chore(deps): bump github/codeql-action/upload-sarif from 4.37.7 to 4.37.9 - #754
Merged
Zious11 merged 1 commit intoSep 10, 2026
Conversation
Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) from 4.37.7 to 4.37.9. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@ff2f1c6...cdf488f) --- updated-dependencies: - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.37.9 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
Zious11
added a commit
that referenced
this pull request
Sep 10, 2026
…ingle-commit burst) Closes the human-requested maintenance sweep in one atomic burst on factory-artifacts. Maintenance-mode bookkeeping only -- pipeline stays PAUSED, no phase/cycle transition, no DEC minted, counts unchanged (754 BCs / 76 VPs / 118 holdouts / 175 stories, both count guards green). - Write maintenance/sweep-report-2026-09-10.md summarizing: dependency audit (develop dependency-clean, chacha20 0.10.0 yanked -> fix PR #800), doc drift (PR #797 compaction verified clean, 8 findings -> product docs fixed via PR #801, 3 factory doc-hygiene items fixed here), and PR triage of 10 open PRs (auto_merge=false throughout). - Resolve 3 OPEN-STANDING-ITEMS.md entries via spec-steward doc-hygiene edits: CYCLE5-F7-DOC-1 (verification-delta-674.md F6 closure note), CYCLE5-F7-DOC-2 (ADR-0023 Sec7a post-#795 boundary-split note), CYCLE5-STEP45-LOW-1 (cross-cutting.md BC-X.7.007 precedence prose). Moved to RESOLVED-DRIFT-ITEMS.md with resolution notes. - Update STATE.md: maintenance_run STARTED->COMPLETE, Phase Progress row updated in place, new Drift/Standing headline MAINTENANCE-SWEEP-2026-09-10-MERGES-PENDING (4 human-gated merges: #800, #801, #779, #754 awaiting human action). version 4.06->4.07. Claude-Session: https://claude.ai/code/session_014m6RCttQUdnro9feHXv33y
Zious11
approved these changes
Sep 10, 2026
Zious11
deleted the
dependabot/github_actions/github/codeql-action/upload-sarif-4.37.9
branch
September 10, 2026 21:45
Zious11
added a commit
that referenced
this pull request
Sep 10, 2026
…4.07->v4.08 All 4 human-gated merges from MAINTENANCE-SWEEP-2026-09-10 (#779, #754, #800, #801) are now MERGED to develop by human action; develop tip advanced 78aeb86 -> 14e695a (#779=211ae959, #754=d4760cd5, #800=522f9ba2, #801=14e695ae). Sweep is fully closed, zero outstanding actions. - maintenance_run: fixes_pending 0, fixes_applied 7, pr field updated to reflect MERGED status for all 4 PRs - MAINTENANCE-SWEEP-2026-09-10 Phase Progress row updated in place with closing note - Resolved and removed MAINTENANCE-SWEEP-2026-09-10-MERGES-PENDING headline note from Drift/Standing Items; detail moved to cycles/RESOLVED-DRIFT-ITEMS.md - Activation HEAD row's develop-tip citation refreshed 78aeb86 -> 14e695a (activation_head frontmatter stays a916821, no release tag cut) - Session Resume Checkpoint pending-decisions field refreshed Maintenance-mode bookkeeping only, single atomic burst (TD-VSDD-053) -- pipeline stays PAUSED throughout, no phase/cycle transition, no DEC minted, counts unchanged (754/76/118/175). scripts/check-spec-counts.sh and scripts/check-bc-cumulative-counts.sh both green before this commit. Claude-Session: https://claude.ai/code/session_014m6RCttQUdnro9feHXv33y
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps github/codeql-action/upload-sarif from 4.37.7 to 4.37.9.
Release notes
Sourced from github/codeql-action/upload-sarif's releases.
Changelog
Sourced from github/codeql-action/upload-sarif's changelog.
... (truncated)
Commits
cdf488fMerge pull request #4107 from github/update-v4.37.9-920ba7cd17243f38Update changelog for v4.37.9920ba7cMerge pull request #4106 from github/update-bundle/codeql-bundle-v2.26.4ecfa6e1Add changelog noteadcdf4aUpdate default bundle to codeql-bundle-v2.26.4486fec2Merge pull request #4099 from github/update-supported-enterprise-server-versions134624cMerge pull request #4101 from github/dependabot/npm_and_yarn/npm-minor-457d82...ff43db8Merge pull request #4103 from github/mergeback/v4.37.8-to-main-db488dde4605e03Rebuild099c869Update changelog and version after v4.37.8Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)