dependabot[bot] 15f955270f build(deps): bump the github-actions group across 1 directory with 2 updates ...

Bumps the github-actions group with 2 updates in the / directory: [docker/login-action](https://github.com/docker/login-action) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action).


Updates `docker/login-action` from 4.6.0 to 4.7.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/dbcb813823bdd20940b903addbd779551569679f...81c6f93d4bc991e510b342a00b419b3bb4efc5c6)

Updates `github/codeql-action/upload-sarif` from 4.39.0 to 4.39.1
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee...9b3254085494b55a0f7c4c2b3d2d52cc712ce370)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 4.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.39.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>

2026-11-02 19:20:36 +00:00

..

actionlint.yml

…

arm-setup-smoke.yml

v1.91.106.0 fix: the 2026-10-15 issue wave (#3209)

2026-10-16 22:00:32 +00:00

cso-runtime-images.yml

build(deps): bump the github-actions group across 1 directory with 2 updates

2026-11-02 19:20:36 +00:00

cso-runtime-promote.yml

v1.91.177.0 ci(cso): give the promote candidate step GH_TOKEN; fail any workflow step that runs gh without a token (#3336)

2026-10-22 19:35:30 +00:00

cso-runtime-qualification.yml

v1.91.176.0 cso: ignore the compiled helpers' leading #! line in the release contract's preparationSha256 (both sides) (#3333)

2026-10-21 19:22:49 +00:00

cso-scanner-images.yml

build(deps): bump the github-actions group across 1 directory with 2 updates

2026-11-02 19:20:36 +00:00

dependency-review.yml

…

eval-sweep.yml

build(deps): bump the github-actions group across 1 directory with 2 updates

2026-11-02 19:20:36 +00:00

evals-main-backstop.yml

v1.92.21.0 ci: blobless clones on the PR and train path, fail-loud history reads (GSTA-203 PR 5) (#3713)

2026-11-01 09:19:25 +00:00

evals-marathon.yml

build(deps): bump the github-actions group across 1 directory with 2 updates

2026-11-02 19:20:36 +00:00

evals-periodic.yml

build(deps): bump the github-actions group across 1 directory with 2 updates

2026-11-02 19:20:36 +00:00

evals.yml

build(deps): bump the github-actions group across 1 directory with 2 updates

2026-11-02 19:20:36 +00:00

free-durations-record.yml

v1.92.51.0 ci: windows-smoke is the required Windows check; the six-shard suite runs nightly (GSTA-203 PR 1) (#3806)

2026-11-02 01:50:24 +00:00

free-tests.yml

v1.93.14.0 ci: each free-suite job's timeout follows the plan's runner wall (#3850) (#3877)

2026-11-02 19:11:00 +00:00

make-pdf-gate.yml

v1.91.60.0 fix(windows): setup degrades instead of dying on a CSO failure, detects Smart App Control, Consolas terminal font (#3079)

2026-10-08 15:43:32 +00:00

measure-journal-read.yml

v1.91.34.0 fix: /autoplan on current Claude Code and long sessions, quieter pre-push and sync guards, gstack-post, gstack-doctor (#3069)

2026-10-07 23:29:05 +00:00

model-policy-freshness.yml

v1.91.106.0 fix: the 2026-10-15 issue wave (#3209)

2026-10-16 22:00:32 +00:00

native-qualification.yml

v1.91.298.0 chore: remove Dia from gstack (cookie source and qualification harness) (#3551)

2026-10-28 19:37:41 +00:00

osv-scanner.yml

…

platform-qualification.yml

v1.91.30.0 fix: honest eval failure reports, Bun floor with safe auto-update, make-pdf and /review on Codex (#3033)

2026-10-06 18:07:50 +00:00

pr-title-sync.yml

…

quality-gate.yml

v1.91.273.0 feat(ship): PR bodies open with the problem and a Blast radius line, and gstack-prose-lint catches autopilot phrasing before /ship publishes a CHANGELOG entry or PR body (#3501)

2026-10-27 10:16:08 +00:00

scorecard.yml

build(deps): bump the github-actions group across 1 directory with 2 updates

2026-11-02 19:20:36 +00:00

skill-docs.yml

v1.91.30.0 fix: honest eval failure reports, Bun floor with safe auto-update, make-pdf and /review on Codex (#3033)

2026-10-06 18:07:50 +00:00

test-health.yml

v1.91.30.0 fix: honest eval failure reports, Bun floor with safe auto-update, make-pdf and /review on Codex (#3033)

2026-10-06 18:07:50 +00:00

version-gate.yml

v1.92.21.0 ci: blobless clones on the PR and train path, fail-loud history reads (GSTA-203 PR 5) (#3713)

2026-11-01 09:19:25 +00:00

weekly-release.yml

v1.91.292.0 Stable channel: a regression exception beside the security one, and the stale weekly wording (#3533)

2026-10-28 09:59:40 +00:00

windows-free-tests.yml

v1.92.77.0 wave(github): #3724 #3771 #3833 (#3846)

2026-11-02 12:58:56 +00:00

windows-pregate-e2e.yml

v1.91.117.0 fix: pregate bats lanes, WTREE_UNAVAILABLE, doctor rows, SKILL.md size guard, planMode hosts (fix wave PR 5) (#3236)

2026-10-17 04:36:00 +00:00

windows-setup-e2e.yml

v1.92.51.0 ci: windows-smoke is the required Windows check; the six-shard suite runs nightly (GSTA-203 PR 1) (#3806)

2026-11-02 01:50:24 +00:00

windows-smoke.yml

v1.92.51.0 ci: windows-smoke is the required Windows check; the six-shard suite runs nightly (GSTA-203 PR 1) (#3806)

2026-11-02 01:50:24 +00:00