ci(deps): bump the github-actions group across 1 directory with 6 updates

[dependabot]

Bumps the github-actions group with 6 updates in the / directory:

Package	From	To
github/codeql-action/init	4.38.0	4.38.1
github/codeql-action/analyze	4.38.0	4.38.1
cloudflare/wrangler-action	4.0.0	4.1.2
github/codeql-action/upload-sarif	4.38.0	4.38.1
renovatebot/github-action	46.2.6	46.3.3
codecov/codecov-action	7.0.0	7.1.1

Updates github/codeql-action/init from 4.38.0 to 4.38.1

Release notes

Sourced from github/codeql-action/init's releases.

v4.38.1

• The CodeQL Action now has experimental support for CodeQL releases for which per-language bundles are available. Per-language bundles support analysis for a single language and are therefore smaller than the combined bundles that allow analysis for all supported languages. As a result, per-language bundles take up less space on disk and are faster to download. We expect to roll this change out to everyone in the coming weeks. #4146

Changelog

Sourced from github/codeql-action/init's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

4.38.2 - 24 Sept 2026

• Update default CodeQL bundle version to 2.27.1. #4160

4.38.1 - 18 Sept 2026

• The CodeQL Action now has experimental support for CodeQL releases for which per-language bundles are available. Per-language bundles support analysis for a single language and are therefore smaller than the combined bundles that allow analysis for all supported languages. As a result, per-language bundles take up less space on disk and are faster to download. We expect to roll this change out to everyone in the coming weeks. #4146

4.38.0 - 09 Sept 2026

• On GitHub-hosted runners, the CodeQL Action now deletes unused CodeQL bundles from the toolcache before downloading a different bundle, which frees up disk space for the analysis. We expect to roll this change out to everyone in September. #4124
• The CodeQL Action now supports CodeQL releases that are compatible with Linux Arm64 and downloads the native linux-arm64 CodeQL bundle when available. #4072
• Update default CodeQL bundle version to 2.27.0. #4129

4.37.9 - 26 Aug 2026

• Update default CodeQL bundle version to 2.26.4. #4106

4.37.8 - 21 Aug 2026

No user facing changes.

4.37.7 - 13 Aug 2026

• Update default CodeQL bundle version to 2.26.3. #4085

4.37.6 - 04 Aug 2026

• Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to .github/codeql-config.yml to align it with the suggested path that is used elsewhere. #4070

4.37.5 - 03 Aug 2026

• Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the init Action instead of falling back to downloading the bundle before extracting it. #4061

4.37.4 - 29 Jul 2026

• This version of the CodeQL Action adds support for the tools input for the codeql-action/init step to be specified using a github-codeql-tools repository property. This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to toolcache to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for tools in the workflow definition always takes precedence unless the value of the repository property starts with !. #4037
• Update default CodeQL bundle version to 2.26.2. #4051

4.37.3 - 22 Jul 2026

No user facing changes.

... (truncated)

Commits

• 1c5b675 Merge pull request #4152 from github/update-v4.38.1-a65b83a73
• a97cdca Add changelog entry for #4146
• cc6c691 Update changelog for v4.38.1
• a65b83a Merge pull request #4146 from github/henrymercer/per-language-bundles-pr
• 07fa87d Clarify the latest-nightly eligibility exception
• f18f353 Describe the bundle URL resolver
• ecec9b5 Share per-language telemetry fields without renaming
• 79fe3a1 Move download telemetry into the status-report directory
• ead1f7d Rename the platform module
• 549d498 Simplify per-language platform eligibility checks
• Additional commits viewable in compare view

Updates github/codeql-action/analyze from 4.38.0 to 4.38.1

Release notes

Sourced from github/codeql-action/analyze's releases.

v4.38.1

• The CodeQL Action now has experimental support for CodeQL releases for which per-language bundles are available. Per-language bundles support analysis for a single language and are therefore smaller than the combined bundles that allow analysis for all supported languages. As a result, per-language bundles take up less space on disk and are faster to download. We expect to roll this change out to everyone in the coming weeks. #4146

Changelog

Sourced from github/codeql-action/analyze's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

4.38.2 - 24 Sept 2026

• Update default CodeQL bundle version to 2.27.1. #4160

4.38.1 - 18 Sept 2026

• The CodeQL Action now has experimental support for CodeQL releases for which per-language bundles are available. Per-language bundles support analysis for a single language and are therefore smaller than the combined bundles that allow analysis for all supported languages. As a result, per-language bundles take up less space on disk and are faster to download. We expect to roll this change out to everyone in the coming weeks. #4146

4.38.0 - 09 Sept 2026

• On GitHub-hosted runners, the CodeQL Action now deletes unused CodeQL bundles from the toolcache before downloading a different bundle, which frees up disk space for the analysis. We expect to roll this change out to everyone in September. #4124
• The CodeQL Action now supports CodeQL releases that are compatible with Linux Arm64 and downloads the native linux-arm64 CodeQL bundle when available. #4072
• Update default CodeQL bundle version to 2.27.0. #4129

4.37.9 - 26 Aug 2026

• Update default CodeQL bundle version to 2.26.4. #4106

4.37.8 - 21 Aug 2026

No user facing changes.

4.37.7 - 13 Aug 2026

• Update default CodeQL bundle version to 2.26.3. #4085

4.37.6 - 04 Aug 2026

• Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to .github/codeql-config.yml to align it with the suggested path that is used elsewhere. #4070

4.37.5 - 03 Aug 2026

• Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the init Action instead of falling back to downloading the bundle before extracting it. #4061

4.37.4 - 29 Jul 2026

• This version of the CodeQL Action adds support for the tools input for the codeql-action/init step to be specified using a github-codeql-tools repository property. This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to toolcache to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for tools in the workflow definition always takes precedence unless the value of the repository property starts with !. #4037
• Update default CodeQL bundle version to 2.26.2. #4051

4.37.3 - 22 Jul 2026

No user facing changes.

... (truncated)

Commits

• 1c5b675 Merge pull request #4152 from github/update-v4.38.1-a65b83a73
• a97cdca Add changelog entry for #4146
• cc6c691 Update changelog for v4.38.1
• a65b83a Merge pull request #4146 from github/henrymercer/per-language-bundles-pr
• 07fa87d Clarify the latest-nightly eligibility exception
• f18f353 Describe the bundle URL resolver
• ecec9b5 Share per-language telemetry fields without renaming
• 79fe3a1 Move download telemetry into the status-report directory
• ead1f7d Rename the platform module
• 549d498 Simplify per-language platform eligibility checks
• Additional commits viewable in compare view

Updates cloudflare/wrangler-action from 4.0.0 to 4.1.2

Release notes

Sourced from cloudflare/wrangler-action's releases.

v4.1.2

Patch Changes

• #453 876f5b5 Thanks @​ericclemmons! - Create GitHub releases only after their compiled action tags are ready so immutable releases do not block publishing.

v4.1.1

[!WARNING] This release is broken due to a publishing issue and will fail when used in a workflow. Please update to v4.1.2 or v4. See #454 for details.

Patch Changes

• #451 429a99d Thanks @​podonnell-dev! - Pin Workers Preview examples and integration tests to Wrangler 4.136.3, which includes the Worker name in Preview artifacts.

v4.1.0

[!WARNING] This release is broken due to a publishing issue and will fail when used in a workflow. Please update to v4.1.2 or v4. See #454 for details.

Minor Changes

• #450 9500699 Thanks @​podonnell-dev! - Add support for Workers Previews, including Preview artifact parsing, Preview outputs, GitHub Deployments, and job summaries for wrangler preview.

Patch Changes

• #418 789ac84 Thanks @​vliggio! - Surface wrangler error messages in the action step output instead of showing only a generic failure message.

Changelog

Sourced from cloudflare/wrangler-action's changelog.

Changelog

4.1.3

Patch Changes

• #456 d3cfe74 Thanks @​podonnell-dev! - Document Wrangler 4.136.3 as the minimum version required for Workers Previews.

4.1.2

Patch Changes

• #453 876f5b5 Thanks @​ericclemmons! - Create GitHub releases only after their compiled action tags are ready so immutable releases do not block publishing.

4.1.1

Patch Changes

• #451 429a99d Thanks @​podonnell-dev! - Pin Workers Preview examples and integration tests to Wrangler 4.136.3, which includes the Worker name in Preview artifacts.

4.1.0

Minor Changes

• #450 9500699 Thanks @​podonnell-dev! - Add support for Workers Previews, including Preview artifact parsing, Preview outputs, GitHub Deployments, and job summaries for wrangler preview.

Patch Changes

• #418 789ac84 Thanks @​vliggio! - Surface wrangler error messages in the action step output instead of showing only a generic failure message.

4.0.0

Major Changes

• #412 1029e90 Thanks @​ericclemmons! - Update default Wrangler version to v4 (latest). The action now installs Wrangler v4 by default when no wranglerVersion input is specified. Users can still pin to v3 by setting wranglerVersion: "3.90.0" explicitly.

3.15.0

Minor Changes

• #426 febbda6 Thanks @​WillTaylorDev! - Support version ranges and tags in wranglerVersion input. You can now set wranglerVersion to values like 4, ^4.0.0, 4.x, or latest instead of only exact versions like 4.81.0.

3.14.1

Patch Changes

• #358 cd6314a Thanks @​penalosa! - Use secret bulk instead of deprecated secret:bulk command

3.14.0

... (truncated)

Commits

• 2585336 Automatic compilation
• d4d1b2d Merge pull request #455 from cloudflare/changeset-release/main
• 1e45d72 Version Packages
• 194026b Merge pull request #453 from cloudflare/codex/fix-immutable-releases
• 5fa9855 docs: Explain immutable release sequencing
• d7fd981 refactor: Keep release publishing retryable
• ecefb49 fix: Verify floating tag commit
• 7e340a9 refactor: Let Changesets create immutable releases
• 876f5b5 fix: Publish compiled tags before immutable releases
• 4e88846 Merge pull request #452 from cloudflare/changeset-release/main
• Additional commits viewable in compare view

Updates github/codeql-action/upload-sarif from 4.38.0 to 4.38.1

Release notes

Sourced from github/codeql-action/upload-sarif's releases.

v4.38.1

• The CodeQL Action now has experimental support for CodeQL releases for which per-language bundles are available. Per-language bundles support analysis for a single language and are therefore smaller than the combined bundles that allow analysis for all supported languages. As a result, per-language bundles take up less space on disk and are faster to download. We expect to roll this change out to everyone in the coming weeks. #4146

Changelog

Sourced from github/codeql-action/upload-sarif's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

4.38.2 - 24 Sept 2026

• Update default CodeQL bundle version to 2.27.1. #4160

4.38.1 - 18 Sept 2026

• The CodeQL Action now has experimental support for CodeQL releases for which per-language bundles are available. Per-language bundles support analysis for a single language and are therefore smaller than the combined bundles that allow analysis for all supported languages. As a result, per-language bundles take up less space on disk and are faster to download. We expect to roll this change out to everyone in the coming weeks. #4146

4.38.0 - 09 Sept 2026

• On GitHub-hosted runners, the CodeQL Action now deletes unused CodeQL bundles from the toolcache before downloading a different bundle, which frees up disk space for the analysis. We expect to roll this change out to everyone in September. #4124
• The CodeQL Action now supports CodeQL releases that are compatible with Linux Arm64 and downloads the native linux-arm64 CodeQL bundle when available. #4072
• Update default CodeQL bundle version to 2.27.0. #4129

4.37.9 - 26 Aug 2026

• Update default CodeQL bundle version to 2.26.4. #4106

4.37.8 - 21 Aug 2026

No user facing changes.

4.37.7 - 13 Aug 2026

• Update default CodeQL bundle version to 2.26.3. #4085

4.37.6 - 04 Aug 2026

• Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to .github/codeql-config.yml to align it with the suggested path that is used elsewhere. #4070

4.37.5 - 03 Aug 2026

• Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the init Action instead of falling back to downloading the bundle before extracting it. #4061

4.37.4 - 29 Jul 2026

• This version of the CodeQL Action adds support for the tools input for the codeql-action/init step to be specified using a github-codeql-tools repository property. This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to toolcache to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for tools in the workflow definition always takes precedence unless the value of the repository property starts with !. #4037
• Update default CodeQL bundle version to 2.26.2. #4051

4.37.3 - 22 Jul 2026

No user facing changes.

... (truncated)

Commits

• 1c5b675 Merge pull request #4152 from github/update-v4.38.1-a65b83a73
• a97cdca Add changelog entry for #4146
• cc6c691 Update changelog for v4.38.1
• a65b83a Merge pull request #4146 from github/henrymercer/per-language-bundles-pr
• 07fa87d Clarify the latest-nightly eligibility exception
• f18f353 Describe the bundle URL resolver
• ecec9b5 Share per-language telemetry fields without renaming
• 79fe3a1 Move download telemetry into the status-report directory
• ead1f7d Rename the platform module
• 549d498 Simplify per-language platform eligibility checks
• Additional commits viewable in compare view

Updates renovatebot/github-action from 46.2.6 to 46.3.3

Release notes

Sourced from renovatebot/github-action's releases.

v46.3.3

46.3.3 (2026-09-21)

Bug Fixes

• removed tty allocation in docker run (#1056) (5be7d62)

Continuous Integration

• deps: update ghcr.io/renovatebot/renovate docker tag to v44.104.2 (026667e)

v46.3.2

46.3.2 (2026-09-21)

Documentation

• update references to renovatebot/github-action to v46.3.1 (43928c9)

Miscellaneous Chores

• deps: update dependency @​types/node to v24.13.4 (932e9ab)
• deps: update dependency lint-staged to v17.5.1 (648dd25)
• deps: update dependency typescript-eslint to v8.70.0 (66a9767)

Build System

• deps: lock file maintenance (988567d)

Continuous Integration

• deps: update ghcr.io/renovatebot/renovate docker tag to v44.101.2 (083cf5f)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.103.0 (6f3d021)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.103.1 (4715cc2)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.103.2 (3d0f735)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.103.3 (6879e63)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.103.6 (3a6c618)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.103.7 (fdee7c3)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.104.0 (90bf1b8)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.104.1 (33a41eb)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.83.2 (6929eb3)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.85.0 (c05fc1c)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.86.0 (b2d330f)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.87.1 (45b29f8)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.89.1 (ede5c3d)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.90.2 (e858331)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.90.3 (ad61b27)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.91.0 (ff751e7)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.93.0 (9cebcf4)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.93.4 (ca7df67)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.93.5 (4284f58)

... (truncated)

Commits

• 9fea9f0 chore(release): 46.3.3 [skip ci]
• 04e7182 skip: merge (5be7d625e5d13bbef7d613381258d5e277cd219e) [skip release]
• 5be7d62 fix: removed tty allocation in docker run (#1056)
• c2edbee skip: merge (026667ea925b004b58b65dfb5d29fa20c966dd81) [skip release]
• e262641 chore(release): 46.3.2 [skip ci]
• e0fcb2a skip: merge (988567d8aad51e81ba7260d33d5593cc9e894f3f) [skip release]
• 026667e ci(deps): update ghcr.io/renovatebot/renovate docker tag to v44.104.2
• 0d14afc skip: merge (33a41eb43f181922bd9412ebecc9ffb5ff2d7107) [skip release]
• 988567d build(deps): lock file maintenance
• 6396caa skip: merge (43928c96cf6025eab3cd235192f7568b7daffcab) [skip release]
• Additional commits viewable in compare view

Updates codecov/codecov-action from 7.0.0 to 7.1.1

Release notes

Sourced from codecov/codecov-action's releases.

v7.1.1

What's Changed

• chore(release): 7.1.1 by @​thomasrockhu-codecov in codecov/codecov-action#1973

Full Changelog: codecov/codecov-action@v7.1.0...v7.1.1

v7.1.0

What's Changed

• chore(release): 7.1.0 by @​thomasrockhu-codecov in codecov/codecov-action#1971

Full Changelog: codecov/codecov-action@v7.0.0...v7.1.0

Commits

• 303a32d chore(release): 7.1.1 (#1973)
• 0b35c9e chore(release): 7.1.0 (#1971)
• See full diff in compare view

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	github-readme-stats	f0d588c	Commit Preview URL Branch Preview URL	Sep 26 2026, 08:48 AM

[dytsou]

@dependabot rebase

[dytsou]

@dependabot rebase

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud