Marc-André Bombeck 314f35b2ee ci: move every codeql-action pin to v4.37.9 in one commit ...

init, analyze and upload-sarif are the same release pinned in three
workflows. Dependabot opened them as three separate pull requests, so each
run mixed two versions and analyze rejected the config init had written:
"Loaded a configuration file for version 4.37.7, but running version
4.37.9". None of the three could go green alone, and the code-scanning
analysis stayed red while they waited on each other.

Bump all five references together and group the action in dependabot.yml so
the next release arrives as one pull request.

2026-08-30 20:20:31 +02:00

..

coach-eval.yml

Bump pnpm/action-setup from 6.0.9 to 6.0.10

2026-08-16 16:40:16 +00:00

codeql.yml

ci: move every codeql-action pin to v4.37.9 in one commit

2026-08-30 20:20:31 +02:00

dependabot-auto-merge.yml

Bump pnpm/action-setup from 6.0.9 to 6.0.10

2026-08-16 16:40:16 +00:00

docker-publish.yml

Bump docker/setup-buildx-action from 4.2.0 to 4.3.0 (#832)

2026-08-23 18:28:46 +02:00

e2e.yml

Bump pnpm/action-setup from 6.0.9 to 6.0.10

2026-08-16 16:40:16 +00:00

env-check.yml

Bump pnpm/action-setup from 6.0.9 to 6.0.10

2026-08-16 16:40:16 +00:00

integration.yml

Bump pnpm/action-setup from 6.0.9 to 6.0.10

2026-08-16 16:40:16 +00:00

knip.yml

Bump pnpm/action-setup from 6.0.9 to 6.0.10

2026-08-16 16:40:16 +00:00

no-todo-markers.yml

chore(release): fold in the coach discriminant, the dependency bumps, and the notes the audit found wrong

2026-07-26 18:57:21 +02:00

post-publish-verify.yml

build(deps): bump docker/login-action from 4.5.1 to 4.6.0

2026-08-03 11:02:10 +00:00

scorecard.yml

ci: move every codeql-action pin to v4.37.9 in one commit

2026-08-30 20:20:31 +02:00

security.yml

fix: give the geometry check a browser and stop it skipping in CI

2026-08-30 15:55:46 +02:00

trivy.yml

ci: move every codeql-action pin to v4.37.9 in one commit

2026-08-30 20:20:31 +02:00