[UPDATE] (deps): Bump github/codeql-action from 4.31.2 to 4.31.6 in /.github/workflows #503

dependabot · 2025-12-02T03:08:50Z

Bumps github/codeql-action from 4.31.2 to 4.31.6.

Release notes

Sourced from github/codeql-action's releases.

v4.31.6

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.6 - 01 Dec 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v4.31.5

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.5 - 24 Nov 2025

Update default CodeQL bundle version to 2.23.6. #3321

See the full CHANGELOG.md for more information.

v4.31.4

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.4 - 18 Nov 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v4.31.3

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.3 - 13 Nov 2025

CodeQL Action v3 will be deprecated in December 2026. The Action now logs a warning for customers who are running v3 but could be running v4. For more information, see Upcoming deprecation of CodeQL Action v3.

Update default CodeQL bundle version to 2.23.5. #3288

See the full CHANGELOG.md for more information.

Changelog

Sourced from github/codeql-action's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

4.31.6 - 01 Dec 2025

No user facing changes.

4.31.5 - 24 Nov 2025

Update default CodeQL bundle version to 2.23.6. #3321

4.31.4 - 18 Nov 2025

No user facing changes.

4.31.3 - 13 Nov 2025

CodeQL Action v3 will be deprecated in December 2026. The Action now logs a warning for customers who are running v3 but could be running v4. For more information, see Upcoming deprecation of CodeQL Action v3.

Update default CodeQL bundle version to 2.23.5. #3288

4.31.2 - 30 Oct 2025

No user facing changes.

4.31.1 - 30 Oct 2025

The add-snippets input has been removed from the analyze action. This input has been deprecated since CodeQL Action 3.26.4 in August 2024 when this removal was announced.

4.31.0 - 24 Oct 2025

Bump minimum CodeQL bundle version to 2.17.6. #3223

When SARIF files are uploaded by the analyze or upload-sarif actions, the CodeQL Action automatically performs post-processing steps to prepare the data for the upload. Previously, these post-processing steps were only performed before an upload took place. We are now changing this so that the post-processing steps will always be performed, even when the SARIF files are not uploaded. This does not change anything for the upload-sarif action. For analyze, this may affect Advanced Setup for CodeQL users who specify a value other than always for the upload input. #3222

4.30.9 - 17 Oct 2025

Update default CodeQL bundle version to 2.23.3. #3205

Experimental: A new setup-codeql action has been added which is similar to init, except it only installs the CodeQL CLI and does not initialize a database. Do not use this in production as it is part of an internal experiment and subject to change at any time. #3204

4.30.8 - 10 Oct 2025

No user facing changes.

4.30.7 - 06 Oct 2025

[v4+ only] The CodeQL Action now runs on Node.js v24. #3169

... (truncated)

Commits

fe4161a Merge pull request #3336 from github/update-v4.31.6-ecec1f887
88c2ab5 Update changelog for v4.31.6
ecec1f8 Merge pull request #3335 from github/mbg/ci/run-codeql-on-all-prs
23da732 Merge pull request #3334 from github/kaspersv/overlay-minor-comments
f7abc74 Remove branch filter for PR event in CodeQL workflow
32ada5e Merge branch 'main' into kaspersv/overlay-minor-comments
75b2f49 Merge pull request #3333 from github/kaspersv/overlay-no-resource-checks-option
f036b1c Merge branch 'main' into kaspersv/overlay-no-resource-checks-option
58c5954 Add comment to runnerSupportsOverlayAnalysis
b02fa13 Order feature flags alphabetically
Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.31.2 to 4.31.6. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@0499de3...fe4161a) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.31.6 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>

coderabbitai · 2025-12-02T03:08:58Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

deepsource-io · 2025-12-02T03:09:02Z

Here's the code health analysis summary for commits 4f30d61..4d9cc59. View details on DeepSource ↗.

Analysis Summary

Analyzer	Status	Summary	Link
Python	✅ Success		View Check ↗
Test coverage	✅ Success		View Check ↗

Code Coverage Report

Metric	Aggregate	Python
Branch Coverage	88.1%	88.1%
Composite Coverage	92.2%	92.2%
Line Coverage	92.5%	92.5%

💡 If you’re a repository administrator, you can configure the quality gates from the settings.

codecov · 2025-12-02T03:14:00Z

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

reactive-firewall

👍 LGTM;

☑️ Specifically, the version bump is approved!

Additional comments:

security impact of some changes may require additional review

Changes in file .github/workflows/codeql-analysis.yml: * refactor to fix code identification

dependabot · 2025-12-04T00:20:15Z

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

sonarqubecloud · 2025-12-04T00:20:46Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

dependabot bot assigned reactive-firewall Dec 2, 2025

dependabot bot added this to the Code Style Technical Debt milestone Dec 2, 2025

dependabot bot added the CI Continuous Integration Tooling label Dec 2, 2025

github-project-automation bot added this to Multicast Project Dec 2, 2025

dependabot bot added Configs Improvements or additions to configuration Duplicate This issue or pull request already exists GitHub Anything Meta Testing Something can be verified labels Dec 2, 2025

dependabot bot temporarily deployed to Experimenting December 2, 2025 03:08 Inactive

github-project-automation bot moved this to To do in Multicast Project Dec 2, 2025

github-actions bot added the Linter Any linter tool or setting file enhancements label Dec 2, 2025

dependabot bot temporarily deployed to Experimenting December 2, 2025 03:09 Inactive

dependabot bot mentioned this pull request Dec 2, 2025

[UPDATE] (deps): Bump github/codeql-action from 4.31.2 to 4.31.5 in /.github/workflows #499

Closed

dependabot bot temporarily deployed to Experimenting December 2, 2025 03:10 Inactive

reactive-firewall reviewed Dec 3, 2025

View reviewed changes

[PATCH] Fix regression for considering actions as non-typescript

4d9cc59

Changes in file .github/workflows/codeql-analysis.yml: * refactor to fix code identification

reactive-firewall closed this Dec 4, 2025

reactive-firewall merged commit 49289f0 into master Dec 4, 2025

reactive-firewall temporarily deployed to Experimenting December 4, 2025 00:20 — with GitHub Actions Inactive

github-project-automation bot moved this from To do to Done in Multicast Project Dec 4, 2025

dependabot bot deleted the dependabot/github_actions/dot-github/workflows/master/github/codeql-action-4.31.6 branch December 4, 2025 00:20

reactive-firewall temporarily deployed to Experimenting December 4, 2025 00:20 — with GitHub Actions Inactive

reactive-firewall temporarily deployed to Experimenting December 4, 2025 00:22 — with GitHub Actions Inactive

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

[UPDATE] (deps): Bump github/codeql-action from 4.31.2 to 4.31.6 in /.github/workflows #503

[UPDATE] (deps): Bump github/codeql-action from 4.31.2 to 4.31.6 in /.github/workflows #503

Uh oh!

dependabot bot commented on behalf of github Dec 2, 2025

Uh oh!

coderabbitai bot commented Dec 2, 2025

Review skipped

Uh oh!

deepsource-io bot commented Dec 2, 2025 •

edited

Loading

Analysis Summary

Code Coverage Report

Uh oh!

codecov bot commented Dec 2, 2025

Uh oh!

reactive-firewall left a comment

Uh oh!

dependabot bot commented on behalf of github Dec 4, 2025

Uh oh!

sonarqubecloud bot commented Dec 4, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

[UPDATE] (deps): Bump github/codeql-action from 4.31.2 to 4.31.6 in /.github/workflows #503

[UPDATE] (deps): Bump github/codeql-action from 4.31.2 to 4.31.6 in /.github/workflows #503

Uh oh!

Conversation

dependabot bot commented on behalf of github Dec 2, 2025

v4.31.6

CodeQL Action Changelog

4.31.6 - 01 Dec 2025

v4.31.5

CodeQL Action Changelog

4.31.5 - 24 Nov 2025

v4.31.4

CodeQL Action Changelog

4.31.4 - 18 Nov 2025

v4.31.3

CodeQL Action Changelog

4.31.3 - 13 Nov 2025

CodeQL Action Changelog

[UNRELEASED]

4.31.6 - 01 Dec 2025

4.31.5 - 24 Nov 2025

4.31.4 - 18 Nov 2025

4.31.3 - 13 Nov 2025

4.31.2 - 30 Oct 2025

4.31.1 - 30 Oct 2025

4.31.0 - 24 Oct 2025

4.30.9 - 17 Oct 2025

4.30.8 - 10 Oct 2025

4.30.7 - 06 Oct 2025

Uh oh!

coderabbitai bot commented Dec 2, 2025

Review skipped

Uh oh!

deepsource-io bot commented Dec 2, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Analysis Summary

Code Coverage Report

Uh oh!

codecov bot commented Dec 2, 2025

Codecov Report

Uh oh!

reactive-firewall left a comment

Choose a reason for hiding this comment

👍 LGTM;

Uh oh!

dependabot bot commented on behalf of github Dec 4, 2025

Uh oh!

sonarqubecloud bot commented Dec 4, 2025

Quality Gate passed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

deepsource-io bot commented Dec 2, 2025 •

edited

Loading