(logging-log4j2) branch 2.x updated: Update `github/codeql-action` to version `2.22.5` (#1911)

[gi...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

github-bot pushed a commit to branch 2.x
in repository https://gitbox.apache.org/repos/asf/logging-log4j2.git


The following commit(s) were added to refs/heads/2.x by this push:
     new 19f4050ef1 Update `github/codeql-action` to version `2.22.5` (#1911)
19f4050ef1 is described below

commit 19f4050ef1d6d4b074327b26c5921c327d670c5a
Author: ASF Logging Services RM <pr...@logging.apache.org>
AuthorDate: Sat Oct 28 07:42:31 2023 +0000

    Update `github/codeql-action` to version `2.22.5` (#1911)
---
 .github/workflows/scorecards-analysis.yml            | 2 +-
 src/changelog/.2.x.x/update_github_codeql_action.xml | 4 ++--
 src/site/_release-notes/_2.x.x.adoc                  | 2 +-
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/scorecards-analysis.yml b/.github/workflows/scorecards-analysis.yml
index f1487c8e02..3b97c11208 100644
--- a/.github/workflows/scorecards-analysis.yml
+++ b/.github/workflows/scorecards-analysis.yml
@@ -66,6 +66,6 @@ jobs:
           retention-days: 5
 
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@49abf0ba24d0b7953cb586944e918a0b92074c80    # 2.1.22
+        uses: github/codeql-action/upload-sarif@74483a38d39275f33fcff5f35b679b5ca4a26a99    # 2.1.22
         with:
           sarif_file: results.sarif
diff --git a/src/changelog/.2.x.x/update_github_codeql_action.xml b/src/changelog/.2.x.x/update_github_codeql_action.xml
index 0091504425..ae97a8ce07 100644
--- a/src/changelog/.2.x.x/update_github_codeql_action.xml
+++ b/src/changelog/.2.x.x/update_github_codeql_action.xml
@@ -3,6 +3,6 @@
        xmlns="http://logging.apache.org/log4j/changelog"
        xsi:schemaLocation="http://logging.apache.org/log4j/changelog https://logging.apache.org/log4j/changelog-0.1.2.xsd"
        type="changed">
-  <issue id="1886" link="https://github.com/apache/logging-log4j2/pull/1886"/>
-  <description format="asciidoc">Update `github/codeql-action` to version `2.22.4`</description>
+  <issue id="1911" link="https://github.com/apache/logging-log4j2/pull/1911"/>
+  <description format="asciidoc">Update `github/codeql-action` to version `2.22.5`</description>
 </entry>
diff --git a/src/site/_release-notes/_2.x.x.adoc b/src/site/_release-notes/_2.x.x.adoc
index f493786794..f5a8d9cec6 100644
--- a/src/site/_release-notes/_2.x.x.adoc
+++ b/src/site/_release-notes/_2.x.x.adoc
@@ -53,7 +53,7 @@ The module name of four bridges (`log4j-slf4j-impl`, `log4j-slf4j2-impl`, `log4j
 * Update `com.fasterxml.jackson:jackson-bom` to version `2.15.3` (https://github.com/apache/logging-log4j2/pull/1894[1894])
 * Update `com.google.guava:guava` to version `32.1.3-jre` (https://github.com/apache/logging-log4j2/pull/1875[1875])
 * Update `com.h2database:h2` to version `2.2.224` (https://github.com/apache/logging-log4j2/pull/1880[1880])
-* Update `github/codeql-action` to version `2.22.4` (https://github.com/apache/logging-log4j2/pull/1886[1886])
+* Update `github/codeql-action` to version `2.22.5` (https://github.com/apache/logging-log4j2/pull/1911[1911])
 * Update `io.netty:netty-bom` to version `4.1.100.Final` (https://github.com/apache/logging-log4j2/pull/1857[1857])
 * Update `net.bytebuddy:byte-buddy` to version `1.14.9` (https://github.com/apache/logging-log4j2/pull/1891[1891])
 * Update `org.eclipse.persistence:org.eclipse.persistence.jpa` to version `2.7.13` (https://github.com/apache/logging-log4j2/pull/1900[1900])