#9703 ci: Bump the actions group with 2 updates Pull request opened by dependabot[bot] Bumps the actions group with 2 updates: github/codeql-action and docker/setup-buildx-action. Updates

github/codeql-action

from 4.31.8 to 4.31.9 Release notes Sourced from github/codeql-action's releases.

## v4.31.9

# CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

## 4.31.9 - 16 Dec 2025

No user facing changes.

See the full CHANGELOG.md for more information.

Changelog Sourced from github/codeql-action's changelog.

# CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

## [UNRELEASED]

No user facing changes.

## 4.31.9 - 16 Dec 2025

No user facing changes.

## 4.31.8 - 11 Dec 2025

• Update default CodeQL bundle version to 2.23.8. #3354

## 4.31.7 - 05 Dec 2025

• Update default CodeQL bundle version to 2.23.7. #3343

## 4.31.6 - 01 Dec 2025

No user facing changes.

## 4.31.5 - 24 Nov 2025

• Update default CodeQL bundle version to 2.23.6. #3321

## 4.31.4 - 18 Nov 2025

No user facing changes.

## 4.31.3 - 13 Nov 2025

• CodeQL Action v3 will be deprecated in December 2026. The Action now logs a warning for customers who are running v3 but could be running v4. For more information, see Upcoming deprecation of CodeQL Action v3.

• Update default CodeQL bundle version to 2.23.5. #3288

## 4.31.2 - 30 Oct 2025

No user facing changes.

## 4.31.1 - 30 Oct 2025

• The

add-snippets

input has been removed from the

analyze

action. This input has been deprecated since CodeQL Action 3.26.4 in August 2024 when this removal was announced.

## 4.31.0 - 24 Oct 2025

• Bump minimum CodeQL bundle version to 2.17.6. #3223

• When SARIF files are uploaded by the

analyze

or

upload-sarif

actions, the CodeQL Action automatically performs post-processing steps to prepare the data for the upload. Previously, these post-processing steps were only performed before an upload took place. We are now changing this so that the post-processing steps will always be performed, even when the SARIF files are not uploaded. This does not change anything for the

upload-sarif

action. For

analyze

, this may affect Advanced Setup for CodeQL users who specify a value other than

always

for the

upload

input. #3222

... (truncated) Commits • `5d4e8d1` Merge pull request #3371 from github/update-v4.31.9-998798e34 • `1dc115f` Update changelog for v4.31.9 • `998798e` Merge pull request #3352 from github/nickrolfe/jar-min-ff-cleanup • `5eb7519` Merge pull request #3358 from github/henrymercer/database-upload-telemetry • `d29eddb` Extract version number to constant • `e962687` Merge branch 'main' into henrymercer/database-upload-telemetry • `19c7f96` Rename

isOverlayBase

• `ae5de9a` Use

getErrorMessage

in log too • `0cb8633` Prefer

performance.now()

• `c07cc0d` Merge pull request #3351 from github/henrymercer/ghec-dr-determine-tools-vers... • Additional commits viewable in compare view Updates

docker/setup-buildx-action

from 3.11.1 to 3.12.0 Release notes Sourced from docker/setup-buildx-action's releases.

## v3.12.0

• Deprecate

install

input by `@​crazy-max` in docker/setup-buildx-action#455

• Bump

@​docker/actions-toolkit

from 0.62.1 to 0.63.0 in docker/setup-buildx-action#434

• Bump brace-expansion from 1.1.11 to 1.1.12 in docker/setup-buildx-action#436

• Bump form-data from 2.5.1 to 2.5.5 in docker/setup-buildx-action#432

• Bump undici from 5.28.4 to 5.29.0 in docker/setup-buildx-action#435

Full Changelog: docker/setup-buildx-action@v3.11.1...v3.12.0

Commits • `8d2750c` Merge pull request #455 from crazy-max/install-deprecated • `e81846b` deprecate install input • `65d18f8` Merge pull request #454 from docker/dependabot/github_actions/actions/checkout-6 • `000d75d` build(deps): bump actions/checkout from 5 to 6 • `1583c0f` Merge pull request #443 from nicolasleger/patch-1 • `ed158e7` doc: bump actions/checkout from 4 to 5 • `4cc794f` Merge pull request #441 from docker/dependabot/github_actions/actions/checkout-5 • <https://github.com/docker/setup-buildx-action/commit/4dfc3d6c5d9e9534040f8d8b55b… meltano/meltano