From be788eacd560c5bf3d51f57561604dca87fb492b Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 26 Jan 2026 20:39:15 +0000
Subject: [PATCH] Update github/codeql-action action to v4

---
 .github/workflows/maven-service-build.yml | 2 +-
 .github/workflows/semgrep-scan.yml        | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/maven-service-build.yml b/.github/workflows/maven-service-build.yml
index 14a44b2..2534699 100644
--- a/.github/workflows/maven-service-build.yml
+++ b/.github/workflows/maven-service-build.yml
@@ -74,6 +74,6 @@ jobs:
         run: trivy sbom --severity CRITICAL,HIGH --format sarif -o trivy-report.sarif ./bom.json
 
       - name: Upload SARIF report
-        uses: github/codeql-action/upload-sarif@v3
+        uses: github/codeql-action/upload-sarif@v4
         with:
           sarif_file: trivy-report.sarif
diff --git a/.github/workflows/semgrep-scan.yml b/.github/workflows/semgrep-scan.yml
index 6beb59e..4986543 100644
--- a/.github/workflows/semgrep-scan.yml
+++ b/.github/workflows/semgrep-scan.yml
@@ -26,7 +26,7 @@ jobs:
           path: semgrep.sarif
 
       - name: Scanning alerts
-        uses: github/codeql-action/upload-sarif@v3.28.8
+        uses: github/codeql-action/upload-sarif@v4.32.0
         with:
           sarif_file: semgrep.sarif
           category: semgrep