Repository navigation
Dependency updates
github/codeql-action bumped to 4.35.2 (#37)
| Action | From | To |
|---|---|---|
github/codeql-action |
4.35.1 | 4.35.2 |
Changes included in this patch release:
- Fixed a bug in the validation of OIDC configurations for private registries (introduced in 4.33.0)
- The Git 2.36.0 version requirement for improved incremental analysis now only applies to repositories containing submodules
- Python analysis no longer extracts the standard library, resulting in faster extraction and analysis times
- Default CodeQL bundle updated to v2.25.2
- Deprecation notice for the undocumented
CODEQL_ACTION_CLEANUP_TRAP_CACHESfeature (removal planned May 2026 — not used in ShieldCI)
The action remains pinned by full commit SHA as required by the Scorecard Pinned-Dependencies check.