chore(deps): Bump the codeql-actions group across 1 directory with 2 updates

Bumps the codeql-actions group with 2 updates in the / directory: [github/codeql-action/init](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action). Updates `github/codeql-action/init` from 4.37.9 to 4.38.0 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/cdf488f595d80d6e07e03d4674febd5ab45fa938...b96794f015dfd88f77b49b1c93e0fa7110f94c63) Updates `github/codeql-action/analyze` from 4.37.9 to 4.38.0 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/cdf488f595d80d6e07e03d4674febd5ab45fa938...b96794f015dfd88f77b49b1c93e0fa7110f94c63) --- updated-dependencies: - dependency-name: github/codeql-action/analyze dependency-version: 4.38.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: codeql-actions - dependency-name: github/codeql-action/init dependency-version: 4.38.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: codeql-actions ... Signed-off-by: dependabot[bot] <support@github.com>
2026-10-01 15:58:00 +00:00 · 2026-09-15 11:54:54 +00:00
6 changed files with 215 additions and 221 deletions
@@ -35,12 +35,12 @@ jobs:
          node-version: ${{ env.NODE_VERSION }}
      -
        name: Initialize CodeQL
-        uses: github/codeql-action/init@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9
+        uses: github/codeql-action/init@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4.38.0
        with:
          languages: javascript-typescript
          build-mode: none
      -
        name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9
+        uses: github/codeql-action/analyze@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4.38.0
        with:
          category: "/language:javascript-typescript"
@@ -216,7 +216,7 @@ Apache License

 The following npm package may be included in this product:

- - @docker/actions-toolkit@0.102.0
+ - @docker/actions-toolkit@0.100.0

 This package contains the following license:

@@ -1792,7 +1792,7 @@ SOFTWARE.

 The following npm package may be included in this product:

- - js-yaml@5.4.2
+ - js-yaml@5.4.1

 This package contains the following license:

@@ -2092,7 +2092,6 @@ The following npm packages may be included in this product:

 - jackspeak@3.4.3
 - minimatch@10.2.5
- - minimatch@10.2.6

 These packages each contain the following license:

@@ -3288,11 +3287,12 @@ USE OR OTHER DEALINGS IN THE SOFTWARE.

 -----------

-The following npm package may be included in this product:
+The following npm packages may be included in this product:

+ - brace-expansion@1.1.18
 - brace-expansion@2.0.2

-This package contains the following license:
+These packages each contain the following license:

 MIT License

@@ -3752,12 +3752,11 @@ THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLI

 -----------

-The following npm packages may be included in this product:
+The following npm package may be included in this product:

- - brace-expansion@5.0.12
 - brace-expansion@5.0.6

-These packages each contain the following license:
+This package contains the following license:

 MIT License

@@ -4140,8 +4139,10 @@ PERFORMANCE OF THIS SOFTWARE.
 The following npm packages may be included in this product:

 - isexe@2.0.0
+ - minimatch@3.1.5
 - once@1.4.0
 - semver@7.7.3
+ - semver@7.8.1
 - semver@7.8.5
 - which@2.0.2
 - wrappy@1.0.2
@@ -4260,7 +4261,7 @@ THE SOFTWARE.

 The following npm package may be included in this product:

- - csv-parse@7.0.3
+ - csv-parse@7.0.2

 This package contains the following license:

@@ -4905,13 +4906,13 @@ THE SOFTWARE.
 The following npm packages may be included in this product:

 - @actions/artifact@6.2.1
- - @actions/cache@6.3.0
+ - @actions/cache@6.2.0
 - @actions/core@3.0.0
 - @actions/core@3.0.1
 - @actions/exec@3.0.0
 - @actions/github@9.0.0
 - @actions/github@9.1.1
- - @actions/glob@0.7.0
+ - @actions/glob@0.6.1
 - @actions/io@3.0.2
 - @actions/tool-cache@4.0.0

@@ -5007,6 +5008,7 @@ THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLI

 The following npm packages may be included in this product:

+ - concat-map@0.0.1
 - minimist@1.2.6
 - minimist@1.2.8
 - wordwrap@1.0.0
@@ -25,7 +25,7 @@
  "packageManager": "yarn@4.15.0",
  "dependencies": {
    "@actions/core": "^3.0.1",
-    "@docker/actions-toolkit": "0.102.0",
+    "@docker/actions-toolkit": "0.100.0",
    "handlebars": "^4.7.9"
  },
  "devDependencies": {
@@ -34,20 +34,20 @@ __metadata:
  languageName: node
  linkType: hard

-"@actions/cache@npm:^6.3.0":
-  version: 6.3.0
-  resolution: "@actions/cache@npm:6.3.0"
+"@actions/cache@npm:^6.2.0":
+  version: 6.2.0
+  resolution: "@actions/cache@npm:6.2.0"
  dependencies:
    "@actions/core": "npm:^3.0.1"
    "@actions/exec": "npm:^3.0.0"
-    "@actions/glob": "npm:^0.7.0"
+    "@actions/glob": "npm:^0.6.1"
    "@actions/http-client": "npm:^4.0.1"
    "@actions/io": "npm:^3.0.2"
-    "@azure/core-rest-pipeline": "npm:~1.23.0"
-    "@azure/storage-blob": "npm:~12.31.0"
+    "@azure/core-rest-pipeline": "npm:^1.23.0"
+    "@azure/storage-blob": "npm:^12.31.0"
    "@protobuf-ts/runtime-rpc": "npm:^2.11.1"
-    semver: "npm:^7.8.5"
-  checksum: 10/3c81ba707401599944af64c22406b336e1302bb6d04ca3c5525c65629bd48063eccda40864750c5832b7bdc462f6e6cdb1df734983815c89d1cd4bb2b41a548f
+    semver: "npm:^7.7.4"
+  checksum: 10/b2b3d219d3458b6b7e8f47ff6a83a0566f0b3cd5b257e307636d2147f892e595ce8cecbc0675590a57d0eb4d4d73564d08d28753baa50934ad59a65cbee2d8fa
  languageName: node
  linkType: hard

@@ -110,13 +110,13 @@ __metadata:
  languageName: node
  linkType: hard

-"@actions/glob@npm:^0.7.0":
-  version: 0.7.0
-  resolution: "@actions/glob@npm:0.7.0"
+"@actions/glob@npm:^0.6.1":
+  version: 0.6.1
+  resolution: "@actions/glob@npm:0.6.1"
  dependencies:
    "@actions/core": "npm:^3.0.0"
-    minimatch: "npm:^10.2.5"
-  checksum: 10/6fda1034a5e71db90776cce7ef298d15b77e82d2edd613b074efa3e8c59dc45527137d94ff7c6ef7a5a9c270f227b4b2b8c3312696599546ffe8497981a82ac0
+    minimatch: "npm:^3.0.4"
+  checksum: 10/343ca2ef8343fd5488fe277dc268b84017bb8b0c5e352215c4ce7181d07c86f0e1951b97e273b5a133a39596a6a8f1a5f06dbc87214fc440d729d3f03daa3b61
  languageName: node
  linkType: hard

@@ -262,7 +262,7 @@ __metadata:
  languageName: node
  linkType: hard

-"@azure/core-rest-pipeline@npm:~1.23.0":
+"@azure/core-rest-pipeline@npm:^1.23.0":
  version: 1.23.0
  resolution: "@azure/core-rest-pipeline@npm:1.23.0"
  dependencies:
@@ -336,7 +336,7 @@ __metadata:
  languageName: node
  linkType: hard

-"@azure/storage-blob@npm:^12.30.0, @azure/storage-blob@npm:~12.31.0":
+"@azure/storage-blob@npm:^12.30.0, @azure/storage-blob@npm:^12.31.0":
  version: 12.31.0
  resolution: "@azure/storage-blob@npm:12.31.0"
  dependencies:
@@ -437,12 +437,12 @@ __metadata:
  languageName: node
  linkType: hard

-"@docker/actions-toolkit@npm:0.102.0":
-  version: 0.102.0
-  resolution: "@docker/actions-toolkit@npm:0.102.0"
+"@docker/actions-toolkit@npm:0.100.0":
+  version: 0.100.0
+  resolution: "@docker/actions-toolkit@npm:0.100.0"
  dependencies:
    "@actions/artifact": "npm:^6.2.1"
-    "@actions/cache": "npm:^6.3.0"
+    "@actions/cache": "npm:^6.2.0"
    "@actions/core": "npm:^3.0.1"
    "@actions/exec": "npm:^3.0.0"
    "@actions/github": "npm:^9.1.1"
@@ -453,16 +453,16 @@ __metadata:
    "@sigstore/tuf": "npm:^5.0.0"
    "@sigstore/verify": "npm:^4.1.2"
    async-retry: "npm:^1.3.3"
-    csv-parse: "npm:^7.0.3"
+    csv-parse: "npm:^7.0.2"
    gunzip-maybe: "npm:^1.4.2"
    handlebars: "npm:^4.7.9"
    he: "npm:^1.2.0"
-    js-yaml: "npm:^5.4.2"
+    js-yaml: "npm:^5.4.1"
    jwt-decode: "npm:^4.0.0"
    semver: "npm:^7.8.5"
    tar-stream: "npm:^3.2.1"
    tmp: "npm:^0.2.7"
-  checksum: 10/7f7687cf54e3f1cec336791601c4f700f8dc09340f89842d65b824d52c30ca9b114c4df214ccd272f5d9d027d90609d95942db53e667d815b08a9ba55d9ab572
+  checksum: 10/74eaa1afb1887ed2974e403870205889844d42eb527550309819fd24b80484b92ebf95ba4ee01eef607b66acd655a8457fc25a6d27ff2f81e842705ff98b1976
  languageName: node
  linkType: hard

@@ -2463,15 +2463,6 @@ __metadata:
  languageName: node
  linkType: hard

-"brace-expansion@npm:^5.0.8":
-  version: 5.0.12
-  resolution: "brace-expansion@npm:5.0.12"
-  dependencies:
-    balanced-match: "npm:^4.0.2"
-  checksum: 10/65b550f1836e3b43f512f12afbc3be96616eee5c353e16d70181b7dffec8c08beabffb51d69a3bbdb27d675840725cbab025fda9d10716b5cda7dd864dc7bc4a
-  languageName: node
-  linkType: hard
-
 "browserify-zlib@npm:^0.1.4":
  version: 0.1.4
  resolution: "browserify-zlib@npm:0.1.4"
@@ -2786,10 +2777,10 @@ __metadata:
  languageName: node
  linkType: hard

-"csv-parse@npm:^7.0.3":
-  version: 7.0.3
-  resolution: "csv-parse@npm:7.0.3"
-  checksum: 10/98d80273b47603cbf754f4b75e7ea769ea63eb83fa18e4c92061e64b3575694eb98151100ddbb907670e7210ef7eac594ef850ecd3f23119062eeb8d9a2e2684
+"csv-parse@npm:^7.0.2":
+  version: 7.0.2
+  resolution: "csv-parse@npm:7.0.2"
+  checksum: 10/66158491d25b2070908c6d28130c1d439bec0e0d1ab3fad372973909e573bcc85a46ca317ae410f0178157f272112e3741b164aaf850d8241128c30ea2137670
  languageName: node
  linkType: hard

@@ -2850,7 +2841,7 @@ __metadata:
  resolution: "docker-build-push@workspace:."
  dependencies:
    "@actions/core": "npm:^3.0.1"
-    "@docker/actions-toolkit": "npm:0.102.0"
+    "@docker/actions-toolkit": "npm:0.100.0"
    "@eslint/js": "npm:^9.39.3"
    "@types/node": "npm:^24.11.0"
    "@typescript-eslint/eslint-plugin": "npm:^8.56.1"
@@ -4021,14 +4012,14 @@ __metadata:
  languageName: node
  linkType: hard

-"js-yaml@npm:^5.4.2":
-  version: 5.4.2
-  resolution: "js-yaml@npm:5.4.2"
+"js-yaml@npm:^5.4.1":
+  version: 5.4.1
+  resolution: "js-yaml@npm:5.4.1"
  dependencies:
    argparse: "npm:^2.0.1"
  bin:
    js-yaml: bin/js-yaml.mjs
-  checksum: 10/f2461abd1d6268fb226733f0a0e0aa48004bb824116e3dfa75f1a1279001936343b672066dfecdb852ac3ca883452706c383a760aa90430cb68ba395aa2cbc84
+  checksum: 10/6fff9ee00bd59aeb7e1484b4281f5e927b117cbfbf3ffa6c0fef0c58519317eb61527e93c4aa70f417709229bc1eeed63cba773913577a64405975a72fba7180
  languageName: node
  linkType: hard

@@ -4345,16 +4336,7 @@ __metadata:
  languageName: node
  linkType: hard

-"minimatch@npm:^10.2.5":
-  version: 10.2.6
-  resolution: "minimatch@npm:10.2.6"
-  dependencies:
-    brace-expansion: "npm:^5.0.8"
-  checksum: 10/a5e43f7c57d6061a77da320b42aa35ffff826030cf67c83c0eee47a26ede4d66486935881492b968c609bf27a7d48cc4b9f54b2806643cd8fb792fcf9240cc1b
-  languageName: node
-  linkType: hard
-
-"minimatch@npm:^3.1.2":
+"minimatch@npm:^3.0.4, minimatch@npm:^3.1.2":
  version: 3.1.5
  resolution: "minimatch@npm:3.1.5"
  dependencies:
@@ -5359,6 +5341,15 @@ __metadata:
  languageName: node
  linkType: hard

+"semver@npm:^7.7.4":
+  version: 7.8.1
+  resolution: "semver@npm:7.8.1"
+  bin:
+    semver: bin/semver.js
+  checksum: 10/3244f6c4cb3f8126fea0426d353829ed4967e41e1f4696337c6fdcad87426466fe2badaf49d7dc85849acfc496ea0599432a4aecc33802d2d774e723acfa30e6
+  languageName: node
+  linkType: hard
+
 "semver@npm:^7.8.5":
  version: 7.8.5
  resolution: "semver@npm:7.8.5"