Message-ID: From: "renovate-bot (@renovate-bot)" To: "pgjdbc/pgjdbc" Date: Mon, 04 May 2026 06:35:51 +0000 Subject: [pgjdbc/pgjdbc] PR #4048: chore(deps): update github/codeql-action action to v3.35.3 List-Id: X-GitHub-Author-Id: 25180681 X-GitHub-Author-Login: renovate-bot X-GitHub-Issue: 4048 X-GitHub-Labels: dependencies X-GitHub-Repo: pgjdbc/pgjdbc X-GitHub-State: merged X-GitHub-Type: pull_request X-GitHub-Url: https://github.com/pgjdbc/pgjdbc/pull/4048 Content-Type: text/plain; charset=utf-8 This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github/codeql-action](https://redirect.github.com/github/codeql-action) | action | patch | `v3.35.1` → `v3.35.3` | --- ### Release Notes
github/codeql-action (github/codeql-action) ### [`v3.35.3`](https://redirect.github.com/github/codeql-action/releases/tag/v3.35.3) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.35.2...v3.35.3) - *Upcoming breaking change*: Add a deprecation warning for customers using CodeQL version 2.19.3 and earlier. These versions of CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise Server 3.15, and will be unsupported by the next minor release of the CodeQL Action. [#​3837](https://redirect.github.com/github/codeql-action/pull/3837) - Configurations for private registries that use Cloudsmith or GCP OIDC are now accepted. [#​3850](https://redirect.github.com/github/codeql-action/pull/3850) - Best-effort connection tests for private registries now use `GET` requests instead of `HEAD` for better compatibility with various registry implementations. For NuGet feeds, the test is now always performed against the service index. [#​3853](https://redirect.github.com/github/codeql-action/pull/3853) - Fixed a bug where two diagnostics produced within the same millisecond could overwrite each other on disk, causing one of them to be lost. [#​3852](https://redirect.github.com/github/codeql-action/pull/3852) - Update default CodeQL bundle version to [2.25.3](https://redirect.github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.3). [#​3865](https://redirect.github.com/github/codeql-action/pull/3865) ### [`v3.35.2`](https://redirect.github.com/github/codeql-action/releases/tag/v3.35.2) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.35.1...v3.35.2) - The undocumented TRAP cache cleanup feature that could be enabled using the `CODEQL_ACTION_CLEANUP_TRAP_CACHES` environment variable is deprecated and will be removed in May 2026. If you are affected by this, we recommend disabling TRAP caching by passing the `trap-caching: false` input to the `init` Action. [#​3795](https://redirect.github.com/github/codeql-action/pull/3795) - The Git version 2.36.0 requirement for improved incremental analysis now only applies to repositories that contain submodules. [#​3789](https://redirect.github.com/github/codeql-action/pull/3789) - Python analysis on GHES no longer extracts the standard library, relying instead on models of the standard library. This should result in significantly faster extraction and analysis times, while the effect on alerts should be minimal. [#​3794](https://redirect.github.com/github/codeql-action/pull/3794) - Fixed a bug in the validation of OIDC configurations for private registries that was added in CodeQL Action 4.33.0 / 3.33.0. [#​3807](https://redirect.github.com/github/codeql-action/pull/3807) - Update default CodeQL bundle version to [2.25.2](https://redirect.github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.2). [#​3823](https://redirect.github.com/github/codeql-action/pull/3823)
--- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - "every 3 weeks on Monday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/pgjdbc/pgjdbc).