#9902 ci: Bump the actions group with 3 updates Pull request opened by dependabot[bot] Bumps the actions group with 3 updates: CodSpeedHQ/action, github/codeql-action and actions/dependency-review-action. Updates

CodSpeedHQ/action

from 4.10.6 to 4.11.1 Release notes Sourced from CodSpeedHQ/action's releases.

v4.11.1

Release Notes

🐛 Bug Fixes

• fix: stop using

curl --fail-with-body

and remove

jq

dependency by `@​GuillaumeLagrange` in CodSpeedHQ/action#193

⚙️ Internals

• chore: bump runner version to 4.11.1 by `@​github-actions`[bot] in CodSpeedHQ/action#191

• Pin all actions (#250) by `@​art049` in #250

• Bump nix to 0.31.1 (#247) by `@​3v1n0` in #247

Install codspeed-runner 4.11.1

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/CodSpeedHQ/codspeed/releases/download/v4.11.1/codspeed-runner-installer.sh | sh

Download codspeed-runner 4.11.1

| File | Platform | Checksum |

| ----------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------- | -------------------------------------------------------------------------------------------------------------------------------------- |

| [codspeed-runner-aarch64-unknown-linux-musl.tar.gz](https://github.com/CodSpeedHQ/codspeed/releases/download/v4.11.1/codspeed-runner-aarch64-unknown-linux-musl.tar.gz) | ARM64 MUSL Linux | [checksum](https://github.com/CodSpeedHQ/codspeed/releases/download/v4.11.1/codspeed-runner-aarch64-unknown-linux-musl.tar.gz.sha256) |

| [codspeed-runner-x86_64-unknown-linux-musl.tar.gz](https://github.com/CodSpeedHQ/codspeed/releases/download/v4.11.1/codspeed-runner-x86%5F64-unknown-linux-musl.tar.gz) | x64 MUSL Linux | [checksum](https://github.com/CodSpeedHQ/codspeed/releases/download/v4.11.1/codspeed-runner-x86%5F64-unknown-linux-musl.tar.gz.sha256) |

Full Runner Changelog: https://github.com/CodSpeedHQ/codspeed/blob/main/CHANGELOG.md

What's Changed

Full Changelog: CodSpeedHQ/action@v4.11.0...v4.11.1

v4.11.0

Release Notes

🚀 Features

• feat: add SHA256 hash verification for the installer script by `@​art049` in CodSpeedHQ/action#189

• Collect debug info by pid by `@​GuillaumeLagrange` in #240

• Skip tests requiring sudo if

GITHUB_ACTIONS

is not set by `@​GuillaumeLagrange`

• Deduplicate symbol maps, unwind_data and debug info by `@​GuillaumeLagrange`

• Use bench_pids filters when harvesting symbols from perf file by `@​GuillaumeLagrange`

• Add new fields to perf metadata by `@​GuillaumeLagrange` in #246

• Always try to attach to libc-compatible API by `@​not-matthias`

• Support tcmalloc by `@​not-matthias`

• Support more standard allocation APIs by `@​not-matthias`

• Add tracegrind support as an alternative simulation tool by `@​art049` in #236

... (truncated) Commits • `281164b` Release v4.11.1 🚀 • `c61f6b6` feat: split install and run into two different steps • `f748d0c` fix: stop using

curl --fail-with-body

and

jq

to maximize compatibility • `eee5404` chore: bump runner version to 4.11.1 (#191) • `2ac5728` Release v4.11.0 🚀 • `9f9b098` chore: bump runner version to 4.11.0 (#190) • `2f0adbd` feat: add SHA256 hash verification for the installer script (#189) • See full diff in compare view Updates

github/codeql-action

from 4.32.4 to 4.32.6 Release notes Sourced from github/codeql-action's releases.

v4.32.6

• Update default CodeQL bundle version to 2.24.3. #3548

v4.32.5

• Repositories owned by an organization can now set up the

github-codeql-disable-overlay

custom repository property to disable improved incremental analysis for CodeQL. First, create a custom repository property with the name

github-codeql-disable-overlay

and the type "True/false" in the organization's settings. Then in the repository's settings, set this property to

true

to disable improved incremental analysis. For more information, see Managing custom properties for repositories in your organization. This feature is not yet available on GitHub Enterprise Server. #3507

• Added an experimental change so that when improved incremental analysis fails on a runner — potentially due to insufficient disk space — the failure is recorded in the Actions cache so that subsequent runs will automatically skip improved incremental analysis until something changes (e.g. a larger runner is provisioned or a new CodeQL version is released). We expect to roll this change out to everyone in March. #3487

• The minimum memory check for improved incremental analysis i…

meltano/meltano