From 6fc205a93b3b7930d4b8db49a9ec90feb242e95a Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 27 Feb 2023 09:34:34 -0300 Subject: [PATCH] chore(deps): bump github/codeql-action from 2.2.4 to 2.2.5 (#3808) Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.2.4 to 2.2.5. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/github/codeql-action/commit/32dc499307d133bb5085bae78498c0ac2cf762d5"><code>32dc499</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/github/codeql-action/issues/1547">#1547</a> from github/update-v2.2.5-237a258d2</li> <li><a href="https://github.com/github/codeql-action/commit/b742728ac2fdf24c19cef5b5beb54704934fc0e9"><code>b742728</code></a> Update changelog for v2.2.5</li> <li><a href="https://github.com/github/codeql-action/commit/237a258d2b2dcc0e10abc0ba52e79b541372c151"><code>237a258</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/github/codeql-action/issues/1543">#1543</a> from github/alexet/update-2.12.3</li> <li><a href="https://github.com/github/codeql-action/commit/5972e6d72e403daf6fd352296998c6a14b8beda2"><code>5972e6d</code></a> Fix lib file</li> <li><a href="https://github.com/github/codeql-action/commit/164027e6823210502b1a80d5b427fdcacd4595e5"><code>164027e</code></a> Fix bundle versions</li> <li><a href="https://github.com/github/codeql-action/commit/3dde1f3512c540f34867ccaa89ccfce5e6cca0d7"><code>3dde1f3</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/github/codeql-action/issues/1540">#1540</a> from cklin/expect-discarded-cache</li> <li><a href="https://github.com/github/codeql-action/commit/d7d7567b0e57447f40b6b3cf55ff3c47e8e772b5"><code>d7d7567</code></a> Unit tests for optimizeForLastQueryRun</li> <li><a href="https://github.com/github/codeql-action/commit/0e4e857babbcd9bdfce7a3652b09525a544835a2"><code>0e4e857</code></a> Set optimizeForLastQueryRun on last run</li> <li><a href="https://github.com/github/codeql-action/commit/08d1f21d4fc549072b37a01b4f7ba801d0184d56"><code>08d1f21</code></a> Calculate customQueryIndices early</li> <li><a href="https://github.com/github/codeql-action/commit/f3bd25eefa631530105ad5b101cb1683bd2e3d68"><code>f3bd25e</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/github/codeql-action/issues/1544">#1544</a> from github/aeisenberg/clean-cache</li> <li>Additional commits viewable in <a href="https://github.com/github/codeql-action/compare/17573ee1cc1b9d061760f3a006fc4aac4f944fd5...32dc499307d133bb5085bae78498c0ac2cf762d5">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/codeql.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index c411220ed..cb311b51a 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -20,6 +20,6 @@ jobs: with: go-version: '>=1.20.1' cache: true - - uses: github/codeql-action/init@17573ee1cc1b9d061760f3a006fc4aac4f944fd5 # v2 - - uses: github/codeql-action/autobuild@17573ee1cc1b9d061760f3a006fc4aac4f944fd5 # v2 - - uses: github/codeql-action/analyze@17573ee1cc1b9d061760f3a006fc4aac4f944fd5 # v2 + - uses: github/codeql-action/init@32dc499307d133bb5085bae78498c0ac2cf762d5 # v2 + - uses: github/codeql-action/autobuild@32dc499307d133bb5085bae78498c0ac2cf762d5 # v2 + - uses: github/codeql-action/analyze@32dc499307d133bb5085bae78498c0ac2cf762d5 # v2