Skip to content

chore(deps-dev): bump jest from 30.3.0 to 30.4.2 in /webapp - #831

Merged
mergify[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/webapp/jest-30.4.2
Jun 4, 2026
Merged

mergify[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/webapp/jest-30.4.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 10, 2026 •

Copy link
Copy Markdown
Contributor

Bumps jest from 30.3.0 to 30.4.2.

Release notes

Sourced from jest's releases.

v30.4.2

Fixes

  • [jest-runtime] Fix named imports from CJS modules whose module.exports is a function with own-property exports (#16150)

Full Changelog: jestjs/jest@v30.4.1...v30.4.2

v30.4.1

Features

  • [jest-config, jest-core, jest-runner, jest-schemas, jest-types] Allow custom runner configuration options via tuple format ['runner-path', {options}] (#16141)

Fixes

  • [jest-runtime] Align CJS-from-ESM default export with Node: module.exports is always the ESM default, __esModule unwrapping is no longer applied (#16143)

Full Changelog: jestjs/jest@v30.4.0...v30.4.1

v30.4.0

Big release! πŸ˜€

Main feature is a rewrite of our custom runtime in preparation for stabilisation of native support of ESM. As part of that work require(esm) module is now supported on Node 24.9+ (still requires --experimental-vm-modules like before).

In addition we now support fake timers for the recently released Temporal API in Node v26.

React 19 is also supported properly in pretty-format, meaning snapshots of React components now work like they should.

Due to all the changes, there might be regressions that snuck in. Please report them!

Full list of changes below

Features

  • [babel-jest] Support collecting coverage from .mts, .cts (and other) files (#15994)
  • [jest-circus, jest-cli, jest-config, jest-core, jest-jasmine2, jest-types] Add --collect-tests flag to discover and list tests without executing them (#16006)
  • [jest-config, jest-runner, jest-worker] Add workerGracefulExitTimeout config option to control how long workers are given to exit before being force-killed (#15984)
  • [jest-config] Add support for jest.config.mts as a valid configuration file (#16005)
  • [jest-config, jest-core, jest-reporters, jest-runner] verbose and silent can now be set per-project; the project-level value overrides the global value for that project's tests (#16133)
  • [@jest/fake-timers] Accept Temporal.Duration in jest.advanceTimersByTime() and jest.advanceTimersByTimeAsync() (#16128)
  • [@jest/fake-timers] Accept Temporal.Instant and Temporal.ZonedDateTime in jest.setSystemTime() and useFakeTimers({now}) (#16128)
  • [@jest/fake-timers] Support faking Temporal.Now.* (#16131)
  • [jest-mock] Add clearMocksOnScope(scope) on ModuleMocker for clearing every mock function exposed on a scope object (#16088)
  • [jest-resolve] Add canResolveSync() on Resolver so callers can detect when a user-configured resolver only exports an async hook (#16064)
  • [jest-runtime] Use synchronous evaluate() for ES modules without top-level await on Node versions that support it (v24.9+), and prefer the synchronous transform path when a sync transformer is configured (#16062)
  • [jest-runtime] Support require() of ES modules on Node v24.9+ (#16074)
  • [jest-runtime] Validate TC39 import attributes (with { type: 'json' }) on ESM imports (#16127)
  • [@jest/transform] Add canTransformSync(filename) on ScriptTransformer so callers can pick the sync vs async transform path (#16062)
  • [jest-util] Add isError helper (#16076)

... (truncated)

Changelog

Sourced from jest's changelog.

30.4.2

Fixes

  • [jest-runtime] Fix named imports from CJS modules whose module.exports is a function with own-property exports (#16150)

30.4.1

Features

  • [jest-config, jest-core, jest-runner, jest-schemas, jest-types] Allow custom runner configuration options via tuple format ['runner-path', {options}] (#16141)

Fixes

  • [jest-runtime] Align CJS-from-ESM default export with Node: module.exports is always the ESM default, __esModule unwrapping is no longer applied (#16143)

30.4.0

Features

  • [babel-jest] Support collecting coverage from .mts, .cts (and other) files (#15994)
  • [jest-circus, jest-cli, jest-config, jest-core, jest-jasmine2, jest-types] Add --collect-tests flag to discover and list tests without executing them (#16006)
  • [jest-config, jest-runner, jest-worker] Add workerGracefulExitTimeout config option to control how long workers are given to exit before being force-killed (#15984)
  • [jest-config] Add support for jest.config.mts as a valid configuration file (#16005)
  • [jest-config, jest-core, jest-reporters, jest-runner] verbose and silent can now be set per-project; the project-level value overrides the global value for that project's tests (#16133)
  • [@jest/fake-timers] Accept Temporal.Duration in jest.advanceTimersByTime() and jest.advanceTimersByTimeAsync() (#16128)
  • [@jest/fake-timers] Accept Temporal.Instant and Temporal.ZonedDateTime in jest.setSystemTime() and useFakeTimers({now}) (#16128)
  • [@jest/fake-timers] Support faking Temporal.Now.* (#16131)
  • [jest-mock] Add clearMocksOnScope(scope) on ModuleMocker for clearing every mock function exposed on a scope object (#16088)
  • [jest-resolve] Add canResolveSync() on Resolver so callers can detect when a user-configured resolver only exports an async hook (#16064)
  • [jest-runtime] Use synchronous evaluate() for ES modules without top-level await on Node versions that support it (v24.9+), and prefer the synchronous transform path when a sync transformer is configured (#16062)
  • [jest-runtime] Support require() of ES modules on Node v24.9+ (#16074)
  • [jest-runtime] Validate TC39 import attributes (with { type: 'json' }) on ESM imports (#16127)
  • [@jest/transform] Add canTransformSync(filename) on ScriptTransformer so callers can pick the sync vs async transform path (#16062)
  • [jest-util] Add isError helper (#16076)
  • [pretty-format] Support React 19 (#16123)

Fixes

  • [expect-utils] Fix toStrictEqual failing on structuredClone results due to cross-realm constructor mismatch (#15959)
  • [@jest/expect-utils] Prevent toMatchObject/subset matching from throwing when encountering exotic iterables (#15952)
  • [fake-timers] Convert Date to milliseconds before passing to @sinonjs/fake-timers (#16029)
  • [jest] Export GlobalConfig and ProjectConfig TypeScript types (#16132)
  • [jest-circus] Prevent crash when asyncError is undefined for non-Error throws (#16003)
  • [jest-circus, jest-jasmine2] Include Error.cause in JSON failureMessages output (#15967)
  • [jest-config] Fix preset path resolution on Windows when the preset uses subpath exports (#15961)
  • [jest-config] Allow collectCoverage and coverageProvider in project config without a validation warning (#16132)
  • [jest-config] Project config validator now emits "is not supported in an individual project configuration" instead of "probably a typing mistake" for known global-only options (#16132)
  • [jest-environment-node] Fix --localstorage-file warning on Node 25+ (#16086)
  • [jest-reporters] Apply global coverage threshold to unmatched pattern files in addition to glob/path thresholds (#16137)

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 10, 2026
@codacy-production

codacy-production Bot commented May 10, 2026 •

Copy link
Copy Markdown

Up to standards βœ…

🟒 Issues 0 issues

Results:
0 new issues

View in Codacy

🟒 Metrics 0 complexity · 0 duplication

Metric Results
Complexity 0
Duplication 0

View in Codacy

NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/webapp/jest-30.4.2 branch from 3a615d5 to 2c0580f Compare June 4, 2026 14:28
Bumps [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) from 30.3.0 to 30.4.2.
- [Release notes](https://github.com/jestjs/jest/releases)
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jestjs/jest/commits/v30.4.2/packages/jest)

---
updated-dependencies:
- dependency-name: jest
  dependency-version: 30.4.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/webapp/jest-30.4.2 branch from 2c0580f to cf7f3a4 Compare June 4, 2026 14:29
@mergify
mergify Bot merged commit 75aabea into main Jun 4, 2026
4 of 8 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/webapp/jest-30.4.2 branch June 4, 2026 14:31
mergify Bot added a commit that referenced this pull request Sep 6, 2026
…updates [skip ci]

Bumps the github-actions group with 7 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [mikepenz/release-changelog-builder-action](https://github.com/mikepenz/release-changelog-builder-action) | `6.2.3` | `6.3.0` |
| [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `3.0.2` | `3.0.3` |
| [anchore/scan-action](https://github.com/anchore/scan-action) | `7.4.0` | `7.4.2` |
| [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.37.7` | `4.37.9` |
| [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) | `1.0.194` | `1.0.211` |
| [github/codeql-action/init](https://github.com/github/codeql-action) | `4.37.7` | `4.37.9` |
| [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.37.7` | `4.37.9` |
Updates `mikepenz/release-changelog-builder-action` from 6.2.3 to 6.3.0
Release notes

*Sourced from [mikepenz/release-changelog-builder-action's releases](https://github.com/mikepenz/release-changelog-builder-action/releases).*

> v6.3.0
> ------
>
> πŸš€ Features
> ----------
>
> * ci: add OpenSSF Scorecard analysis and fix CI badge
>   + PR: [#1647](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1647)
>
> πŸ’¬ Other
> -------
>
> * ci: fix Scorecard Dangerous-Workflow finding (script injection)
>   + PR: [#1648](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1648)
> * dev -> main
>   + PR: [#1650](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1650)
> * ci: run Scorecard on develop, the default branch
>   + PR: [#1651](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1651)
>
> πŸ“¦ Dependencies
> --------------
>
> * chore(deps): lock file maintenance
>   + PR: [#1614](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1614)
> * fix(deps): update dependency semver to v7.8.4
>   + PR: [#1612](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1612)
> * chore(deps): update mcr.microsoft.com/devcontainers/typescript-node:24-bullseye docker digest to 4823a29
>   + PR: [#1610](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1610)
> * chore(deps): update node devdependency non-major updates
>   + PR: [#1611](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1611)
> * fix(deps): update dependency https-proxy-agent to v9.1.0
>   + PR: [#1613](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1613)
> * chore(deps): update node devdependency non-major updates
>   + PR: [#1615](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1615)
> * chore(deps): lock file maintenance
>   + PR: [#1619](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1619)
> * chore(deps): update actions/checkout action to v7
>   + PR: [#1617](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1617)
> * chore(deps): lock file maintenance
>   + PR: [#1620](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1620)
> * fix(deps): update dependency semver to v7.8.5
>   + PR: [#1616](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1616)
> * chore(deps): update dependency js-yaml to v5
>   + PR: [#1618](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1618)
> * chore(deps): lock file maintenance
>   + PR: [#1624](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1624)
> * chore(deps): update node devdependency non-major updates
>   + PR: [#1623](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1623)
> * chore(deps): update mcr.microsoft.com/devcontainers/typescript-node:24-bullseye docker digest to 2449e39
>   + PR: [#1621](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1621)
> * chore(deps): update dependency vite to v8.1.0
>   + PR: [#1622](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1622)
> * chore(deps): update node devdependency non-major updates
>   + PR: [#1627](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1627)
> * chore(deps): lock file maintenance

... (truncated)


Commits

* [`cb021f9`](mikepenz/release-changelog-builder-action@cb021f9) Merge pull request [#1666](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1666) from mikepenz/develop
* [`48658d7`](mikepenz/release-changelog-builder-action@48658d7) chore(deps): update mikepenz/action-gh-release action to v3.1.0 ([#1665](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1665))
* [`6c6fe84`](mikepenz/release-changelog-builder-action@6c6fe84) Merge pull request [#1661](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1661) from mikepenz/renovate/node-devdependency-non-major-...
* [`27dc4b4`](mikepenz/release-changelog-builder-action@27dc4b4) chore: rebuild dist for renovate
* [`f911262`](mikepenz/release-changelog-builder-action@f911262) chore(deps): update node devdependency non-major updates
* [`217d3c7`](mikepenz/release-changelog-builder-action@217d3c7) Merge pull request [#1660](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1660) from mikepenz/renovate/js-yaml-5.x
* [`a5deb72`](mikepenz/release-changelog-builder-action@a5deb72) chore: rebuild dist for renovate
* [`72b7476`](mikepenz/release-changelog-builder-action@72b7476) chore: sync js-yaml version between devDependencies and overrides
* [`325c6d9`](mikepenz/release-changelog-builder-action@325c6d9) chore(deps): update dependency js-yaml to v5.3.0
* [`390cad3`](mikepenz/release-changelog-builder-action@390cad3) chore(deps): lock file maintenance ([#1664](https://redirect.github.com/mikepenz/release-changelog-builder-action/issues/1664))
* Additional commits viewable in [compare view](mikepenz/release-changelog-builder-action@c9bcd82...cb021f9)
  
Updates `softprops/action-gh-release` from 3.0.2 to 3.0.3
Release notes

*Sourced from [softprops/action-gh-release's releases](https://github.com/softprops/action-gh-release/releases).*

> v3.0.3
> ------
>
> `3.0.3` is a maintenance release with updated dependencies. It also safely
> classifies malformed GitHub API errors to avoid secondary failures ([#822](https://redirect.github.com/softprops/action-gh-release/issues/822)).
>
> What's Changed
> --------------
>
> ### Bug fixes πŸ›
>
> * fix: safely classify GitHub API errors by [`@​chenrui333`](https://github.com/chenrui333) in [softprops/action-gh-release#822](https://redirect.github.com/softprops/action-gh-release/pull/822)
>
> ### Other Changes πŸ”„
>
> * dependency updates


Changelog

*Sourced from [softprops/action-gh-release's changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md).*

> 3.0.3
> -----
>
> `3.0.3` is a maintenance release with updated dependencies. It also safely
> classifies malformed GitHub API errors to avoid secondary failures ([#822](https://redirect.github.com/softprops/action-gh-release/issues/822)).
>
> What's Changed
> --------------
>
> ### Bug fixes πŸ›
>
> * fix: safely classify GitHub API errors by [`@​chenrui333`](https://github.com/chenrui333) in [softprops/action-gh-release#822](https://redirect.github.com/softprops/action-gh-release/pull/822)
>
> ### Other Changes πŸ”„
>
> * dependency updates
>
> 3.0.2
> -----
>
> `3.0.2` is a patch release focused on release reliability and compatibility. It
> reuses existing draft releases when publishing prereleases, supports replacing
> release assets on Gitea, hardens streamed asset uploads, and provides clearer
> release-creation diagnostics. It also includes TypeScript, coverage, and tooling
> maintenance merged since `3.0.1`.
>
> This release fixes [#795](https://redirect.github.com/softprops/action-gh-release/issues/795), [#438](https://redirect.github.com/softprops/action-gh-release/issues/438), and [#803](https://redirect.github.com/softprops/action-gh-release/issues/803). The upload transport hardening covers the
> historical failure reported in [#790](https://redirect.github.com/softprops/action-gh-release/issues/790), although current hosted Node 24 runners did
> not reproduce it naturally. The diagnostics work is related to [#786](https://redirect.github.com/softprops/action-gh-release/issues/786) and does not
> claim a reproducible release-creation fix.
>
> What's Changed
> --------------
>
> ### Exciting New Features πŸŽ‰
>
> * feat: improve release error reporting and test coverage by [`@​chenrui333`](https://github.com/chenrui333) in [softprops/action-gh-release#813](https://redirect.github.com/softprops/action-gh-release/pull/813)
>
> ### Bug fixes πŸ›
>
> * fix: publish existing draft releases as prereleases by [`@​godfengliang`](https://github.com/godfengliang) in [softprops/action-gh-release#801](https://redirect.github.com/softprops/action-gh-release/pull/801)
> * fix: upload small checksum assets reliably by [`@​chenrui333`](https://github.com/chenrui333) in [softprops/action-gh-release#815](https://redirect.github.com/softprops/action-gh-release/pull/815)
> * fix: replace existing release assets on Gitea by [`@​chenrui333`](https://github.com/chenrui333) in [softprops/action-gh-release#816](https://redirect.github.com/softprops/action-gh-release/pull/816)
> * fix: clarify release creation 404 errors by [`@​chenrui333`](https://github.com/chenrui333) in [softprops/action-gh-release#817](https://redirect.github.com/softprops/action-gh-release/pull/817)
>
> ### Other Changes πŸ”„
>
> * chore(deps): upgrade TypeScript to 7 by [`@​chenrui333`](https://github.com/chenrui333) in [softprops/action-gh-release#812](https://redirect.github.com/softprops/action-gh-release/pull/812)
> * chore(deps): remove unused TypeScript tooling by [`@​chenrui333`](https://github.com/chenrui333) in [softprops/action-gh-release#814](https://redirect.github.com/softprops/action-gh-release/pull/814)
> * dependency, Node 24 pin, and CI maintenance merged since `3.0.1`
>
> 3.0.1
> -----
>
> * maintenance release with updated dependencies

... (truncated)


Commits

* [`efb3536`](softprops/action-gh-release@efb3536) release 3.0.3 ([#840](https://redirect.github.com/softprops/action-gh-release/issues/840))
* [`6441963`](softprops/action-gh-release@6441963) chore(deps): bump the npm group with 2 updates ([#839](https://redirect.github.com/softprops/action-gh-release/issues/839))
* [`e5ee6bc`](softprops/action-gh-release@e5ee6bc) chore(deps): bump esbuild from 0.28.1 to 0.28.2 in the npm group ([#837](https://redirect.github.com/softprops/action-gh-release/issues/837))
* [`d1e6617`](softprops/action-gh-release@d1e6617) chore(deps): bump undici from 6.27.0 to 6.28.0 ([#831](https://redirect.github.com/softprops/action-gh-release/issues/831))
* [`6403751`](softprops/action-gh-release@6403751) chore(deps): bump the npm group with 2 updates ([#835](https://redirect.github.com/softprops/action-gh-release/issues/835))
* [`7c7184b`](softprops/action-gh-release@7c7184b) chore(deps): bump postcss from 8.5.19 to 8.5.25 ([#833](https://redirect.github.com/softprops/action-gh-release/issues/833))
* [`0f3f0d2`](softprops/action-gh-release@0f3f0d2) chore(deps): bump brace-expansion from 5.0.8 to 5.0.9 ([#832](https://redirect.github.com/softprops/action-gh-release/issues/832))
* [`77fb938`](softprops/action-gh-release@77fb938) chore(deps): bump prettier from 3.9.5 to 3.9.6 in the npm group ([#830](https://redirect.github.com/softprops/action-gh-release/issues/830))
* [`5a6f517`](softprops/action-gh-release@5a6f517) chore(deps): bump brace-expansion from 5.0.7 to 5.0.8 ([#828](https://redirect.github.com/softprops/action-gh-release/issues/828))
* [`a3c91c9`](softprops/action-gh-release@a3c91c9) chore(deps): bump the github-actions group with 2 updates ([#825](https://redirect.github.com/softprops/action-gh-release/issues/825))
* Additional commits viewable in [compare view](softprops/action-gh-release@3d0d988...efb3536)
  
Updates `anchore/scan-action` from 7.4.0 to 7.4.2
Release notes

*Sourced from [anchore/scan-action's releases](https://github.com/anchore/scan-action/releases).*

> v7.4.2
> ------
>
> ### Additional Changes
>
> * ops: write contents for release [[#756](https://redirect.github.com/anchore/scan-action/pull/756) [`@​spiffcs`](https://github.com/spiffcs)]
> * add makefile target to bump grype version [[#639](https://redirect.github.com/anchore/scan-action/pull/639) [`@​willmurphyscode`](https://github.com/willmurphyscode)]
> * update zizmor workflow triggers [[#642](https://redirect.github.com/anchore/scan-action/pull/642) [`@​wagoodman`](https://github.com/wagoodman)]
> * require zizmor security events [[#640](https://redirect.github.com/anchore/scan-action/pull/640) [`@​wagoodman`](https://github.com/wagoodman)]
>
> **[(Full Changelog)](anchore/scan-action@v7.4.0...v7.4.2)**


Commits

* [`27805bf`](anchore/scan-action@27805bf) chore(deps): update Grype to latest release ([#755](https://redirect.github.com/anchore/scan-action/issues/755)) ([#756](https://redirect.github.com/anchore/scan-action/issues/756))
* [`8964e60`](anchore/scan-action@8964e60) chore(deps): update Grype to latest release ([#755](https://redirect.github.com/anchore/scan-action/issues/755))
* [`6875336`](anchore/scan-action@6875336) chore: bump fast-xml-parser from 5.5.8 to 5.7.3 ([#654](https://redirect.github.com/anchore/scan-action/issues/654))
* [`65b5fb1`](anchore/scan-action@65b5fb1) chore: bump esbuild from 0.28.0 to 0.28.2 ([#753](https://redirect.github.com/anchore/scan-action/issues/753))
* [`b905e0e`](anchore/scan-action@b905e0e) chore(deps): update Grype to latest release ([#713](https://redirect.github.com/anchore/scan-action/issues/713))
* [`e49c028`](anchore/scan-action@e49c028) fix: pin grype install.sh to the release tag being installed ([#750](https://redirect.github.com/anchore/scan-action/issues/750))
* [`db8f0b6`](anchore/scan-action@db8f0b6) chore: bump globals from 17.9.0 to 17.11.0 ([#754](https://redirect.github.com/anchore/scan-action/issues/754))
* [`35bf076`](anchore/scan-action@35bf076) chore: bump eslint from 10.8.0 to 10.8.1 ([#752](https://redirect.github.com/anchore/scan-action/issues/752))
* [`bd77fb5`](anchore/scan-action@bd77fb5) chore: bump anchore/workflows/.github/workflows/check-gate.yaml ([#720](https://redirect.github.com/anchore/scan-action/issues/720))
* [`d04f6c4`](anchore/scan-action@d04f6c4) chore: bump lint-staged from 17.2.0 to 17.3.0 ([#748](https://redirect.github.com/anchore/scan-action/issues/748))
* Additional commits viewable in [compare view](anchore/scan-action@e116508...27805bf)
  
Updates `github/codeql-action/upload-sarif` from 4.37.7 to 4.37.9
Release notes

*Sourced from [github/codeql-action/upload-sarif's releases](https://github.com/github/codeql-action/releases).*

> v4.37.9
> -------
>
> * Update default CodeQL bundle version to [2.26.4](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.4). [#4106](https://redirect.github.com/github/codeql-action/pull/4106)
>
> v4.37.8
> -------
>
> No user facing changes.


Changelog

*Sourced from [github/codeql-action/upload-sarif's changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md).*

> CodeQL Action Changelog
> =======================
>
> See the [releases page](https://github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs.
>
> [UNRELEASED]
> ------------
>
> No user facing changes.
>
> 4.37.9 - 26 Aug 2026
> --------------------
>
> * Update default CodeQL bundle version to [2.26.4](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.4). [#4106](https://redirect.github.com/github/codeql-action/pull/4106)
>
> 4.37.8 - 21 Aug 2026
> --------------------
>
> No user facing changes.
>
> 4.37.7 - 13 Aug 2026
> --------------------
>
> * Update default CodeQL bundle version to [2.26.3](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.3). [#4085](https://redirect.github.com/github/codeql-action/pull/4085)
>
> 4.37.6 - 04 Aug 2026
> --------------------
>
> * Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to `.github/codeql-config.yml` to align it with the suggested path that is used elsewhere. [#4070](https://redirect.github.com/github/codeql-action/pull/4070)
>
> 4.37.5 - 03 Aug 2026
> --------------------
>
> * Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the `init` Action instead of falling back to downloading the bundle before extracting it. [#4061](https://redirect.github.com/github/codeql-action/pull/4061)
>
> 4.37.4 - 29 Jul 2026
> --------------------
>
> * This version of the CodeQL Action adds support for the `tools` input for the `codeql-action/init` step to be specified using a `github-codeql-tools` [repository property](https://docs.github.com/en/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization). This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to `toolcache` to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for `tools` in the workflow definition always takes precedence unless the value of the repository property starts with `!`. [#4037](https://redirect.github.com/github/codeql-action/pull/4037)
> * Update default CodeQL bundle version to [2.26.2](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.2). [#4051](https://redirect.github.com/github/codeql-action/pull/4051)
>
> 4.37.3 - 22 Jul 2026
> --------------------
>
> No user facing changes.
>
> 4.37.2 - 21 Jul 2026
> --------------------
>
> * The new address format for the `config-file` input that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, the `remote=` prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. [#4023](https://redirect.github.com/github/codeql-action/pull/4023)
> * The CodeQL Action can now make use of [configured private registries](https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries) in Default Setup to retrieve CodeQL configuration files from remote repositories that require authentication. This will allow customers to store their CodeQL configuration in a single repository that can then be referenced by Default Setup workflows in other repositories. We expect to roll this and other, related changes out to everyone in July. [#4007](https://redirect.github.com/github/codeql-action/pull/4007)
>
> 4.37.1 - 16 Jul 2026
> --------------------
>
> * *Upcoming breaking change*: Add a deprecation warning for customers using CodeQL version 2.20.6 and earlier. These versions of CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and will be unsupported by the next minor release of the CodeQL Action. [#3956](https://redirect.github.com/github/codeql-action/pull/3956)
> * Update default CodeQL bundle version to [2.26.1](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.1). [#4019](https://redirect.github.com/github/codeql-action/pull/4019)
>
> 4.37.0 - 08 Jul 2026
> --------------------
>
> * Update default CodeQL bundle version to [2.26.0](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.0). [#3995](https://redirect.github.com/github/codeql-action/pull/3995)

... (truncated)


Commits

* [`cdf488f`](github/codeql-action@cdf488f) Merge pull request [#4107](https://redirect.github.com/github/codeql-action/issues/4107) from github/update-v4.37.9-920ba7cd1
* [`7243f38`](github/codeql-action@7243f38) Update changelog for v4.37.9
* [`920ba7c`](github/codeql-action@920ba7c) Merge pull request [#4106](https://redirect.github.com/github/codeql-action/issues/4106) from github/update-bundle/codeql-bundle-v2.26.4
* [`ecfa6e1`](github/codeql-action@ecfa6e1) Add changelog note
* [`adcdf4a`](github/codeql-action@adcdf4a) Update default bundle to codeql-bundle-v2.26.4
* [`486fec2`](github/codeql-action@486fec2) Merge pull request [#4099](https://redirect.github.com/github/codeql-action/issues/4099) from github/update-supported-enterprise-server-versions
* [`134624c`](github/codeql-action@134624c) Merge pull request [#4101](https://redirect.github.com/github/codeql-action/issues/4101) from github/dependabot/npm\_and\_yarn/npm-minor-457d82...
* [`ff43db8`](github/codeql-action@ff43db8) Merge pull request [#4103](https://redirect.github.com/github/codeql-action/issues/4103) from github/mergeback/v4.37.8-to-main-db488dde
* [`4605e03`](github/codeql-action@4605e03) Rebuild
* [`099c869`](github/codeql-action@099c869) Update changelog and version after v4.37.8
* Additional commits viewable in [compare view](github/codeql-action@ff2f1c6...cdf488f)
  
Updates `anthropics/claude-code-action` from 1.0.194 to 1.0.211
Release notes

*Sourced from [anthropics/claude-code-action's releases](https://github.com/anthropics/claude-code-action/releases).*

> v1.0.211
> --------
>
> **Full Changelog**: <anthropics/claude-code-action@v1.0.210...v1.0.211>
>
> v1.0.210
> --------
>
> **Full Changelog**: <anthropics/claude-code-action@v1.0.209...v1.0.210>
>
> v1.0.209
> --------
>
> **Full Changelog**: <anthropics/claude-code-action@v1.0.208...v1.0.209>
>
> v1.0.208
> --------
>
> **Full Changelog**: <anthropics/claude-code-action@v1.0.207...v1.0.208>
>
> v1.0.207
> --------
>
> **Full Changelog**: <anthropics/claude-code-action@v1.0.206...v1.0.207>
>
> v1.0.206
> --------
>
> What's Changed
> --------------
>
> * chore: add .gitattributes to normalize line endings by [`@​MohammedAlkindi`](https://github.com/MohammedAlkindi) in [anthropics/claude-code-action#1708](https://redirect.github.com/anthropics/claude-code-action/pull/1708)
> * fix: use paths in delete\_files prompt example by [`@​WeAreResilience`](https://github.com/WeAreResilience) in [anthropics/claude-code-action#1702](https://redirect.github.com/anthropics/claude-code-action/pull/1702)
> * fix: allow parentheses in valid branch names by [`@​YauheniPo`](https://github.com/YauheniPo) in [anthropics/claude-code-action#1710](https://redirect.github.com/anthropics/claude-code-action/pull/1710)
> * fix: bound download\_job\_log against a stalled log fetch by [`@​shoemoney`](https://github.com/shoemoney) in [anthropics/claude-code-action#1719](https://redirect.github.com/anthropics/claude-code-action/pull/1719)
> * fix: encode branch names in GitHub links by [`@​Abdullah-Builds`](https://github.com/Abdullah-Builds) in [anthropics/claude-code-action#1713](https://redirect.github.com/anthropics/claude-code-action/pull/1713)
>
> New Contributors
> ----------------
>
> * [`@​MohammedAlkindi`](https://github.com/MohammedAlkindi) made their first contribution in [anthropics/claude-code-action#1708](https://redirect.github.com/anthropics/claude-code-action/pull/1708)
> * [`@​YauheniPo`](https://github.com/YauheniPo) made their first contribution in [anthropics/claude-code-action#1710](https://redirect.github.com/anthropics/claude-code-action/pull/1710)
> * [`@​Abdullah-Builds`](https://github.com/Abdullah-Builds) made their first contribution in [anthropics/claude-code-action#1713](https://redirect.github.com/anthropics/claude-code-action/pull/1713)
>
> **Full Changelog**: <anthropics/claude-code-action@v1.0.205...v1.0.206>
>
> v1.0.205
> --------
>
> **Full Changelog**: <anthropics/claude-code-action@v1.0.203...v1.0.205>
>
> v1.0.204
> --------
>
> **Full Changelog**: <anthropics/claude-code-action@v1.0.202...v1.0.204>
>
> v1.0.203
> --------
>
> **Full Changelog**: <anthropics/claude-code-action@v1.0.202...v1.0.203>
>
> v1.0.202
> --------
>
> **Full Changelog**: <anthropics/claude-code-action@v1.0.201...v1.0.202>
>
> v1.0.201
> --------
>
> **Full Changelog**: <anthropics/claude-code-action@v1.0.200...v1.0.201>
>
> v1.0.200
> --------
>
> **Full Changelog**: <anthropics/claude-code-action@v1.0.199...v1.0.200>
>
> v1.0.199
> --------
>
> What's Changed
> --------------

... (truncated)


Commits

* [`833fb0f`](anthropics/claude-code-action@833fb0f) chore: bump Claude Code to 2.1.252 and Agent SDK to 0.3.252
* [`a874e9e`](anthropics/claude-code-action@a874e9e) chore: bump Claude Code to 2.1.251 and Agent SDK to 0.3.251
* [`a60f3e1`](anthropics/claude-code-action@a60f3e1) chore: bump Claude Code to 2.1.250 and Agent SDK to 0.3.250
* [`e8c2d7c`](anthropics/claude-code-action@e8c2d7c) chore: bump Claude Code to 2.1.248 and Agent SDK to 0.3.248
* [`70fec18`](anthropics/claude-code-action@70fec18) chore: bump Claude Code to 2.1.247 and Agent SDK to 0.3.247
* [`1f291e1`](anthropics/claude-code-action@1f291e1) chore: bump Claude Code to 2.1.246 and Agent SDK to 0.3.246
* [`76ac41a`](anthropics/claude-code-action@76ac41a) fix: encode branch names in GitHub links ([#1713](https://redirect.github.com/anthropics/claude-code-action/issues/1713))
* [`8ef9699`](anthropics/claude-code-action@8ef9699) fix: bound download\_job\_log against a stalled log fetch ([#1719](https://redirect.github.com/anthropics/claude-code-action/issues/1719))
* [`791545d`](anthropics/claude-code-action@791545d) fix: allow parentheses in valid branch names ([#1710](https://redirect.github.com/anthropics/claude-code-action/issues/1710))
* [`2d7a787`](anthropics/claude-code-action@2d7a787) fix: use paths in delete\_files prompt example ([#1702](https://redirect.github.com/anthropics/claude-code-action/issues/1702))
* Additional commits viewable in [compare view](anthropics/claude-code-action@459ad35...833fb0f)
  
Updates `github/codeql-action/init` from 4.37.7 to 4.37.9
Release notes

*Sourced from [github/codeql-action/init's releases](https://github.com/github/codeql-action/releases).*

> v4.37.9
> -------
>
> * Update default CodeQL bundle version to [2.26.4](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.4). [#4106](https://redirect.github.com/github/codeql-action/pull/4106)
>
> v4.37.8
> -------
>
> No user facing changes.


Changelog

*Sourced from [github/codeql-action/init's changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md).*

> CodeQL Action Changelog
> =======================
>
> See the [releases page](https://github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs.
>
> [UNRELEASED]
> ------------
>
> No user facing changes.
>
> 4.37.9 - 26 Aug 2026
> --------------------
>
> * Update default CodeQL bundle version to [2.26.4](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.4). [#4106](https://redirect.github.com/github/codeql-action/pull/4106)
>
> 4.37.8 - 21 Aug 2026
> --------------------
>
> No user facing changes.
>
> 4.37.7 - 13 Aug 2026
> --------------------
>
> * Update default CodeQL bundle version to [2.26.3](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.3). [#4085](https://redirect.github.com/github/codeql-action/pull/4085)
>
> 4.37.6 - 04 Aug 2026
> --------------------
>
> * Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to `.github/codeql-config.yml` to align it with the suggested path that is used elsewhere. [#4070](https://redirect.github.com/github/codeql-action/pull/4070)
>
> 4.37.5 - 03 Aug 2026
> --------------------
>
> * Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the `init` Action instead of falling back to downloading the bundle before extracting it. [#4061](https://redirect.github.com/github/codeql-action/pull/4061)
>
> 4.37.4 - 29 Jul 2026
> --------------------
>
> * This version of the CodeQL Action adds support for the `tools` input for the `codeql-action/init` step to be specified using a `github-codeql-tools` [repository property](https://docs.github.com/en/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization). This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to `toolcache` to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for `tools` in the workflow definition always takes precedence unless the value of the repository property starts with `!`. [#4037](https://redirect.github.com/github/codeql-action/pull/4037)
> * Update default CodeQL bundle version to [2.26.2](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.2). [#4051](https://redirect.github.com/github/codeql-action/pull/4051)
>
> 4.37.3 - 22 Jul 2026
> --------------------
>
> No user facing changes.
>
> 4.37.2 - 21 Jul 2026
> --------------------
>
> * The new address format for the `config-file` input that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, the `remote=` prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. [#4023](https://redirect.github.com/github/codeql-action/pull/4023)
> * The CodeQL Action can now make use of [configured private registries](https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries) in Default Setup to retrieve CodeQL configuration files from remote repositories that require authentication. This will allow customers to store their CodeQL configuration in a single repository that can then be referenced by Default Setup workflows in other repositories. We expect to roll this and other, related changes out to everyone in July. [#4007](https://redirect.github.com/github/codeql-action/pull/4007)
>
> 4.37.1 - 16 Jul 2026
> --------------------
>
> * *Upcoming breaking change*: Add a deprecation warning for customers using CodeQL version 2.20.6 and earlier. These versions of CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and will be unsupported by the next minor release of the CodeQL Action. [#3956](https://redirect.github.com/github/codeql-action/pull/3956)
> * Update default CodeQL bundle version to [2.26.1](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.1). [#4019](https://redirect.github.com/github/codeql-action/pull/4019)
>
> 4.37.0 - 08 Jul 2026
> --------------------
>
> * Update default CodeQL bundle version to [2.26.0](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.0). [#3995](https://redirect.github.com/github/codeql-action/pull/3995)

... (truncated)


Commits

* [`cdf488f`](github/codeql-action@cdf488f) Merge pull request [#4107](https://redirect.github.com/github/codeql-action/issues/4107) from github/update-v4.37.9-920ba7cd1
* [`7243f38`](github/codeql-action@7243f38) Update changelog for v4.37.9
* [`920ba7c`](github/codeql-action@920ba7c) Merge pull request [#4106](https://redirect.github.com/github/codeql-action/issues/4106) from github/update-bundle/codeql-bundle-v2.26.4
* [`ecfa6e1`](github/codeql-action@ecfa6e1) Add changelog note
* [`adcdf4a`](github/codeql-action@adcdf4a) Update default bundle to codeql-bundle-v2.26.4
* [`486fec2`](github/codeql-action@486fec2) Merge pull request [#4099](https://redirect.github.com/github/codeql-action/issues/4099) from github/update-supported-enterprise-server-versions
* [`134624c`](github/codeql-action@134624c) Merge pull request [#4101](https://redirect.github.com/github/codeql-action/issues/4101) from github/dependabot/npm\_and\_yarn/npm-minor-457d82...
* [`ff43db8`](github/codeql-action@ff43db8) Merge pull request [#4103](https://redirect.github.com/github/codeql-action/issues/4103) from github/mergeback/v4.37.8-to-main-db488dde
* [`4605e03`](github/codeql-action@4605e03) Rebuild
* [`099c869`](github/codeql-action@099c869) Update changelog and version after v4.37.8
* Additional commits viewable in [compare view](github/codeql-action@ff2f1c6...cdf488f)
  
Updates `github/codeql-action/analyze` from 4.37.7 to 4.37.9
Release notes

*Sourced from [github/codeql-action/analyze's releases](https://github.com/github/codeql-action/releases).*

> v4.37.9
> -------
>
> * Update default CodeQL bundle version to [2.26.4](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.4). [#4106](https://redirect.github.com/github/codeql-action/pull/4106)
>
> v4.37.8
> -------
>
> No user facing changes.


Changelog

*Sourced from [github/codeql-action/analyze's changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md).*

> CodeQL Action Changelog
> =======================
>
> See the [releases page](https://github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs.
>
> [UNRELEASED]
> ------------
>
> No user facing changes.
>
> 4.37.9 - 26 Aug 2026
> --------------------
>
> * Update default CodeQL bundle version to [2.26.4](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.4). [#4106](https://redirect.github.com/github/codeql-action/pull/4106)
>
> 4.37.8 - 21 Aug 2026
> --------------------
>
> No user facing changes.
>
> 4.37.7 - 13 Aug 2026
> --------------------
>
> * Update default CodeQL bundle version to [2.26.3](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.3). [#4085](https://redirect.github.com/github/codeql-action/pull/4085)
>
> 4.37.6 - 04 Aug 2026
> --------------------
>
> * Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to `.github/codeql-config.yml` to align it with the suggested path that is used elsewhere. [#4070](https://redirect.github.com/github/codeql-action/pull/4070)
>
> 4.37.5 - 03 Aug 2026
> --------------------
>
> * Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the `init` Action instead of falling back to downloading the bundle before extracting it. [#4061](https://redirect.github.com/github/codeql-action/pull/4061)
>
> 4.37.4 - 29 Jul 2026
> --------------------
>
> * This version of the CodeQL Action adds support for the `tools` input for the `codeql-action/init` step to be specified using a `github-codeql-tools` [repository property](https://docs.github.com/en/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization). This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to `toolcache` to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for `tools` in the workflow definition always takes precedence unless the value of the repository property starts with `!`. [#4037](https://redirect.github.com/github/codeql-action/pull/4037)
> * Update default CodeQL bundle version to [2.26.2](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.2). [#4051](https://redirect.github.com/github/codeql-action/pull/4051)
>
> 4.37.3 - 22 Jul 2026
> --------------------
>
> No user facing changes.
>
> 4.37.2 - 21 Jul 2026
> --------------------
>
> * The new address format for the `config-file` input that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, the `remote=` prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. [#4023](https://redirect.github.com/github/codeql-action/pull/4023)
> * The CodeQL Action can now make use of [configured private registries](https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries) in Default Setup to retrieve CodeQL configuration files from remote repositories that require authentication. This will allow customers to store their CodeQL configuration in a single repository that can then be referenced by Default Setup workflows in other repositories. We expect to roll this and other, related changes out to everyone in July. [#4007](https://redirect.github.com/github/codeql-action/pull/4007)
>
> 4.37.1 - 16 Jul 2026
> --------------------
>
> * *Upcoming breaking change*: Add a deprecation warning for customers using CodeQL version 2.20.6 and earlier. These versions of CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and will be unsupported by the next minor release of the CodeQL Action. [#3956](https://redirect.github.com/github/codeql-action/pull/3956)
> * Update default CodeQL bundle version to [2.26.1](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.1). [#4019](https://redirect.github.com/github/codeql-action/pull/4019)
>
> 4.37.0 - 08 Jul 2026
> --------------------
>
> * Update default CodeQL bundle version to [2.26.0](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.0). [#3995](https://redirect.github.com/github/codeql-action/pull/3995)

... (truncated)


Commits

* [`cdf488f`](github/codeql-action@cdf488f) Merge pull request [#4107](https://redirect.github.com/github/codeql-action/issues/4107) from github/update-v4.37.9-920ba7cd1
* [`7243f38`](github/codeql-action@7243f38) Update changelog for v4.37.9
* [`920ba7c`](github/codeql-action@920ba7c) Merge pull request [#4106](https://redirect.github.com/github/codeql-action/issues/4106) from github/update-bundle/codeql-bundle-v2.26.4
* [`ecfa6e1`](github/codeql-action@ecfa6e1) Add changelog note
* [`adcdf4a`](github/codeql-action@adcdf4a) Update default bundle to codeql-bundle-v2.26.4
* [`486fec2`](github/codeql-action@486fec2) Merge pull request [#4099](https://redirect.github.com/github/codeql-action/issues/4099) from github/update-supported-enterprise-server-versions
* [`134624c`](github/codeql-action@134624c) Merge pull request [#4101](https://redirect.github.com/github/codeql-action/issues/4101) from github/dependabot/npm\_and\_yarn/npm-minor-457d82...
* [`ff43db8`](github/codeql-action@ff43db8) Merge pull request [#4103](https://redirect.github.com/github/codeql-action/issues/4103) from github/mergeback/v4.37.8-to-main-db488dde
* [`4605e03`](github/codeql-action@4605e03) Rebuild
* [`099c869`](github/codeql-action@099c869) Update changelog and version after v4.37.8
* Additional commits viewable in [compare view](github/codeql-action@ff2f1c6...cdf488f)
  
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
  
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show  ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore  major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore  minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore  ` will remove the ignore condition of the specified dependency and ignore conditions
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file dependency_approved javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant