[renovate]

This PR contains the following updates:

Package	Type	Update	Change
github/codeql-action	action	patch	v4.39.0 → v4.39.1

---

Release Notes

github/codeql-action

v4.39.1

Compare Source

• Update default CodeQL bundle version to 2.27.3. #​4256

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM (* 0-3 * * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

No actionable comments were generated in the recent review.

Recent review info

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: CHILL
• Plan: Enterprise
• Run ID: 4ee3bba0-d61e-4983-9cf4-215716e224d5

Commits

Reviewing files that changed from the base of the PR and between e41c606 and 38ac005.

Files selected for processing: 1

• .github/workflows/scorecards.yml

Included review availability: This review used your included allowance. Your plan provides up to 12 included reviews per hour; 8 remain after this review.

Walkthrough

The scorecards workflow updates the pinned revision of its SARIF upload action from v4.39.0 to v4.39.1.

Changes: Scorecards workflow

Layer / File(s)	Summary
Update SARIF upload action .github/workflows/scorecards.yml	The SARIF upload step now pins github/codeql-action/upload-sarif to v4.39.1.

Priority: Low

Estimated code review effort: 1 (Trivial) | ~3 minutes

Change: Other

Suggested reviewers: acepresso, bohdanmar

Merge Risk: Minimal · up to 38ac0

The workflow revision update is narrowly scoped and presents no identified merge-blocking risk.

Pre-merge checks: 5

Check name	Status	Explanation
Title check		The title states the change: it updates the github/codeql-action action to v4.39.1 on the main branch. The raw summary confirms the workflow pins the SARIF upload step from v4.39.0 to v4.39.1. The tit…
Description check		The description is a Renovate-generated dependency update notice. It names github/codeql-action, the version change from v4.39.0 to v4.39.1, and the release notes for the bundle update to CodeQL 2.27.…
Docstring Coverage		No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Documentation-only edits and deletions within survi…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Full details: Title check

Explanation

The title states the change: it updates the github/codeql-action action to v4.39.1 on the main branch. The raw summary confirms the workflow pins the SARIF upload step from v4.39.0 to v4.39.1. The title is specific and matches the changeset.

Full details: Description check

Explanation

The description is a Renovate-generated dependency update notice. It names github/codeql-action, the version change from v4.39.0 to v4.39.1, and the release notes for the bundle update to CodeQL 2.27.3. This matches the changeset, which updates the action version in the scorecards workflow.

Full details: Docstring Coverage

Explanation

No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Documentation-only edits and deletions within surviving functions are included; unchanged diff context and fully deleted functions are excluded. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

_{Comment @coderabbitai help to get the list of available commands.}