Bump the github-actions group with 3 updates

[dependabot]

Bumps the github-actions group with 3 updates: github/codeql-action, mikefarah/yq and MishaKav/pytest-coverage-comment.

Updates github/codeql-action from 4.37.7 to 4.37.8

Release notes

Sourced from github/codeql-action's releases.

v4.37.8

No user facing changes.

Changelog

Sourced from github/codeql-action's changelog.

4.37.8 - 21 Aug 2026

No user facing changes.

Commits

• db488dd Merge pull request #4102 from github/update-v4.37.8-9ee088e13
• 1845f5b Update changelog for v4.37.8
• 9ee088e Merge pull request #4080 from github/henrymercer/studious-giggle
• 1aef003 Address review feedback on overlay disk flags
• 508b83b Merge main into overlay minimum disk feature branch
• d97b342 Merge pull request #4098 from github/mbg/permission-error-as-configuration-error
• 47fa622 Make EACCES a ConfigurationError
• 45693cc Refactor ENOSPC check into isDiskConfigurationError function
• c2fd8f5 Merge pull request #4081 from github/mario-campos/version-cache-to-disk
• c56f48e Log unexpected conditions during caching CLI output
• Additional commits viewable in compare view

Updates mikefarah/yq from 4.53.3 to 4.53.6

Release notes

Sourced from mikefarah/yq's releases.

v4.53.6

• Fixing release build issue
• Fixed line wrapping bug (#2824, #2823) Thanks @​mxey
• Bumped dependencies

v4.53.4

• Close input files after processing each one (#2796) (#2808) Thanks @​MsfPablo
• Fixed non string HCL string keys (#2795)
• Fixed heap allocation bug (#2809) Thanks @​MsfPablo
• Fix deleting commented empty list YAML output (#2765) Thanks @​dpersek
• Fix (has) return false for negative array indices (#2769) Thanks @​maximilize
• Fix (sort): avoid int64 overflow comparing large integers (#2771) Thanks @​maximilize
• Fix: preserve correct parent references in explode merge anchor reconstruction (#2730) Thanks @​vomba
• Improve Guard ExpressionParser initialization with sync.Once (#2789) Thanks @​arcaven
• Fix: reject negative indent instead of panicking (#2746) Thanks @​StressTestor
• Fix: parse signed hex and octal integers (#2749) Thanks @​StressTestor
• Fix: skip UTF-8 BOM when processing front matter (#2751) Thanks @​StressTestor
• Fix !!merge tag regression for yq (#2705) Thanks @​W-Floyd
• Default to yaml when a file's extension is not a recognised format (#2785) Thanks @​devthedevil
• Bumped dependencies

Changelog

Sourced from mikefarah/yq's changelog.

4.53.6:

• Fixing release build issue

4.53.5:

• Fixed line wrapping bug (#2824, #2823) Thanks mxey
• Bumped dependencies

4.53.4:

• Close input files after processing each one (#2796) (#2808) Thanks @​MsfPablo
• Fixed non string HCL string keys (#2795)
• Fixed heap allocation bug (#2809) Thanks @​MsfPablo
• Fix deleting commented empty list YAML output (#2765) Thanks @​dpersek
• Fix (has) return false for negative array indices (#2769) Thanks @​maximilize
• Fix (sort): avoid int64 overflow comparing large integers (#2771) Thanks @​maximilize
• Fix: preserve correct parent references in explode merge anchor reconstruction (#2730) Thanks @​vomba
• Improve Guard ExpressionParser initialization with sync.Once (#2789) Thanks @​arcaven
• Fix: reject negative indent instead of panicking (#2746) Thanks @​StressTestor
• Fix: parse signed hex and octal integers (#2749) Thanks @​StressTestor
• Fix: skip UTF-8 BOM when processing front matter (#2751) Thanks @​StressTestor
• Fix !!merge tag regression for yq (#2705) Thanks @​W-Floyd
• Default to yaml when a file's extension is not a recognised format (#2785) Thanks @​devthedevil
• Bumped dependencies

Commits

• c14f446 Bumping version
• ed4125b Fixing release build
• e95064c Bumping version
• 1f5d6e6 Release notes
• b1d6df4 build(deps): bump docker/setup-buildx-action from 4.1.0 to 4.3.0 (#2829)
• 8dc5ae1 build(deps): bump golang.org/x/mod from 0.38.0 to 0.40.0 (#2831)
• 8a95461 build(deps): bump golang from 1.26.5 to 1.26.6 (#2832)
• ce31317 Pr 2825 (#2836)
• ce7026e Bumping version
• 62ac0c6 Release notes
• Additional commits viewable in compare view

Updates MishaKav/pytest-coverage-comment from 1.11.0 to 1.11.1

Release notes

Sourced from MishaKav/pytest-coverage-comment's releases.

v1.11.1

What's Changed

• bump undici from 6.27.0 to 6.28.0 (fixes three security vulnerabilities)
• Fix badge creation on Dependabot and fork PRs [skip ci] by @​MishaKav in MishaKav/pytest-coverage-comment#295

Full Changelog: MishaKav/pytest-coverage-comment@v1.11.0...v1.11.1

Changelog

Sourced from MishaKav/pytest-coverage-comment's changelog.

Pytest Coverage Comment 1.11.1

Release Date: 2026-08-22

Changes

• bump undici from 6.27.0 to 6.28.0 (fixes three security vulnerabilities)

Commits

• d46d9d5 Bump undici from 6.27.0 to 6.28.0 (#294)
• 67e0872 ci: skip badge step in live-test when the gist secret is unavailable (#295)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions