dependabot[bot] 08925fe4c1 ci(deps): bump the github-actions group with 4 updates (#8133) ...

Bumps the github-actions group with 4 updates: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/analyze](https://github.com/github/codeql-action), [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action).


Updates `github/codeql-action/init` from 4.38.1 to 4.38.2
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/1c5b675653bb5c22dbe9b12b556ec555138e09fd...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2)

Updates `github/codeql-action/analyze` from 4.38.1 to 4.38.2
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/1c5b675653bb5c22dbe9b12b556ec555138e09fd...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2)

Updates `trufflesecurity/trufflehog` from 3.97.5 to 3.97.9
- [Release notes](https://github.com/trufflesecurity/trufflehog/releases)
- [Commits](https://github.com/trufflesecurity/trufflehog/compare/f714bf454f350590f4a24c3ddb1aef02c35bf5b6...4dd8831c5f12599465d4d45c3c447b4018a34c85)

Updates `github/codeql-action/upload-sarif` from 4.38.1 to 4.38.2
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/1c5b675653bb5c22dbe9b12b556ec555138e09fd...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2)

---
updated-dependencies:
- dependency-name: github/codeql-action/init
  dependency-version: 4.38.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: github/codeql-action/analyze
  dependency-version: 4.38.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: trufflesecurity/trufflehog
  dependency-version: 3.97.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.38.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

2026-10-02 06:17:06 -04:00

..

api-automation-tools-coverage.yml

ci: share one body across the per-script coverage workflows (#7926)

2026-09-02 20:34:16 -07:00

cdef-coverage.yml

test(cdef): enforce resolver coverage (#7974)

2026-09-23 13:38:51 -04:00

cli-coverage.yml

ci: restore develop dependency compatibility (#8010)

2026-09-08 00:14:48 -05:00

client-address-coverage.yml

ci: share one body across the per-script coverage workflows (#7926)

2026-09-02 20:34:16 -07:00

codeql.yml

ci(deps): bump the github-actions group with 4 updates (#8133)

2026-10-02 06:17:06 -04:00

cookie-coverage.yml

fix(auth): reject malformed remember cookies (#7976)

2026-09-12 20:56:24 -04:00

csrf-action-coverage.yml

fix(csrf): require POST tokens for state-changing actions (#7991)

2026-09-12 15:09:25 -04:00

csrf-coverage.yml

Replace csrf-magic with maintained CSRF protection (#7744)

2026-09-18 00:16:39 -04:00

csv-window-coverage.yml

fix(csv): align export and graph sample windows (#7987)

2026-09-12 20:18:00 -04:00

entity-sensor-coverage.yml

ci: share one body across the per-script coverage workflows (#7926)

2026-09-02 20:34:16 -07:00

f5-cpu-coverage.yml

ci: share one body across the per-script coverage workflows (#7926)

2026-09-02 20:34:16 -07:00

form-coverage.yml

ci: share one body across the per-script coverage workflows (#7926)

2026-09-02 20:34:16 -07:00

htmx-filters.yml

build: raise the 1.3 floor to PHP 8.3 (#7939)

2026-09-06 08:44:40 -07:00

i18n-validation.yml

Make PHP 8.1 dependency builds reproducible (#7746)

2026-08-16 22:06:36 +01:00

installer-coverage.yml

build: raise the 1.3 floor to PHP 8.3 (#7939)

2026-09-06 08:44:40 -07:00

juniper-operating-coverage.yml

ci: share one body across the per-script coverage workflows (#7926)

2026-09-02 20:34:16 -07:00

ldap-e2e.yml

security: reject LDAP logins that skip a domain bind (#8009)

2026-09-12 20:49:55 -04:00

md5-finder-coverage.yml

ci: share one body across the per-script coverage workflows (#7926)

2026-09-02 20:34:16 -07:00

nightly-php.yml

build: raise the 1.3 floor to PHP 8.3 (#7939)

2026-09-06 08:44:40 -07:00

notification-api-coverage.yml

ci: share one body across the per-script coverage workflows (#7926)

2026-09-02 20:34:16 -07:00

oldissues.yml

ci: stop the nightly lock job failing on discussions (#7943)

2026-09-04 19:37:04 -07:00

perf-regression.yml

Make PHP 8.1 dependency builds reproducible (#7746)

2026-08-16 22:06:36 +01:00

pr-branch-update.yml

chore: stop pull requests conflicting each other on shared files (#7798)

2026-08-25 21:10:50 -07:00

process-lock-coverage.yml

build: raise the 1.3 floor to PHP 8.3 (#7939)

2026-09-06 08:44:40 -07:00

quality-extended.yml

build: raise the 1.3 floor to PHP 8.3 (#7939)

2026-09-06 08:44:40 -07:00

release-artifact.yml

build: raise the 1.3 floor to PHP 8.3 (#7939)

2026-09-06 08:44:40 -07:00

rocky-linux.yml

ci: restore develop dependency compatibility (#8010)

2026-09-08 00:14:48 -05:00

rrd-graph-item-coverage.yml

ci: restore coverage and workflow policy gates (#7791)

2026-08-22 19:05:25 -07:00

script-coverage.yml

build: raise the 1.3 floor to PHP 8.3 (#7939)

2026-09-06 08:44:40 -07:00

security-baseline-refresh.yml

Make PHP 8.1 dependency builds reproducible (#7746)

2026-08-16 22:06:36 +01:00

security-posture.yml

ci(deps): bump the github-actions group with 4 updates (#8133)

2026-10-02 06:17:06 -04:00

security-review.yml

Make PHP 8.1 dependency builds reproducible (#7746)

2026-08-16 22:06:36 +01:00

security-sink-guard.yml

Make PHP 8.1 dependency builds reproducible (#7746)

2026-08-16 22:06:36 +01:00

security.yml

Make PHP 8.1 dependency builds reproducible (#7746)

2026-08-16 22:06:36 +01:00

semgrep.yml

ci(deps): bump the github-actions group with 4 updates (#8133)

2026-10-02 06:17:06 -04:00

snmp-coverage.yml

build: raise the 1.3 floor to PHP 8.3 (#7939)

2026-09-06 08:44:40 -07:00

syntax.yml

build: raise the 1.3 floor to PHP 8.3 (#7939)

2026-09-06 08:44:40 -07:00

update-contributors.yml

Make PHP 8.1 dependency builds reproducible (#7746)

2026-08-16 22:06:36 +01:00