Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 6, 2026

Bumps github/codeql-action from 4.32.1 to 4.32.2.

Release notes

Sourced from github/codeql-action's releases.

v4.32.2

  • Update default CodeQL bundle version to 2.24.1. #3460
Commits
  • 45cbd0c Merge pull request #3461 from github/update-v4.32.2-7aee93297
  • cb528be Update changelog for v4.32.2
  • 7aee932 Merge pull request #3460 from github/update-bundle/codeql-bundle-v2.24.1
  • b5f028a Merge pull request #3457 from github/dependabot/npm_and_yarn/npm-minor-4c1fc3...
  • 9702c27 Merge branch 'main' into dependabot/npm_and_yarn/npm-minor-4c1fc3d0aa
  • c36c948 Add changelog note
  • 3d03318 Update default bundle to codeql-bundle-v2.24.1
  • 77591e2 Merge pull request #3459 from github/copilot/fix-github-actions-workflow-again
  • 7a44a9d Fix Rebuild Action workflow by adding --no-edit flag to git merge --continue
  • e2ac371 Initial plan
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note

Low Risk
Workflow-only dependency bump; behavior changes are limited to the upstream CodeQL action/bundle version used during CI scanning.

Overview
Bumps github/codeql-action from v4.32.1 to v4.32.2 across the CodeQL and Scorecard GitHub Actions workflows, updating the pinned commit SHAs for init, autobuild, analyze, and upload-sarif.

Written by Cursor Bugbot for commit 6f8b3ee. This will update automatically on new commits. Configure here.

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.32.1 to 4.32.2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@6bc82e0...45cbd0c)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.32.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Feb 6, 2026
@dependabot dependabot bot requested a review from jtilly as a code owner February 6, 2026 00:04
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Feb 6, 2026
@dependabot dependabot bot requested review from fjetter and xhochy as code owners February 6, 2026 00:04
@dependabot dependabot bot added the github_actions Pull requests that update GitHub Actions code label Feb 6, 2026
@xhochy xhochy merged commit 7e01480 into main Feb 6, 2026
26 checks passed
@xhochy xhochy deleted the dependabot/github_actions/github/codeql-action-4.32.2 branch February 6, 2026 05:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant