Merge pull request #3865 from github/update-bundle/codeql-bundle-v2.25.3

Update default bundle to 2.25.3

CHANGELOG.md

@@ -7,6 +7,7 @@ See the [releases page](https://github.com/github/codeql-action/releases) for th
 - Configurations for private registries that use Cloudsmith or GCP OIDC are now accepted. [#3850](https://github.com/github/codeql-action/pull/3850)
 - Fixed a bug where two diagnostics produced within the same millisecond could overwrite each other on disk, causing one of them to be lost. [#3852](https://github.com/github/codeql-action/pull/3852)
 - _Upcoming breaking change_: Add a deprecation warning for customers using CodeQL version 2.19.3 and earlier. These versions of CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise Server 3.15, and will be unsupported by the next minor release of the CodeQL Action. [#3837](https://github.com/github/codeql-action/pull/3837)
+- Update default CodeQL bundle version to [2.25.3](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.3). [#3865](https://github.com/github/codeql-action/pull/3865)
 
 ## 4.35.2 - 15 Apr 2026
 

lib/analyze-action.js

@@ -107918,8 +107918,8 @@ var path6 = __toESM(require("path"));
 var semver5 = __toESM(require_semver2());
 
 // src/defaults.json
-var bundleVersion = "codeql-bundle-v2.25.2";
-var cliVersion = "2.25.2";
+var bundleVersion = "codeql-bundle-v2.25.3";
+var cliVersion = "2.25.3";
 
 // src/overlay/index.ts
 var fs4 = __toESM(require("fs"));

lib/autobuild-action.js

@@ -104405,8 +104405,8 @@ var path5 = __toESM(require("path"));
 var semver5 = __toESM(require_semver2());
 
 // src/defaults.json
-var bundleVersion = "codeql-bundle-v2.25.2";
-var cliVersion = "2.25.2";
+var bundleVersion = "codeql-bundle-v2.25.3";
+var cliVersion = "2.25.3";
 
 // src/overlay/index.ts
 var fs3 = __toESM(require("fs"));

lib/defaults.json

@@ -1,6 +1,6 @@
 {
-  "bundleVersion": "codeql-bundle-v2.25.2",
-  "cliVersion": "2.25.2",
-  "priorBundleVersion": "codeql-bundle-v2.25.1",
-  "priorCliVersion": "2.25.1"
+  "bundleVersion": "codeql-bundle-v2.25.3",
+  "cliVersion": "2.25.3",
+  "priorBundleVersion": "codeql-bundle-v2.25.2",
+  "priorCliVersion": "2.25.2"
 }

lib/init-action-post.js

@@ -165837,8 +165837,8 @@ var path6 = __toESM(require("path"));
 var semver5 = __toESM(require_semver2());
 
 // src/defaults.json
-var bundleVersion = "codeql-bundle-v2.25.2";
-var cliVersion = "2.25.2";
+var bundleVersion = "codeql-bundle-v2.25.3";
+var cliVersion = "2.25.3";
 
 // src/overlay/index.ts
 var fs4 = __toESM(require("fs"));

lib/init-action.js

@@ -105458,8 +105458,8 @@ var path7 = __toESM(require("path"));
 var semver5 = __toESM(require_semver2());
 
 // src/defaults.json
-var bundleVersion = "codeql-bundle-v2.25.2";
-var cliVersion = "2.25.2";
+var bundleVersion = "codeql-bundle-v2.25.3";
+var cliVersion = "2.25.3";
 
 // src/overlay/index.ts
 var fs4 = __toESM(require("fs"));

lib/setup-codeql-action.js

@@ -104246,8 +104246,8 @@ var path5 = __toESM(require("path"));
 var semver4 = __toESM(require_semver2());
 
 // src/defaults.json
-var bundleVersion = "codeql-bundle-v2.25.2";
-var cliVersion = "2.25.2";
+var bundleVersion = "codeql-bundle-v2.25.3";
+var cliVersion = "2.25.3";
 
 // src/overlay/index.ts
 var fs4 = __toESM(require("fs"));

lib/start-proxy-action.js

@@ -121243,8 +121243,8 @@ var path = __toESM(require("path"));
 var semver4 = __toESM(require_semver2());
 
 // src/defaults.json
-var bundleVersion = "codeql-bundle-v2.25.2";
-var cliVersion = "2.25.2";
+var bundleVersion = "codeql-bundle-v2.25.3";
+var cliVersion = "2.25.3";
 
 // src/git-utils.ts
 var core6 = __toESM(require_core());

lib/upload-lib.js

@@ -107526,8 +107526,8 @@ var fs5 = __toESM(require("fs"));
 var semver5 = __toESM(require_semver2());
 
 // src/defaults.json
-var bundleVersion = "codeql-bundle-v2.25.2";
-var cliVersion = "2.25.2";
+var bundleVersion = "codeql-bundle-v2.25.3";
+var cliVersion = "2.25.3";
 
 // src/overlay/index.ts
 var fs4 = __toESM(require("fs"));

lib/upload-sarif-action.js

@@ -107197,8 +107197,8 @@ var path5 = __toESM(require("path"));
 var semver4 = __toESM(require_semver2());
 
 // src/defaults.json
-var bundleVersion = "codeql-bundle-v2.25.2";
-var cliVersion = "2.25.2";
+var bundleVersion = "codeql-bundle-v2.25.3";
+var cliVersion = "2.25.3";
 
 // src/overlay/index.ts
 var fs4 = __toESM(require("fs"));

src/defaults.json

@@ -1,6 +1,6 @@
 {
-  "bundleVersion": "codeql-bundle-v2.25.2",
-  "cliVersion": "2.25.2",
-  "priorBundleVersion": "codeql-bundle-v2.25.1",
-  "priorCliVersion": "2.25.1"
+  "bundleVersion": "codeql-bundle-v2.25.3",
+  "cliVersion": "2.25.3",
+  "priorBundleVersion": "codeql-bundle-v2.25.2",
+  "priorCliVersion": "2.25.2"
 }