build(deps): update grouped CodeQL actions to v4.39.1

Merged
DE
2d ago
+2-2

Summary

  • Update both github/codeql-action/init and github/codeql-action/analyze from v4.38.3 to v4.39.1, pinning both to the official v4.39.1 commit 9b3254085494b55a0f7c4c2b3d2d52cc712ce370.
  • Preserve the CodeQL language matrix (Python, JavaScript/TypeScript, GitHub Actions), security-extended queries, checkout, permissions, build modes, and analysis configuration.
  • Reconcile with master@e820d39 in merge commit 35b6378, retaining all intervening work. Diff from master is the two CodeQL action pin updates in .github/workflows/codeql.yml only.

Compatibility check

  • The v4.39 release raises the minimum supported CodeQL bundle to 2.20.7; this workflow does not pin an older bundle and uses the action's supported bundled/default CodeQL version. v4.39.1 brings the default bundle to 2.27.3.
  • v4.39 validates the optional checkout_path value; this workflow checks out into the workspace root and does not set a custom path.
  • This updates both action components atomically and uses a SHA independently verified against GitHub's annotated v4.39.1 tag (no floating tags).
  • Existing checks on the previous v4.39.0 head passed, but current exact-head CI on 35b6378 must pass before any merge. Maintainer approval is required.

GitHub release: https://github.com/github/codeql-action/releases/tag/v4.39.1