Skip to content

Maintain Dependabot update boundaries - #35

Merged
olgerd007 merged 1 commit into
mainfrom
codex/dependabot-maintenance
Sep 29, 2026
Merged

olgerd007 merged 1 commit into
mainfrom
codex/dependabot-maintenance

Conversation

@olgerd007

Copy link
Copy Markdown
Owner

Summary

  • update both CodeQL workflow steps to the same pinned v4.38.2 commit
  • group future CodeQL version and security updates so init and analyze stay aligned
  • ignore major-version update PRs for the TFM-aligned TimeProvider dependency and Verify

This supersedes the split CodeQL updates in #28 and #29 and prevents recurrences of the unwanted major-version proposals in #19 and #34.

Validation

  • git diff --check
  • verified both CodeQL action references use commit 2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2

@olgerd007
olgerd007 merged commit ea0f432 into main Sep 29, 2026
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant