Repository navigation
build: update CodeQL actions to 4.39.1 and mise-action to 5.2.5 - #27
Conversation
Bumps [github/codeql-action/analyze](https://github.com/github/codeql-action) from 4.38.3 to 4.39.1. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@24c5418...9b32540) --- updated-dependencies: - dependency-name: github/codeql-action/analyze dependency-version: 4.39.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [github/codeql-action/init](https://github.com/github/codeql-action) from 4.38.3 to 4.39.1. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@24c5418...9b32540) --- updated-dependencies: - dependency-name: github/codeql-action/init dependency-version: 4.39.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [jdx/mise-action](https://github.com/jdx/mise-action) from 5.1.1 to 5.2.5. - [Release notes](https://github.com/jdx/mise-action/releases) - [Changelog](https://github.com/jdx/mise-action/blob/main/CHANGELOG.md) - [Commits](jdx/mise-action@2d8d4ca...6612f0e) --- updated-dependencies: - dependency-name: jdx/mise-action dependency-version: 5.2.5 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
a0c27c7 to
b1acf83
Compare
|
@atunwo review |
![atunwo[bot]](https://avatars.githubusercontent.com/u/13754360?s=60&v=4){kind=small}
There was a problem hiding this comment.
Àtúnwò review · ✅ No findings
Reviewed 7bd6a0c
Updates mise-action pins across build, CodeQL and release workflows, and updates CodeQL init/analyze together to the same commit while preserving existing inputs and tasks. Upstream action implementations and tag-to-SHA mappings could not be independently verified offline; supplied CI shows repository checks succeeded, with CodeQL and other verification jobs still in progress.
There was a problem hiding this comment.
Àtúnwò review · ✅ No findings
Reviewed 5bb4b8c
Updates mise-action pins consistently across all three workflows and keeps CodeQL init/analyze pinned to the same updated commit. Upstream action implementations and tag-to-SHA mappings could not be independently verified offline, and the supplied head-commit CI checks were still in progress.
There was a problem hiding this comment.
Àtúnwò review · ✅ No findings
Reviewed f819d61
The change updates mise-action consistently across all workflows and keeps CodeQL initialization and analysis pinned to the same updated commit. Upstream action internals and tag-to-SHA mappings were not independently verifiable offline, and several supplied CI checks were still in progress.
There was a problem hiding this comment.
Àtúnwò review · ✅ No findings
Reviewed c58a3b6
Updates mise-action pins across all three workflows and keeps CodeQL init and analyze pinned to the same newer commit. Upstream action implementations and tag mappings could not be independently verified offline; supplied CI shows repository checks succeeded while Java, conformance, and CodeQL jobs remain in progress.
Groups three action updates into one change:
github/codeql-action/initandgithub/codeql-action/analyze4.38.3 → 4.39.1, together. Updated one at a time, init and analyze run different CodeQL versions and the Java CodeQL job fails; both now pin the same commit (9b32540, thev4.39.1tag).jdx/mise-action5.1.1 → 5.2.5 in all workflows (6612f0e, thev5.2.5tag).Checked:
mise run check:repopasses (actionlint, zizmor and the other repository checks); both pinned SHAs were confirmed against the upstream tags.Replaces #22, #24 and #25.
Àtúnwò: ✅ No findings · Reviewed
c58a3b6Àtúnwò Review: 0 findings; 0 critical; 0 fixed; 0 dismissed