Merge pull request #4303 from github/mergeback/v4.39.3-to-main-33d7b85d

Mergeback v4.39.3 refs/heads/releases/v4 into main
Rebuild
2026-11-09 06:29:52 +00:00 · 2026-11-04 17:52:12 +00:00 · 2026-11-04 16:49:37 +00:00 · 2026-11-04 16:49:21 +00:00 · 2026-11-04 16:47:01 +00:00 · 2026-11-04 15:21:56 +00:00
5 changed files with 8 additions and 5 deletions
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,10 @@ See the [releases page](https://github.com/github/codeql-action/releases) for th

 No user facing changes.

+## 4.39.3 - 04 Nov 2026
+
+- Fixed diff-informed alert filtering incorrectly removing alerts in changed files whose paths contain spaces, special characters, or non-ASCII characters. [#4283](https://github.com/github/codeql-action/pull/4283)
+
 ## 4.39.2 - 03 Nov 2026

 - Update default CodeQL bundle version to [2.27.4](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.4). [#4284](https://github.com/github/codeql-action/pull/4284)
--- a/lib/entry-points.js
+++ b/lib/entry-points.js
@@ -178724,7 +178724,7 @@ function getDiffRangesJsonFilePath(env = getEnv()) {
  return path2.join(getTemporaryDirectory(env), PR_DIFF_RANGE_JSON_FILENAME);
 }
 function getActionVersion() {
-  return "4.39.3";
+  return "4.39.4";
 }
 function getWorkflowEventName(env = getEnv()) {
  return env.getRequired("GITHUB_EVENT_NAME" /* GITHUB_EVENT_NAME */);
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
  "name": "codeql",
-  "version": "4.39.3",
+  "version": "4.39.4",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "codeql",
-      "version": "4.39.3",
+      "version": "4.39.4",
      "license": "MIT",
      "workspaces": [
        "pr-checks"
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
  "name": "codeql",
-  "version": "4.39.3",
+  "version": "4.39.4",
  "private": true,
  "description": "CodeQL action",
  "scripts": {
--- a/unreleased-change-notes/decode-diff-informed-sarif-uris.md
+++ b/unreleased-change-notes/decode-diff-informed-sarif-uris.md
@@ -1 +0,0 @@
- Fixed diff-informed alert filtering incorrectly removing alerts in changed files whose paths contain spaces, special characters, or non-ASCII characters. [#4283](https://github.com/github/codeql-action/pull/4283)
Author	SHA1	Message	Date
Sam Robson	0911ee96d2	Merge pull request #4303 from github/mergeback/v4.39.3-to-main-33d7b85d Mergeback v4.39.3 refs/heads/releases/v4 into main	2026-11-04 17:52:12 +00:00
github-actions[bot]	d11b2246b1	Rebuild	2026-11-04 16:49:37 +00:00
github-actions[bot]	8e42d3873f	Update changelog and version after v4.39.3	2026-11-04 16:49:21 +00:00
Sam Robson	33d7b85da1	Merge pull request #4299 from github/update-v4.39.3-064910ba2 Merge main into releases/v4	2026-11-04 16:47:01 +00:00
github-actions[bot]	24393f8692	Update changelog for v4.39.3	2026-11-04 15:21:56 +00:00
				`@@ -1 +0,0 @@`
				`- Fixed diff-informed alert filtering incorrectly removing alerts in changed files whose paths contain spaces, special characters, or non-ASCII characters. [#4283](https://github.com/github/codeql-action/pull/4283)`