[release/v7.6.1] Bump github/codeql-action from 4.32.6 to 4.34.1 by adityapatwardhan · Pull Request #27182 · PowerShell/PowerShell
Backport of #27087 to release/v7.6.1
Triggered by @adityapatwardhan on behalf of @app/dependabot
Original CL Label: CL-BuildPackaging
/cc @PowerShell/powershell-maintainers
Impact
REQUIRED: Choose either Tooling Impact or Customer Impact (or both). At least one checkbox must be selected.
Tooling Impact
- Required tooling change
- Optional tooling change (include reasoning)
Updates CodeQL workflow action SHAs on the release branch to the same vetted version as main, maintaining CI/security scanning consistency.
Customer Impact
- Customer reported
- Found internally
Regression
REQUIRED: Check exactly one box.
- Yes
- No
This is not a regression.
Testing
Cherry-picked PR #27087 onto release/v7.6.1 and verified the cherry-pick completed successfully with no conflicts. Only the expected workflow action references changed.
Risk
REQUIRED: Check exactly one box.
- High
- Medium
- Low
The change is a targeted workflow dependency SHA update with no product/runtime code changes; scope is limited to code scanning workflows.