ci: CodeQL action v4 + re-add Kotlin#28
Merged
Merged
Conversation
added 2 commits
June 26, 2026 17:13
v3 is deprecated (Dec 2026) and runs on the now-deprecated Node 20; its bundled CodeQL CLI also predated Kotlin 2.4.0 support, which is why java-kotlin failed with 'Kotlin version 2.4.0 is too recent'. github/codeql#21970 added 2.4.0 support, shipped in v4's CLI — so move init/analyze to @v4 and restore the java-kotlin matrix entry (build-mode manual via 'flutter build apk').
The Kotlin 2.4.0 extractor support (github/codeql#21970) is merged but not yet in a released CodeQL CLI — the latest (2.25.6) still caps at < 2.3.30, so the java-kotlin job fails regardless of action version. Keep the v4 upgrade (off the deprecated v3 / Node 20) and scope to c-cpp + actions; the comment records the exact condition to re-add Kotlin.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Two linked fixes prompted by the v3 deprecation notice + Node 20 annotations:
codeql-actionv3 → v4 — v3 is deprecated (Dec 2026) and forced onto the deprecated Node 20 runtime.java-kotlin— it previously failed with "Kotlin version 2.4.0 is too recent. CodeQL currently supports versions below 2.3.30" because v3 bundled an older CodeQL CLI. github/codeql#21970 added Kotlin 2.4.0 support, which ships in v4's CLI. Built viaflutter build apkunder build-mode manual (LFS + JDK 17).CodeQL now covers java-kotlin (Android player/HDR) + c-cpp (Windows overlay) + actions. Still not a required check.
🤖 Generated with Claude Code