build(deps): bump github/codeql-action/upload-sarif from 4.37.9 to 4.38.1 by dependabot[bot] · Pull Request #1130 · sablierapp/sablier

dependabot · 2026-09-21T18:54:31Z

Bumps github/codeql-action/upload-sarif from 4.37.9 to 4.38.1.

Release notes

Sourced from github/codeql-action/upload-sarif's releases.

v4.38.1

The CodeQL Action now has experimental support for CodeQL releases for which per-language bundles are available. Per-language bundles support analysis for a single language and are therefore smaller than the combined bundles that allow analysis for all supported languages. As a result, per-language bundles take up less space on disk and are faster to download. We expect to roll this change out to everyone in the coming weeks. #4146

v4.38.0

On GitHub-hosted runners, the CodeQL Action now deletes unused CodeQL bundles from the toolcache before downloading a different bundle, which frees up disk space for the analysis. We expect to roll this change out to everyone in September. #4124

The CodeQL Action now supports CodeQL releases that are compatible with Linux Arm64 and downloads the native linux-arm64 CodeQL bundle when available. #4072

Update default CodeQL bundle version to 2.27.0. #4129

Changelog

Sourced from github/codeql-action/upload-sarif's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

4.38.1 - 18 Sept 2026

The CodeQL Action now has experimental support for CodeQL releases for which per-language bundles are available. Per-language bundles support analysis for a single language and are therefore smaller than the combined bundles that allow analysis for all supported languages. As a result, per-language bundles take up less space on disk and are faster to download. We expect to roll this change out to everyone in the coming weeks. #4146

4.38.0 - 09 Sept 2026

On GitHub-hosted runners, the CodeQL Action now deletes unused CodeQL bundles from the toolcache before downloading a different bundle, which frees up disk space for the analysis. We expect to roll this change out to everyone in September. #4124

The CodeQL Action now supports CodeQL releases that are compatible with Linux Arm64 and downloads the native linux-arm64 CodeQL bundle when available. #4072

Update default CodeQL bundle version to 2.27.0. #4129

4.37.9 - 26 Aug 2026

Update default CodeQL bundle version to 2.26.4. #4106

4.37.8 - 21 Aug 2026

No user facing changes.

4.37.7 - 13 Aug 2026

Update default CodeQL bundle version to 2.26.3. #4085

4.37.6 - 04 Aug 2026

Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to .github/codeql-config.yml to align it with the suggested path that is used elsewhere. #4070

4.37.5 - 03 Aug 2026

Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the init Action instead of falling back to downloading the bundle before extracting it. #4061

4.37.4 - 29 Jul 2026

This version of the CodeQL Action adds support for the tools input for the codeql-action/init step to be specified using a github-codeql-tools repository property. This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to toolcache to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for tools in the workflow definition always takes precedence unless the value of the repository property starts with !. #4037

Update default CodeQL bundle version to 2.26.2. #4051

4.37.3 - 22 Jul 2026

No user facing changes.

4.37.2 - 21 Jul 2026

The new address format for the config-file input that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, the remote= prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. #4023

... (truncated)

Commits

1c5b675 Merge pull request #4152 from github/update-v4.38.1-a65b83a73
a97cdca Add changelog entry for #4146
cc6c691 Update changelog for v4.38.1
a65b83a Merge pull request #4146 from github/henrymercer/per-language-bundles-pr
07fa87d Clarify the latest-nightly eligibility exception
f18f353 Describe the bundle URL resolver
ecec9b5 Share per-language telemetry fields without renaming
79fe3a1 Move download telemetry into the status-report directory
ead1f7d Rename the platform module
549d498 Simplify per-language platform eligibility checks
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) from 4.37.9 to 4.38.1. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@cdf488f...1c5b675) --- updated-dependencies: - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.38.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-09-21T19:00:29Z

Test Results

✅ All tests passed! | 968 tests in 116.647s

View HTML Test Report

github-actions · 2026-09-21T19:01:46Z

┌─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────┐
│ Diff between sablier and sablier                                                                                        │
├──────────┬──────────────────────────────────────────────────────────────────────────────┬──────────┬──────────┬─────────┤
│ PERCENT  │ NAME                                                                         │ OLD SIZE │ NEW SIZE │ DIFF    │
├──────────┼──────────────────────────────────────────────────────────────────────────────┼──────────┼──────────┼─────────┤
│ +79.12%  │ encoding                                                                     │ 457 kB   │ 819 kB   │ +362 kB │
│ +95.14%  │ github.com/luthermonson/go-proxmox                                           │ 333 kB   │ 650 kB   │ +317 kB │
│ +4.66%   │ crypto                                                                       │ 1.9 MB   │ 2.0 MB   │ +88 kB  │
│ +54.42%  │ compress/flate                                                               │ 72 kB    │ 112 kB   │ +39 kB  │
│ +9.99%   │ slices                                                                       │ 370 kB   │ 407 kB   │ +37 kB  │
│ +23.84%  │ internal/abi                                                                 │ 74 kB    │ 92 kB    │ +18 kB  │
│ +515.80% │ internal/runtime/gc/scan                                                     │ 1.5 kB   │ 9.0 kB   │ +7.6 kB │
│ +9.01%   │ internal/runtime/maps                                                        │ 44 kB    │ 48 kB    │ +3.9 kB │
│ +695.67% │ maps                                                                         │ 231 B    │ 1.8 kB   │ +1.6 kB │
│ +5.33%   │ vendor/golang.org/x/net/idna                                                 │ 22 kB    │ 24 kB    │ +1.2 kB │
│ +15.26%  │ internal/bytealg                                                             │ 6.1 kB   │ 7.0 kB   │ +927 B  │
│ +100%    │ gopkg.in/inf%2ev0                                                            │          │ 757 B    │ +757 B  │
│ +100%    │ cmp                                                                          │          │ 399 B    │ +399 B  │
│ +0.56%   │ internal/reflectlite                                                         │ 50 kB    │ 51 kB    │ +280 B  │
│ +100.78% │ internal/godebugs                                                            │ 256 B    │ 514 B    │ +258 B  │
│ +1.49%   │ strconv                                                                      │ 17 kB    │ 17 kB    │ +255 B  │
│ +0.89%   │ unicode                                                                      │ 28 kB    │ 28 kB    │ +245 B  │
│ +100%    │ _                                                                            │          │ 198 B    │ +198 B  │
│ +2.79%   │ internal/filepathlite                                                        │ 4.7 kB   │ 4.8 kB   │ +130 B  │
│ +12.46%  │ gopkg.in/evanphx/json-patch.v4                                               │ 963 B    │ 1.1 kB   │ +120 B  │
│ +1.34%   │ github.com/docker/go-connections                                             │ 6.8 kB   │ 6.9 kB   │ +91 B   │
│ +5.46%   │ github.com/buger/goterm                                                      │ 1.2 kB   │ 1.3 kB   │ +68 B   │
│ +0.80%   │ vendor/golang.org/x/text/secure/bidirule                                     │ 2.1 kB   │ 2.1 kB   │ +17 B   │
│ +1.65%   │ github.com/cenkalti/backoff/v5                                               │ 786 B    │ 799 B    │ +13 B   │
│ +1.24%   │ github.com/x448/float16                                                      │ 728 B    │ 737 B    │ +9 B    │
│ +0.05%   │ internal/fmtsort                                                             │ 8.1 kB   │ 8.1 kB   │ +4 B    │
│ +0.51%   │ main                                                                         │ 196 B    │ 197 B    │ +1 B    │
│ -0.02%   │ internal/syscall/unix                                                        │ 4.6 kB   │ 4.6 kB   │ -1 B    │
│ -0.22%   │ internal/testlog                                                             │ 1.8 kB   │ 1.8 kB   │ -4 B    │
│ -0.27%   │ internal/runtime/syscall/linux                                               │ 1.5 kB   │ 1.5 kB   │ -4 B    │
│ -0.29%   │ internal/runtime/exithook                                                    │ 1.7 kB   │ 1.7 kB   │ -5 B    │
│ -0.26%   │ github.com/cespare/xxhash/v2                                                 │ 2.3 kB   │ 2.3 kB   │ -6 B    │
│ -1.31%   │ golang.org/x/term                                                            │ 535 B    │ 528 B    │ -7 B    │
│ -0.98%   │ go/parser                                                                    │ 715 B    │ 708 B    │ -7 B    │
│ -0.64%   │ vendor/golang.org/x/crypto/internal/poly1305                                 │ 2.8 kB   │ 2.8 kB   │ -18 B   │
│ -0.11%   │ github.com/quic-go/qpack                                                     │ 22 kB    │ 22 kB    │ -25 B   │
│ -1.53%   │ vendor/golang.org/x/net/http/httpguts                                        │ 4.2 kB   │ 4.1 kB   │ -64 B   │
│ -100%    │ unsafe                                                                       │ 81 B     │          │ -81 B   │
│ -5.54%   │ container/heap                                                               │ 2.4 kB   │ 2.3 kB   │ -133 B  │
│ -0.86%   │ internal/runtime/cgroup                                                      │ 16 kB    │ 16 kB    │ -140 B  │
│ -5.50%   │ vendor/golang.org/x/text/unicode/bidi                                        │ 2.6 kB   │ 2.4 kB   │ -141 B  │
│ -0.54%   │ github.com/jinzhu/copier                                                     │ 26 kB    │ 26 kB    │ -143 B  │
│ -1.94%   │ vendor/golang.org/x/crypto/chacha20                                          │ 7.4 kB   │ 7.3 kB   │ -144 B  │
│ -1.70%   │ github.com/subosito/gotenv                                                   │ 9.1 kB   │ 8.9 kB   │ -154 B  │
│ -2.51%   │ internal/cpu                                                                 │ 6.1 kB   │ 6.0 kB   │ -154 B  │
│ -2.44%   │ debug/dwarf                                                                  │ 8.7 kB   │ 8.5 kB   │ -213 B  │
│ -17.39%  │ github.com/go-playground/locales                                             │ 1.4 kB   │ 1.1 kB   │ -236 B  │
│ -49.33%  │ internal/runtime/sys                                                         │ 523 B    │ 265 B    │ -258 B  │
│ -100%    │ internal/runtime/pprof/label                                                 │ 264 B    │          │ -264 B  │
│ -100%    │ internal/unsafeheader                                                        │ 312 B    │          │ -312 B  │
│ -37.56%  │ database/sql                                                                 │ 836 B    │ 522 B    │ -314 B  │
│ -3.81%   │ expvar                                                                       │ 9.4 kB   │ 9.0 kB   │ -358 B  │
│ -6.00%   │ vendor/golang.org/x/sys/cpu                                                  │ 6.4 kB   │ 6.0 kB   │ -381 B  │
│ -100%    │ internal/nettrace                                                            │ 384 B    │          │ -384 B  │
│ -1.98%   │ path                                                                         │ 20 kB    │ 19 kB    │ -388 B  │
│ -27.11%  │ internal/lazyregexp                                                          │ 1.7 kB   │ 1.2 kB   │ -456 B  │
│ -17.79%  │ golang.org/x/sync                                                            │ 2.7 kB   │ 2.2 kB   │ -482 B  │
│ -100%    │ go/ast                                                                       │ 504 B    │          │ -504 B  │
│ -63.21%  │ github.com/fsnotify/fsnotify                                                 │ 867 B    │ 319 B    │ -548 B  │
│ -3.36%   │ github.com/pmezard/go-difflib                                                │ 17 kB    │ 16 kB    │ -566 B  │
│ -9.46%   │ github.com/munnerz/goautoneg                                                 │ 6.1 kB   │ 5.5 kB   │ -579 B  │
│ -11.76%  │ internal/singleflight                                                        │ 5.1 kB   │ 4.5 kB   │ -594 B  │
│ -2.91%   │ errors                                                                       │ 21 kB    │ 20 kB    │ -606 B  │
│ -20.92%  │ internal/stringslite                                                         │ 3.0 kB   │ 2.4 kB   │ -628 B  │
│ -13.27%  │ internal/chacha8rand                                                         │ 5.0 kB   │ 4.4 kB   │ -667 B  │
│ -7.60%   │ github.com/tniswong/go.rfcx                                                  │ 9.2 kB   │ 8.5 kB   │ -700 B  │
│ -8.34%   │ container/list                                                               │ 8.5 kB   │ 7.8 kB   │ -706 B  │
│ -19.22%  │ golang.org/x/oauth2                                                          │ 3.7 kB   │ 3.0 kB   │ -710 B  │
│ -14.92%  │ github.com/docker/go-units                                                   │ 5.0 kB   │ 4.2 kB   │ -742 B  │
│ -1.28%   │ golang.org/x/crypto                                                          │ 62 kB    │ 61 kB    │ -786 B  │
│ -8.62%   │ github.com/go-openapi/jsonpointer                                            │ 9.5 kB   │ 8.7 kB   │ -821 B  │
│ -16.39%  │ google.golang.org/genproto/googleapis/rpc                                    │ 5.1 kB   │ 4.2 kB   │ -829 B  │
│ -8.60%   │ compress/zlib                                                                │ 9.8 kB   │ 8.9 kB   │ -840 B  │
│ -100.00% │ github.com/moby/docker-image-spec                                            │ 843 B    │          │ -843 B  │
│ -11.23%  │ github.com/sagikazarmark/locafero                                            │ 7.7 kB   │ 6.9 kB   │ -869 B  │
│ -9.03%   │ github.com/grpc-ecosystem/grpc-gateway/v2                                    │ 9.8 kB   │ 8.9 kB   │ -882 B  │
│ -12.76%  │ github.com/modern-go/concurrent                                              │ 7.0 kB   │ 6.1 kB   │ -894 B  │
│ -17.50%  │ google.golang.org/genproto/googleapis/api                                    │ 5.2 kB   │ 4.3 kB   │ -902 B  │
│ -13.71%  │ github.com/google/uuid                                                       │ 6.7 kB   │ 5.7 kB   │ -913 B  │
│ -100.00% │ github.com/go-playground/universal-translator                                │ 999 B    │          │ -999 B  │
│ -10.26%  │ internal/godebug                                                             │ 10 kB    │ 9.4 kB   │ -1.1 kB │
│ -4.70%   │ sigs.k8s.io/yaml                                                             │ 25 kB    │ 24 kB    │ -1.2 kB │
│ -10.02%  │ github.com/pkg/errors                                                        │ 12 kB    │ 11 kB    │ -1.2 kB │
│ -7.63%   │ internal/bisect                                                              │ 16 kB    │ 15 kB    │ -1.2 kB │
│ -4.38%   │ sort                                                                         │ 29 kB    │ 28 kB    │ -1.3 kB │
│ -14.03%  │ github.com/gin-contrib/sse                                                   │ 9.6 kB   │ 8.2 kB   │ -1.3 kB │
│ -9.68%   │ compress/gzip                                                                │ 14 kB    │ 13 kB    │ -1.4 kB │
│ -9.59%   │ text/tabwriter                                                               │ 14 kB    │ 13 kB    │ -1.4 kB │
│ -6.61%   │ github.com/spf13/afero                                                       │ 21 kB    │ 20 kB    │ -1.4 kB │
│ -7.85%   │ golang.org/x/time                                                            │ 18 kB    │ 16 kB    │ -1.4 kB │
│ -5.29%   │ vendor/golang.org/x/crypto/cryptobyte                                        │ 28 kB    │ 26 kB    │ -1.5 kB │
│ -0.69%   │ github.com/gabriel-vasile/mimetype                                           │ 214 kB   │ 212 kB   │ -1.5 kB │
│ -12.33%  │ embed                                                                        │ 12 kB    │ 11 kB    │ -1.5 kB │
│ -100%    │ go/scanner                                                                   │ 1.6 kB   │          │ -1.6 kB │
│ -78.50%  │ github.com/opencontainers/image-spec                                         │ 2.1 kB   │ 441 B    │ -1.6 kB │
│ -9.78%   │ github.com/go-logr/stdr                                                      │ 16 kB    │ 15 kB    │ -1.6 kB │
│ -2.49%   │ github.com/prometheus/common                                                 │ 70 kB    │ 68 kB    │ -1.7 kB │
│ -3.30%   │ github.com/leodido/go-urn                                                    │ 56 kB    │ 54 kB    │ -1.8 kB │
│ -86.41%  │ go/token                                                                     │ 2.2 kB   │ 294 B    │ -1.9 kB │
│ -8.30%   │ github.com/opencontainers/go-digest                                          │ 23 kB    │ 21 kB    │ -1.9 kB │
│ -5.37%   │ github.com/lmittmann/tint                                                    │ 36 kB    │ 34 kB    │ -2.0 kB │
│ -4.87%   │ bytes                                                                        │ 41 kB    │ 39 kB    │ -2.0 kB │
│ -14.57%  │ vendor/golang.org/x/net/http/httpproxy                                       │ 14 kB    │ 12 kB    │ -2.1 kB │
│ -6.01%   │ go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin │ 36 kB    │ 34 kB    │ -2.2 kB │
│ -18.73%  │ weak                                                                         │ 12 kB    │ 9.6 kB   │ -2.2 kB │
│ -2.47%   │ github.com/go-viper/mapstructure/v2                                          │ 96 kB    │ 94 kB    │ -2.4 kB │
│ -6.27%   │ bufio                                                                        │ 38 kB    │ 36 kB    │ -2.4 kB │
│ -90.85%  │ iter                                                                         │ 2.7 kB   │ 245 B    │ -2.4 kB │
│ -12.73%  │ github.com/djherbis/times                                                    │ 19 kB    │ 17 kB    │ -2.4 kB │
│ -17.45%  │ hash                                                                         │ 15 kB    │ 13 kB    │ -2.7 kB │
│ -7.38%   │ sigs.k8s.io/randfill                                                         │ 37 kB    │ 34 kB    │ -2.7 kB │
│ -5.47%   │ github.com/davecgh/go-spew                                                   │ 54 kB    │ 51 kB    │ -3.0 kB │
│ -1.67%   │ regexp                                                                       │ 186 kB   │ 182 kB   │ -3.1 kB │
│ -9.74%   │ vendor/golang.org/x/net/http2/hpack                                          │ 35 kB    │ 31 kB    │ -3.4 kB │
│ -7.93%   │ internal/strconv                                                             │ 43 kB    │ 39 kB    │ -3.4 kB │
│ -9.11%   │ vendor/golang.org/x/net/dns/dnsmessage                                       │ 38 kB    │ 34 kB    │ -3.4 kB │
│ -6.25%   │ strings                                                                      │ 59 kB    │ 55 kB    │ -3.7 kB │
│ -21.56%  │ internal/runtime/atomic                                                      │ 17 kB    │ 13 kB    │ -3.7 kB │
│ -10.65%  │ gopkg.in/inf.v0                                                              │ 35 kB    │ 32 kB    │ -3.8 kB │
│ -14.13%  │ k8s.io/utils                                                                 │ 32 kB    │ 28 kB    │ -4.6 kB │
│ -4.38%   │ fmt                                                                          │ 106 kB   │ 101 kB   │ -4.6 kB │
│ -10.16%  │ flag                                                                         │ 46 kB    │ 41 kB    │ -4.7 kB │
│ -14.26%  │ github.com/containerd/errdefs                                                │ 33 kB    │ 29 kB    │ -4.8 kB │
│ -15.98%  │ github.com/samber/slog-gin                                                   │ 32 kB    │ 27 kB    │ -5.1 kB │
│ -11.82%  │ github.com/prometheus/procfs                                                 │ 44 kB    │ 38 kB    │ -5.2 kB │
│ -8.84%   │ go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp                │ 59 kB    │ 54 kB    │ -5.2 kB │
│ -13.06%  │ github.com/sourcegraph/conc                                                  │ 41 kB    │ 36 kB    │ -5.4 kB │
│ -7.14%   │ mime                                                                         │ 79 kB    │ 73 kB    │ -5.6 kB │
│ -4.51%   │ log                                                                          │ 126 kB   │ 120 kB   │ -5.7 kB │
│ -14.60%  │ github.com/distribution/reference                                            │ 39 kB    │ 33 kB    │ -5.7 kB │
│ -3.79%   │ time                                                                         │ 160 kB   │ 154 kB   │ -6.1 kB │
│ -6.48%   │ internal/poll                                                                │ 96 kB    │ 90 kB    │ -6.2 kB │
│ -4.47%   │ html                                                                         │ 140 kB   │ 134 kB   │ -6.3 kB │
│ -10.15%  │ internal/sync                                                                │ 62 kB    │ 56 kB    │ -6.3 kB │
│ -20.23%  │ unique                                                                       │ 34 kB    │ 27 kB    │ -6.9 kB │
│ -14.58%  │ context                                                                      │ 48 kB    │ 41 kB    │ -6.9 kB │
│ -11.77%  │ github.com/go-logr/logr                                                      │ 60 kB    │ 52 kB    │ -7.0 kB │
│ -14.05%  │ vendor/golang.org/x/text/unicode/norm                                        │ 50 kB    │ 43 kB    │ -7.1 kB │
│ -18.23%  │ gopkg.in/ini.v1                                                              │ 41 kB    │ 34 kB    │ -7.5 kB │
│ -7.14%   │ k8s.io/klog/v2                                                               │ 124 kB   │ 115 kB   │ -8.9 kB │
│ -5.17%   │ sigs.k8s.io/json                                                             │ 173 kB   │ 164 kB   │ -8.9 kB │
│ -12.25%  │ github.com/spf13/viper                                                       │ 74 kB    │ 65 kB    │ -9.0 kB │
│ -10.85%  │ github.com/gorilla/websocket                                                 │ 84 kB    │ 75 kB    │ -9.1 kB │
│ -16.26%  │ io                                                                           │ 56 kB    │ 47 kB    │ -9.1 kB │
│ -10.41%  │ go.opentelemetry.io/auto/sdk                                                 │ 88 kB    │ 79 kB    │ -9.2 kB │
│ -10.12%  │ github.com/coreos/go-systemd/v22                                             │ 91 kB    │ 82 kB    │ -9.2 kB │
│ -2.90%   │ reflect                                                                      │ 340 kB   │ 330 kB   │ -9.8 kB │
│ -10.29%  │ syscall                                                                      │ 101 kB   │ 91 kB    │ -10 kB  │
│ -23.31%  │ github.com/prometheus/client_model                                           │ 47 kB    │ 36 kB    │ -11 kB  │
│ -5.04%   │ github.com/spf13/cobra                                                       │ 239 kB   │ 227 kB   │ -12 kB  │
│ -4.24%   │ math                                                                         │ 306 kB   │ 293 kB   │ -13 kB  │
│ -4.80%   │ go.yaml.in/yaml/v2                                                           │ 275 kB   │ 262 kB   │ -13 kB  │
│ -4.69%   │ go.yaml.in/yaml/v3                                                           │ 315 kB   │ 300 kB   │ -15 kB  │
│ -10.00%  │ github.com/modern-go/reflect2                                                │ 148 kB   │ 134 kB   │ -15 kB  │
│ -9.13%   │ golang.org/x/text                                                            │ 166 kB   │ 151 kB   │ -15 kB  │
│ -7.26%   │ os                                                                           │ 213 kB   │ 198 kB   │ -16 kB  │
│ -4.93%   │ github.com/pelletier/go-toml/v2                                              │ 336 kB   │ 319 kB   │ -17 kB  │
│ -12.54%  │ github.com/emicklei/go-restful/v3                                            │ 134 kB   │ 117 kB   │ -17 kB  │
│ -18.17%  │ github.com/go-openapi/swag                                                   │ 95 kB    │ 78 kB    │ -17 kB  │
│ -38.34%  │ golang.org/x/sys                                                             │ 46 kB    │ 29 kB    │ -18 kB  │
│ -21.31%  │ go.opentelemetry.io/proto/otlp                                               │ 84 kB    │ 66 kB    │ -18 kB  │
│ -15.95%  │ sync                                                                         │ 117 kB   │ 99 kB    │ -19 kB  │
│ -7.15%   │ text/template                                                                │ 293 kB   │ 272 kB   │ -21 kB  │
│ -7.21%   │ github.com/google/go-cmp                                                     │ 298 kB   │ 276 kB   │ -22 kB  │
│ -100%    │ go.shape                                                                     │ 22 kB    │          │ -22 kB  │
│ -7.27%   │ github.com/spf13/pflag                                                       │ 302 kB   │ 280 kB   │ -22 kB  │
│ -8.93%   │ sigs.k8s.io/structured-merge-diff/v6                                         │ 281 kB   │ 256 kB   │ -25 kB  │
│ -8.34%   │ k8s.io/kube-openapi                                                          │ 315 kB   │ 289 kB   │ -26 kB  │
│ -38.18%  │ vendor/golang.org/x/crypto/chacha20poly1305                                  │ 71 kB    │ 44 kB    │ -27 kB  │
│ -8.62%   │ github.com/diskfs/go-diskfs                                                  │ 330 kB   │ 302 kB   │ -28 kB  │
│ -8.37%   │ github.com/godbus/dbus/v5                                                    │ 345 kB   │ 316 kB   │ -29 kB  │
│ -10.59%  │ github.com/fxamacker/cbor/v2                                                 │ 305 kB   │ 272 kB   │ -32 kB  │
│ -9.69%   │ github.com/gin-gonic/gin                                                     │ 337 kB   │ 304 kB   │ -33 kB  │
│ -35.33%  │ github.com/spf13/cast                                                        │ 107 kB   │ 69 kB    │ -38 kB  │
│ -5.81%   │ github.com/goccy/go-yaml                                                     │ 703 kB   │ 662 kB   │ -41 kB  │
│ -13.02%  │ github.com/prometheus/client_golang                                          │ 320 kB   │ 278 kB   │ -42 kB  │
│ -6.21%   │ go.mongodb.org/mongo-driver/v2                                               │ 675 kB   │ 633 kB   │ -42 kB  │
│ -12.36%  │ github.com/go-playground/validator/v10                                       │ 394 kB   │ 346 kB   │ -49 kB  │
│ -10.86%  │ github.com/json-iterator/go                                                  │ 464 kB   │ 414 kB   │ -50 kB  │
│ -7.19%   │ github.com/sablierapp/sablier                                                │ 720 kB   │ 668 kB   │ -52 kB  │
│ -3.32%   │ net                                                                          │ 1.7 MB   │ 1.7 MB   │ -57 kB  │
│ -16.68%  │ github.com/moby/moby/client                                                  │ 440 kB   │ 367 kB   │ -73 kB  │
│ -52.81%  │ github.com/moby/moby/api                                                     │ 149 kB   │ 70 kB    │ -79 kB  │
│ -7.77%   │ github.com/google/gnostic-models                                             │ 1.6 MB   │ 1.5 MB   │ -124 kB │
│ -6.54%   │ k8s.io/apimachinery                                                          │ 2.0 MB   │ 1.8 MB   │ -128 kB │
│ -11.99%  │ go.opentelemetry.io/otel                                                     │ 1.1 MB   │ 1.0 MB   │ -136 kB │
│ -10.16%  │ github.com/quic-go/quic-go                                                   │ 1.4 MB   │ 1.2 MB   │ -139 kB │
│ -12.55%  │ google.golang.org/grpc                                                       │ 1.2 MB   │ 1.1 MB   │ -153 kB │
│ -8.90%   │ google.golang.org/protobuf                                                   │ 2.0 MB   │ 1.8 MB   │ -175 kB │
│ -46.63%  │ golang.org/x/net                                                             │ 903 kB   │ 482 kB   │ -421 kB │
│ -47.84%  │ <unnamed:generated>                                                          │ 1.0 MB   │ 534 kB   │ -490 kB │
│ -4.60%   │ k8s.io/api                                                                   │ 18 MB    │ 17 MB    │ -826 kB │
│ -74.92%  │ runtime                                                                      │ 4.0 MB   │ 1.0 MB   │ -3.0 MB │
│ -14.74%  │ k8s.io/client-go                                                             │ 24 MB    │ 20 MB    │ -3.5 MB │
├──────────┼──────────────────────────────────────────────────────────────────────────────┼──────────┼──────────┼─────────┤
│ +0.87%   │ .noptrdata                                                                   │ 459 kB   │ 463 kB   │ +4.0 kB │
│ +100%    │ .go.func                                                                     │          │          │ +0 B    │
│ +100%    │ .go.type                                                                     │          │          │ +0 B    │
│ -100%    │ .itablink                                                                    │          │          │ +0 B    │
│ -100%    │ .typelink                                                                    │          │          │ +0 B    │
│ -1.21%   │ .data                                                                        │ 236 kB   │ 233 kB   │ -2.8 kB │
│ -33.65%  │ .rodata                                                                      │ 3.0 MB   │ 2.0 MB   │ -993 kB │
├──────────┼──────────────────────────────────────────────────────────────────────────────┼──────────┼──────────┼─────────┤
│ -0.86%   │ sablier                                                                      │ 72 MB    │ 71 MB    │ -614 kB │
│          │ sablier                                                                      │          │          │         │
└──────────┴──────────────────────────────────────────────────────────────────────────────┴──────────┴──────────┴─────────┘

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 21, 2026

dependabot Bot requested a review from acouvreur as a code owner September 21, 2026 18:54

dependabot Bot mentioned this pull request Sep 21, 2026

build(deps): bump github/codeql-action/upload-sarif from 4.37.9 to 4.38.0 #1125

Closed

github-actions Bot added the ci label Sep 21, 2026

acouvreur merged commit c4bb652 into main Sep 23, 2026
6 checks passed

acouvreur deleted the dependabot/github_actions/github/codeql-action/upload-sarif-4.38.1 branch September 23, 2026 11:24

Navigation Menu

Uh oh!

build(deps): bump github/codeql-action/upload-sarif from 4.37.9 to 4.38.1 - #1130

build(deps): bump github/codeql-action/upload-sarif from 4.37.9 to 4.38.1#1130
acouvreur merged 1 commit into
mainfrom
dependabot/github_actions/github/codeql-action/upload-sarif-4.38.1

dependabot Bot commented on behalf of github Sep 21, 2026

Uh oh!

github-actions Bot commented Sep 21, 2026

Uh oh!

github-actions Bot commented Sep 21, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 21, 2026

v4.38.1

v4.38.0

CodeQL Action Changelog

[UNRELEASED]

4.38.1 - 18 Sept 2026

4.38.0 - 09 Sept 2026

4.37.9 - 26 Aug 2026

4.37.8 - 21 Aug 2026

4.37.7 - 13 Aug 2026

4.37.6 - 04 Aug 2026

4.37.5 - 03 Aug 2026

4.37.4 - 29 Jul 2026

4.37.3 - 22 Jul 2026

4.37.2 - 21 Jul 2026

Uh oh!

github-actions Bot commented Sep 21, 2026

Test Results

Uh oh!

github-actions Bot commented Sep 21, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant