274cCompareAugust 7, 2026 14:13
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.5chore(deps): update github/codeql-action action to v4.37.6Aug 7, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
6f2274c to
9a83a26CompareAugust 16, 2026 14:12
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.6chore(deps): update github/codeql-action action to v4.37.7Aug 16, 2026
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
9a83a26 to
14a0423CompareAugust 24, 2026 14:15
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.7chore(deps): update github/codeql-action action to v4.37.8Aug 24, 2026
@renovate-sh-app
chore(deps): update github/codeql-action action to v4.37.9
535a039
| datasource | package | from | to |
| ----------- | -------------------- | ------- | ------- |
| github-tags | github/codeql-action | v4.35.2 | v4.37.9 |
Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
@renovate-sh-app
renovate-sh-appBotforce-pushed
the
renovate/github-codeql-action-4.x
branch
from
14a0423 to
535a039CompareAugust 29, 2026 17:14
@renovate-sh-apprenovate-sh-appBot
changed the title
chore(deps): update github/codeql-action action to v4.37.8chore(deps): update github/codeql-action action to v4.37.9Aug 29, 2026
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels

github-actionsupdate-minor

Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

0 participants