ci: update codeql-action from retired v2 to v3 - #3441
Open
kobihikri wants to merge 1 commit into
Open
Conversation
dlstadther
reviewed
Jul 16, 2026
| # Initializes the CodeQL tools for scanning. | ||
| - name: Initialize CodeQL | ||
| uses: github/codeql-action/init@v2 | ||
| uses: github/codeql-action/init@v3 |
Collaborator
There was a problem hiding this comment.
Thanks, but i also see the following:
Warning: CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
Simple fix though
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Hi, and thank you for luigi.
Three-line CI maintenance fix:
codeql.ymlstill usesgithub/codeql-action/{init,autobuild,analyze}@v2, and CodeQL Action v2 was discontinued in January 2025 (GitHub changelog: "CodeQL Action v2 is now discontinued… workflows using it may eventually break"). v3 is the drop-in replacement — same inputs, same behavior.The repo has no dependabot config for github-actions, so nothing would bump this automatically; hence the manual PR.
For transparency: I used AI assistance to spot and draft this; I verified the workflow refs and the v2 retirement notice myself.