[stateful-y-renovate]

This PR contains the following updates:

Package	Update	Change	Age	Confidence
github/codeql-action/analyze	patch	v4.39.1 -> v4.39.2
github/codeql-action/init	patch	v4.39.1 -> v4.39.2
github/codeql-action/upload-sarif	patch	v4.39.1 -> v4.39.2
taiki-e/install-action	minor	v2.88.0 -> v2.89.1
ty (changelog)	patch	0.0.95 -> 0.0.96

---

Release Notes

github/codeql-action (github/codeql-action/analyze)

v4.39.2

Compare Source

• Update default CodeQL bundle version to 2.27.4. #​4284
• Upcoming breaking change: CodeQL version 2.22.3 and earlier were discontinued on 16 October 2026 alongside GitHub Enterprise Server 3.18, and will be unsupported by the next minor release of the CodeQL Action. Added a deprecation warning for customers using these versions of CodeQL. #​4266
• Starting with macOS 27 and Xcode 27, traced analyses are unsupported. See this blog post for more information. The CodeQL Action will now try to identify if a workflow is about to perform a traced analysis on version 27 or above of macOS or Xcode. If so, the CodeQL Action will emit a corresponding warning that will also be visible on the Tool Status Page. This check will be rolled out following this release of the CodeQL Action. #​4221
• The undocumented TRAP cache cleanup feature that could be enabled using the CODEQL_ACTION_CLEANUP_TRAP_CACHES environment variable has been removed, as announced in the release notes for CodeQL Action 4.35.2. The analyze Action now warns if this environment variable is set. If you used TRAP cache cleanup to limit Actions cache usage, we recommend disabling TRAP caching by passing the trap-caching: false input to the init Action. #​4243

taiki-e/install-action (taiki-e/install-action)

v2.89.1

Compare Source

Initial release

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[github-actions]

Approved automatically: this update is in the automerge scope set by the shared Renovate preset. The required status checks still gate the merge.

[github-actions]

Approved automatically: this update is in the automerge scope set by the shared Renovate preset. The required status checks still gate the merge.

[github-actions]

Approved automatically: this update is in the automerge scope set by the shared Renovate preset. The required status checks still gate the merge.