You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ofbiz.apache.org by jl...@apache.org on 2026/03/27 16:39:18 UTC
(ofbiz-framework) 01/01: Revert "Bump github/codeql-action from 4.34.1 to 4.35.0 (#1035)"
This is an automated email from the ASF dual-hosted git repository.
jleroux pushed a commit to branch revert-1035-dependabot/github_actions/github/codeql-action-4.35.0
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git
commit 9b3d6ba2eb1159b13e3fedeeaa0fc4ef5126960a
Author: Jacques Le Roux <ja...@les7arts.com>
AuthorDate: Fri Mar 27 17:39:09 2026 +0100
Revert "Bump github/codeql-action from 4.34.1 to 4.35.0 (#1035)"
This reverts commit 99bbc8fe9aa34c0bbba85b49ffc0363094eeb06f.
---
.github/workflows/codeql-analysis.yml | 6 +++---
.github/workflows/scorecard.yml | 2 +-
2 files changed, 4 insertions(+), 4 deletions(-)
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 36b05572eb..34b9e52e29 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -60,7 +60,7 @@ jobs:
# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
- uses: github/codeql-action/init@b8bb9f28b8d3f992092362369c57161b755dea45 # v4.35.0
+ uses: github/codeql-action/init@38697555549f1db7851b81482ff19f1fa5c4fedc # v4.34.1
with:
languages: ${{ matrix.language }}
debug: true
@@ -72,7 +72,7 @@ jobs:
# Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
# If this step fails, then you should remove it and run the build manually (see below)
- name: Autobuild
- uses: github/codeql-action/autobuild@b8bb9f28b8d3f992092362369c57161b755dea45 # v4.35.0
+ uses: github/codeql-action/autobuild@38697555549f1db7851b81482ff19f1fa5c4fedc # v4.34.1
# âšī¸ Command-line programs to run using the OS shell.
# đ https://git.io/JvXDl
@@ -86,4 +86,4 @@ jobs:
# make release
- name: Perform CodeQL Analysis
- uses: github/codeql-action/analyze@b8bb9f28b8d3f992092362369c57161b755dea45 # v4.35.0
+ uses: github/codeql-action/analyze@38697555549f1db7851b81482ff19f1fa5c4fedc # v4.34.1
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 73f9285776..6744b639e5 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -103,6 +103,6 @@ jobs:
# Upload the results to GitHub's code scanning dashboard.
- name: "Upload to code-scanning"
if: ${{ !env.ACT }}
- uses: github/codeql-action/upload-sarif@0078ad667ef874aae3f7656634dc3654ce6ffb9a # v2.16.2
+ uses: github/codeql-action/upload-sarif@05b1a5d28f8763fd11e77388fe57846f1ba8e766 # v2.16.2
with:
sarif_file: results.sarif