Sync Dev with main

[reactive-firewall]

Patch Notes

Just bringing dev up-to-date with recent version bumps.

Impacted GHIs:

• None

Included & Superseded PR/MRs

• Includes Release v2.1 #5
• Includes & Supersedes Improved Usage Example #6
• Includes & Supersedes Pull useful improvements from Community #7
• Includes & Supersedes [UPDATE] (deps): Bump github/codeql-action from 3 to 4 #11
• Includes & Supersedes [UPDATE] (deps): Bump actions/upload-artifact from 4 to 5 #12
• Includes & Supersedes [UPDATE] (deps): Bump actions/upload-artifact from 5 to 6 #13
• Includes & Supersedes [UPDATE] (deps): Bump actions/upload-artifact from 6 to 7 #14

---

Summary by CodeRabbit

• Chores
  • Updated artifact upload and SARIF publishing workflows to newer action versions.
  • Maintains compatibility with current GitHub workflow tooling.

[coderabbitai]

📝 Walkthrough

Walkthrough

The composite workflow updates its artifact upload action from v4 to v7 and its SARIF upload action from v3 to v4. Existing artifact naming, paths, and overwrite settings remain unchanged.

Changes

Scan output publishing

Layer / File(s)	Summary
Upload action version upgrades action.yml	The artifact upload step now uses actions/upload-artifact@v7, and the SARIF publishing step uses github/codeql-action/upload-sarif@v4.

Estimated code review effort: 1 (Trivial) | ~2 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title is relevant because this PR syncs dev with main, though it is broader than the specific action version bumps.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch main

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[coderabbitai]

🧹 Nitpick comments (1)

action.yml (1)

127-127: 🩺 Stability & Availability | 🔵 Trivial

Document runner runtime requirements for the upgraded upload steps.

Both upgraded action references are Node.js 24 runtimes; self-hosted runners before GitHub Actions Runner 2.327.1 may fail before these uploads execute. Make the minimum runner version explicit in the action’s README or usage documentation.

Also applies to line 134.

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@action.yml` at line 127, Document the minimum GitHub Actions Runner version
required by the Node.js 24 upload-artifact steps referenced in action.yml,
including both upgraded action references. Update the action’s README or usage
documentation to state that self-hosted runners must be version 2.327.1 or
newer.

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Nitpick comments:
In `@action.yml`:
- Line 127: Document the minimum GitHub Actions Runner version required by the
Node.js 24 upload-artifact steps referenced in action.yml, including both
upgraded action references. Update the action’s README or usage documentation to
state that self-hosted runners must be version 2.327.1 or newer.

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 4eefb406-2ab9-41d1-ae45-b99695cb8856

📥 Commits

Reviewing files that changed from the base of the PR and between c56ff8d and 88ecea1.

📒 Files selected for processing (1)

• action.yml