chore(deps): bump github/codeql-action from 4.38.2 to 4.38.3 in the github-actions-dependencies group by dependabot[bot] · Pull Request #108 · JerrettDavis/TinyBDD · GitHub
Skip to content

chore(deps): bump github/codeql-action from 4.38.2 to 4.38.3 in the github-actions-dependencies group - #108

Merged
JerrettDavis merged 1 commit into
mainfrom
dependabot/github_actions/github-actions-dependencies-90fd21f639
Oct 13, 2026
Merged

JerrettDavis merged 1 commit into
mainfrom
dependabot/github_actions/github-actions-dependencies-90fd21f639

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 13, 2026

Copy link
Copy Markdown
Contributor

Bumps the github-actions-dependencies group with 1 update: github/codeql-action.

Updates github/codeql-action from 4.38.2 to 4.38.3

Release notes

Sourced from github/codeql-action's releases.

v4.38.3

  • Upcoming breaking change: CodeQL version 2.21.2 and earlier were discontinued on 24 September 2026 alongside GitHub Enterprise Server 3.17, and will be unsupported by the next minor release of the CodeQL Action. Added a deprecation warning for customers using these versions of CodeQL. #4188
  • Update default CodeQL bundle version to 2.27.2. #4203
  • Fixed a bug where the decision of whether to use a per-language bundle did not account for custom configurations that reference queries outside of compiled CodeQL packs. This issue was caught during internal testing and did not affect any customer repositories. We will resume the roll out of per-language bundles in the coming weeks. #4184
Changelog

Sourced from github/codeql-action's changelog.

4.38.3 - 08 Oct 2026

  • Upcoming breaking change: CodeQL version 2.21.2 and earlier were discontinued on 24 September 2026 alongside GitHub Enterprise Server 3.17, and will be unsupported by the next minor release of the CodeQL Action. Added a deprecation warning for customers using these versions of CodeQL. #4188
  • Update default CodeQL bundle version to 2.27.2. #4203
  • Fixed a bug where the decision of whether to use a per-language bundle did not account for custom configurations that reference queries outside of compiled CodeQL packs. This issue was caught during internal testing and did not affect any customer repositories. We will resume the roll out of per-language bundles in the coming weeks. #4184
Commits
  • 24c5418 Merge pull request #4214 from github/update-v4.38.3-e0b52dbdc
  • 69e87c5 Add changelog note for #4184
  • 23b6828 Update changelog for v4.38.3
  • e0b52db Merge pull request #4210 from github/henrymercer/pin-python-for-older-clis-in-ci
  • 6b99698 Pin Python 3.13.15 for older CLI versions in multi-language check
  • 63d3d63 Merge pull request #4203 from github/update-bundle/codeql-bundle-v2.27.2
  • 7377a10 Add changelog note
  • c1a30cd Update default bundle to codeql-bundle-v2.27.2
  • d208ec7 Merge pull request #4200 from github/mbg/esm/migrate-pr-checks
  • a71b0c6 Replace __dirname in sync.ts
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the github-actions-dependencies group with 1 update: [github/codeql-action](https://github.com/github/codeql-action).


Updates `github/codeql-action` from 4.38.2 to 4.38.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@v4.38.2...v4.38.3)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.38.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Oct 13, 2026

Copy link
Copy Markdown
Contributor Author

@github-actions

Copy link
Copy Markdown

⚠️ Deprecation Warning: The deny-licenses option is deprecated for possible removal in the next major release. For more information, see issue 997.

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA cf98200.
Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

OpenSSF Scorecard

PackageVersionScoreDetails
actions/github/codeql-action/analyze 4.38.3 UnknownUnknown
actions/github/codeql-action/init 4.38.3 UnknownUnknown

Scanned Files

  • .github/workflows/codeql-analysis.yml

@github-actions
github-actions Bot enabled auto-merge (squash) October 13, 2026 07:25
@github-actions

Copy link
Copy Markdown

Test Results

783 tests   783 ✅  8s ⏱️
  7 suites    0 💤
  7 files      0 ❌

Results for commit cf98200.

@github-actions

Copy link
Copy Markdown

Code Coverage

Summary
  Generated on: 10/13/2026 - 07:27:00
  Coverage date: 10/13/2026 - 07:26:28 - 10/13/2026 - 07:26:57
  Parser: MultiReport (21x Cobertura)
  Assemblies: 9
  Classes: 89
  Files: 82
  Line coverage: 98.7%
  Covered lines: 2523
  Uncovered lines: 33
  Coverable lines: 2556
  Total lines: 10254
  Branch coverage: 85.6% (665 of 776)
  Covered branches: 665
  Total branches: 776
  Method coverage: 100% (801 of 801)
  Full method coverage: 97.2% (779 of 801)
  Covered methods: 801
  Fully covered methods: 779
  Total methods: 801

TinyBDD                                                                   98.7%
  TinyBDD.Ambient                                                          100%
  TinyBDD.AmbientTestMethodResolver                                        100%
  TinyBDD.AssemblyFixture                                                  100%
  TinyBDD.AssemblyFixtureCoordinator                                      94.7%
  TinyBDD.AssemblySetupAttribute                                           100%
  TinyBDD.Assertions.Expect                                                100%
  TinyBDD.Assertions.FluentAssertion<T>                                     95%
  TinyBDD.Assertions.FluentAssertionState<T>                               100%
  TinyBDD.Assertions.FluentPredicate<T>                                    100%
  TinyBDD.Assertions.ShouldExtensions                                      100%
  TinyBDD.Assertions.TinyBddAssertionException                             100%
  TinyBDD.AssertUtil                                                       100%
  TinyBDD.Bdd                                                              100%
  TinyBDD.BddStepException                                                 100%
  TinyBDD.ExampleResult                                                    100%
  TinyBDD.ExampleRow<T>                                                    100%
  TinyBDD.ExamplesBuilder<T>                                               100%
  TinyBDD.ExamplesResult                                                   100%
  TinyBDD.Extensions.StepExtensions                                        100%
  TinyBDD.Extensions.Throw                                                 100%
  TinyBDD.FeatureAttribute                                                 100%
  TinyBDD.Flow                                                             100%
  TinyBDD.FromContext                                                      100%
  TinyBDD.GenerateOptimizedAttribute                                       100%
  TinyBDD.GherkinFormatter                                                 100%
  TinyBDD.KindStrings                                                      100%
  TinyBDD.NullTraitBridge                                                  100%
  TinyBDD.Pipeline                                                        98.7%
  TinyBDD.ScenarioAttribute                                                100%
  TinyBDD.ScenarioCaseAttribute                                            100%
  TinyBDD.ScenarioChain<T>                                                 100%
  TinyBDD.ScenarioContext                                                  100%
  TinyBDD.ScenarioContextAsserts                                           100%
  TinyBDD.ScenarioContextGherkinExtensions                                 100%
  TinyBDD.ScenarioContextPrototype                                         100%
  TinyBDD.ScenarioOptions                                                  100%
  TinyBDD.ScenarioOutlineBuilder<T>                                        100%
  TinyBDD.ScenarioOutlineChain<T1, T2>                                     100%
  TinyBDD.ScenarioOutlineTerminal<T1, T2>                                  100%
  TinyBDD.StepInfo                                                         100%
  TinyBDD.StepIO                                                           100%
  TinyBDD.StepResult                                                       100%
  TinyBDD.StringBddReporter                                                100%
  TinyBDD.TagAttribute                                                     100%
  TinyBDD.TestBase                                                         100%
  TinyBDD.TestBase<T>                                                      100%
  TinyBDD.ThenChain<T>                                                     100%
  TinyBDD.TinyBddExtensibilityOptions                                      100%
  TinyBDD.TinyBddOptionsBuilder                                            100%

TinyBDD.Extensions.DependencyInjection                                     100%
  TinyBDD.Extensions.DependencyInjection.ScenarioContextFactory            100%
  TinyBDD.Extensions.DependencyInjection.ServiceCollectionExtensions       100%
  TinyBDD.Extensions.DependencyInjection.TinyBddOptions                    100%

TinyBDD.Extensions.FileBased                                                98%
  TinyBDD.Extensions.FileBased.Configuration.FileBasedDslOptions           100%
  TinyBDD.Extensions.FileBased.Configuration.FileBasedDslOptionsBuilder    100%
  TinyBDD.Extensions.FileBased.Configuration.FileDiscovery                 100%
  TinyBDD.Extensions.FileBased.Core.DriverMethodAttribute                  100%
  TinyBDD.Extensions.FileBased.Execution.DriverMethodInfo                  100%
  TinyBDD.Extensions.FileBased.Execution.ScenarioExecutor                 98.7%
  TinyBDD.Extensions.FileBased.Execution.StepResolver                      100%
  TinyBDD.Extensions.FileBased.FileBasedTestBase<T>                        100%
  TinyBDD.Extensions.FileBased.Models.FeatureDefinition                    100%
  TinyBDD.Extensions.FileBased.Models.ScenarioDefinition                   100%
  TinyBDD.Extensions.FileBased.Models.StepDefinition                       100%
  TinyBDD.Extensions.FileBased.Parsers.GherkinDslParser                   94.8%
  TinyBDD.Extensions.FileBased.Parsers.YamlDslParser                       100%

TinyBDD.Extensions.Hosting                                                 100%
  TinyBDD.Extensions.Hosting.HostBuilderExtensions                         100%
  TinyBDD.Extensions.Hosting.TinyBddHostingOptions                         100%
  TinyBDD.Extensions.Hosting.WorkflowHostedService<T>                      100%
  TinyBDD.Extensions.Hosting.WorkflowRunner                                100%

TinyBDD.Extensions.Reporting                                               100%
  TinyBDD.Extensions.Reporting.JsonReport                                  100%
  TinyBDD.Extensions.Reporting.JsonReportObserver                          100%
  TinyBDD.Extensions.Reporting.ScenarioReport                              100%
  TinyBDD.Extensions.Reporting.StepReport                                  100%
  TinyBDD.Extensions.Reporting.TinyBddReportingExtensions                  100%

TinyBDD.MSTest                                                             100%
  TinyBDD.MSTest.MsTestBddReporter                                         100%
  TinyBDD.MSTest.MsTestTraitBridge                                         100%
  TinyBDD.MSTest.TinyBddMsTestBase                                         100%

TinyBDD.NUnit                                                              100%
  TinyBDD.NUnit.NUnitBddReporter                                           100%
  TinyBDD.NUnit.NUnitTraitBridge                                           100%
  TinyBDD.NUnit.TinyBddNUnitBase                                           100%
  TinyBDD.NUnit.UseTinyBddAttribute                                        100%

TinyBDD.Xunit                                                             93.2%
  TinyBDD.Xunit.TinyBddXunitBase                                          90.6%
  TinyBDD.Xunit.UseTinyBddAttribute                                        100%
  TinyBDD.Xunit.XunitBddReporter                                           100%
  TinyBDD.Xunit.XunitTraitBridge                                           100%

TinyBDD.Xunit.v3                                                           100%
  TinyBDD.Xunit.v3.TinyBddXunitBase                                        100%
  TinyBDD.Xunit.v3.UseTinyBddAttribute                                     100%
  TinyBDD.Xunit.v3.XunitBddReporter                                        100%
  TinyBDD.Xunit.v3.XunitTraitBridge                                        100%

@codecov

codecov Bot commented Oct 13, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 98.82%. Comparing base (51777bd) to head (cf98200).
⚠️ Report is 30 commits behind head on main.

Additional details and impacted files
@@            Coverage Diff             @@
##             main     #108      +/-   ##
==========================================
+ Coverage   98.23%   98.82%   +0.58%     
==========================================
  Files          82       82              
  Lines        2556     2556              
  Branches      303      217      -86     
==========================================
+ Hits         2511     2526      +15     
+ Misses         45       30      -15     
Flag Coverage Δ
unittests 98.82% <ø> (+0.58%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@JerrettDavis
JerrettDavis disabled auto-merge October 13, 2026 15:28
@JerrettDavis
JerrettDavis merged commit f5ceb73 into main Oct 13, 2026
17 checks passed
@dependabot
dependabot Bot deleted the dependabot/github_actions/github-actions-dependencies-90fd21f639 branch October 13, 2026 15:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant