Martin Vogel 288d41551e chore(deps): bump github/codeql-action init+analyze to v4.37.9 together ...

Dependabot split this bump across two PRs -- #1898 bumps init, #1900 bumps
analyze -- but codeql-action requires every step in a workflow to run the
same version. Either PR alone produces a mismatch and analyze fails with:

  Loaded a configuration file for version '4.37.4', but running version '4.37.9'

so neither can be green on its own, and merging either would leave main's
CodeQL job broken for every subsequent PR. Bump both pins in one commit.

Pin verified: cdf488f595d80d6e07e03d4674febd5ab45fa938 is the commit that
the annotated tag v4.37.9 dereferences to in github/codeql-action.

Supersedes #1898 and #1900.

Signed-off-by: Martin Vogel <martin.vogel.tech@gmail.com>

2026-08-30 16:39:49 +02:00

..

ISSUE_TEMPLATE

feat(diag): persistent memory trajectory + query-leak CI soak for #581

2026-06-28 23:28:01 +02:00

workflows

chore(deps): bump github/codeql-action init+analyze to v4.37.9 together

2026-08-30 16:39:49 +02:00

CODEOWNERS

docs: make maintainer policy project-oriented

2026-06-29 00:00:10 +02:00

dependabot.yml

Pin Actions to SHA + enforce via security audit + Dependabot

2026-03-21 16:57:17 +01:00

issue-labeler.yml

fix(ci): issue labeler no-oped on every issue — (?i) is invalid in JS RegExp

2026-07-10 00:03:43 +02:00

label-actions.yml

ci: add issue-triage bots (stale, label-actions, area-labeler)

2026-06-24 01:18:29 +02:00

pr-acknowledgement.md

docs(ci): tell contributors the release freeze is over, not that it is ongoing

2026-07-31 02:29:13 +02:00

pull_request_template.md

Adopt the Developer Certificate of Origin for all commits

2026-06-12 14:31:55 +02:00