UI5 / webcomponents-react / 41799859056 / 5 – main/src/internal

86%

main: 86%

push

github

chore(deps): update github/codeql-action action to v4.39.2 (#9138)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[github/codeql-action](https://redirect.github.com/github/codeql-action)
| action | patch | `v4.39.1` → `v4.39.2` |

---

### Release Notes

<details>
<summary>github/codeql-action</summary>

###
[`v4.39.2`](https://redirect.github.com/github/codeql-action/releases/tag/v4.39.2)

[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v4.39.1...v4.39.2)

- Update default CodeQL bundle version to
[2.27.4](https://redirect.github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.4).
[#&#8203;4284](https://redirect.github.com/github/codeql-action/pull/4284)
- *Upcoming breaking change*: CodeQL version 2.22.3 and earlier were
discontinued on 16 October 2026 alongside GitHub Enterprise Server 3.18,
and will be unsupported by the next minor release of the CodeQL Action.
Added a deprecation warning for customers using these versions of
CodeQL.
[#&#8203;4266](https://redirect.github.com/github/codeql-action/pull/4266)
- Starting with macOS 27 and Xcode 27, traced analyses are unsupported.
See [this blog post for more
information](https://github.blog/changelog/2026-10-19-codeql-changes-for-macos-27-xcode-27-and-swift-6-4/).
The CodeQL Action will now try to identify if a workflow is about to
perform a traced analysis on version 27 or above of macOS or Xcode. If
so, the CodeQL Action will emit a corresponding warning that will also
be visible on the [Tool Status
Page](https://docs.github.com/en/code-security/how-tos/find-and-fix-code-vulnerabilities/manage-your-configuration/use-the-tools-status-page-for-code-scanning).
This check will be rolled out following this release of the CodeQL
Action.
[#&#8203;4221](https://redirect.github.com/github/codeql-action/pull/4221)
- The undocumented TRAP cache cleanup feature that could be enabled
using the `CODEQL_ACTION_CLEANUP_TRAP_CA... (continued)

93 of 4080 branches covered (2.28%)

Branch coverage included in aggregate %.

784 of 6581 relevant lines covered (11.91%)

5.57 hits per line