From 7b08cfa209d58659f025bebd2f7665a255dee686 Mon Sep 17 00:00:00 2001 From: Manuel Lerchner Date: Mon, 9 Mar 2026 14:38:14 +0100 Subject: [PATCH] chore: Update codeql-action/upload-sarif version and set version comment correctly --- .github/dependabot.yml | 2 ++ .github/workflows/scorecard.yml | 2 +- 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 3891848..549c9f0 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -8,3 +8,5 @@ updates: gh-actions: patterns: - "*" + cooldown: + default-days: 7 diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 49fce5e..ca29bf9 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -74,6 +74,6 @@ jobs: # Upload the results to GitHub's code scanning dashboard (optional). # Commenting out will disable upload of results to your repo's Code Scanning dashboard - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@80cb6b56b93de3e779c7d476d9100d06fb87c877 # v3.28.15 + uses: github/codeql-action/upload-sarif@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6 with: sarif_file: results.sarif