Skip to content

Update and group CodeQL actions - #43

Merged
Xingdi (Eric) Yuan (xingdi-eric-yuan) merged 2 commits into
mainfrom
fix/group-codeql-updates
Sep 29, 2026
Merged

Xingdi (Eric) Yuan (xingdi-eric-yuan) merged 2 commits into
mainfrom
fix/group-codeql-updates

Conversation

@xingdi-eric-yuan

@xingdi-eric-yuan Xingdi (Eric) Yuan (xingdi-eric-yuan) commented Sep 29, 2026 •

Copy link
Copy Markdown
Collaborator

Summary

  • Update CodeQL init and analyze together to v4.38.0, pinned to the same verified commit.
  • Group github/codeql-action/* Dependabot version updates so the stages move together.
  • Add a regression check requiring synchronized, immutable CodeQL action pins.
  • Give Windows test jobs a 15-minute timeout to avoid premature cancellation; Linux retains 10 minutes.

Supersedes #34 and #35.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Keep the Linux timeout at ten minutes and give Windows fifteen minutes after the existing suite hit the ten-minute job limit.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@xingdi-eric-yuan
Xingdi (Eric) Yuan (xingdi-eric-yuan) merged commit 03441bf into main Sep 29, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant