)]}'
{
  "commit": "c1d23cac856c475ce3a5baad5bf78b69c31bbbbf",
  "tree": "9925ff921e6b6e90329f506ae152fd4d8a4e7f38",
  "parents": [
    "19ea93748854ab04ee0a8b4d8776fc487d56ec6d"
  ],
  "author": {
    "name": "dependabot[bot]",
    "email": "49699333+dependabot[bot]@users.noreply.github.com",
    "time": "Fri Oct 17 18:03:11 2025 -0400"
  },
  "committer": {
    "name": "GitHub",
    "email": "noreply@github.com",
    "time": "Fri Oct 17 18:03:11 2025 -0400"
  },
  "message": "build(deps): bump github/codeql-action from 4.30.7 to 4.30.8 in the github-actions group (#6359)\n\nBumps the github-actions group with 1 update:\n[github/codeql-action](https://github.com/github/codeql-action).\n\nUpdates `github/codeql-action` from 4.30.7 to 4.30.8\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/github/codeql-action/releases\"\u003egithub/codeql-action\u0027s\nreleases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev4.30.8\u003c/h2\u003e\n\u003ch1\u003eCodeQL Action Changelog\u003c/h1\u003e\n\u003cp\u003eSee the \u003ca\nhref\u003d\"https://github.com/github/codeql-action/releases\"\u003ereleases\npage\u003c/a\u003e for the relevant changes to the CodeQL CLI and language\npacks.\u003c/p\u003e\n\u003ch2\u003e4.30.8 - 10 Oct 2025\u003c/h2\u003e\n\u003cp\u003eNo user facing changes.\u003c/p\u003e\n\u003cp\u003eSee the full \u003ca\nhref\u003d\"https://github.com/github/codeql-action/blob/v4.30.8/CHANGELOG.md\"\u003eCHANGELOG.md\u003c/a\u003e\nfor more information.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca\nhref\u003d\"https://github.com/github/codeql-action/blob/main/CHANGELOG.md\"\u003egithub/codeql-action\u0027s\nchangelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003eCodeQL Action Changelog\u003c/h1\u003e\n\u003cp\u003eSee the \u003ca\nhref\u003d\"https://github.com/github/codeql-action/releases\"\u003ereleases\npage\u003c/a\u003e for the relevant changes to the CodeQL CLI and language\npacks.\u003c/p\u003e\n\u003ch2\u003e[UNRELEASED]\u003c/h2\u003e\n\u003cp\u003eNo user facing changes.\u003c/p\u003e\n\u003ch2\u003e4.30.8 - 10 Oct 2025\u003c/h2\u003e\n\u003cp\u003eNo user facing changes.\u003c/p\u003e\n\u003ch2\u003e4.30.7 - 06 Oct 2025\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[v4+ only] The CodeQL Action now runs on Node.js v24. \u003ca\nhref\u003d\"https://redirect.github.com/github/codeql-action/pull/3169\"\u003e#3169\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.30.6 - 02 Oct 2025\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate default CodeQL bundle version to 2.23.2. \u003ca\nhref\u003d\"https://redirect.github.com/github/codeql-action/pull/3168\"\u003e#3168\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.30.5 - 26 Sep 2025\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eWe fixed a bug that was introduced in \u003ccode\u003e3.30.4\u003c/code\u003e with\n\u003ccode\u003eupload-sarif\u003c/code\u003e which resulted in files without a\n\u003ccode\u003e.sarif\u003c/code\u003e extension not getting uploaded. \u003ca\nhref\u003d\"https://redirect.github.com/github/codeql-action/pull/3160\"\u003e#3160\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.30.4 - 25 Sep 2025\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eWe have improved the CodeQL Action\u0027s ability to validate that the\nworkflow it is used in does not use different versions of the CodeQL\nAction for different workflow steps. Mixing different versions of the\nCodeQL Action in the same workflow is unsupported and can lead to\nunpredictable results. A warning will now be emitted from the\n\u003ccode\u003ecodeql-action/init\u003c/code\u003e step if different versions of the CodeQL\nAction are detected in the workflow file. Additionally, an error will\nnow be thrown by the other CodeQL Action steps if they load a\nconfiguration file that was generated by a different version of the\n\u003ccode\u003ecodeql-action/init\u003c/code\u003e step. \u003ca\nhref\u003d\"https://redirect.github.com/github/codeql-action/pull/3099\"\u003e#3099\u003c/a\u003e\nand \u003ca\nhref\u003d\"https://redirect.github.com/github/codeql-action/pull/3100\"\u003e#3100\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eWe added support for reducing the size of dependency caches for Java\nanalyses, which will reduce cache usage and speed up workflows. This\nwill be enabled automatically at a later time. \u003ca\nhref\u003d\"https://redirect.github.com/github/codeql-action/pull/3107\"\u003e#3107\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eYou can now run the latest CodeQL nightly bundle by passing\n\u003ccode\u003etools: nightly\u003c/code\u003e to the \u003ccode\u003einit\u003c/code\u003e action. In general,\nthe nightly bundle is unstable and we only recommend running it when\ndirected by GitHub staff. \u003ca\nhref\u003d\"https://redirect.github.com/github/codeql-action/pull/3130\"\u003e#3130\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eUpdate default CodeQL bundle version to 2.23.1. \u003ca\nhref\u003d\"https://redirect.github.com/github/codeql-action/pull/3118\"\u003e#3118\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.30.3 - 10 Sep 2025\u003c/h2\u003e\n\u003cp\u003eNo user facing changes.\u003c/p\u003e\n\u003ch2\u003e3.30.2 - 09 Sep 2025\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFixed a bug which could cause language autodetection to fail. \u003ca\nhref\u003d\"https://redirect.github.com/github/codeql-action/pull/3084\"\u003e#3084\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eExperimental: The \u003ccode\u003equality-queries\u003c/code\u003e input that was added\nin \u003ccode\u003e3.29.2\u003c/code\u003e as part of an internal experiment is now\ndeprecated and will be removed in an upcoming version of the CodeQL\nAction. It has been superseded by a new \u003ccode\u003eanalysis-kinds\u003c/code\u003e\ninput, which is part of the same internal experiment. Do not use this in\nproduction as it is subject to change at any time. \u003ca\nhref\u003d\"https://redirect.github.com/github/codeql-action/pull/3064\"\u003e#3064\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.30.1 - 05 Sep 2025\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate default CodeQL bundle version to 2.23.0. \u003ca\nhref\u003d\"https://redirect.github.com/github/codeql-action/pull/3077\"\u003e#3077\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.30.0 - 01 Sep 2025\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReduce the size of the CodeQL Action, speeding up workflows by\napproximately 4 seconds. \u003ca\nhref\u003d\"https://redirect.github.com/github/codeql-action/pull/3054\"\u003e#3054\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e3.29.11 - 21 Aug 2025\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/github/codeql-action/commit/f443b600d91635bebf5b0d9ebc620189c0d6fba5\"\u003e\u003ccode\u003ef443b60\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/github/codeql-action/issues/3198\"\u003e#3198\u003c/a\u003e\nfrom github/update-v4.30.8-527f0f324\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/github/codeql-action/commit/7a2cb623ed691b64b58c7fa6bd6d90f62b322c65\"\u003e\u003ccode\u003e7a2cb62\u003c/code\u003e\u003c/a\u003e\nUpdate changelog for v4.30.8\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/github/codeql-action/commit/527f0f324a3fe984f808ba090b51cbe5a6c0118b\"\u003e\u003ccode\u003e527f0f3\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/github/codeql-action/issues/3195\"\u003e#3195\u003c/a\u003e\nfrom github/dependabot/npm_and_yarn/npm-minor-37415c...\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/github/codeql-action/commit/f402506f0fedd565aafbfc892e40a5b1c10814af\"\u003e\u003ccode\u003ef402506\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/github/codeql-action/issues/3196\"\u003e#3196\u003c/a\u003e\nfrom github/dependabot/github_actions/dot-github/wor...\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/github/codeql-action/commit/f5e53f947672aba2238515474c2b7b9f248ac5bc\"\u003e\u003ccode\u003ef5e53f9\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/github/codeql-action/issues/3197\"\u003e#3197\u003c/a\u003e\nfrom github/dependabot/github_actions/dot-github/wor...\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/github/codeql-action/commit/4e90a42a3e28a8bde9c8c11ba90d243ea352e61c\"\u003e\u003ccode\u003e4e90a42\u003c/code\u003e\u003c/a\u003e\nMerge pull request \u003ca\nhref\u003d\"https://redirect.github.com/github/codeql-action/issues/3193\"\u003e#3193\u003c/a\u003e\nfrom github/mbg/ff/tools-toolcache\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/github/codeql-action/commit/413a4a4df19c643ceab05ebad65b0d90532c778a\"\u003e\u003ccode\u003e413a4a4\u003c/code\u003e\u003c/a\u003e\nRebuild\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/github/codeql-action/commit/452186448a7a7dd9f635cd74bf6a5df3bac6a795\"\u003e\u003ccode\u003e4521864\u003c/code\u003e\u003c/a\u003e\nBump github/codeql-action from 3 to 4 in /.github/workflows\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/github/codeql-action/commit/eadf14bf6efa3061e98bdfbfd3487878f08af99c\"\u003e\u003ccode\u003eeadf14b\u003c/code\u003e\u003c/a\u003e\nBump ruby/setup-ruby\u003c/li\u003e\n\u003cli\u003e\u003ca\nhref\u003d\"https://github.com/github/codeql-action/commit/e1257b6fda873a6eba14d2dab41d637243c40d97\"\u003e\u003ccode\u003ee1257b6\u003c/code\u003e\u003c/a\u003e\nRebuild\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca\nhref\u003d\"https://github.com/github/codeql-action/compare/e296a935590eb16afc0c0108289f68c87e2a89a5...f443b600d91635bebf5b0d9ebc620189c0d6fba5\"\u003ecompare\nview\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dgithub/codeql-action\u0026package-manager\u003dgithub_actions\u0026previous-version\u003d4.30.7\u0026new-version\u003d4.30.8)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t\nalter it yourself. You can also trigger a rebase manually by commenting\n`@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits\nthat have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after\nyour CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge\nand block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating\nit. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all\nof the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this\ngroup update PR and stop Dependabot creating any more for the specific\ndependency\u0027s major version (unless you unignore this specific\ndependency\u0027s major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this\ngroup update PR and stop Dependabot creating any more for the specific\ndependency\u0027s minor version (unless you unignore this specific\ndependency\u0027s minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR\nand stop Dependabot creating any more for the specific dependency\n(unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore\nconditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will\nremove the ignore condition of the specified dependency and ignore\nconditions\n\n\n\u003c/details\u003e\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "c1a9e4d08a4f8912f76d1e24323b74e5a9766feb",
      "old_mode": 33188,
      "old_path": ".github/workflows/scorecard.yml",
      "new_id": "e13cb78d17e38c736d5a1c1af2c8fd6a9f908a1a",
      "new_mode": 33188,
      "new_path": ".github/workflows/scorecard.yml"
    }
  ]
}