You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Upcoming breaking change: CodeQL version 2.21.2 and earlier were discontinued on 24 September 2026 alongside GitHub Enterprise Server 3.17, and will be unsupported by the next minor release of the CodeQL Action. Added a deprecation warning for customers using these versions of CodeQL. #4188
Update default CodeQL bundle version to 2.27.2. #4203
Fixed a bug where the decision of whether to use a per-language bundle did not account for custom configurations that reference queries outside of compiled CodeQL packs. This issue was caught during internal testing and did not affect any customer repositories. We will resume the roll out of per-language bundles in the coming weeks. #4184
Fixes the template-injection pattern in input handling (#51, by @nbuckwalt).
Also adds docs/adr/ — the reasoning behind this action: why it exists, what it inherited from apache/flink and ShubhamTatvamasi, what it deliberately does not do, and what is still open.
No behaviour changes. The swap-storage default change ships in the next release.
The benchmark workflow updates ORAS to v2.0.2. The CodeQL and scorecard workflows update CodeQL actions to v4.38.3. The release workflow updates the disk-space action to v1.3.2.
No actionable merge-blocking risk was identified in these action pin updates.
Pre-merge checks: 5
Check name
Status
Explanation
Title check
The title clearly identifies the patch updates to GitHub Actions.
Description check
The description clearly lists the action updates, versions, release notes, and Renovate configuration. It does not use the template headings or link a ticket, but it provides the required change and r…
Docstring Coverage
No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentat…
Linked Issues check
Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check
Check skipped because no linked issues were found for this pull request.
Full details: Description check
Explanation
The description clearly lists the action updates, versions, release notes, and Renovate configuration. It does not use the template headings or link a ticket, but it provides the required change and rationale information.
Full details: Docstring Coverage
Explanation
No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentation-only edits and deletions within surviving functions are included; unchanged diff context and fully deleted functions are excluded. Analyzed 0 functions across 0 files. (4 skipped: 4 unsupported.)
Finishing Touches
🧪 Generate unit tests (beta)
Commit to this branch
Create a new PR
Warning
Some tools did not complete. Review the errors below.
actionlint (1.7.12)
.github/workflows/release.yaml
/usr/bin/shellcheck --norc -f json -x --shell bash -e SC1091,SC2194,SC2050,SC2153,SC2154,SC2157,SC2043 - did not run successfully while checking script at line:185,col:9: /usr/bin/shellcheck exited with status 1 but stdout was empty. stderr: "shellcheck: src/ShellCheck/Analytics.hs:4009:5-93: Non-exhaustive patterns in function checkCmd\n\n"
Comment @coderabbitai help to get the list of available commands.
Routine Renovate bot bump of three GitHub Actions patch versions across four CI workflow files; bot authorship, XS size, and zero security-sensitive changes keep risk low, with a slight elevation from CI_WORKFLOW_CHANGED and benchmark.yaml historical fix/revert churn.
[protected-path].github/workflows/benchmark.yaml, .github/workflows/codeql.yaml, .github/workflows/release.yaml, .github/workflows/scorecard.yml — All 4 changed files are under .github/, a protected path. The PR has no linked issue to justify modifying governance/infrastructure files. Human approval is required for protected-path changes regardless of context.
Labels: PR updates GitHub Actions dependency versions across CI workflow files.
Flags with carried forward coverage won't be shown. Click here to find out more.
🚀 New features to boost your workflow:
❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
This branch has not been deployed
No deployments
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
![fullsend-ai-review[bot]](https://avatars.githubusercontent.com/in/3478501?s=60&v=4){kind=small}
fullsend-ai-review
Bot
added
github_actions
This PR contains the following updates:
v4.38.2→v4.38.3v1.3.1→v1.3.2v2.0.1→v2.0.2v2.0.3Release Notes
github/codeql-action
v4.38.3Compare Source
jlumbroso/free-disk-space
v1.3.2: — security fix and the decision recordsCompare Source
Fixes the template-injection pattern in input handling (#51, by @nbuckwalt).
Also adds
docs/adr/— the reasoning behind this action: why it exists, what it inherited fromapache/flinkandShubhamTatvamasi, what it deliberately does not do, and what is still open.No behaviour changes. The
swap-storagedefault change ships in the next release.oras-project/setup-oras
v2.0.2Compare Source
Highlights
What's Changed
New Contributors
Full Changelog: oras-project/setup-oras@v2.0.1...v2.0.2
Configuration
📅 Schedule: (UTC)
* 0-3 * * *)🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.