From 50b2cf6d22306aff44e28a99c676da89186899a7 Mon Sep 17 00:00:00 2001
From: "Hideouts.io" <83608068+hideouts-io@users.noreply.github.com>
Date: Mon, 2 Nov 2026 06:02:49 -0800
Subject: [PATCH] Keep CodeQL action updates coordinated

---
 .github/dependabot.yml       | 2 +-
 .github/workflows/codeql.yml | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 5819304..92e386a 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -16,7 +16,7 @@ updates:
       official-actions:
         patterns:
           - "actions/*"
-          - "github/codeql-action"
+          - "github/codeql-action/*"
     labels:
       - dependencies
     open-pull-requests-limit: 5
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index c868fba..ba3772a 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -25,9 +25,9 @@ jobs:
       security-events: write
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
-      - uses: github/codeql-action/init@24c54180a607b1449ed407dd24f251e4e9147c8d # v4
+      - uses: github/codeql-action/init@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1
         with:
           languages: python
-      - uses: github/codeql-action/analyze@24c54180a607b1449ed407dd24f251e4e9147c8d # v4
+      - uses: github/codeql-action/analyze@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1
         with:
           category: "/language:python"