#3816 chore(deps): update minor and patch updates to github actions Pull request opened by renovate[bot] This PR contains the following updates: | Package | Type | Update | Change | Pending | | ------------------------------------------------------------------------ | ------ | ------ | ----------------- | ------- | | [CodSpeedHQ/action](https://redirect.github.com/CodSpeedHQ/action) | action | patch | v5.4.0 → v5.4.2 | v5.5.0 | | [astral-sh/setup-uv](https://redirect.github.com/astral-sh/setup-uv) | action | minor | v10.2.0 → v10.3.0 | | | [github/codeql-action](https://redirect.github.com/github/codeql-action) | action | patch | v4.38.2 → v4.38.3 | v4.39.0 | --- Release Notes CodSpeedHQ/action `v5.4.2` Compare Source Bumps the CodSpeed runner to v5.4.2, including v5.4.1. This release improves and adds support for memory flamegraphs in C++, Python and Node.js. Fixes flamegraphs for Python in simulation mode in the exec CLI. 🚀 Features • Name Python and Node.js frames in memory flamegraphs: emit their perf maps in memory mode, and harvest perf maps and JIT unwind data for memory tracking, by @​not-matthias in #​556 • Launch

node

with the codspeed-node V8 flags for the current mode in

codspeed exec

, including through npm, npx and

#!/usr/bin/env node

scripts, by @​not-matthias in #​556 🐛 Bug Fixes • Always set

PYTHONPERFSUPPORT

, so Python

codspeed exec

targets keep their Python frames in simulation-mode flamegraphs, by @​not-matthias in #​577 • Fix memory flamegraph stacks: restore return addresses hijacked by uretprobes in nested allocator calls, compare mapped modules against their mapping, and keep every placement of a module mapped more than once, by @​not-matthias in #​564, #​563 and #​556 • Only pass

--interpreted-frames-native-stack

to node in analysis mode by @​not-matthias in #​556 • Label dropped benchmarks in the comparison table by @​adriencaccia in #​570 ⚙️ Internals • Pin memtrack 1.6.1 and exec-harness 1.4.1, through 1.4.0, by @​adriencaccia in #​575 and #​580 Full Runner Changelog: https://github.com/CodSpeedHQ/codspeed/blob/main/CHANGELOG.md What's Changed • chore: bump runner version to 5.4.2 by @​github-actions[bot] in #​246 Full Changelog: CodSpeedHQ/action@v5.4.0...v5.4.2 astral-sh/setup-uv `v10.3.0`: 🌈 Add Python architecture selection Compare Source Changes This release adds the

python-arch

input to select a Python architecture independently of the Python version. With

uv

0.13.0 or later, set

python-arch: x86_64

to use x64 Python on Windows ARM64 runners. It also includes embedded checksums for

uv

releases through 0.13.0. • Use macOS 15 runners for tests @​charliermarsh (#​1081) 🚀 Enhancements • Add

python-arch

support @​zanieb (#​1079) 🧰 Maintenance • chore: update known checksums for 0.13.0 @​github-actions[bot] (#​1089) • chore: update known checksums for 0.12.24 @​github-actions[bot] (#​1084) • chore: update known checksums for 0.12.23 @​github-actions[bot] (#​1082) • chore: update known checksums for 0.12.22 @​github-actions[bot] (#​1080) • chore: update known checksums for 0.12.21 @​github-actions[bot] (#​1078) • chore: update known checksums for 0.12.20 @​github-actions[bot] (#​1076) • chore: update known checksums for 0.12.19 @​github-actions[bot] (#​1068) • chore: update known checksums for 0.12.18 @​github-actions[bot] (#​1065) ⬆️ Dependency updates • chore(deps): bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3 @​dependabot[bot] (#​1077) github/codeql-action `v4.38.3` Compare Source • _Upcoming breaking change_: CodeQL version 2.21.2 and earlier were discontinued on 24 September 2026 alongside GitHub Enterprise Server 3.17, and will be unsupported by the next minor release of the CodeQL Action. Added a deprecation warning for customers using these versions of CodeQL. #​4188 • Update default CodeQL bundle version to 2.27.2. #​4203 • Fixed a bug where the decision of whether to use a per-language bundle did not account for custom configurations that reference queries outside of compiled CodeQL packs. This issue was caught during internal testing and did not affect any customer repositories. We will resume the roll out of per-language bundles in the coming weeks. #​4184 --- Configuration 📅 Schedule: (UTC) • Branch creation • Between 12:00 AM and 03:59 AM, only on Monday (

* 0-3 * * 1

) • Automerge • Between 08:00 AM and 05:59 PM, Monday through Friday (

* 8-17 * * 1-5

) 🚦 Automerge: Enabled. ♻️ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired. … meltano/sdk