Repository navigation
Use the same codeql-action version in every step - #651
Merged
j-t-1 merged 2 commits intoNov 4, 2026
Merged
Conversation
erocarrera#637 moved codeql-action/analyze to 4.39.1 and left init and autobuild on 4.38.2 . the action refuses to run like that , "Loaded a configuration file for version '4.38.2', but running version '4.39.1'" , so CodeQL has failed on master since erocarrera#637 and on every pull request opened after it . init , autobuild and the upload-sarif step in scorecards now use the 4.39.1 commit that analyze already pins , 9b32540 , which is what the v4.39.1 tag points to .
dependabot opens one pull request per codeql-action step , which is how erocarrera#637 bumped analyze alone . a group puts init , autobuild , analyze and upload-sarif in one pull request , which is what the codeql error message suggests .
Collaborator
|
Thanks for this. |
Collaborator
|
@HuzaifaChaudary and @nightlark The PRs that were opened prior to this still give the error:
This PR has fixed this for new PRs. |
Contributor
Author
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
#637 moved
codeql-action/analyzeto 4.39.1 and leftinitandautobuildon 4.38.2 . the action refuses to run with mixed versions :so CodeQL has failed on master since #637 , and on every pull request opened after it .
the first commit points
init,autobuildand theupload-sarifstep in scorecards at the 4.39.1 commit thatanalyzealready pins , 9b32540 , which is what the v4.39.1 tag points to . the second adds a dependabot group forgithub/codeql-action*, so the next bump moves all the steps in one pull request , as the error message suggests .