sadpandajoe opened a new pull request, #44354: URL: https://github.com/apache/superset/pull/44354
### SUMMARY PR #44333 (dependabot, merged 2026-09-16T14:26:38Z, commit d7516f1038) bumped only the `github/codeql-action/analyze` step in `.github/workflows/codeql-analysis.yml` from v4.37.9 to v4.38.0, leaving the `github/codeql-action/init` step pinned at v4.37.9. codeql-action requires `init` and `analyze` to run the same version; the mismatch has failed every "Analyze (javascript)" and "Analyze (python)" job on every master push since, with `Loaded a configuration file for version '4.37.9', but running version '4.38.0'` (see https://github.com/apache/superset/actions/runs/35120133243). This pins `init` to the same v4.38.0 commit (`b96794f015dfd88f77b49b1c93e0fa7110f94c63`) already used by `analyze`. ### TESTING INSTRUCTIONS Not manually testable locally (hosted GitHub Actions version pin). This PR's own "Analyze (javascript)" and "Analyze (python)" CodeQL checks should run green, where they previously failed on every push since PR #44333. ### ADDITIONAL INFORMATION - [ ] Has associated issue: - [ ] Required feature flags: - [ ] Changes UI - [ ] Includes DB Migration (follow approval process in SIP-59) - [ ] Introduces new feature or API - [ ] Removes existing feature or API -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
