From 87c9ed0e41cf4a655e372a8fe0f1ca699a679f6e Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 15 Oct 2026 14:15:12 +0000
Subject: [PATCH] chore(deps): update github/codeql-action action to v4.39.0

---
 .github/workflows/quality.yml  | 2 +-
 .github/workflows/security.yml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/quality.yml b/.github/workflows/quality.yml
index be12a0a..a50b1fe 100644
--- a/.github/workflows/quality.yml
+++ b/.github/workflows/quality.yml
@@ -203,7 +203,7 @@ jobs:
       # The results show up on the repository's Security tab. Advanced Security
       # is on organisation-wide, so this works on a private repository too.
       - name: Upload zizmor results to GitHub Security
-        uses: github/codeql-action/upload-sarif@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3
+        uses: github/codeql-action/upload-sarif@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0
         if: ${{ !cancelled() }}
         continue-on-error: true
         with:
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index d05b70e..e4adfe2 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -110,7 +110,7 @@ jobs:
       # The results show up on the repository's Security tab. Advanced Security
       # is on organisation-wide, so this works on a private repository too.
       - name: Upload results to GitHub Security
-        uses: github/codeql-action/upload-sarif@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3
+        uses: github/codeql-action/upload-sarif@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0
         continue-on-error: true
         with:
           sarif_file: scorecard.sarif