(logging-log4j2) branch 2.x updated: Update `github/codeql-action` to version `3.22.12` (#2130)

[gi...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

github-bot pushed a commit to branch 2.x
in repository https://gitbox.apache.org/repos/asf/logging-log4j2.git


The following commit(s) were added to refs/heads/2.x by this push:
     new b7478101c0 Update `github/codeql-action` to version `3.22.12` (#2130)
b7478101c0 is described below

commit b7478101c06289190a6a56620e3094c2dcd27a1e
Author: ASF Logging Services RM <pr...@logging.apache.org>
AuthorDate: Thu Dec 28 11:53:54 2023 +0000

    Update `github/codeql-action` to version `3.22.12` (#2130)
---
 .github/workflows/scorecards-analysis.yaml           | 2 +-
 src/changelog/.2.x.x/update_github_codeql_action.xml | 8 ++++++++
 src/site/_release-notes/_2.x.x.adoc                  | 1 +
 3 files changed, 10 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/scorecards-analysis.yaml b/.github/workflows/scorecards-analysis.yaml
index f4eeab95d0..e9b21b0354 100644
--- a/.github/workflows/scorecards-analysis.yaml
+++ b/.github/workflows/scorecards-analysis.yaml
@@ -70,6 +70,6 @@ jobs:
           retention-days: 5
 
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@b374143c1149a9115d881581d29b8390bbcbb59c    # 2.1.22
+        uses: github/codeql-action/upload-sarif@012739e5082ff0c22ca6d6ab32e07c36df03c4a4    # 2.1.22
         with:
           sarif_file: results.sarif
diff --git a/src/changelog/.2.x.x/update_github_codeql_action.xml b/src/changelog/.2.x.x/update_github_codeql_action.xml
new file mode 100644
index 0000000000..fafb4ad1ee
--- /dev/null
+++ b/src/changelog/.2.x.x/update_github_codeql_action.xml
@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<entry xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+       xmlns="http://logging.apache.org/log4j/changelog"
+       xsi:schemaLocation="http://logging.apache.org/log4j/changelog https://logging.apache.org/log4j/changelog-0.1.3.xsd"
+       type="updated">
+  <issue id="2130" link="https://github.com/apache/logging-log4j2/pull/2130"/>
+  <description format="asciidoc">Update `github/codeql-action` to version `3.22.12`</description>
+</entry>
diff --git a/src/site/_release-notes/_2.x.x.adoc b/src/site/_release-notes/_2.x.x.adoc
index bdddf1c8d3..fd37805222 100644
--- a/src/site/_release-notes/_2.x.x.adoc
+++ b/src/site/_release-notes/_2.x.x.adoc
@@ -42,4 +42,5 @@ This releases contains ...
 === Updated
 
 * Update `com.fasterxml.jackson:jackson-bom` to version `2.16.1` (https://github.com/apache/logging-log4j2/pull/2126[2126])
+* Update `github/codeql-action` to version `3.22.12` (https://github.com/apache/logging-log4j2/pull/2130[2130])
 * Update `org.codehaus.groovy:groovy-bom` to version `3.0.20` (https://github.com/apache/logging-log4j2/pull/2125[2125])