Skip to content

chore(deps): Bump github/codeql-action from 4.35.5 to 4.36.0 in the all-dependencies group#62

Merged
JerrettDavis merged 1 commit into
mainfrom
dependabot/github_actions/all-dependencies-754f0868f5
May 29, 2026
Merged

chore(deps): Bump github/codeql-action from 4.35.5 to 4.36.0 in the all-dependencies group#62
JerrettDavis merged 1 commit into
mainfrom
dependabot/github_actions/all-dependencies-754f0868f5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 29, 2026

Copy link
Copy Markdown
Contributor

Bumps the all-dependencies group with 1 update: github/codeql-action.

Updates github/codeql-action from 4.35.5 to 4.36.0

Release notes

Sourced from github/codeql-action's releases.

v4.36.0

  • Breaking change: Bump the minimum required CodeQL bundle version to 2.19.4. #3894
  • Add support for SHA-256 Git object IDs. #3893
  • Update default CodeQL bundle version to 2.25.5. #3926
Changelog

Sourced from github/codeql-action's changelog.

4.36.0 - 22 May 2026

  • Breaking change: Bump the minimum required CodeQL bundle version to 2.19.4. #3894
  • Add support for SHA-256 Git object IDs. #3893
  • Update default CodeQL bundle version to 2.25.5. #3926
Commits
  • 7211b7c Merge pull request #3927 from github/update-v4.36.0-ebc2d9e2b
  • 7740f2f Update changelog for v4.36.0
  • ebc2d9e Merge pull request #3926 from github/update-bundle/codeql-bundle-v2.25.5
  • d1f74b7 Add changelog note
  • 2dc40ce Update default bundle to codeql-bundle-v2.25.5
  • 8449852 Merge pull request #3910 from github/henrymercer/repo-size-diff-check
  • 72ac23c Update excluded required check list
  • c5297a2 Merge pull request #3919 from github/henrymercer/workflow-concurrency
  • 8ffeae7 CI: Automatically cancel non-generated workflows
  • f3f52bf Revert getErrorMessage import
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all-dependencies group with 1 update: [github/codeql-action](https://github.com/github/codeql-action).


Updates `github/codeql-action` from 4.35.5 to 4.36.0
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@v4.35.5...v4.36.0)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github May 29, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: ci. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@github-actions

Copy link
Copy Markdown

⚠️ Deprecation Warning: The deny-licenses option is deprecated for possible removal in the next major release. For more information, see issue 997.

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
actions/github/codeql-action/analyze 4.36.0 UnknownUnknown
actions/github/codeql-action/init 4.36.0 UnknownUnknown

Scanned Files

  • .github/workflows/codeql.yml

@github-actions

Copy link
Copy Markdown

Code Coverage

Summary
  Generated on: 05/29/2026 - 09:11:54
  Coverage date: 05/29/2026 - 09:11:47 - 05/29/2026 - 09:11:52
  Parser: MultiReport (8x Cobertura)
  Assemblies: 7
  Classes: 59
  Files: 56
  Line coverage: 74.3%
  Covered lines: 1325
  Uncovered lines: 457
  Coverable lines: 1782
  Total lines: 5046
  Branch coverage: 59.5% (492 of 826)
  Covered branches: 492
  Total branches: 826
  Method coverage: 85% (222 of 261)
  Full method coverage: 71.2% (186 of 261)
  Covered methods: 222
  Fully covered methods: 186
  Total methods: 261

JD.SemanticKernel.Extensions.Compaction                                          98.1%
  JD.SemanticKernel.Extensions.Compaction.CompactionFilter                        100%
  JD.SemanticKernel.Extensions.Compaction.CompactionOptions                       100%
  JD.SemanticKernel.Extensions.Compaction.ContextPercentageTrigger               87.5%
  JD.SemanticKernel.Extensions.Compaction.HierarchicalSummarizationStrategy      97.7%
  JD.SemanticKernel.Extensions.Compaction.ServiceCollectionExtensions             100%
  JD.SemanticKernel.Extensions.Compaction.TokenEstimator                          100%
  JD.SemanticKernel.Extensions.Compaction.TokenThresholdTrigger                   100%

JD.SemanticKernel.Extensions.Hooks                                               76.5%
  JD.SemanticKernel.Extensions.Hooks.CommandHookExecutor                            0%
  JD.SemanticKernel.Extensions.Hooks.ExtensionEvent                               100%
  JD.SemanticKernel.Extensions.Hooks.ExtensionEventBus                            100%
  JD.SemanticKernel.Extensions.Hooks.HookBuilder                                  100%
  JD.SemanticKernel.Extensions.Hooks.HookDefinition                               100%
  JD.SemanticKernel.Extensions.Hooks.HookParser                                  83.9%
  JD.SemanticKernel.Extensions.Hooks.KernelBuilderExtensions                     32.2%
  JD.SemanticKernel.Extensions.Hooks.SkHookFilter                                 100%
  JD.SemanticKernel.Extensions.Hooks.SkPromptHookFilter                           100%

JD.SemanticKernel.Extensions.Mcp                                                 59.8%
  JD.SemanticKernel.Extensions.Mcp.Discovery.ClaudeCodeMcpDiscoveryProvider       100%
  JD.SemanticKernel.Extensions.Mcp.Discovery.ClaudeDesktopMcpDiscoveryProvider    4.3%
  JD.SemanticKernel.Extensions.Mcp.Discovery.CodexMcpDiscoveryProvider           18.1%
  JD.SemanticKernel.Extensions.Mcp.Discovery.CopilotMcpDiscoveryProvider          4.7%
  JD.SemanticKernel.Extensions.Mcp.Discovery.FileMcpDiscoveryProvider            92.8%
  JD.SemanticKernel.Extensions.Mcp.Discovery.JdCanonicalMcpDiscoveryProvider     93.1%
  JD.SemanticKernel.Extensions.Mcp.Discovery.McpConfigParser                     73.9%
  JD.SemanticKernel.Extensions.Mcp.Discovery.VsCodeMcpDiscoveryProvider          86.6%
  JD.SemanticKernel.Extensions.Mcp.KernelBuilderMcpExtensions                       0%
  JD.SemanticKernel.Extensions.Mcp.KernelIntegration.McpKernelPluginFactory         0%
  JD.SemanticKernel.Extensions.Mcp.McpClientRegistry                                0%
  JD.SemanticKernel.Extensions.Mcp.McpInvocationResult                            100%
  JD.SemanticKernel.Extensions.Mcp.McpServerDefinition                            100%
  JD.SemanticKernel.Extensions.Mcp.McpToolDefinition                              100%
  JD.SemanticKernel.Extensions.Mcp.McpToolParameter                              93.3%
  JD.SemanticKernel.Extensions.Mcp.Registry.McpRegistry                           100%
  JD.SemanticKernel.Extensions.Mcp.Transport.HttpMcpClient                       87.6%
  JD.SemanticKernel.Extensions.Mcp.Transport.McpResponseParser                   90.3%
  JD.SemanticKernel.Extensions.Mcp.Transport.StdioMcpClient                      56.5%

JD.SemanticKernel.Extensions.Memory                                              94.5%
  JD.SemanticKernel.Extensions.Memory.InMemoryBackend                            96.1%
  JD.SemanticKernel.Extensions.Memory.MemoryRecord                                100%
  JD.SemanticKernel.Extensions.Memory.MemoryResult                                100%
  JD.SemanticKernel.Extensions.Memory.MemorySearchOptions                         100%
  JD.SemanticKernel.Extensions.Memory.MmrReranker                                96.9%
  JD.SemanticKernel.Extensions.Memory.QueryExpander                               100%
  JD.SemanticKernel.Extensions.Memory.SemanticMemory                             92.5%
  JD.SemanticKernel.Extensions.Memory.SemanticMemoryOptions                       100%
  JD.SemanticKernel.Extensions.Memory.ServiceCollectionExtensions                76.9%
  JD.SemanticKernel.Extensions.Memory.TemporalDecayScorer                         100%

JD.SemanticKernel.Extensions.Memory.Sqlite                                       94.9%
  JD.SemanticKernel.Extensions.Memory.Sqlite.ServiceCollectionExtensions          100%
  JD.SemanticKernel.Extensions.Memory.Sqlite.SqliteMemoryBackend                 94.7%

JD.SemanticKernel.Extensions.Plugins                                             74.5%
  JD.SemanticKernel.Extensions.Plugins.KernelBuilderExtensions                      0%
  JD.SemanticKernel.Extensions.Plugins.LoadedPlugin                               100%
  JD.SemanticKernel.Extensions.Plugins.PluginDependencyResolver                   100%
  JD.SemanticKernel.Extensions.Plugins.PluginLoader                              96.8%
  JD.SemanticKernel.Extensions.Plugins.PluginLoadOptions                            0%
  JD.SemanticKernel.Extensions.Plugins.PluginManifest                             100%

JD.SemanticKernel.Extensions.Skills                                              84.1%
  JD.SemanticKernel.Extensions.Skills.KernelBuilderExtensions                       0%
  JD.SemanticKernel.Extensions.Skills.SkillDefinition                             100%
  JD.SemanticKernel.Extensions.Skills.SkillKernelFunction                         100%
  JD.SemanticKernel.Extensions.Skills.SkillLoader                                 100%
  JD.SemanticKernel.Extensions.Skills.SkillLoadOptions                              0%
  JD.SemanticKernel.Extensions.Skills.SkillParser                                97.2%

@github-actions

Copy link
Copy Markdown

Test Results

242 tests   216 ✅  4s ⏱️
  8 suites   26 💤
  8 files      0 ❌

Results for commit 3873ab5.

@JerrettDavis JerrettDavis merged commit 3bf54b9 into main May 29, 2026
12 checks passed
@JerrettDavis JerrettDavis deleted the dependabot/github_actions/all-dependencies-754f0868f5 branch May 29, 2026 16:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant