tofu-template-tester - Unreleased Commits

Repository: tofu-template-tester

Default Branch: main

Latest Release: v0.2.2

Release Date: September 3, 2026

Unreleased Commits: 47

Days Behind: 58

Days Since Release: 60

Unreleased Commits

95df556c4401343226ef7ab45a0feec7719eb735 JaredHatfield Oct 31, 2026 21:59 merge

Merge pull request #136 from UnitVectorY-Labs/gitrepoforge/tofu-template-tester gitrepoforge: apply desired state for tofu-template-tester

bd7cea149b7d7836f5210f25195fc7a4b164977c JaredHatfield Oct 31, 2026 21:15

gitrepoforge: apply desired state for tofu-template-tester

04774abc982601a71e49c165df1e479e84bffe83 JaredHatfield Oct 31, 2026 19:29 merge

Merge pull request #139 from UnitVectorY-Labs/chore/remove-govulncheck-workflow chore: remove govulncheck-go workflow superseded by OSV-Scanner

d961695450cf1418dee5fb7135a4656ffea8c55e JaredHatfield Oct 31, 2026 19:23

chore: remove govulncheck-go workflow superseded by OSV-Scanner OSV-Scanner (osv-scanner-full.yml / osv-scanner-pr.yml) now provides dependency vulnerability scanning for this repository, so the Go-only govulncheck workflow is redundant. The two govulncheck GOVERSION targets are dropped from .repver as well, because repver fails when a target file cannot be read, and the file is removed from the .managedfiles manifest.

24a165a15b3df36eecbe99c33a16b26b712b75f0 JaredHatfield Oct 31, 2026 12:57 merge

Merge pull request #138 from UnitVectorY-Labs/dependabot/github_actions/astral-sh/setup-uv-10.3.3 build(deps): bump astral-sh/setup-uv from 10.3.1 to 10.3.3

474c73822f0daf84ee6d39bb7b8d43bb8af2ccd4 dependabot[bot] Oct 31, 2026 12:02

build(deps): bump astral-sh/setup-uv from 10.3.1 to 10.3.3 Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 10.3.1 to 10.3.3. - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](https://github.com/astral-sh/setup-uv/compare/18d369b23da25a81e9458561248e1aafff6a70fa...68559e99cc807c1eb7e9238fd43a15bba460eec2) --- updated-dependencies: - dependency-name: astral-sh/setup-uv dependency-version: 10.3.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

795ae9bb813610b981b95b3a345140bc2ac4aa6a JaredHatfield Oct 31, 2026 11:53 merge

Merge pull request #137 from UnitVectorY-Labs/dependabot/github_actions/UnitVectorY-Labs/chromadb-repo-indexer-1.2.1 build(deps): bump UnitVectorY-Labs/chromadb-repo-indexer from 1.2.0 to 1.2.1

200c52b76eaea9edc361118a54827d6ed71c80da dependabot[bot] Oct 31, 2026 10:13

build(deps): bump UnitVectorY-Labs/chromadb-repo-indexer Bumps [UnitVectorY-Labs/chromadb-repo-indexer](https://github.com/unitvectory-labs/chromadb-repo-indexer) from 1.2.0 to 1.2.1. - [Release notes](https://github.com/unitvectory-labs/chromadb-repo-indexer/releases) - [Commits](https://github.com/unitvectory-labs/chromadb-repo-indexer/compare/69bfd4086b9251106a5c8b036068e02f2d0731aa...8ee570e0b30e5252afadb146977b411b8acd3e34) --- updated-dependencies: - dependency-name: UnitVectorY-Labs/chromadb-repo-indexer dependency-version: 1.2.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

b032791a5153e237b230913df5f79c7817fe1366 JaredHatfield Oct 25, 2026 00:20 merge

Merge pull request #135 from UnitVectorY-Labs/repver/go-v1.27.3 Update Go version to v1.27.3

096d5da0c961aa4eccafd2f3eef275b92c3a42c3 JaredHatfield Oct 25, 2026 00:14

Update Go version to v1.27.3

c8fe4820d20c51915824446276640803ba4c7dc9 JaredHatfield Oct 24, 2026 15:36

Add weekly OSV-Scanner vulnerability scans (#132) * Add weekly OSV-Scanner vulnerability scans * ci: run OSV scans for merge queue checks * Update OSV scanner workflows

efcf50b6da560881dd12b67c1d60834e764bcc6d JaredHatfield Oct 24, 2026 13:02 merge

Merge pull request #133 from UnitVectorY-Labs/dependabot/github_actions/codeql-52fc152648 build(deps): bump the codeql group across 1 directory with 3 updates

d3005c2ef4859e1fe1754a644289ec0dda42465c dependabot[bot] Oct 24, 2026 12:30

build(deps): bump the codeql group across 1 directory with 3 updates Bumps the codeql group with 3 updates in the / directory: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/analyze](https://github.com/github/codeql-action) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action). Updates `github/codeql-action/init` from 4.38.3 to 4.39.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/24c54180a607b1449ed407dd24f251e4e9147c8d...9b3254085494b55a0f7c4c2b3d2d52cc712ce370) Updates `github/codeql-action/analyze` from 4.38.3 to 4.39.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/24c54180a607b1449ed407dd24f251e4e9147c8d...9b3254085494b55a0f7c4c2b3d2d52cc712ce370) Updates `github/codeql-action/upload-sarif` from 4.38.3 to 4.39.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/24c54180a607b1449ed407dd24f251e4e9147c8d...9b3254085494b55a0f7c4c2b3d2d52cc712ce370) --- updated-dependencies: - dependency-name: github/codeql-action/analyze dependency-version: 4.39.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: codeql - dependency-name: github/codeql-action/init dependency-version: 4.39.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: codeql - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.39.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: codeql ... Signed-off-by: dependabot[bot] <support@github.com>

257b4bb5981893a45f6ea7a130d48b626a6c21a6 JaredHatfield Oct 24, 2026 12:20 merge

Merge pull request #134 from UnitVectorY-Labs/dependabot/github_actions/astral-sh/setup-uv-10.3.1 build(deps): bump astral-sh/setup-uv from 10.3.0 to 10.3.1

9ec33ac37f239b6efe93f2263e96019f9a852eb8 dependabot[bot] Oct 24, 2026 10:10

build(deps): bump astral-sh/setup-uv from 10.3.0 to 10.3.1 Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 10.3.0 to 10.3.1. - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](https://github.com/astral-sh/setup-uv/compare/1c37ad07a6a961277cf70c0d37d6f313000f5884...18d369b23da25a81e9458561248e1aafff6a70fa) --- updated-dependencies: - dependency-name: astral-sh/setup-uv dependency-version: 10.3.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

c23496f2f3dd883b381bd5dd67b6425e203931de JaredHatfield Oct 17, 2026 15:33 merge

Merge pull request #131 from UnitVectorY-Labs/repver/go-v1.27.2 Update Go version to v1.27.2

715ee2f2b60d68edeea060b0fa2bf03059086dc8 JaredHatfield Oct 17, 2026 14:07

Update Go version to v1.27.2

7ae005d5fce33ca0e7aa8fa11c4c508467d9825d JaredHatfield Oct 17, 2026 13:54 merge

Merge pull request #129 from UnitVectorY-Labs/dependabot/github_actions/codeql-307b189a33 build(deps): bump the codeql group with 3 updates

d78a1c3435dd77c4b1f1c38af72d4fd37f6e3b51 JaredHatfield Oct 17, 2026 13:51 merge

Merge pull request #130 from UnitVectorY-Labs/dependabot/github_actions/astral-sh/setup-uv-10.3.0 build(deps): bump astral-sh/setup-uv from 10.2.0 to 10.3.0

126ff9bd65db7f8c416218c63dd323c915e1121d dependabot[bot] Oct 17, 2026 10:09

build(deps): bump astral-sh/setup-uv from 10.2.0 to 10.3.0 Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 10.2.0 to 10.3.0. - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](https://github.com/astral-sh/setup-uv/compare/c18668ad3cf93ea998bef934396af7bb5c839dc7...1c37ad07a6a961277cf70c0d37d6f313000f5884) --- updated-dependencies: - dependency-name: astral-sh/setup-uv dependency-version: 10.3.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

140fab1d7d2936979ec32c6c0a1afb54c57aa523 dependabot[bot] Oct 17, 2026 10:09

build(deps): bump the codeql group with 3 updates Bumps the codeql group with 3 updates: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/analyze](https://github.com/github/codeql-action) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action). Updates `github/codeql-action/init` from 4.38.2 to 4.38.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2...24c54180a607b1449ed407dd24f251e4e9147c8d) Updates `github/codeql-action/analyze` from 4.38.2 to 4.38.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2...24c54180a607b1449ed407dd24f251e4e9147c8d) Updates `github/codeql-action/upload-sarif` from 4.38.2 to 4.38.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2...24c54180a607b1449ed407dd24f251e4e9147c8d) --- updated-dependencies: - dependency-name: github/codeql-action/init dependency-version: 4.38.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: codeql - dependency-name: github/codeql-action/analyze dependency-version: 4.38.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: codeql - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.38.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: codeql ... Signed-off-by: dependabot[bot] <support@github.com>

e6388fbad780231ae0f3aff7174cc15bba5cc3ff JaredHatfield Oct 11, 2026 00:06 merge

Merge pull request #128 from UnitVectorY-Labs/repver/go-v1.27.2 Update Go version to v1.27.2

e06381ff194f006754e62464eafa7af98e9d2b40 JaredHatfield Oct 10, 2026 23:52

Update Go version to v1.27.2

aa21ae5623c034927b5941307f06546ac4c9ab61 JaredHatfield Oct 10, 2026 12:55 merge

Merge pull request #126 from UnitVectorY-Labs/dependabot/github_actions/actions/upload-artifact-7.0.2 build(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2

01ce0d6b95116e4136f884889e6ad3fcdca25922 dependabot[bot] Oct 10, 2026 12:18

build(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2 Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 7.0.1 to 7.0.2. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/043fb46d1a93c77aae656e7c1c64a875d1fc6a0a...cf430e030ddbb5b0abf93d22962f4752f3646cd9) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

5b8e4670fbd821f7937ff13290416b9b9f4db392 JaredHatfield Oct 10, 2026 12:14 merge

Merge pull request #127 from UnitVectorY-Labs/fix/govulncheck-sarif-duplicate-stacks Fix govulncheck SARIF upload failures

44128f483b1898be03e42ff458b872ed6b9d310f JaredHatfield Oct 10, 2026 12:06

fix: deduplicate govulncheck SARIF stacks

ef6c656df96648b286a2ecb264ffdb41d369409e JaredHatfield Oct 6, 2026 01:47 merge

Merge pull request #125 from UnitVectorY-Labs/gitrepoforge/govulncheck-sarif Add official govulncheck SARIF scanning

24bf7c665ce36a97ba0169b371efebd28c54f382 JaredHatfield Oct 6, 2026 00:56

Add official govulncheck SARIF scanning

e01b0efe03ced1f603632eaf2de088393ea103fe JaredHatfield Oct 4, 2026 12:53 merge

Merge pull request #124 from UnitVectorY-Labs/dependabot/github_actions/codeql-9d88a12d2b build(deps): bump the codeql group with 3 updates

13a5d2b9111d4767b7f654e235c52a01f0813035 dependabot[bot] Oct 3, 2026 10:09

build(deps): bump the codeql group with 3 updates Bumps the codeql group with 3 updates: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/analyze](https://github.com/github/codeql-action) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action). Updates `github/codeql-action/init` from 4.38.1 to 4.38.2 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/1c5b675653bb5c22dbe9b12b556ec555138e09fd...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2) Updates `github/codeql-action/analyze` from 4.38.1 to 4.38.2 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/1c5b675653bb5c22dbe9b12b556ec555138e09fd...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2) Updates `github/codeql-action/upload-sarif` from 4.38.1 to 4.38.2 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/1c5b675653bb5c22dbe9b12b556ec555138e09fd...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2) --- updated-dependencies: - dependency-name: github/codeql-action/init dependency-version: 4.38.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: codeql - dependency-name: github/codeql-action/analyze dependency-version: 4.38.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: codeql - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.38.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: codeql ... Signed-off-by: dependabot[bot] <support@github.com>

0e32a46c607494e6263b68312ea7d302e9558d52 JaredHatfield Sep 26, 2026 17:38 merge

Merge pull request #123 from UnitVectorY-Labs/dependabot/github_actions/codeql-c83b7ed659 build(deps): bump the codeql group with 2 updates

2edcbf2aa47db2a86f921d42bca58ac7e28ad937 dependabot[bot] Sep 26, 2026 16:58

build(deps): bump the codeql group with 2 updates Bumps the codeql group with 2 updates: [github/codeql-action/init](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action). Updates `github/codeql-action/init` from 4.38.0 to 4.38.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/b96794f015dfd88f77b49b1c93e0fa7110f94c63...1c5b675653bb5c22dbe9b12b556ec555138e09fd) Updates `github/codeql-action/analyze` from 4.38.0 to 4.38.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/b96794f015dfd88f77b49b1c93e0fa7110f94c63...1c5b675653bb5c22dbe9b12b556ec555138e09fd) --- updated-dependencies: - dependency-name: github/codeql-action/init dependency-version: 4.38.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: codeql - dependency-name: github/codeql-action/analyze dependency-version: 4.38.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: codeql ... Signed-off-by: dependabot[bot] <support@github.com>

f41eff8e698ae321582ddfe0fb5333484b81f1af JaredHatfield Sep 26, 2026 16:54 merge

Merge pull request #122 from UnitVectorY-Labs/gitrepoforge/tofu-template-tester gitrepoforge: apply desired state for tofu-template-tester

eef467ae5aca0d00dbd3c04594612d687336cd64 JaredHatfield Sep 26, 2026 16:17

gitrepoforge: apply desired state for tofu-template-tester

05a0cc19a35eb20c748816b904bb7ae94764fd1c JaredHatfield Sep 26, 2026 13:54 merge

Merge pull request #120 from UnitVectorY-Labs/dependabot/github_actions/astral-sh/setup-uv-10.2.0 build(deps): bump astral-sh/setup-uv from 10.1.0 to 10.2.0

758d066fb48be09afcbb441870daf2bc1b1a8e8f dependabot[bot] Sep 26, 2026 12:41

build(deps): bump astral-sh/setup-uv from 10.1.0 to 10.2.0 Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 10.1.0 to 10.2.0. - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](https://github.com/astral-sh/setup-uv/compare/bec219d24cd3e171d82865faccec33120bb574f4...c18668ad3cf93ea998bef934396af7bb5c839dc7) --- updated-dependencies: - dependency-name: astral-sh/setup-uv dependency-version: 10.2.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

ae4b3f90e6be75a3ae657f1b862c839a2983ccae JaredHatfield Sep 26, 2026 12:34 merge

Merge pull request #121 from UnitVectorY-Labs/dependabot/github_actions/github/codeql-action/upload-sarif-4.38.1 build(deps): bump github/codeql-action/upload-sarif from 4.38.0 to 4.38.1

0eda1b9b14f6eb64e41638d1780014ca009ad283 dependabot[bot] Sep 26, 2026 10:13

build(deps): bump github/codeql-action/upload-sarif Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) from 4.38.0 to 4.38.1. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/b96794f015dfd88f77b49b1c93e0fa7110f94c63...1c5b675653bb5c22dbe9b12b556ec555138e09fd) --- updated-dependencies: - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.38.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

d9b22c426fd96dbf4170834f3a320568b4a31225 JaredHatfield Sep 19, 2026 13:40 merge

Merge pull request #117 from UnitVectorY-Labs/dependabot/github_actions/codecov/codecov-action-7.1.1 build(deps): bump codecov/codecov-action from 7.0.0 to 7.1.1

2b75215891f006f53290e61f9f04afcc25617caf dependabot[bot] Sep 19, 2026 12:26

build(deps): bump codecov/codecov-action from 7.0.0 to 7.1.1 Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 7.0.0 to 7.1.1. - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/codecov/codecov-action/compare/fb8b3582c8e4def4969c97caa2f19720cb33a72f...303a32d7a59b442fa8d48b6a1cc6825c09c847a5) --- updated-dependencies: - dependency-name: codecov/codecov-action dependency-version: 7.1.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

aabbdc757065f32fa31bd07a7ffd56516bc2a4af JaredHatfield Sep 19, 2026 12:21 merge

Merge pull request #116 from UnitVectorY-Labs/dependabot/github_actions/astral-sh/setup-uv-10.1.0 build(deps): bump astral-sh/setup-uv from 10.0.1 to 10.1.0

27be1f23360126272d22a96c51dcc9a9e57b3a92 dependabot[bot] Sep 19, 2026 10:03

build(deps): bump astral-sh/setup-uv from 10.0.1 to 10.1.0 Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 10.0.1 to 10.1.0. - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](https://github.com/astral-sh/setup-uv/compare/20cfd1bf945f4377ade1205e4dbc17946fc9a30d...bec219d24cd3e171d82865faccec33120bb574f4) --- updated-dependencies: - dependency-name: astral-sh/setup-uv dependency-version: 10.1.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

addc118bab941e199b609b0b8686749f279cdee1 JaredHatfield Sep 12, 2026 14:46 merge

Merge pull request #115 from UnitVectorY-Labs/chore/codeql-4.38.0 Bump CodeQL version to 4.38.0

8431d101d599e6e2642a2a89ac33f5142cd82710 Jared Sep 12, 2026 14:13

Bump CodeQL version to 4.38.0

964c4997c493a9c852d10f9b872b0f24de84da06 JaredHatfield Sep 12, 2026 12:11 merge

Merge pull request #113 from UnitVectorY-Labs/dependabot/github_actions/github/codeql-action/upload-sarif-4.38.0 build(deps): bump github/codeql-action/upload-sarif from 4.37.9 to 4.38.0

4f66bdb57a7d9aaed4b2f8273ee3619f2f3627e4 dependabot[bot] Sep 12, 2026 10:06

build(deps): bump github/codeql-action/upload-sarif Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) from 4.37.9 to 4.38.0. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/cdf488f595d80d6e07e03d4674febd5ab45fa938...b96794f015dfd88f77b49b1c93e0fa7110f94c63) --- updated-dependencies: - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.38.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>