Skip to content

build(deps-dev): bump org.assertj:assertj-core from 3.24.2 to 3.25.0 - #1407

Merged
lvca merged 1 commit into
mainfrom
dependabot/maven/org.assertj-assertj-core-3.25.0
Jan 1, 2024
Merged

build(deps-dev): bump org.assertj:assertj-core from 3.24.2 to 3.25.0#1407
lvca merged 1 commit into
mainfrom
dependabot/maven/org.assertj-assertj-core-3.25.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jan 1, 2024

Copy link
Copy Markdown
Contributor

Bumps org.assertj:assertj-core from 3.24.2 to 3.25.0.

Release notes

Sourced from org.assertj:assertj-core's releases.

v3.25.0

🧩 Binary Compatibility

The release is binary compatible with the previous minor version.

🚫 Deprecated

Core

  • Deprecate the following date/time related assertions in favor of isCloseTo:
    • isEqualToIgnoringHours
    • isEqualToIgnoringMinutes
    • isEqualToIgnoringSeconds
    • isEqualToIgnoringMillis
    • isEqualToIgnoringNanos
    • isInSameHourAs
    • isInSameMinuteAs
    • isInSameSecondAs
  • Deprecate asList in favor of asInstanceOf #3138

✨ New Features

Core

  • Add Descriptable#describedAs(Supplier<String>)

  • Add isInThePast and isInTheFuture to LocalDate assertions #2933

  • Add isInThePast and isInTheFuture to the missing Java 8 date/time types #2947

  • Add isRecord and isNotRecord to Class assertions #2968

  • Add hasNullValue and doesNotHaveNullValue to AtomicReferenceAssert #2969

  • Add asBoolean|Byte|Short|Int|Long|Float|Double to String assertions #2580

  • Add hasRecordComponents to Class assertions #2995

  • Add getters for field path in ComparisonDifference #3007

  • Allow to compare enum and string fields in the recursive comparison #2616

  • Provide value when assertThatThrownBy / thenThrownBy fail #3043

  • Add isSealed and isNotSealed to Class assertions #3080

  • Add assertThatCharSequence to disambiguate Groovy's GString #3132

  • Change the way the properties are collected using the Class.getMethods() API instead of iterating the class hierarchy using Class.declaredMethods() #3135

  • Add default constructor for RecursiveComparator #3206

  • Add isPrimitive and isNotPrimitive to Class assertions #2722

  • Add anyOf(ThrowingConsumer...) and allOf(ThrowingConsumer...) #3219

    What was written as:

    assertThat(elements)
      .extracting(Element::getProperty)
      .allSatisfy(p -> assertThat(p).satisfiesAnyOf(
          p1 -> assertThat(p1).isNull(),

... (truncated)

Commits
  • 2c1c083 [maven-release-plugin] prepare release assertj-build-3.25.0
  • c44129d Move flatten-maven-plugin version to separate property
  • 31cefaf Apply flatten-maven-plugin to assertj-core and assertj-guava (#3311)
  • 435d183 chore(deps-dev): bump org.testng:testng from 7.8.0 to 7.9.0 (#3312)
  • e044604 chore(deps-dev): bump nl.jqno.equalsverifier:equalsverifier from 3.15.4 to 3....
  • 1ea4379 chore(deps-dev): bump com.fasterxml.jackson.core:jackson-databind from 2.16.0...
  • e841b32 chore(deps): bump org.apache.maven.plugins:maven-compiler-plugin from 3.11.0 ...
  • 5ea3760 ci: update workflows to Java 21 (#3191)
  • e91cb7b ci: upload only report for latest release binary compatibility
  • 79cc530 test: avoid split packages in Kotlin integration tests
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.assertj:assertj-core](https://github.com/assertj/assertj) from 3.24.2 to 3.25.0.
- [Release notes](https://github.com/assertj/assertj/releases)
- [Commits](assertj/assertj@assertj-build-3.24.2...assertj-build-3.25.0)

---
updated-dependencies:
- dependency-name: org.assertj:assertj-core
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java labels Jan 1, 2024
@lvca
lvca merged commit 7694b05 into main Jan 1, 2024
@lvca lvca added this to the 23.12.1 milestone Jan 1, 2024
@lvca lvca self-assigned this Jan 1, 2024
@dependabot
dependabot Bot deleted the dependabot/maven/org.assertj-assertj-core-3.25.0 branch January 1, 2024 06:22
mergify Bot added a commit that referenced this pull request Jun 7, 2026
Bumps [neo4j-driver](https://github.com/neo4j/neo4j-javascript-driver) from 6.0.1 to 6.1.0.
Release notes

*Sourced from [neo4j-driver's releases](https://github.com/neo4j/neo4j-javascript-driver/releases).*

> v6.1.0
> ------
>
> Introduces the full, stabilized version of Object Mapping, as well as very simple retries that should make `Session.run()` handle rate-limiting on Aura more gracefully. Alongside a number of minor fixes.
>
> #### ⭐ New Features
>
> ---
>
> * Stabilized Record Object Mapping and introduced Parameter Object Mapping. [#1362](https://redirect.github.com/neo4j/neo4j-javascript-driver/pull/1362) [#1407](https://redirect.github.com/neo4j/neo4j-javascript-driver/pull/1407) NOTE: A usage guide can be found in the PR description on [#1407](https://redirect.github.com/neo4j/neo4j-javascript-driver/pull/1407)
> * Add single-shot retry for Idempotent errors on `Session.run()`, these will currently only trigger on errors caused by Aura rate-limiting. [#1404](https://redirect.github.com/neo4j/neo4j-javascript-driver/pull/1404)
>
> #### 🔧 Fixes
>
> ---
>
> * Correct TypeScript exports for Record Object Mapping. [#1359](https://redirect.github.com/neo4j/neo4j-javascript-driver/pull/1359)
> * Improve error message for starting work on a busy session. [#1363](https://redirect.github.com/neo4j/neo4j-javascript-driver/pull/1363)
> * Fix error handling for unexpected errors in Authentication Provider. [#1366](https://redirect.github.com/neo4j/neo4j-javascript-driver/pull/1366)
> * Fix issue causing SNI deprecation warnings when correcting to an IP. [#1369](https://redirect.github.com/neo4j/neo4j-javascript-driver/pull/1369)
> * Eagerly send discard on close if connection is waiting to pull more, solves issue related to corner-case missuse that could make the driver release an unclean connection to the pool. [#1403](https://redirect.github.com/neo4j/neo4j-javascript-driver/pull/1403)
> * Do not mark Result as consumed when `Result.keys()` is awaited. [#1402](https://redirect.github.com/neo4j/neo4j-javascript-driver/pull/1402)
>
> #### 🧹 Housekeeping
>
> ---
>
> * Improve `Session.run()` docs with warnings on the auto-commit nature of the function. [#1389](https://redirect.github.com/neo4j/neo4j-javascript-driver/pull/1389) [#1390](https://redirect.github.com/neo4j/neo4j-javascript-driver/pull/1390)
> * Update docs reference to dbms.setTXMetaData which is renamed to tx.setMetaData.[#1408](https://redirect.github.com/neo4j/neo4j-javascript-driver/pull/1408)


Commits

* [`81f7d82`](neo4j/neo4j-javascript-driver@81f7d82) bump deno to 6.1.0 ([#1421](https://redirect.github.com/neo4j/neo4j-javascript-driver/issues/1421))
* [`a06109c`](neo4j/neo4j-javascript-driver@a06109c) Pre-release changes to Object Mapping ([#1407](https://redirect.github.com/neo4j/neo4j-javascript-driver/issues/1407))
* [`2595d67`](neo4j/neo4j-javascript-driver@2595d67) Update docs reference to dbms.setTXMetaData ([#1408](https://redirect.github.com/neo4j/neo4j-javascript-driver/issues/1408))
* [`18c681a`](neo4j/neo4j-javascript-driver@18c681a) Result.close() send discard directly if waiting for more ([#1403](https://redirect.github.com/neo4j/neo4j-javascript-driver/issues/1403))
* [`a98f9c5`](neo4j/neo4j-javascript-driver@a98f9c5) Add retries for idempotent errors on Session.run() ([#1404](https://redirect.github.com/neo4j/neo4j-javascript-driver/issues/1404))
* [`d884171`](neo4j/neo4j-javascript-driver@d884171) Development Dependency updates and tightening security ([#1405](https://redirect.github.com/neo4j/neo4j-javascript-driver/issues/1405))
* [`6714eba`](neo4j/neo4j-javascript-driver@6714eba) Fix error piping in gulpfile ([#1406](https://redirect.github.com/neo4j/neo4j-javascript-driver/issues/1406))
* [`2caa88a`](neo4j/neo4j-javascript-driver@2caa88a) Expand Record Object Mapping to allow Parameter Mapping ([#1362](https://redirect.github.com/neo4j/neo4j-javascript-driver/issues/1362))
* [`6357e65`](neo4j/neo4j-javascript-driver@6357e65) do not add "onCompleted" on keys observer ([#1402](https://redirect.github.com/neo4j/neo4j-javascript-driver/issues/1402))
* [`1ec186a`](neo4j/neo4j-javascript-driver@1ec186a) TestKit backend: fix BigInt serialization ([#1397](https://redirect.github.com/neo4j/neo4j-javascript-driver/issues/1397))
* Additional commits viewable in [compare view](neo4j/neo4j-javascript-driver@6.0.1...6.1.0)

Install script changes

This version modifies `prepare` script that runs during installation. Review the package contents before updating.

  
[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility\_score?dependency-name=neo4j-driver&package-manager=npm\_and\_yarn&previous-version=6.0.1&new-version=6.1.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
  
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show  ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
tae898 pushed a commit to humemai/arcadedb-embedded-python that referenced this pull request Jun 28, 2026
…rcadeData#1407)

Bumps [org.assertj:assertj-core](https://github.com/assertj/assertj) from 3.24.2 to 3.25.0.
- [Release notes](https://github.com/assertj/assertj/releases)
- [Commits](assertj/assertj@assertj-build-3.24.2...assertj-build-3.25.0)

---
updated-dependencies:
- dependency-name: org.assertj:assertj-core
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
tae898 pushed a commit to humemai/arcadedb-embedded-python that referenced this pull request Jun 28, 2026
Bumps [neo4j-driver](https://github.com/neo4j/neo4j-javascript-driver) from 6.0.1 to 6.1.0.
Release notes

*Sourced from [neo4j-driver's releases](https://github.com/neo4j/neo4j-javascript-driver/releases).*

> v6.1.0
> ------
>
> Introduces the full, stabilized version of Object Mapping, as well as very simple retries that should make `Session.run()` handle rate-limiting on Aura more gracefully. Alongside a number of minor fixes.
>
> #### ⭐ New Features
>
> ---
>
> * Stabilized Record Object Mapping and introduced Parameter Object Mapping. [ArcadeData#1362](https://redirect.github.com/neo4j/neo4j-javascript-driver/pull/1362) [ArcadeData#1407](https://redirect.github.com/neo4j/neo4j-javascript-driver/pull/1407) NOTE: A usage guide can be found in the PR description on [ArcadeData#1407](https://redirect.github.com/neo4j/neo4j-javascript-driver/pull/1407)
> * Add single-shot retry for Idempotent errors on `Session.run()`, these will currently only trigger on errors caused by Aura rate-limiting. [ArcadeData#1404](https://redirect.github.com/neo4j/neo4j-javascript-driver/pull/1404)
>
> #### 🔧 Fixes
>
> ---
>
> * Correct TypeScript exports for Record Object Mapping. [#1359](https://redirect.github.com/neo4j/neo4j-javascript-driver/pull/1359)
> * Improve error message for starting work on a busy session. [ArcadeData#1363](https://redirect.github.com/neo4j/neo4j-javascript-driver/pull/1363)
> * Fix error handling for unexpected errors in Authentication Provider. [ArcadeData#1366](https://redirect.github.com/neo4j/neo4j-javascript-driver/pull/1366)
> * Fix issue causing SNI deprecation warnings when correcting to an IP. [ArcadeData#1369](https://redirect.github.com/neo4j/neo4j-javascript-driver/pull/1369)
> * Eagerly send discard on close if connection is waiting to pull more, solves issue related to corner-case missuse that could make the driver release an unclean connection to the pool. [ArcadeData#1403](https://redirect.github.com/neo4j/neo4j-javascript-driver/pull/1403)
> * Do not mark Result as consumed when `Result.keys()` is awaited. [ArcadeData#1402](https://redirect.github.com/neo4j/neo4j-javascript-driver/pull/1402)
>
> #### 🧹 Housekeeping
>
> ---
>
> * Improve `Session.run()` docs with warnings on the auto-commit nature of the function. [ArcadeData#1389](https://redirect.github.com/neo4j/neo4j-javascript-driver/pull/1389) [ArcadeData#1390](https://redirect.github.com/neo4j/neo4j-javascript-driver/pull/1390)
> * Update docs reference to dbms.setTXMetaData which is renamed to tx.setMetaData.[ArcadeData#1408](https://redirect.github.com/neo4j/neo4j-javascript-driver/pull/1408)


Commits

* [`81f7d82`](neo4j/neo4j-javascript-driver@81f7d82) bump deno to 6.1.0 ([ArcadeData#1421](https://redirect.github.com/neo4j/neo4j-javascript-driver/issues/1421))
* [`a06109c`](neo4j/neo4j-javascript-driver@a06109c) Pre-release changes to Object Mapping ([ArcadeData#1407](https://redirect.github.com/neo4j/neo4j-javascript-driver/issues/1407))
* [`2595d67`](neo4j/neo4j-javascript-driver@2595d67) Update docs reference to dbms.setTXMetaData ([ArcadeData#1408](https://redirect.github.com/neo4j/neo4j-javascript-driver/issues/1408))
* [`18c681a`](neo4j/neo4j-javascript-driver@18c681a) Result.close() send discard directly if waiting for more ([ArcadeData#1403](https://redirect.github.com/neo4j/neo4j-javascript-driver/issues/1403))
* [`a98f9c5`](neo4j/neo4j-javascript-driver@a98f9c5) Add retries for idempotent errors on Session.run() ([ArcadeData#1404](https://redirect.github.com/neo4j/neo4j-javascript-driver/issues/1404))
* [`d884171`](neo4j/neo4j-javascript-driver@d884171) Development Dependency updates and tightening security ([ArcadeData#1405](https://redirect.github.com/neo4j/neo4j-javascript-driver/issues/1405))
* [`6714eba`](neo4j/neo4j-javascript-driver@6714eba) Fix error piping in gulpfile ([ArcadeData#1406](https://redirect.github.com/neo4j/neo4j-javascript-driver/issues/1406))
* [`2caa88a`](neo4j/neo4j-javascript-driver@2caa88a) Expand Record Object Mapping to allow Parameter Mapping ([ArcadeData#1362](https://redirect.github.com/neo4j/neo4j-javascript-driver/issues/1362))
* [`6357e65`](neo4j/neo4j-javascript-driver@6357e65) do not add "onCompleted" on keys observer ([ArcadeData#1402](https://redirect.github.com/neo4j/neo4j-javascript-driver/issues/1402))
* [`1ec186a`](neo4j/neo4j-javascript-driver@1ec186a) TestKit backend: fix BigInt serialization ([#1397](https://redirect.github.com/neo4j/neo4j-javascript-driver/issues/1397))
* Additional commits viewable in [compare view](neo4j/neo4j-javascript-driver@6.0.1...6.1.0)

Install script changes

This version modifies `prepare` script that runs during installation. Review the package contents before updating.

  
[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility\_score?dependency-name=neo4j-driver&package-manager=npm\_and\_yarn&previous-version=6.0.1&new-version=6.1.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
  
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show  ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
mergify Bot added a commit that referenced this pull request Jul 26, 2026
…updates [skip ci]

Bumps the github-actions group with 6 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `7.0.0` | `7.0.1` |
| [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) | `1.0.178` | `1.0.183` |
| [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.37.1` | `4.37.3` |
| [docker/login-action](https://github.com/docker/login-action) | `4.4.0` | `4.5.1` |
| [github/codeql-action/init](https://github.com/github/codeql-action) | `4.37.1` | `4.37.3` |
| [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.37.1` | `4.37.3` |
Updates `actions/checkout` from 7.0.0 to 7.0.1
Release notes

*Sourced from [actions/checkout's releases](https://github.com/actions/checkout/releases).*

> v7.0.1
> ------
>
> What's Changed
> --------------
>
> * skip running unsafe pr check if input is default by [`@​aiqiaoy`](https://github.com/aiqiaoy) in [actions/checkout#2518](https://redirect.github.com/actions/checkout/pull/2518)
> * trim only ascii whitespace for branch by [`@​aiqiaoy`](https://github.com/aiqiaoy) in [actions/checkout#2521](https://redirect.github.com/actions/checkout/pull/2521)
> * escape values passed to --unset by [`@​aiqiaoy`](https://github.com/aiqiaoy) in [actions/checkout#2530](https://redirect.github.com/actions/checkout/pull/2530)
> * Various dependency updates
>
> **Full Changelog**: <actions/checkout@v7...v7.0.1>


Changelog

*Sourced from [actions/checkout's changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md).*

> Changelog
> =========
>
> v7.0.1
> ------
>
> * Skip running unsafe pr check if input is default by [`@​aiqiaoy`](https://github.com/aiqiaoy) in [actions/checkout#2518](https://redirect.github.com/actions/checkout/pull/2518)
> * Trim only ascii whitespace for branch by [`@​aiqiaoy`](https://github.com/aiqiaoy) in [actions/checkout#2521](https://redirect.github.com/actions/checkout/pull/2521)
> * Escape values passed to --unset by [`@​aiqiaoy`](https://github.com/aiqiaoy) in [actions/checkout#2530](https://redirect.github.com/actions/checkout/pull/2530)
> * Various dependency updates
>
> v7.0.0
> ------
>
> * Block checking out fork PR for pull\_request\_target and workflow\_run by [`@​aiqiaoy`](https://github.com/aiqiaoy) in [actions/checkout#2454](https://redirect.github.com/actions/checkout/pull/2454)
> * Various dependency updates
>
> v6.0.3
> ------
>
> * Fix checkout init for SHA-256 repositories by [`@​yaananth`](https://github.com/yaananth) in [actions/checkout#2439](https://redirect.github.com/actions/checkout/pull/2439)
> * fix: expand merge commit SHA regex and add SHA-256 test cases by [`@​yaananth`](https://github.com/yaananth) in [actions/checkout#2414](https://redirect.github.com/actions/checkout/pull/2414)
>
> v6.0.2
> ------
>
> * Fix tag handling: preserve annotations and explicit fetch-tags by [`@​ericsciple`](https://github.com/ericsciple) in [actions/checkout#2356](https://redirect.github.com/actions/checkout/pull/2356)
>
> v6.0.1
> ------
>
> * Add worktree support for persist-credentials includeIf by [`@​ericsciple`](https://github.com/ericsciple) in [actions/checkout#2327](https://redirect.github.com/actions/checkout/pull/2327)
>
> v6.0.0
> ------
>
> * Persist creds to a separate file by [`@​ericsciple`](https://github.com/ericsciple) in [actions/checkout#2286](https://redirect.github.com/actions/checkout/pull/2286)
> * Update README to include Node.js 24 support details and requirements by [`@​salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2248](https://redirect.github.com/actions/checkout/pull/2248)
>
> v5.0.1
> ------
>
> * Port v6 cleanup to v5 by [`@​ericsciple`](https://github.com/ericsciple) in [actions/checkout#2301](https://redirect.github.com/actions/checkout/pull/2301)
>
> v5.0.0
> ------
>
> * Update actions checkout to use node 24 by [`@​salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2226](https://redirect.github.com/actions/checkout/pull/2226)
>
> v4.3.1
> ------
>
> * Port v6 cleanup to v4 by [`@​ericsciple`](https://github.com/ericsciple) in [actions/checkout#2305](https://redirect.github.com/actions/checkout/pull/2305)
>
> v4.3.0
> ------
>
> * docs: update README.md by [`@​motss`](https://github.com/motss) in [actions/checkout#1971](https://redirect.github.com/actions/checkout/pull/1971)
> * Add internal repos for checking out multiple repositories by [`@​mouismail`](https://github.com/mouismail) in [actions/checkout#1977](https://redirect.github.com/actions/checkout/pull/1977)
> * Documentation update - add recommended permissions to Readme by [`@​benwells`](https://github.com/benwells) in [actions/checkout#2043](https://redirect.github.com/actions/checkout/pull/2043)
> * Adjust positioning of user email note and permissions heading by [`@​joshmgross`](https://github.com/joshmgross) in [actions/checkout#2044](https://redirect.github.com/actions/checkout/pull/2044)
> * Update README.md by [`@​nebuk89`](https://github.com/nebuk89) in [actions/checkout#2194](https://redirect.github.com/actions/checkout/pull/2194)
> * Update CODEOWNERS for actions by [`@​TingluoHuang`](https://github.com/TingluoHuang) in [actions/checkout#2224](https://redirect.github.com/actions/checkout/pull/2224)
> * Update package dependencies by [`@​salmanmkc`](https://github.com/salmanmkc) in [actions/checkout#2236](https://redirect.github.com/actions/checkout/pull/2236)
>
> v4.2.2
> ------
>
> * `url-helper.ts` now leverages well-known environment variables by [`@​jww3`](https://github.com/jww3) in [actions/checkout#1941](https://redirect.github.com/actions/checkout/pull/1941)
> * Expand unit test coverage for `isGhes` by [`@​jww3`](https://github.com/jww3) in [actions/checkout#1946](https://redirect.github.com/actions/checkout/pull/1946)
>
> v4.2.1
> ------
>
> * Check out other refs/\* by commit if provided, fall back to ref by [`@​orhantoy`](https://github.com/orhantoy) in [actions/checkout#1924](https://redirect.github.com/actions/checkout/pull/1924)

... (truncated)


Commits

* [`3d3c42e`](actions/checkout@3d3c42e) prep v7.0.1 release ([#2531](https://redirect.github.com/actions/checkout/issues/2531))
* [`2880268`](actions/checkout@2880268) escape values passed to --unset ([#2530](https://redirect.github.com/actions/checkout/issues/2530))
* [`12cd223`](actions/checkout@12cd223) trim only ascii whitespace for branch ([#2521](https://redirect.github.com/actions/checkout/issues/2521))
* [`62661c4`](actions/checkout@62661c4) skip running unsafe pr check if input is default ([#2518](https://redirect.github.com/actions/checkout/issues/2518))
* [`e8d4307`](actions/checkout@e8d4307) Bump the minor-actions-dependencies group with 2 updates ([#2499](https://redirect.github.com/actions/checkout/issues/2499))
* [`631c942`](actions/checkout@631c942) eslint 9 ([#2474](https://redirect.github.com/actions/checkout/issues/2474))
* [`4f1f4ae`](actions/checkout@4f1f4ae) Bump actions/upload-artifact from 4 to 7 ([#2476](https://redirect.github.com/actions/checkout/issues/2476))
* [`ba09753`](actions/checkout@ba09753) Bump actions/checkout from 6 to 7 ([#2488](https://redirect.github.com/actions/checkout/issues/2488))
* [`b9e0990`](actions/checkout@b9e0990) Bump docker/login-action from 3.3.0 to 4.2.0 ([#2479](https://redirect.github.com/actions/checkout/issues/2479))
* [`e8cb398`](actions/checkout@e8cb398) Bump docker/build-push-action from 6.5.0 to 7.2.0 ([#2478](https://redirect.github.com/actions/checkout/issues/2478))
* Additional commits viewable in [compare view](actions/checkout@9c091bb...3d3c42e)
  
Updates `anthropics/claude-code-action` from 1.0.178 to 1.0.183
Release notes

*Sourced from [anthropics/claude-code-action's releases](https://github.com/anthropics/claude-code-action/releases).*

> v1.0.183
> --------
>
> **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.183>
>
> v1.0.182
> --------
>
> **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.182>
>
> v1.0.181
> --------
>
> What's Changed
> --------------
>
> * fix: share one exchanged WIF credential across spawned Claude processes by [`@​KeisukeYamashita`](https://github.com/KeisukeYamashita) in [anthropics/claude-code-action#1407](https://redirect.github.com/anthropics/claude-code-action/pull/1407)
>
> New Contributors
> ----------------
>
> * [`@​KeisukeYamashita`](https://github.com/KeisukeYamashita) made their first contribution in [anthropics/claude-code-action#1407](https://redirect.github.com/anthropics/claude-code-action/pull/1407)
>
> **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.181>
>
> v1.0.180
> --------
>
> **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.180>
>
> v1.0.179
> --------
>
> **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.179>


Commits

* [`be7b93b`](anthropics/claude-code-action@be7b93b) chore: bump Claude Code to 2.1.220 and Agent SDK to 0.3.220
* [`e0cf66d`](anthropics/claude-code-action@e0cf66d) chore: bump Claude Code to 2.1.219 and Agent SDK to 0.3.219
* [`44423bd`](anthropics/claude-code-action@44423bd) chore: bump Claude Code to 2.1.218 and Agent SDK to 0.3.218
* [`b00a341`](anthropics/claude-code-action@b00a341) fix: share one exchanged WIF credential across spawned Claude processes ([#1407](https://redirect.github.com/anthropics/claude-code-action/issues/1407))
* [`fa7e2f0`](anthropics/claude-code-action@fa7e2f0) chore: bump Claude Code to 2.1.217 and Agent SDK to 0.3.217
* [`b76a077`](anthropics/claude-code-action@b76a077) chore: bump Claude Code to 2.1.216 and Agent SDK to 0.3.216
* See full diff in [compare view](anthropics/claude-code-action@af0559e...be7b93b)
  
Updates `github/codeql-action/upload-sarif` from 4.37.1 to 4.37.3
Release notes

*Sourced from [github/codeql-action/upload-sarif's releases](https://github.com/github/codeql-action/releases).*

> v4.37.3
> -------
>
> No user facing changes.
>
> v4.37.2
> -------
>
> * The new address format for the `config-file` input that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, the `remote=` prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. [#4023](https://redirect.github.com/github/codeql-action/pull/4023)
> * The CodeQL Action can now make use of [configured private registries](https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries) in Default Setup to retrieve CodeQL configuration files from remote repositories that require authentication. This will allow customers to store their CodeQL configuration in a single repository that can then be referenced by Default Setup workflows in other repositories. We expect to roll this and other, related changes out to everyone in July. [#4007](https://redirect.github.com/github/codeql-action/pull/4007)


Changelog

*Sourced from [github/codeql-action/upload-sarif's changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md).*

> CodeQL Action Changelog
> =======================
>
> See the [releases page](https://github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs.
>
> [UNRELEASED]
> ------------
>
> * This version of the CodeQL Action adds support for the `tools` input for the `codeql-action/init` step to be specified using a `github-codeql-tools` [repository property](https://docs.github.com/en/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization). This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to `toolcache` to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for `tools` in the workflow definition always takes precedence unless the value of the repository property starts with `!`. [#4037](https://redirect.github.com/github/codeql-action/pull/4037)
>
> 4.37.3 - 22 Jul 2026
> --------------------
>
> No user facing changes.
>
> 4.37.2 - 21 Jul 2026
> --------------------
>
> * The new address format for the `config-file` input that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, the `remote=` prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. [#4023](https://redirect.github.com/github/codeql-action/pull/4023)
> * The CodeQL Action can now make use of [configured private registries](https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries) in Default Setup to retrieve CodeQL configuration files from remote repositories that require authentication. This will allow customers to store their CodeQL configuration in a single repository that can then be referenced by Default Setup workflows in other repositories. We expect to roll this and other, related changes out to everyone in July. [#4007](https://redirect.github.com/github/codeql-action/pull/4007)
>
> 4.37.1 - 16 Jul 2026
> --------------------
>
> * *Upcoming breaking change*: Add a deprecation warning for customers using CodeQL version 2.20.6 and earlier. These versions of CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and will be unsupported by the next minor release of the CodeQL Action. [#3956](https://redirect.github.com/github/codeql-action/pull/3956)
> * Update default CodeQL bundle version to [2.26.1](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.1). [#4019](https://redirect.github.com/github/codeql-action/pull/4019)
>
> 4.37.0 - 08 Jul 2026
> --------------------
>
> * Update default CodeQL bundle version to [2.26.0](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.0). [#3995](https://redirect.github.com/github/codeql-action/pull/3995)
> * In addition to the existing input format, the `config-file` input for the `codeql-action/init` step will soon support a new `[owner/]repo[@ref][:path]` format. All components except the repository name are optional. If omitted, `owner` defaults to the same owner as the repository the analysis is running for, `ref` to `main`, and `path` to `.github/codeql-action.yaml`. Support for this format ships in this version of the CodeQL Action, but will only be enabled over the coming weeks. [#3973](https://redirect.github.com/github/codeql-action/pull/3973)
>
> 4.36.3 - 01 Jul 2026
> --------------------
>
> No user facing changes.
>
> 4.36.2 - 04 Jun 2026
> --------------------
>
> * Cache CodeQL CLI version information across Actions steps. [#3943](https://redirect.github.com/github/codeql-action/pull/3943)
> * Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. [#3937](https://redirect.github.com/github/codeql-action/pull/3937)
> * Update default CodeQL bundle version to [2.25.6](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.6). [#3948](https://redirect.github.com/github/codeql-action/pull/3948)
>
> 4.36.1 - 02 Jun 2026
> --------------------
>
> No user facing changes.
>
> 4.36.0 - 22 May 2026
> --------------------
>
> * *Breaking change*: Bump the minimum required CodeQL bundle version to 2.19.4. [#3894](https://redirect.github.com/github/codeql-action/pull/3894)
> * Add support for SHA-256 Git object IDs. [#3893](https://redirect.github.com/github/codeql-action/pull/3893)
> * Update default CodeQL bundle version to [2.25.5](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.5). [#3926](https://redirect.github.com/github/codeql-action/pull/3926)
>
> 4.35.5 - 15 May 2026
> --------------------
>
> * We have improved how the JavaScript bundles for the CodeQL Action are generated to avoid duplication across bundles and reduce the size of the repository by around 70%. This should have no effect on the runtime behaviour of the CodeQL Action. [#3899](https://redirect.github.com/github/codeql-action/pull/3899)

... (truncated)


Commits

* [`e4fba86`](github/codeql-action@e4fba86) Merge pull request [#4031](https://redirect.github.com/github/codeql-action/issues/4031) from github/update-v4.37.3-72f6a9da0
* [`fb50ab5`](github/codeql-action@fb50ab5) Update changelog for v4.37.3
* [`72f6a9d`](github/codeql-action@72f6a9d) Merge pull request [#4030](https://redirect.github.com/github/codeql-action/issues/4030) from github/mbg/fix/no-proxy
* [`3b5ee58`](github/codeql-action@3b5ee58) Use default `request` options instead of `undefined`
* [`bfb6be4`](github/codeql-action@bfb6be4) Merge pull request [#4028](https://redirect.github.com/github/codeql-action/issues/4028) from github/mergeback/v4.37.2-to-main-e0647621
* [`526ab84`](github/codeql-action@526ab84) Rebuild
* [`d6217b9`](github/codeql-action@d6217b9) Update changelog and version after v4.37.2
* [`e064762`](github/codeql-action@e064762) Merge pull request [#4027](https://redirect.github.com/github/codeql-action/issues/4027) from github/update-v4.37.2-385bcdc5a
* [`e0faed8`](github/codeql-action@e0faed8) Add a couple of change notes
* [`73aad0e`](github/codeql-action@73aad0e) Update changelog for v4.37.2
* Additional commits viewable in [compare view](github/codeql-action@7188fc3...e4fba86)
  
Updates `docker/login-action` from 4.4.0 to 4.5.1
Release notes

*Sourced from [docker/login-action's releases](https://github.com/docker/login-action/releases).*

> v4.5.1
> ------
>
> * Support `dhi.io` as Docker Hub OIDC registry by [`@​crazy-max`](https://github.com/crazy-max) in [docker/login-action#1054](https://redirect.github.com/docker/login-action/pull/1054)
>
> **Full Changelog**: <docker/login-action@v4.5.0...v4.5.1>
>
> v4.5.0
> ------
>
> * [Docker Hub OIDC](https://github.com/docker/login-action#docker-hub) login support by [`@​crazy-max`](https://github.com/crazy-max) in [docker/login-action#1048](https://redirect.github.com/docker/login-action/pull/1048)
> * Bump `@​aws-sdk/client-ecr` and `@​aws-sdk/client-ecr-public` to 3.1091.0 in [docker/login-action#1037](https://redirect.github.com/docker/login-action/pull/1037)
> * Bump `@​docker/actions-toolkit` from 0.92.0 to 0.94.0 in [docker/login-action#1044](https://redirect.github.com/docker/login-action/pull/1044) [docker/login-action#1050](https://redirect.github.com/docker/login-action/pull/1050)
> * Bump brace-expansion from 1.1.13 to 1.1.16 in [docker/login-action#1046](https://redirect.github.com/docker/login-action/pull/1046)
> * Bump js-yaml from 5.2.0 to 5.2.1 in [docker/login-action#1038](https://redirect.github.com/docker/login-action/pull/1038)
>
> **Full Changelog**: <docker/login-action@v4.4.0...v4.5.0>


Commits

* [`abd2ef4`](docker/login-action@abd2ef4) Merge pull request [#1055](https://redirect.github.com/docker/login-action/issues/1055) from crazy-max/test-registry-auth-oidc
* [`d49d3a9`](docker/login-action@d49d3a9) Merge pull request [#1054](https://redirect.github.com/docker/login-action/issues/1054) from crazy-max/oidc-missing-dhi
* [`b58b17c`](docker/login-action@b58b17c) test: cover Docker Hub OIDC with registry-auth
* [`be646c2`](docker/login-action@be646c2) chore: update generated content
* [`d77c059`](docker/login-action@d77c059) support dhi.io as Docker Hub OIDC registry
* [`06fb636`](docker/login-action@06fb636) Merge pull request [#1037](https://redirect.github.com/docker/login-action/issues/1037) from docker/dependabot/npm\_and\_yarn/aws-sdk-dependen...
* [`a8bc953`](docker/login-action@a8bc953) [dependabot skip] chore: update generated content
* [`f54b901`](docker/login-action@f54b901) build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 up...
* [`77f18f6`](docker/login-action@77f18f6) Merge pull request [#1049](https://redirect.github.com/docker/login-action/issues/1049) from docker/dependabot/github\_actions/codeql-actions...
* [`ec0bf28`](docker/login-action@ec0bf28) Merge pull request [#1050](https://redirect.github.com/docker/login-action/issues/1050) from docker/dependabot/npm\_and\_yarn/docker/actions-t...
* Additional commits viewable in [compare view](docker/login-action@af1e73f...abd2ef4)
  
Updates `github/codeql-action/init` from 4.37.1 to 4.37.3
Release notes

*Sourced from [github/codeql-action/init's releases](https://github.com/github/codeql-action/releases).*

> v4.37.3
> -------
>
> No user facing changes.
>
> v4.37.2
> -------
>
> * The new address format for the `config-file` input that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, the `remote=` prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. [#4023](https://redirect.github.com/github/codeql-action/pull/4023)
> * The CodeQL Action can now make use of [configured private registries](https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries) in Default Setup to retrieve CodeQL configuration files from remote repositories that require authentication. This will allow customers to store their CodeQL configuration in a single repository that can then be referenced by Default Setup workflows in other repositories. We expect to roll this and other, related changes out to everyone in July. [#4007](https://redirect.github.com/github/codeql-action/pull/4007)


Changelog

*Sourced from [github/codeql-action/init's changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md).*

> CodeQL Action Changelog
> =======================
>
> See the [releases page](https://github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs.
>
> [UNRELEASED]
> ------------
>
> * This version of the CodeQL Action adds support for the `tools` input for the `codeql-action/init` step to be specified using a `github-codeql-tools` [repository property](https://docs.github.com/en/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization). This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to `toolcache` to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for `tools` in the workflow definition always takes precedence unless the value of the repository property starts with `!`. [#4037](https://redirect.github.com/github/codeql-action/pull/4037)
>
> 4.37.3 - 22 Jul 2026
> --------------------
>
> No user facing changes.
>
> 4.37.2 - 21 Jul 2026
> --------------------
>
> * The new address format for the `config-file` input that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, the `remote=` prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. [#4023](https://redirect.github.com/github/codeql-action/pull/4023)
> * The CodeQL Action can now make use of [configured private registries](https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries) in Default Setup to retrieve CodeQL configuration files from remote repositories that require authentication. This will allow customers to store their CodeQL configuration in a single repository that can then be referenced by Default Setup workflows in other repositories. We expect to roll this and other, related changes out to everyone in July. [#4007](https://redirect.github.com/github/codeql-action/pull/4007)
>
> 4.37.1 - 16 Jul 2026
> --------------------
>
> * *Upcoming breaking change*: Add a deprecation warning for customers using CodeQL version 2.20.6 and earlier. These versions of CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and will be unsupported by the next minor release of the CodeQL Action. [#3956](https://redirect.github.com/github/codeql-action/pull/3956)
> * Update default CodeQL bundle version to [2.26.1](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.1). [#4019](https://redirect.github.com/github/codeql-action/pull/4019)
>
> 4.37.0 - 08 Jul 2026
> --------------------
>
> * Update default CodeQL bundle version to [2.26.0](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.0). [#3995](https://redirect.github.com/github/codeql-action/pull/3995)
> * In addition to the existing input format, the `config-file` input for the `codeql-action/init` step will soon support a new `[owner/]repo[@ref][:path]` format. All components except the repository name are optional. If omitted, `owner` defaults to the same owner as the repository the analysis is running for, `ref` to `main`, and `path` to `.github/codeql-action.yaml`. Support for this format ships in this version of the CodeQL Action, but will only be enabled over the coming weeks. [#3973](https://redirect.github.com/github/codeql-action/pull/3973)
>
> 4.36.3 - 01 Jul 2026
> --------------------
>
> No user facing changes.
>
> 4.36.2 - 04 Jun 2026
> --------------------
>
> * Cache CodeQL CLI version information across Actions steps. [#3943](https://redirect.github.com/github/codeql-action/pull/3943)
> * Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. [#3937](https://redirect.github.com/github/codeql-action/pull/3937)
> * Update default CodeQL bundle version to [2.25.6](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.6). [#3948](https://redirect.github.com/github/codeql-action/pull/3948)
>
> 4.36.1 - 02 Jun 2026
> --------------------
>
> No user facing changes.
>
> 4.36.0 - 22 May 2026
> --------------------
>
> * *Breaking change*: Bump the minimum required CodeQL bundle version to 2.19.4. [#3894](https://redirect.github.com/github/codeql-action/pull/3894)
> * Add support for SHA-256 Git object IDs. [#3893](https://redirect.github.com/github/codeql-action/pull/3893)
> * Update default CodeQL bundle version to [2.25.5](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.5). [#3926](https://redirect.github.com/github/codeql-action/pull/3926)
>
> 4.35.5 - 15 May 2026
> --------------------
>
> * We have improved how the JavaScript bundles for the CodeQL Action are generated to avoid duplication across bundles and reduce the size of the repository by around 70%. This should have no effect on the runtime behaviour of the CodeQL Action. [#3899](https://redirect.github.com/github/codeql-action/pull/3899)

... (truncated)


Commits

* [`e4fba86`](github/codeql-action@e4fba86) Merge pull request [#4031](https://redirect.github.com/github/codeql-action/issues/4031) from github/update-v4.37.3-72f6a9da0
* [`fb50ab5`](github/codeql-action@fb50ab5) Update changelog for v4.37.3
* [`72f6a9d`](github/codeql-action@72f6a9d) Merge pull request [#4030](https://redirect.github.com/github/codeql-action/issues/4030) from github/mbg/fix/no-proxy
* [`3b5ee58`](github/codeql-action@3b5ee58) Use default `request` options instead of `undefined`
* [`bfb6be4`](github/codeql-action@bfb6be4) Merge pull request [#4028](https://redirect.github.com/github/codeql-action/issues/4028) from github/mergeback/v4.37.2-to-main-e0647621
* [`526ab84`](github/codeql-action@526ab84) Rebuild
* [`d6217b9`](github/codeql-action@d6217b9) Update changelog and version after v4.37.2
* [`e064762`](github/codeql-action@e064762) Merge pull request [#4027](https://redirect.github.com/github/codeql-action/issues/4027) from github/update-v4.37.2-385bcdc5a
* [`e0faed8`](github/codeql-action@e0faed8) Add a couple of change notes
* [`73aad0e`](github/codeql-action@73aad0e) Update changelog for v4.37.2
* Additional commits viewable in [compare view](github/codeql-action@7188fc3...e4fba86)
  
Updates `github/codeql-action/analyze` from 4.37.1 to 4.37.3
Release notes

*Sourced from [github/codeql-action/analyze's releases](https://github.com/github/codeql-action/releases).*

> v4.37.3
> -------
>
> No user facing changes.
>
> v4.37.2
> -------
>
> * The new address format for the `config-file` input that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, the `remote=` prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. [#4023](https://redirect.github.com/github/codeql-action/pull/4023)
> * The CodeQL Action can now make use of [configured private registries](https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries) in Default Setup to retrieve CodeQL configuration files from remote repositories that require authentication. This will allow customers to store their CodeQL configuration in a single repository that can then be referenced by Default Setup workflows in other repositories. We expect to roll this and other, related changes out to everyone in July. [#4007](https://redirect.github.com/github/codeql-action/pull/4007)


Changelog

*Sourced from [github/codeql-action/analyze's changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md).*

> CodeQL Action Changelog
> =======================
>
> See the [releases page](https://github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs.
>
> [UNRELEASED]
> ------------
>
> * This version of the CodeQL Action adds support for the `tools` input for the `codeql-action/init` step to be specified using a `github-codeql-tools` [repository property](https://docs.github.com/en/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization). This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to `toolcache` to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for `tools` in the workflow definition always takes precedence unless the value of the repository property starts with `!`. [#4037](https://redirect.github.com/github/codeql-action/pull/4037)
>
> 4.37.3 - 22 Jul 2026
> --------------------
>
> No user facing changes.
>
> 4.37.2 - 21 Jul 2026
> --------------------
>
> * The new address format for the `config-file` input that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, the `remote=` prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. [#4023](https://redirect.github.com/github/codeql-action/pull/4023)
> * The CodeQL Action can now make use of [configured private registries](https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries) in Default Setup to retrieve CodeQL configuration files from remote repositories that require authentication. This will allow customers to store their CodeQL configuration in a single repository that can then be referenced by Default Setup workflows in other repositories. We expect to roll this and other, related changes out to everyone in July. [#4007](https://redirect.github.com/github/codeql-action/pull/4007)
>
> 4.37.1 - 16 Jul 2026
> --------------------
>
> * *Upcoming breaking change*: Add a deprecation warning for customers using CodeQL version 2.20.6 and earlier. These versions of CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and will be unsupported by the next minor release of the CodeQL Action. [#3956](https://redirect.github.com/github/codeql-action/pull/3956)
> * Update default CodeQL bundle version to [2.26.1](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.1). [#4019](https://redirect.github.com/github/codeql-action/pull/4019)
>
> 4.37.0 - 08 Jul 2026
> --------------------
>
> * Update default CodeQL bundle version to [2.26.0](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.0). [#3995](https://redirect.github.com/github/codeql-action/pull/3995)
> * In addition to the existing input format, the `config-file` input for the `codeql-action/init` step will soon support a new `[owner/]repo[@ref][:path]` format. All components except the repository name are optional. If omitted, `owner` defaults to the same owner as the repository the analysis is running for, `ref` to `main`, and `path` to `.github/codeql-action.yaml`. Support for this format ships in this version of the CodeQL Action, but will only be enabled over the coming weeks. [#3973](https://redirect.github.com/github/codeql-action/pull/3973)
>
> 4.36.3 - 01 Jul 2026
> --------------------
>
> No user facing changes.
>
> 4.36.2 - 04 Jun 2026
> --------------------
>
> * Cache CodeQL CLI version information across Actions steps. [#3943](https://redirect.github.com/github/codeql-action/pull/3943)
> * Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. [#3937](https://redirect.github.com/github/codeql-action/pull/3937)
> * Update default CodeQL bundle version to [2.25.6](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.6). [#3948](https://redirect.github.com/github/codeql-action/pull/3948)
>
> 4.36.1 - 02 Jun 2026
> --------------------
>
> No user facing changes.
>
> 4.36.0 - 22 May 2026
> --------------------
>
> * *Breaking change*: Bump the minimum required CodeQL bundle version to 2.19.4. [#3894](https://redirect.github.com/github/codeql-action/pull/3894)
> * Add support for SHA-256 Git object IDs. [#3893](https://redirect.github.com/github/codeql-action/pull/3893)
> * Update default CodeQL bundle version to [2.25.5](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.5). [#3926](https://redirect.github.com/github/codeql-action/pull/3926)
>
> 4.35.5 - 15 May 2026
> --------------------
>
> * We have improved how the JavaScript bundles for the CodeQL Action are generated to avoid duplication across bundles and reduce the size of the repository by around 70%. This should have no effect on the runtime behaviour of the CodeQL Action. [#3899](https://redirect.github.com/github/codeql-action/pull/3899)

... (truncated)


Commits

* [`e4fba86`](github/codeql-action@e4fba86) Merge pull request [#4031](https://redirect.github.com/github/codeql-action/issues/4031) from github/update-v4.37.3-72f6a9da0
* [`fb50ab5`](github/codeql-action@fb50ab5) Update changelog for v4.37.3
* [`72f6a9d`](github/codeql-action@72f6a9d) Merge pull request [#4030](https://redirect.github.com/github/codeql-action/issues/4030) from github/mbg/fix/no-proxy
* [`3b5ee58`](github/codeql-action@3b5ee58) Use default `request` options instead of `undefined`
* [`bfb6be4`](github/codeql-action@bfb6be4) Merge pull request [#4028](https://redirect.github.com/github/codeql-action/issues/4028) from github/mergeback/v4.37.2-to-main-e0647621
* [`526ab84`](github/codeql-action@526ab84) Rebuild
* [`d6217b9`](github/codeql-action@d6217b9) Update changelog and version after v4.37.2
* [`e064762`](github/codeql-action@e064762) Merge pull request [#4027](https://redirect.github.com/github/codeql-action/issues/4027) from github/update-v4.37.2-385bcdc5a
* [`e0faed8`](github/codeql-action@e0faed8) Add a couple of change notes
* [`73aad0e`](github/codeql-action@73aad0e) Update changelog for v4.37.2
* Additional commits viewable in [compare view](github/codeql-action@7188fc3...e4fba86)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant