Tianocore/edk2.git/.github/workflows, branch dependabot/github_actions/github/codeql-action-4.39.1

GitHub Action: Bump github/codeql-action from 4.37.4 to 4.39.1

2026-10-26T13:27:20+00:00

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.37.4 to 4.39.1. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v4.37.4...v4.39.1) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.39.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot]

.github/workflows: Bump all github actions to latest major version

2026-08-31T21:43:14+00:00

Update all outdated github actions to their latest major version. Signed-off-by: Joey Vagedes ... Signed-off-by: dependabot[bot]

.github/workflows/upl-build.yml: Drop FIT_BUILD=TRUE

2026-08-27T06:09:50+00:00

The FIT build relies upon the fdtlib library and pyfdtlib currently fails to compile when the wheel is built during pip installation. To allow clean post-merge CI results (this triggers on a master push), the FIT build is disabled here. The fdtlib import is conditionally included based on whether a FIT build is requested. Signed-off-by: Michael Kubacki

.github/workflows/upl-build.yml: Remove redundant pip requirements

2026-08-25T19:24:45+00:00

This currently passes `pefile pylibfdt` to BuildPlatform.yml. However, those are included in the same pip installation step that installs the from pip-requirements.txt. This removes them so the dependency details can be maintained in one place which is pip-requirements.txt. This also allows local pip installation to install the same versions installed in CI. Signed-off-by: Michael Kubacki

.github: Move GitHub Actions to VS2026

2026-07-27T19:09:16+00:00

This updates all GitHub Actions using VS2022 to VS2026. Note, windows-2025 is the VM image that contains VS2026. 2025 refers to the Windows Server version, not the VS version. GitHub runners have updated the windows-2025 VM version to include VS2026, so no additional migration is required. Signed-off-by: Oliver Smith-Denny

.github: Bump actions/checkout from 6 to 7

2026-06-23T17:00:51+00:00

Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v6...v7) updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major Signed-off-by: Michael Kubacki

.github: Use windows-2022 for UPL build

2026-06-16T17:06:10+00:00

Currently, the UPL fails on Windows hosts because it specifies the `windows-latest` image which has moved on to Visual Studio 2026 while the build uses VS2022. The decision to move the actual build to a later Visual Studio version can be made independently, but for now, this change allows the UPL build to succeed on GitHub hosted runner Windows hosts. Signed-off-by: Michael Kubacki

.github: Update GitHub Actions dependencies

2026-06-12T00:20:34+00:00

Update GitHub Actions to their latest major versions across all workflows: - actions/checkout: v4 -> v6 - actions/setup-python: v2/v5 -> v6 - actions/upload-artifact: v4 -> v7 - actions/cache: v4 -> v5 - actions/create-github-app-token: v2 -> v3 - actions/github-script: v7 -> v9 This consolidates several dependabot PRs into a single commit. Signed-off-by: Michael Kubacki

.github/workflows: Enable CodeQL on ManageabilityPkg

2026-04-27T13:15:26+00:00

This commit enables the code quality check on ManageabilityPkg. Signed-off-by: Abner Chang

.github: Use valid Fedora 43 image for BuildPlatform workflow

2025-12-02T10:21:45+00:00

commit 96158b3 had a typo that updated fedora to an invalid container. This was not caught in the workflows pre-CI as this particular workflow only runs post-merge. Signed-off-by: Joey Vagedes