Merge releases/v4 into releases/v3 by github-actions[bot] · Pull Request #4095 · github/codeql-action

github-actions · 2026-08-13T13:31:41Z

Merging ff2f1c6 into releases/v3.

Conductor for this PR is @mbg.

Contains the following pull requests:

Please do the following:

Ensure the CHANGELOG displays the correct version and date.
Ensure the CHANGELOG includes all relevant, user-facing changes since the last release.
Check that there are not any unexpected commits being merged into the releases/v3 branch.
Ensure the docs team is aware of any documentation changes that need to be released.
Approve running the full set of PR checks if you have not pushed any changes.
Approve and merge this PR. Make sure Create a merge commit is selected rather than Squash and merge or Rebase and merge.

Mergeback v4.37.6 refs/heads/releases/v4 into main

Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 1.1.16 to 1.1.18. - [Release notes](https://github.com/juliangruber/brace-expansion/releases) - [Commits](juliangruber/brace-expansion@v1.1.16...v1.1.18) --- updated-dependencies: - dependency-name: brace-expansion dependency-version: 1.1.18 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

…pansion-1.1.18 Bump brace-expansion from 1.1.16 to 1.1.18

Bumps the npm-minor group with 1 update in the / directory: [globals](https://github.com/sindresorhus/globals). Updates `globals` from 17.7.0 to 17.8.0 - [Release notes](https://github.com/sindresorhus/globals/releases) - [Commits](sindresorhus/globals@v17.7.0...v17.8.0) --- updated-dependencies: - dependency-name: globals dependency-version: 17.8.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps the actions-minor group with 1 update in the /.github/workflows directory: [actions/setup-java](https://github.com/actions/setup-java). Updates `actions/setup-java` from 5.6.0 to 5.7.0 - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](actions/setup-java@03ad4de...b6effb0) --- updated-dependencies: - dependency-name: actions/setup-java dependency-version: 5.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-minor ... Signed-off-by: dependabot[bot] <support@github.com>

…thub/workflows/actions-minor-6bc1927ba3 Bump actions/setup-java from 5.6.0 to 5.7.0 in /.github/workflows in the actions-minor group across 1 directory

…r-b3aad9cfa5 Bump globals from 17.7.0 to 17.8.0 in the npm-minor group across 1 directory

Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 5.2.2 to 5.2.3. - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@5.2.2...5.2.3) --- updated-dependencies: - dependency-name: js-yaml dependency-version: 5.2.3 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

…5.2.3 Bump js-yaml from 5.2.2 to 5.2.3

This feature has been rolled out to 100% and therefore the default behaviour for some time.

…rceChecksV2 Promote `OverlayAnalysisResourceChecksV2`

Bump undici from ^6.24.0 to ^6.28.0

Update default bundle to 2.26.3

Bumps the npm-minor group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@octokit/core](https://github.com/octokit/core.js) | `7.0.6` | `7.0.7` | | [@octokit/plugin-retry](https://github.com/octokit/plugin-retry.js) | `8.1.0` | `8.1.1` | | [@types/semver](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/semver) | `7.7.1` | `7.8.0` | | [eslint-plugin-github](https://github.com/github/eslint-plugin-github) | `6.1.1` | `6.1.2` | | [globals](https://github.com/sindresorhus/globals) | `17.8.0` | `17.9.0` | | [nock](https://github.com/nock/nock) | `14.0.16` | `14.0.17` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.65.0` | `8.66.0` | | [tsx](https://github.com/privatenumber/tsx) | `4.23.1` | `4.23.8` | Updates `@octokit/core` from 7.0.6 to 7.0.7 - [Release notes](https://github.com/octokit/core.js/releases) - [Commits](octokit/core.js@v7.0.6...v7.0.7) Updates `@octokit/plugin-retry` from 8.1.0 to 8.1.1 - [Release notes](https://github.com/octokit/plugin-retry.js/releases) - [Commits](octokit/plugin-retry.js@v8.1.0...v8.1.1) Updates `@types/semver` from 7.7.1 to 7.8.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/semver) Updates `eslint-plugin-github` from 6.1.1 to 6.1.2 - [Release notes](https://github.com/github/eslint-plugin-github/releases) - [Commits](github/eslint-plugin-github@v6.1.1...v6.1.2) Updates `globals` from 17.8.0 to 17.9.0 - [Release notes](https://github.com/sindresorhus/globals/releases) - [Commits](sindresorhus/globals@v17.8.0...v17.9.0) Updates `nock` from 14.0.16 to 14.0.17 - [Release notes](https://github.com/nock/nock/releases) - [Changelog](https://github.com/nock/nock/blob/main/CHANGELOG.md) - [Commits](nock/nock@v14.0.16...v14.0.17) Updates `typescript-eslint` from 8.65.0 to 8.66.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.66.0/packages/typescript-eslint) Updates `tsx` from 4.23.1 to 4.23.8 - [Release notes](https://github.com/privatenumber/tsx/releases) - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs) - [Commits](privatenumber/tsx@v4.23.1...v4.23.8) --- updated-dependencies: - dependency-name: "@octokit/core" dependency-version: 7.0.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor - dependency-name: "@octokit/plugin-retry" dependency-version: 8.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor - dependency-name: "@types/semver" dependency-version: 7.8.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor - dependency-name: eslint-plugin-github dependency-version: 6.1.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor - dependency-name: globals dependency-version: 17.9.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor - dependency-name: nock dependency-version: 14.0.17 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor - dependency-name: typescript-eslint dependency-version: 8.66.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor - dependency-name: tsx dependency-version: 4.23.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor ... Signed-off-by: dependabot[bot] <support@github.com>

Make a `Logger` available to `getCodeQLForCmd`

…r-0aa561e04e Bump the npm-minor group across 1 directory with 8 updates

Merge main into releases/v4

This reverts commit f6580d2.

This reverts commit b4d147f.

….7-ff2f1c621

github-actions Bot and others added 30 commits August 4, 2026 13:34

Update changelog and version after v4.37.6

37bdbde

Rebuild

7d82f11

Merge pull request #4073 from github/mergeback/v4.37.6-to-main-5595ccaf

fad141f

Mergeback v4.37.6 refs/heads/releases/v4 into main

Rebuild

c5995f5

Merge pull request #4075 from github/dependabot/npm_and_yarn/brace-ex…

6a90bf1

…pansion-1.1.18 Bump brace-expansion from 1.1.16 to 1.1.18

Rebuild

bdf3971

Merge pull request #4077 from github/dependabot/github_actions/dot-gi…

8ebf109

…thub/workflows/actions-minor-6bc1927ba3 Bump actions/setup-java from 5.6.0 to 5.7.0 in /.github/workflows in the actions-minor group across 1 directory

Merge pull request #4076 from github/dependabot/npm_and_yarn/npm-mino…

7d9249f

…r-b3aad9cfa5 Bump globals from 17.7.0 to 17.8.0 in the npm-minor group across 1 directory

Rebuild

b5225f2

Trigger workflows

7131139

Merge pull request #4082 from github/dependabot/npm_and_yarn/js-yaml-…

b672c70

…5.2.3 Bump js-yaml from 5.2.2 to 5.2.3

Promote OverlayAnalysisResourceChecksV2

c205ff6

This feature has been rolled out to 100% and therefore the default behaviour for some time.

Remove v2 from test title

f47bb7b

Merge pull request #4083 from github/mbg/features/remove-overlayResou…

c16c0f3

…rceChecksV2 Promote `OverlayAnalysisResourceChecksV2`

Bump undici from ^6.24.0 to ^6.28.0

54a0846

Update default bundle to codeql-bundle-v2.26.3

0e8a5d9

Add changelog note

ca1c972

Merge pull request #4084 from github/navntoft/bump-undici

6f0220e

Bump undici from ^6.24.0 to ^6.28.0

Make logger available to getCodeQLForCmd

dc1b98a

Merge pull request #4085 from github/update-bundle/codeql-bundle-v2.26.3

1f87aed

Update default bundle to 2.26.3

Drop logger from databaseInitCluster in interface

38055a3

Rebuild

b4d8a54

Merge pull request #4086 from github/mbg/thread-action-state-to-codeql

9310334

Make a `Logger` available to `getCodeQLForCmd`

Merge pull request #4087 from github/dependabot/npm_and_yarn/npm-mino…

be7a3db

…r-0aa561e04e Bump the npm-minor group across 1 directory with 8 updates

Update changelog for v4.37.7

951a133

mbg and others added 6 commits August 13, 2026 14:28

Merge pull request #4093 from github/update-v4.37.7-be7a3dbb8

ff2f1c6

Merge main into releases/v4

Revert "Update version and changelog for v3.37.6"

8b2ec47

This reverts commit f6580d2.

Revert "Rebuild"

4da5eae

This reverts commit b4d147f.

Merge remote-tracking branch 'origin/releases/v4' into backport-v3.37…

272e6d3

….7-ff2f1c621

Update version and changelog for v3.37.7

5f47b57

Rebuild

2a073c8

github-actions Bot requested a review from a team as a code owner August 13, 2026 13:31

github-actions Bot assigned mbg Aug 13, 2026

github-actions Bot added the size/M Should be of average difficulty to review label Aug 13, 2026

mbg approved these changes Aug 13, 2026

View reviewed changes

mbg enabled auto-merge August 13, 2026 13:46

mbg merged commit f371297 into releases/v3 Aug 13, 2026
228 checks passed

mbg deleted the backport-v3.37.7-ff2f1c621 branch August 13, 2026 13:57

Navigation Menu

Uh oh!

Merge releases/v4 into releases/v3 - #4095

Merge releases/v4 into releases/v3#4095
mbg merged 36 commits into
releases/v3from
backport-v3.37.7-ff2f1c621

github-actions Bot commented Aug 13, 2026 •

edited by mbg

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Uh oh!

Conversation

github-actions Bot commented Aug 13, 2026 • edited by mbg Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

github-actions Bot commented Aug 13, 2026 •

edited by mbg

Loading