diff --git a/lib/entry-points.js b/lib/entry-points.js index a165a9b3b1..186a09106d 100644 --- a/lib/entry-points.js +++ b/lib/entry-points.js @@ -151074,7 +151074,12 @@ async function getConfig(tempDir, logger) { } if (config.version !== getActionVersion()) { throw new ConfigurationError( - `Loaded a configuration file for version '${config.version}', but running version '${getActionVersion()}'` + [ + `Loaded a configuration file for version '${config.version}', but running version '${getActionVersion()}'.`, + "All steps in a workflow that use `github/codeql-action` must use the same version to work correctly.", + "If you are using Dependabot to manage dependency updates, you can configure a dependency group to update all `github/codeql-action` steps at the same time.", + "For more information, see https://docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference#groups--" + ].join(" ") ); } return config; diff --git a/src/config-utils.ts b/src/config-utils.ts index 288b4f02fb..4dd14b2909 100644 --- a/src/config-utils.ts +++ b/src/config-utils.ts @@ -1425,7 +1425,12 @@ export async function getConfig( } if (config.version !== getActionVersion()) { throw new ConfigurationError( - `Loaded a configuration file for version '${config.version}', but running version '${getActionVersion()}'`, + [ + `Loaded a configuration file for version '${config.version}', but running version '${getActionVersion()}'.`, + "All steps in a workflow that use `github/codeql-action` must use the same version to work correctly.", + "If you are using Dependabot to manage dependency updates, you can configure a dependency group to update all `github/codeql-action` steps at the same time.", + "For more information, see https://docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference#groups--", + ].join(" "), ); }