ci: keep the CodeQL actions on one version (#2133)

mirror of https://github.com/maputnik/editor.git synced 2026-09-27 06:33:44 +00:00

CodeQL has been failing on main since #2105: `init` is on v4.37.9 while
`autobuild` and `analyze` are on v4.37.8, and the action rejects a
config written by a newer version ("Loaded a configuration file for
version '4.37.9', but running version '4.37.8'"). Dependabot bumps the
three steps in separate pull requests, so #2119 and #2120 each still
fail on their own and main has gone red at every partial bump (08-19,
08-28, today).

This moves the two steps to v4.37.9, the same commit dependabot picked
in #2119 and #2120, and groups `github/codeql-action*` in dependabot so
the three bump together from now on. Supersedes #2119 and #2120.

## Launch Checklist

 - [x] Briefly describe the changes in this PR.
- [ ] Add an entry to `CHANGELOG.md` under the `## main` section (not
applicable, CI only).

This commit is contained in:

John Carmack

2026-09-04 23:55:48 +03:00

committed by

GitHub

parent d1ddd91172

commit 01bd751d5f

2 changed files with 6 additions and 2 deletions

									
										.github/dependabot.yml
									
		+4
		
												View File
												
				@@ -31,6 +31,10 @@ updates:

				    directory: "/"

				    schedule:

				      interval: "daily"

				    groups:

				      codeql-action:

				        patterns:

				          - "github/codeql-action*"

				    cooldown:

				      default-days: 3

				      # no semver support for github-actions