Unreleased Commits - UnitVectorY-Labs

Repository: cfgraft
Default Branch: main
Latest Release: v0.3.5
Release Date: September 3, 2026
Unreleased Commits: 47
Days Behind: 58
Days Since Release: 60

Unreleased Commits

17c963b5862c35500c020c6e6984fb2a310f2cfd JaredHatfield Oct 31, 2026 19:29 merge
Merge pull request #93 from UnitVectorY-Labs/chore/remove-govulncheck-workflow chore: remove govulncheck-go workflow superseded by OSV-Scanner
93c3777ed92e309e2c8a0319552a873321958910 JaredHatfield Oct 31, 2026 19:19
chore: remove govulncheck-go workflow superseded by OSV-Scanner OSV-Scanner (osv-scanner-full.yml / osv-scanner-pr.yml) now provides dependency vulnerability scanning for this repository, so the Go-only govulncheck workflow is redundant. The two govulncheck GOVERSION targets are dropped from .repver as well, because repver fails when a target file cannot be read, and the file is removed from the .managedfiles manifest.
a62e8512a3b00055c0899e45c88cd834ba1967f9 JaredHatfield Oct 31, 2026 12:57 merge
Merge pull request #92 from UnitVectorY-Labs/dependabot/github_actions/astral-sh/setup-uv-10.3.3 build(deps): bump astral-sh/setup-uv from 10.3.1 to 10.3.3
f624b20abd14be80135bb35d2d488093e0da8599 JaredHatfield Oct 31, 2026 11:53 merge
Merge pull request #91 from UnitVectorY-Labs/dependabot/github_actions/UnitVectorY-Labs/chromadb-repo-indexer-1.2.1 build(deps): bump UnitVectorY-Labs/chromadb-repo-indexer from 1.2.0 to 1.2.1
a9359f1a8e92ce9fd887c0c629f29b4b543cad59 dependabot[bot] Oct 31, 2026 10:09
build(deps): bump astral-sh/setup-uv from 10.3.1 to 10.3.3 Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 10.3.1 to 10.3.3. - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](https://github.com/astral-sh/setup-uv/compare/18d369b23da25a81e9458561248e1aafff6a70fa...68559e99cc807c1eb7e9238fd43a15bba460eec2) --- updated-dependencies: - dependency-name: astral-sh/setup-uv dependency-version: 10.3.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
169f67285a10be724060b6a50dfea039596a929c dependabot[bot] Oct 31, 2026 10:09
build(deps): bump UnitVectorY-Labs/chromadb-repo-indexer Bumps [UnitVectorY-Labs/chromadb-repo-indexer](https://github.com/unitvectory-labs/chromadb-repo-indexer) from 1.2.0 to 1.2.1. - [Release notes](https://github.com/unitvectory-labs/chromadb-repo-indexer/releases) - [Commits](https://github.com/unitvectory-labs/chromadb-repo-indexer/compare/69bfd4086b9251106a5c8b036068e02f2d0731aa...8ee570e0b30e5252afadb146977b411b8acd3e34) --- updated-dependencies: - dependency-name: UnitVectorY-Labs/chromadb-repo-indexer dependency-version: 1.2.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
53a994641df642411d62087adb0825f103d93987 JaredHatfield Oct 25, 2026 00:20 merge
Merge pull request #90 from UnitVectorY-Labs/repver/go-v1.27.3 Update Go version to v1.27.3
f6bd11406e3419c73119eeaee1e6bae26882fe24 JaredHatfield Oct 25, 2026 00:11
Update Go version to v1.27.3
695f4e8148c97f4d2b27eaac4e27a5644c788ae7 JaredHatfield Oct 24, 2026 15:31
Add weekly OSV-Scanner vulnerability scans (#87) * Add weekly OSV-Scanner vulnerability scans * security: refine OSV scanner event filters * Split OSV scanner workflows by event
87af7454b5ad440c11902bf97331fb6280fa1333 JaredHatfield Oct 24, 2026 13:02 merge
Merge pull request #88 from UnitVectorY-Labs/dependabot/github_actions/codeql-52fc152648 build(deps): bump the codeql group with 3 updates
99f9d61dd870f96353c76c61c9cd6fc77f1adbae JaredHatfield Oct 24, 2026 12:20 merge
Merge pull request #89 from UnitVectorY-Labs/dependabot/github_actions/astral-sh/setup-uv-10.3.1 build(deps): bump astral-sh/setup-uv from 10.3.0 to 10.3.1
54184197f7ee6aaf3c90687061d9b53328cfb3c7 dependabot[bot] Oct 24, 2026 10:10
build(deps): bump astral-sh/setup-uv from 10.3.0 to 10.3.1 Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 10.3.0 to 10.3.1. - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](https://github.com/astral-sh/setup-uv/compare/1c37ad07a6a961277cf70c0d37d6f313000f5884...18d369b23da25a81e9458561248e1aafff6a70fa) --- updated-dependencies: - dependency-name: astral-sh/setup-uv dependency-version: 10.3.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
bd8430d31dbc7a39d013885786a6b71448ea35f4 dependabot[bot] Oct 24, 2026 10:10
build(deps): bump the codeql group with 3 updates Bumps the codeql group with 3 updates: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/analyze](https://github.com/github/codeql-action) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action). Updates `github/codeql-action/init` from 4.38.3 to 4.39.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/24c54180a607b1449ed407dd24f251e4e9147c8d...9b3254085494b55a0f7c4c2b3d2d52cc712ce370) Updates `github/codeql-action/analyze` from 4.38.3 to 4.39.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/24c54180a607b1449ed407dd24f251e4e9147c8d...9b3254085494b55a0f7c4c2b3d2d52cc712ce370) Updates `github/codeql-action/upload-sarif` from 4.38.3 to 4.39.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/24c54180a607b1449ed407dd24f251e4e9147c8d...9b3254085494b55a0f7c4c2b3d2d52cc712ce370) --- updated-dependencies: - dependency-name: github/codeql-action/init dependency-version: 4.39.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: codeql - dependency-name: github/codeql-action/analyze dependency-version: 4.39.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: codeql - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.39.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: codeql ... Signed-off-by: dependabot[bot] <support@github.com>
704f2178f6639bedb2e54d5762218d9d9b66bfd0 JaredHatfield Oct 18, 2026 12:54 merge
Merge pull request #82 from UnitVectorY-Labs/dependabot/go_modules/github.com/charmbracelet/x/ansi-0.11.9 build(deps): bump github.com/charmbracelet/x/ansi from 0.11.8 to 0.11.9
a8e0e5f2ba314be1a8fb9a5ca3be9788cf396cc7 JaredHatfield Oct 17, 2026 15:33 merge
Merge pull request #86 from UnitVectorY-Labs/repver/go-v1.27.2 Update Go version to v1.27.2
913fb0bf9b22e7f3777d02867fd9058e99152b88 JaredHatfield Oct 17, 2026 14:03
Update Go version to v1.27.2
0c4d0eea69f0c76fe2840db66137933cbc06dcbb JaredHatfield Oct 17, 2026 13:54 merge
Merge pull request #84 from UnitVectorY-Labs/dependabot/github_actions/codeql-307b189a33 build(deps): bump the codeql group with 3 updates
48e1a30d78abf9f796b5c33f6309bcecaf7d9d22 JaredHatfield Oct 17, 2026 13:51 merge
Merge pull request #85 from UnitVectorY-Labs/dependabot/github_actions/astral-sh/setup-uv-10.3.0 build(deps): bump astral-sh/setup-uv from 10.2.0 to 10.3.0
141408002589a3320c68caa187fdb0ecc58f767b dependabot[bot] Oct 17, 2026 10:12
build(deps): bump astral-sh/setup-uv from 10.2.0 to 10.3.0 Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 10.2.0 to 10.3.0. - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](https://github.com/astral-sh/setup-uv/compare/c18668ad3cf93ea998bef934396af7bb5c839dc7...1c37ad07a6a961277cf70c0d37d6f313000f5884) --- updated-dependencies: - dependency-name: astral-sh/setup-uv dependency-version: 10.3.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
9633977b594f6374fb89eaff99e1d43c03597f1d dependabot[bot] Oct 17, 2026 10:12
build(deps): bump the codeql group with 3 updates Bumps the codeql group with 3 updates: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/analyze](https://github.com/github/codeql-action) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action). Updates `github/codeql-action/init` from 4.38.2 to 4.38.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2...24c54180a607b1449ed407dd24f251e4e9147c8d) Updates `github/codeql-action/analyze` from 4.38.2 to 4.38.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2...24c54180a607b1449ed407dd24f251e4e9147c8d) Updates `github/codeql-action/upload-sarif` from 4.38.2 to 4.38.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2...24c54180a607b1449ed407dd24f251e4e9147c8d) --- updated-dependencies: - dependency-name: github/codeql-action/init dependency-version: 4.38.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: codeql - dependency-name: github/codeql-action/analyze dependency-version: 4.38.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: codeql - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.38.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: codeql ... Signed-off-by: dependabot[bot] <support@github.com>
72a85c98ab8b6cd60bd4f600608054e34d590f8a dependabot[bot] Oct 17, 2026 10:08
build(deps): bump github.com/charmbracelet/x/ansi from 0.11.8 to 0.11.9 Bumps [github.com/charmbracelet/x/ansi](https://github.com/charmbracelet/x) from 0.11.8 to 0.11.9. - [Commits](https://github.com/charmbracelet/x/compare/ansi/v0.11.8...ansi/v0.11.9) --- updated-dependencies: - dependency-name: github.com/charmbracelet/x/ansi dependency-version: 0.11.9 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
0aa382ea7e3c14fde6ab3b61c0c2c1a80605b83b JaredHatfield Oct 11, 2026 00:08 merge
Merge pull request #81 from UnitVectorY-Labs/repver/go-v1.27.2 Update Go version to v1.27.2
386419daefd9aaecf3226256b3ddd9d5ddf661f1 JaredHatfield Oct 10, 2026 23:49
Update Go version to v1.27.2
30b8ecf1022d3b4f8832a5868e1a748984ea49b6 JaredHatfield Oct 10, 2026 12:57 merge
Merge pull request #79 from UnitVectorY-Labs/dependabot/github_actions/actions/upload-artifact-7.0.2 build(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2
f7f7f69194acb2bfe0719a1f0a6ae0dba167bbcc JaredHatfield Oct 10, 2026 12:14 merge
Merge pull request #80 from UnitVectorY-Labs/fix/govulncheck-sarif-duplicate-stacks Fix govulncheck SARIF upload failures
7988666aac52d722e9d290906a580e752719e61b JaredHatfield Oct 10, 2026 12:05
fix: deduplicate govulncheck SARIF stacks
e144c7eb160812501d90eeb67ef962d914415fd2 dependabot[bot] Oct 10, 2026 10:13
build(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2 Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 7.0.1 to 7.0.2. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/043fb46d1a93c77aae656e7c1c64a875d1fc6a0a...cf430e030ddbb5b0abf93d22962f4752f3646cd9) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
092b287cab8520dcb4f0ae19c63994e788a30230 JaredHatfield Oct 6, 2026 01:49 merge
Merge pull request #78 from UnitVectorY-Labs/gitrepoforge/govulncheck-sarif Add official govulncheck SARIF scanning
b90c462acf270c66ff889eeb6cbdf4cd1566a82e JaredHatfield Oct 6, 2026 00:52
Add official govulncheck SARIF scanning
69a3560cf3eb2ce48d2fefa46b430b51d8c79dc3 JaredHatfield Oct 4, 2026 13:52 merge
Merge pull request #76 from UnitVectorY-Labs/dependabot/go_modules/charm.land/bubbletea/v2-2.0.10 build(deps): bump charm.land/bubbletea/v2 from 2.0.9 to 2.0.10
b3d76188067972c102c1d9787e9a844d8add9921 JaredHatfield Oct 4, 2026 12:53 merge
Merge pull request #77 from UnitVectorY-Labs/dependabot/github_actions/codeql-9d88a12d2b build(deps): bump the codeql group with 3 updates
23e84dad90a41df925921369a74f4bd30b7fd326 dependabot[bot] Oct 3, 2026 10:16
build(deps): bump the codeql group with 3 updates Bumps the codeql group with 3 updates: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/analyze](https://github.com/github/codeql-action) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action). Updates `github/codeql-action/init` from 4.38.1 to 4.38.2 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/1c5b675653bb5c22dbe9b12b556ec555138e09fd...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2) Updates `github/codeql-action/analyze` from 4.38.1 to 4.38.2 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/1c5b675653bb5c22dbe9b12b556ec555138e09fd...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2) Updates `github/codeql-action/upload-sarif` from 4.38.1 to 4.38.2 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/1c5b675653bb5c22dbe9b12b556ec555138e09fd...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2) --- updated-dependencies: - dependency-name: github/codeql-action/init dependency-version: 4.38.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: codeql - dependency-name: github/codeql-action/analyze dependency-version: 4.38.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: codeql - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.38.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: codeql ... Signed-off-by: dependabot[bot] <support@github.com>
72aacc5c4d8588dcfea16994f1b21ab8385c9b4e dependabot[bot] Oct 3, 2026 10:13
build(deps): bump charm.land/bubbletea/v2 from 2.0.9 to 2.0.10 --- updated-dependencies: - dependency-name: charm.land/bubbletea/v2 dependency-version: 2.0.10 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
4689ccc17f1a9eb2a170c7664adbe641a2987c9a JaredHatfield Sep 26, 2026 17:38 merge
Merge pull request #75 from UnitVectorY-Labs/dependabot/github_actions/codeql-c83b7ed659 build(deps): bump the codeql group with 2 updates
61f9d077b368abafde445e320200fe7531cb34cf dependabot[bot] Sep 26, 2026 16:43
build(deps): bump the codeql group with 2 updates Bumps the codeql group with 2 updates: [github/codeql-action/init](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action). Updates `github/codeql-action/init` from 4.38.0 to 4.38.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/b96794f015dfd88f77b49b1c93e0fa7110f94c63...1c5b675653bb5c22dbe9b12b556ec555138e09fd) Updates `github/codeql-action/analyze` from 4.38.0 to 4.38.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/b96794f015dfd88f77b49b1c93e0fa7110f94c63...1c5b675653bb5c22dbe9b12b556ec555138e09fd) --- updated-dependencies: - dependency-name: github/codeql-action/init dependency-version: 4.38.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: codeql - dependency-name: github/codeql-action/analyze dependency-version: 4.38.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: codeql ... Signed-off-by: dependabot[bot] <support@github.com>
2b49f621814e8665dfbf8d9b3d89c3a394ee472b JaredHatfield Sep 26, 2026 16:39 merge
Merge pull request #74 from UnitVectorY-Labs/gitrepoforge/cfgraft gitrepoforge: apply desired state for cfgraft
43c06dd9e28a6bbe3643ee53cf35dcfad90ba6ea JaredHatfield Sep 26, 2026 16:16
gitrepoforge: apply desired state for cfgraft
5d38894f3e8255e98ea3f8569982c5ded027e314 JaredHatfield Sep 26, 2026 13:10 merge
Merge pull request #70 from UnitVectorY-Labs/dependabot/github_actions/astral-sh/setup-uv-10.2.0 build(deps): bump astral-sh/setup-uv from 10.1.0 to 10.2.0
24bc40068f740a300c34498e9ef522234f31b904 JaredHatfield Sep 26, 2026 12:36 merge
Merge pull request #71 from UnitVectorY-Labs/dependabot/github_actions/github/codeql-action/upload-sarif-4.38.1 build(deps): bump github/codeql-action/upload-sarif from 4.38.0 to 4.38.1
85910c0d597c16cceffd41ea2fb8d22efe1c8f30 dependabot[bot] Sep 26, 2026 10:10
build(deps): bump github/codeql-action/upload-sarif Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) from 4.38.0 to 4.38.1. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/b96794f015dfd88f77b49b1c93e0fa7110f94c63...1c5b675653bb5c22dbe9b12b556ec555138e09fd) --- updated-dependencies: - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.38.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
f67efed35ac5f079df2f3cbdd434a50ea4dc9f2f dependabot[bot] Sep 26, 2026 10:09
build(deps): bump astral-sh/setup-uv from 10.1.0 to 10.2.0 Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 10.1.0 to 10.2.0. - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](https://github.com/astral-sh/setup-uv/compare/bec219d24cd3e171d82865faccec33120bb574f4...c18668ad3cf93ea998bef934396af7bb5c839dc7) --- updated-dependencies: - dependency-name: astral-sh/setup-uv dependency-version: 10.2.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
f5eb48da88182d11251eed425449abd29169b6aa JaredHatfield Sep 19, 2026 12:24 merge
Merge pull request #69 from UnitVectorY-Labs/dependabot/github_actions/astral-sh/setup-uv-10.1.0 build(deps): bump astral-sh/setup-uv from 10.0.1 to 10.1.0
a5266c4e91b75a8ddc54931972993f37bec34853 dependabot[bot] Sep 19, 2026 10:09
build(deps): bump astral-sh/setup-uv from 10.0.1 to 10.1.0 Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 10.0.1 to 10.1.0. - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](https://github.com/astral-sh/setup-uv/compare/20cfd1bf945f4377ade1205e4dbc17946fc9a30d...bec219d24cd3e171d82865faccec33120bb574f4) --- updated-dependencies: - dependency-name: astral-sh/setup-uv dependency-version: 10.1.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
66b98034dd7a08031b9a31ce5c08aa68417f7829 JaredHatfield Sep 12, 2026 14:48 merge
Merge pull request #68 from UnitVectorY-Labs/chore/codeql-4.38.0 Bump CodeQL version to 4.38.0
b39522397d31512ff15020dda1ed8bb8dff0738f Jared Sep 12, 2026 12:45
Bump CodeQL version to 4.38.0
ccb2faf1154b9f432db8cfaf88105dbf45d3f4cf JaredHatfield Sep 12, 2026 12:14 merge
Merge pull request #66 from UnitVectorY-Labs/dependabot/github_actions/github/codeql-action/upload-sarif-4.38.0 build(deps): bump github/codeql-action/upload-sarif from 4.37.9 to 4.38.0
f6dfb9f94dbb4f2f7425022a125150ca701c2b11 dependabot[bot] Sep 12, 2026 10:11
build(deps): bump github/codeql-action/upload-sarif Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) from 4.37.9 to 4.38.0. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/cdf488f595d80d6e07e03d4674febd5ab45fa938...b96794f015dfd88f77b49b1c93e0fa7110f94c63) --- updated-dependencies: - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.38.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>