pgjdbc/pgjdbc GitHub issues and pull requests (mirror)  
help / color / mirror / Atom feed
From: renovate-bot (@renovate-bot) <[email protected]>
To: pgjdbc/pgjdbc <[email protected]>
Subject: [pgjdbc/pgjdbc] PR #4094: chore(deps): update github/codeql-action action to v3.36.0
Date: Mon, 25 May 2026 07:51:32 +0000
Message-ID: <[email protected]> (raw)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [github/codeql-action](https://redirect.github.com/github/codeql-action) | action | minor | `v3.35.3` → `v3.36.0` |

---

### Release Notes

<details>
<summary>github/codeql-action (github/codeql-action)</summary>

### [`v3.36.0`](https://redirect.github.com/github/codeql-action/releases/tag/v3.36.0)

[Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.35.5...v3.36.0)

- *Breaking change*: Bump the minimum required CodeQL bundle version to 2.19.4. [#&#8203;3894](https://redirect.github.com/github/codeql-action/pull/3894)
- Add support for SHA-256 Git object IDs. [#&#8203;3893](https://redirect.github.com/github/codeql-action/pull/3893)
- Update default CodeQL bundle version to [2.25.5](https://redirect.github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.5). [#&#8203;3926](https://redirect.github.com/github/codeql-action/pull/3926)

### [`v3.35.5`](https://redirect.github.com/github/codeql-action/releases/tag/v3.35.5)

[Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.35.4...v3.35.5)

- We have improved how the JavaScript bundles for the CodeQL Action are generated to avoid duplication across bundles and reduce the size of the repository by around 70%. This should have no effect on the runtime behaviour of the CodeQL Action. [#&#8203;3899](https://redirect.github.com/github/codeql-action/pull/3899)
- For performance and accuracy reasons, [improved incremental analysis](https://redirect.github.com/github/roadmap/issues/1158) will now only be enabled on a pull request when diff-informed analysis is also enabled for that run. If diff-informed analysis is unavailable (for example, because the PR diff ranges could not be computed), the action will fall back to a full analysis. [#&#8203;3791](https://redirect.github.com/github/codeql-action/pull/3791)
- If multiple inputs are provided for the GitHub-internal `analysis-kinds` input, only `code-scanning` will be enabled. The `analysis-kinds` input is experimental, for GitHub-internal use only, and may change without notice at any time. [#&#8203;3892](https://redirect.github.com/github/codeql-action/pull/3892)
- Added an experimental change which, when running a Code Scanning analysis for a PR with [improved incremental analysis](https://redirect.github.com/github/roadmap/issues/1158) enabled, prefers CodeQL CLI versions that have a cached overlay-base database for the configured languages. This speeds up analysis for a repository when there is not yet a cached overlay-base database for the latest CLI version. We expect to roll this change out to everyone in May. [#&#8203;3880](https://redirect.github.com/github/codeql-action/pull/3880)

### [`v3.35.4`](https://redirect.github.com/github/codeql-action/releases/tag/v3.35.4)

[Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.35.3...v3.35.4)

- Update default CodeQL bundle version to [2.25.4](https://redirect.github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.4). [#&#8203;3881](https://redirect.github.com/github/codeql-action/pull/3881)

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - "every 3 weeks on Monday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/pgjdbc/pgjdbc).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xOTQuMCIsInVwZGF0ZWRJblZlciI6IjQzLjE5NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyJdfQ==-->


reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: github://pgjdbc/pgjdbc
  Cc: [email protected], [email protected]
  Subject: Re: [pgjdbc/pgjdbc] PR #4094: chore(deps): update github/codeql-action action to v3.36.0
  In-Reply-To: <<[email protected]>>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox