Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 20, 2025

Bumps the gh-actions-packages group with 1 update: github/codeql-action.

Updates github/codeql-action from 4.30.8 to 4.30.9

Release notes

Sourced from github/codeql-action's releases.

v4.30.9

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.30.9 - 17 Oct 2025

  • Update default CodeQL bundle version to 2.23.3. #3205
  • Experimental: A new setup-codeql action has been added which is similar to init, except it only installs the CodeQL CLI and does not initialize a database. Do not use this in production as it is part of an internal experiment and subject to change at any time. #3204

See the full CHANGELOG.md for more information.

Changelog

Sourced from github/codeql-action's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

4.30.9 - 17 Oct 2025

  • Update default CodeQL bundle version to 2.23.3. #3205
  • Experimental: A new setup-codeql action has been added which is similar to init, except it only installs the CodeQL CLI and does not initialize a database. Do not use this in production as it is part of an internal experiment and subject to change at any time. #3204

4.30.8 - 10 Oct 2025

No user facing changes.

4.30.7 - 06 Oct 2025

  • [v4+ only] The CodeQL Action now runs on Node.js v24. #3169

3.30.6 - 02 Oct 2025

  • Update default CodeQL bundle version to 2.23.2. #3168

3.30.5 - 26 Sep 2025

  • We fixed a bug that was introduced in 3.30.4 with upload-sarif which resulted in files without a .sarif extension not getting uploaded. #3160

3.30.4 - 25 Sep 2025

  • We have improved the CodeQL Action's ability to validate that the workflow it is used in does not use different versions of the CodeQL Action for different workflow steps. Mixing different versions of the CodeQL Action in the same workflow is unsupported and can lead to unpredictable results. A warning will now be emitted from the codeql-action/init step if different versions of the CodeQL Action are detected in the workflow file. Additionally, an error will now be thrown by the other CodeQL Action steps if they load a configuration file that was generated by a different version of the codeql-action/init step. #3099 and #3100
  • We added support for reducing the size of dependency caches for Java analyses, which will reduce cache usage and speed up workflows. This will be enabled automatically at a later time. #3107
  • You can now run the latest CodeQL nightly bundle by passing tools: nightly to the init action. In general, the nightly bundle is unstable and we only recommend running it when directed by GitHub staff. #3130
  • Update default CodeQL bundle version to 2.23.1. #3118

3.30.3 - 10 Sep 2025

No user facing changes.

3.30.2 - 09 Sep 2025

  • Fixed a bug which could cause language autodetection to fail. #3084
  • Experimental: The quality-queries input that was added in 3.29.2 as part of an internal experiment is now deprecated and will be removed in an upcoming version of the CodeQL Action. It has been superseded by a new analysis-kinds input, which is part of the same internal experiment. Do not use this in production as it is subject to change at any time. #3064

3.30.1 - 05 Sep 2025

  • Update default CodeQL bundle version to 2.23.0. #3077

3.30.0 - 01 Sep 2025

... (truncated)

Commits
  • 16140ae Merge pull request #3213 from github/update-v4.30.9-70205d3d1
  • 30db5fe Update changelog for v4.30.9
  • 70205d3 Merge pull request #3211 from github/mbg/init/starting-partial-config
  • 697c209 Merge remote-tracking branch 'origin/main' into mbg/init/starting-partial-config
  • 1bd53ba Merge pull request #3205 from github/update-bundle/codeql-bundle-v2.23.3
  • cac4df0 Rebuild
  • 77e5c0d Merge branch 'main' into update-bundle/codeql-bundle-v2.23.3
  • 97a4f75 Merge pull request #3204 from github/mbg/setup-codeql
  • 2d5512b Merge remote-tracking branch 'origin/main' into mbg/init/starting-partial-config
  • fa7bdf0 Call getAnalysisKinds a second time, and ignore exceptions thrown during th...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the gh-actions-packages group with 1 update: [github/codeql-action](https://github.com/github/codeql-action).


Updates `github/codeql-action` from 4.30.8 to 4.30.9
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@f443b60...16140ae)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.30.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gh-actions-packages
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added comp: tooling Build & Tooling tag: dependencies Dependencies related changes tag: no release notes Changes to exclude from release notes labels Oct 20, 2025
@dependabot dependabot bot requested a review from a team as a code owner October 20, 2025 17:31
@dependabot dependabot bot requested review from bric3 and removed request for a team October 20, 2025 17:31
@dependabot dependabot bot added tag: no release notes Changes to exclude from release notes tag: dependencies Dependencies related changes comp: tooling Build & Tooling labels Oct 20, 2025
@pr-commenter
Copy link

pr-commenter bot commented Oct 20, 2025

Benchmarks

Startup

Parameters

Baseline Candidate
baseline_or_candidate baseline candidate
git_branch master dependabot/github_actions/gh-actions-packages-ff6e0617b3
git_commit_date 1761049914 1761050389
git_commit_sha 235820c 71e9c6a
release_version 1.55.0-SNAPSHOT~235820c10a 1.55.0-SNAPSHOT~71e9c6a990
See matching parameters
Baseline Candidate
application insecure-bank insecure-bank
ci_job_date 1761052300 1761052300
ci_job_id 1188810567 1188810567
ci_pipeline_id 79829594 79829594
cpu_model Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version Linux runner-zfyrx7zua-project-304-concurrent-0-h5mmtu5w 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux Linux runner-zfyrx7zua-project-304-concurrent-0-h5mmtu5w 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
module Agent Agent
parent None None

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 60 metrics, 5 unstable metrics.

Startup time reports for petclinic
gantt
    title petclinic - global startup overhead: candidate=1.55.0-SNAPSHOT~71e9c6a990, baseline=1.55.0-SNAPSHOT~235820c10a

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.017 s) : 0, 1016513
Total [baseline] (10.771 s) : 0, 10770550
Agent [candidate] (1.018 s) : 0, 1018395
Total [candidate] (10.655 s) : 0, 10655148
section appsec
Agent [baseline] (1.195 s) : 0, 1194542
Total [baseline] (10.802 s) : 0, 10801697
Agent [candidate] (1.201 s) : 0, 1200998
Total [candidate] (10.816 s) : 0, 10816202
section iast
Agent [baseline] (1.149 s) : 0, 1148953
Total [baseline] (11.051 s) : 0, 11050618
Agent [candidate] (1.153 s) : 0, 1152913
Total [candidate] (11.123 s) : 0, 11122703
section profiling
Agent [baseline] (1.163 s) : 0, 1163372
Total [baseline] (10.898 s) : 0, 10898418
Agent [candidate] (1.175 s) : 0, 1175250
Total [candidate] (10.795 s) : 0, 10794556
Loading
  • baseline results
Module Variant Duration Δ tracing
Agent tracing 1.017 s -
Agent appsec 1.195 s 178.029 ms (17.5%)
Agent iast 1.149 s 132.44 ms (13.0%)
Agent profiling 1.163 s 146.859 ms (14.4%)
Total tracing 10.771 s -
Total appsec 10.802 s 31.147 ms (0.3%)
Total iast 11.051 s 280.068 ms (2.6%)
Total profiling 10.898 s 127.868 ms (1.2%)
  • candidate results
Module Variant Duration Δ tracing
Agent tracing 1.018 s -
Agent appsec 1.201 s 182.603 ms (17.9%)
Agent iast 1.153 s 134.518 ms (13.2%)
Agent profiling 1.175 s 156.856 ms (15.4%)
Total tracing 10.655 s -
Total appsec 10.816 s 161.054 ms (1.5%)
Total iast 11.123 s 467.555 ms (4.4%)
Total profiling 10.795 s 139.408 ms (1.3%)
gantt
    title petclinic - break down per module: candidate=1.55.0-SNAPSHOT~71e9c6a990, baseline=1.55.0-SNAPSHOT~235820c10a

    dateFormat X
    axisFormat %s
section tracing
crashtracking [baseline] (1.452 ms) : 0, 1452
crashtracking [candidate] (1.444 ms) : 0, 1444
BytebuddyAgent [baseline] (694.035 ms) : 0, 694035
BytebuddyAgent [candidate] (693.669 ms) : 0, 693669
GlobalTracer [baseline] (242.792 ms) : 0, 242792
GlobalTracer [candidate] (242.603 ms) : 0, 242603
AppSec [baseline] (32.18 ms) : 0, 32180
AppSec [candidate] (32.244 ms) : 0, 32244
Debugger [baseline] (6.265 ms) : 0, 6265
Debugger [candidate] (6.278 ms) : 0, 6278
Remote Config [baseline] (684.411 µs) : 0, 684
Remote Config [candidate] (669.783 µs) : 0, 670
Telemetry [baseline] (9.278 ms) : 0, 9278
Telemetry [candidate] (9.335 ms) : 0, 9335
Flare Poller [baseline] (8.742 ms) : 0, 8742
Flare Poller [candidate] (10.986 ms) : 0, 10986
section appsec
crashtracking [baseline] (1.453 ms) : 0, 1453
crashtracking [candidate] (1.466 ms) : 0, 1466
BytebuddyAgent [baseline] (718.153 ms) : 0, 718153
BytebuddyAgent [candidate] (722.262 ms) : 0, 722262
GlobalTracer [baseline] (234.698 ms) : 0, 234698
GlobalTracer [candidate] (236.917 ms) : 0, 236917
AppSec [baseline] (175.099 ms) : 0, 175099
AppSec [candidate] (174.974 ms) : 0, 174974
Debugger [baseline] (6.064 ms) : 0, 6064
Debugger [candidate] (6.073 ms) : 0, 6073
Remote Config [baseline] (635.65 µs) : 0, 636
Remote Config [candidate] (629.033 µs) : 0, 629
Telemetry [baseline] (8.572 ms) : 0, 8572
Telemetry [candidate] (8.665 ms) : 0, 8665
Flare Poller [baseline] (3.886 ms) : 0, 3886
Flare Poller [candidate] (3.93 ms) : 0, 3930
IAST [baseline] (24.863 ms) : 0, 24863
IAST [candidate] (24.892 ms) : 0, 24892
section iast
crashtracking [baseline] (1.466 ms) : 0, 1466
crashtracking [candidate] (1.458 ms) : 0, 1458
BytebuddyAgent [baseline] (813.582 ms) : 0, 813582
BytebuddyAgent [candidate] (816.528 ms) : 0, 816528
GlobalTracer [baseline] (231.105 ms) : 0, 231105
GlobalTracer [candidate] (231.819 ms) : 0, 231819
AppSec [baseline] (35.077 ms) : 0, 35077
AppSec [candidate] (34.246 ms) : 0, 34246
Debugger [baseline] (6.147 ms) : 0, 6147
Debugger [candidate] (7.04 ms) : 0, 7040
Remote Config [baseline] (611.343 µs) : 0, 611
Remote Config [candidate] (593.126 µs) : 0, 593
Telemetry [baseline] (8.671 ms) : 0, 8671
Telemetry [candidate] (8.658 ms) : 0, 8658
Flare Poller [baseline] (4.295 ms) : 0, 4295
Flare Poller [candidate] (4.286 ms) : 0, 4286
IAST [baseline] (26.655 ms) : 0, 26655
IAST [candidate] (26.83 ms) : 0, 26830
section profiling
crashtracking [baseline] (1.471 ms) : 0, 1471
crashtracking [candidate] (1.48 ms) : 0, 1480
BytebuddyAgent [baseline] (720.255 ms) : 0, 720255
BytebuddyAgent [candidate] (729.465 ms) : 0, 729465
GlobalTracer [baseline] (218.741 ms) : 0, 218741
GlobalTracer [candidate] (220.257 ms) : 0, 220257
AppSec [baseline] (32.198 ms) : 0, 32198
AppSec [candidate] (32.606 ms) : 0, 32606
Debugger [baseline] (6.583 ms) : 0, 6583
Debugger [candidate] (7.439 ms) : 0, 7439
Remote Config [baseline] (685.47 µs) : 0, 685
Remote Config [candidate] (700.015 µs) : 0, 700
Telemetry [baseline] (15.996 ms) : 0, 15996
Telemetry [candidate] (15.343 ms) : 0, 15343
Flare Poller [baseline] (4.104 ms) : 0, 4104
Flare Poller [candidate] (4.179 ms) : 0, 4179
ProfilingAgent [baseline] (109.509 ms) : 0, 109509
ProfilingAgent [candidate] (109.358 ms) : 0, 109358
Profiling [baseline] (110.153 ms) : 0, 110153
Profiling [candidate] (109.994 ms) : 0, 109994
Loading
Startup time reports for insecure-bank
gantt
    title insecure-bank - global startup overhead: candidate=1.55.0-SNAPSHOT~71e9c6a990, baseline=1.55.0-SNAPSHOT~235820c10a

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.023 s) : 0, 1023236
Total [baseline] (8.663 s) : 0, 8662561
Agent [candidate] (1.02 s) : 0, 1020239
Total [candidate] (8.665 s) : 0, 8664781
section iast
Agent [baseline] (1.152 s) : 0, 1151887
Total [baseline] (9.273 s) : 0, 9273469
Agent [candidate] (1.148 s) : 0, 1148066
Total [candidate] (9.279 s) : 0, 9278897
Loading
  • baseline results
Module Variant Duration Δ tracing
Agent tracing 1.023 s -
Agent iast 1.152 s 128.651 ms (12.6%)
Total tracing 8.663 s -
Total iast 9.273 s 610.908 ms (7.1%)
  • candidate results
Module Variant Duration Δ tracing
Agent tracing 1.02 s -
Agent iast 1.148 s 127.827 ms (12.5%)
Total tracing 8.665 s -
Total iast 9.279 s 614.117 ms (7.1%)
gantt
    title insecure-bank - break down per module: candidate=1.55.0-SNAPSHOT~71e9c6a990, baseline=1.55.0-SNAPSHOT~235820c10a

    dateFormat X
    axisFormat %s
section tracing
crashtracking [baseline] (1.471 ms) : 0, 1471
crashtracking [candidate] (1.458 ms) : 0, 1458
BytebuddyAgent [baseline] (696.681 ms) : 0, 696681
BytebuddyAgent [candidate] (695.016 ms) : 0, 695016
GlobalTracer [baseline] (243.812 ms) : 0, 243812
GlobalTracer [candidate] (243.111 ms) : 0, 243111
AppSec [baseline] (32.688 ms) : 0, 32688
AppSec [candidate] (32.284 ms) : 0, 32284
Debugger [baseline] (6.384 ms) : 0, 6384
Debugger [candidate] (6.317 ms) : 0, 6317
Remote Config [baseline] (686.946 µs) : 0, 687
Remote Config [candidate] (679.822 µs) : 0, 680
Telemetry [baseline] (9.284 ms) : 0, 9284
Telemetry [candidate] (9.36 ms) : 0, 9360
Flare Poller [baseline] (11.008 ms) : 0, 11008
Flare Poller [candidate] (10.871 ms) : 0, 10871
section iast
crashtracking [baseline] (1.495 ms) : 0, 1495
crashtracking [candidate] (1.46 ms) : 0, 1460
BytebuddyAgent [baseline] (816.218 ms) : 0, 816218
BytebuddyAgent [candidate] (812.912 ms) : 0, 812912
GlobalTracer [baseline] (231.182 ms) : 0, 231182
GlobalTracer [candidate] (231.167 ms) : 0, 231167
AppSec [baseline] (35.209 ms) : 0, 35209
AppSec [candidate] (34.96 ms) : 0, 34960
Debugger [baseline] (6.132 ms) : 0, 6132
Debugger [candidate] (6.09 ms) : 0, 6090
Remote Config [baseline] (610.405 µs) : 0, 610
Remote Config [candidate] (597.981 µs) : 0, 598
Telemetry [baseline] (8.7 ms) : 0, 8700
Telemetry [candidate] (8.636 ms) : 0, 8636
Flare Poller [baseline] (4.214 ms) : 0, 4214
Flare Poller [candidate] (4.328 ms) : 0, 4328
IAST [baseline] (26.622 ms) : 0, 26622
IAST [candidate] (26.543 ms) : 0, 26543
Loading

Load

Parameters

Baseline Candidate
baseline_or_candidate baseline candidate
git_branch master dependabot/github_actions/gh-actions-packages-ff6e0617b3
git_commit_date 1761049914 1761050389
git_commit_sha 235820c 71e9c6a
release_version 1.55.0-SNAPSHOT~235820c10a 1.55.0-SNAPSHOT~71e9c6a990
See matching parameters
Baseline Candidate
application insecure-bank insecure-bank
ci_job_date 1761051980 1761051980
ci_job_id 1188810568 1188810568
ci_pipeline_id 79829594 79829594
cpu_model Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version Linux runner-zfyrx7zua-project-304-concurrent-0-elkba9kn 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux Linux runner-zfyrx7zua-project-304-concurrent-0-elkba9kn 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

Summary

Found 1 performance improvements and 2 performance regressions! Performance is the same for 9 metrics, 12 unstable metrics.

scenario Δ mean http_req_duration Δ mean throughput candidate mean http_req_duration candidate mean throughput baseline mean http_req_duration baseline mean throughput
scenario:load:insecure-bank:iast:high_load worse
[+274.401µs; +633.127µs] or [+2.795%; +6.448%]
unstable
[-69.738op/s; +28.300op/s] or [-14.745%; +5.983%]
10.273ms 452.250op/s 9.819ms 472.969op/s
scenario:load:insecure-bank:iast_GLOBAL:high_load better
[-1180.250µs; -733.893µs] or [-10.241%; -6.368%]
unstable
[-8.255op/s; +80.818op/s] or [-2.045%; +20.024%]
10.568ms 439.875op/s 11.525ms 403.594op/s
scenario:load:petclinic:no_agent:high_load worse
[+1.092ms; +1.718ms] or [+3.023%; +4.756%]
unstable
[-13.646op/s; +3.796op/s] or [-10.535%; +2.931%]
37.523ms 124.612op/s 36.118ms 129.537op/s
Request duration reports for insecure-bank
gantt
    title insecure-bank - request duration [CI 0.99] : candidate=1.55.0-SNAPSHOT~71e9c6a990, baseline=1.55.0-SNAPSHOT~235820c10a
    dateFormat X
    axisFormat %s
section baseline
no_agent (4.411 ms) : 4361, 4461
.   : milestone, 4411,
iast (9.819 ms) : 9658, 9981
.   : milestone, 9819,
iast_FULL (13.996 ms) : 13720, 14271
.   : milestone, 13996,
iast_GLOBAL (11.525 ms) : 11314, 11735
.   : milestone, 11525,
profiling (9.035 ms) : 8884, 9185
.   : milestone, 9035,
tracing (7.929 ms) : 7817, 8041
.   : milestone, 7929,
section candidate
no_agent (4.444 ms) : 4393, 4496
.   : milestone, 4444,
iast (10.273 ms) : 10101, 10445
.   : milestone, 10273,
iast_FULL (13.956 ms) : 13679, 14232
.   : milestone, 13956,
iast_GLOBAL (10.568 ms) : 10363, 10772
.   : milestone, 10568,
profiling (8.932 ms) : 8792, 9073
.   : milestone, 8932,
tracing (7.819 ms) : 7709, 7929
.   : milestone, 7819,
Loading
  • baseline results
Variant Request duration [CI 0.99] Δ no_agent
no_agent 4.411 ms [4.361 ms, 4.461 ms] -
iast 9.819 ms [9.658 ms, 9.981 ms] 5.408 ms (122.6%)
iast_FULL 13.996 ms [13.72 ms, 14.271 ms] 9.585 ms (217.3%)
iast_GLOBAL 11.525 ms [11.314 ms, 11.735 ms] 7.114 ms (161.3%)
profiling 9.035 ms [8.884 ms, 9.185 ms] 4.623 ms (104.8%)
tracing 7.929 ms [7.817 ms, 8.041 ms] 3.518 ms (79.8%)
  • candidate results
Variant Request duration [CI 0.99] Δ no_agent
no_agent 4.444 ms [4.393 ms, 4.496 ms] -
iast 10.273 ms [10.101 ms, 10.445 ms] 5.829 ms (131.1%)
iast_FULL 13.956 ms [13.679 ms, 14.232 ms] 9.511 ms (214.0%)
iast_GLOBAL 10.568 ms [10.363 ms, 10.772 ms] 6.123 ms (137.8%)
profiling 8.932 ms [8.792 ms, 9.073 ms] 4.488 ms (101.0%)
tracing 7.819 ms [7.709 ms, 7.929 ms] 3.374 ms (75.9%)
Request duration reports for petclinic
gantt
    title petclinic - request duration [CI 0.99] : candidate=1.55.0-SNAPSHOT~71e9c6a990, baseline=1.55.0-SNAPSHOT~235820c10a
    dateFormat X
    axisFormat %s
section baseline
no_agent (36.118 ms) : 35841, 36395
.   : milestone, 36118,
appsec (49.419 ms) : 48973, 49866
.   : milestone, 49419,
code_origins (43.777 ms) : 43401, 44154
.   : milestone, 43777,
iast (45.812 ms) : 45402, 46222
.   : milestone, 45812,
profiling (48.888 ms) : 48433, 49343
.   : milestone, 48888,
tracing (43.75 ms) : 43369, 44132
.   : milestone, 43750,
section candidate
no_agent (37.523 ms) : 37220, 37826
.   : milestone, 37523,
appsec (48.741 ms) : 48309, 49172
.   : milestone, 48741,
code_origins (42.805 ms) : 42449, 43161
.   : milestone, 42805,
iast (44.687 ms) : 44301, 45073
.   : milestone, 44687,
profiling (48.939 ms) : 48487, 49390
.   : milestone, 48939,
tracing (43.935 ms) : 43565, 44305
.   : milestone, 43935,
Loading
  • baseline results
Variant Request duration [CI 0.99] Δ no_agent
no_agent 36.118 ms [35.841 ms, 36.395 ms] -
appsec 49.419 ms [48.973 ms, 49.866 ms] 13.301 ms (36.8%)
code_origins 43.777 ms [43.401 ms, 44.154 ms] 7.659 ms (21.2%)
iast 45.812 ms [45.402 ms, 46.222 ms] 9.694 ms (26.8%)
profiling 48.888 ms [48.433 ms, 49.343 ms] 12.769 ms (35.4%)
tracing 43.75 ms [43.369 ms, 44.132 ms] 7.632 ms (21.1%)
  • candidate results
Variant Request duration [CI 0.99] Δ no_agent
no_agent 37.523 ms [37.22 ms, 37.826 ms] -
appsec 48.741 ms [48.309 ms, 49.172 ms] 11.218 ms (29.9%)
code_origins 42.805 ms [42.449 ms, 43.161 ms] 5.282 ms (14.1%)
iast 44.687 ms [44.301 ms, 45.073 ms] 7.164 ms (19.1%)
profiling 48.939 ms [48.487 ms, 49.39 ms] 11.416 ms (30.4%)
tracing 43.935 ms [43.565 ms, 44.305 ms] 6.412 ms (17.1%)

Dacapo

Parameters

Baseline Candidate
baseline_or_candidate baseline candidate
git_branch master dependabot/github_actions/gh-actions-packages-ff6e0617b3
git_commit_date 1761049914 1761050389
git_commit_sha 235820c 71e9c6a
release_version 1.55.0-SNAPSHOT~235820c10a 1.55.0-SNAPSHOT~71e9c6a990
See matching parameters
Baseline Candidate
application biojava biojava
ci_job_date 1761052498 1761052498
ci_job_id 1188810569 1188810569
ci_pipeline_id 79829594 79829594
cpu_model Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version Linux runner-zfyrx7zua-project-304-concurrent-1-0dt60pu9 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux Linux runner-zfyrx7zua-project-304-concurrent-1-0dt60pu9 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 11 metrics, 1 unstable metrics.

Execution time for tomcat
gantt
    title tomcat - execution time [CI 0.99] : candidate=1.55.0-SNAPSHOT~71e9c6a990, baseline=1.55.0-SNAPSHOT~235820c10a
    dateFormat X
    axisFormat %s
section baseline
no_agent (1.474 ms) : 1463, 1486
.   : milestone, 1474,
appsec (3.633 ms) : 3423, 3843
.   : milestone, 3633,
iast (2.207 ms) : 2143, 2271
.   : milestone, 2207,
iast_GLOBAL (2.258 ms) : 2194, 2322
.   : milestone, 2258,
profiling (2.072 ms) : 2019, 2125
.   : milestone, 2072,
tracing (2.039 ms) : 1989, 2090
.   : milestone, 2039,
section candidate
no_agent (1.477 ms) : 1465, 1488
.   : milestone, 1477,
appsec (3.709 ms) : 3494, 3924
.   : milestone, 3709,
iast (2.213 ms) : 2149, 2276
.   : milestone, 2213,
iast_GLOBAL (2.245 ms) : 2181, 2309
.   : milestone, 2245,
profiling (2.057 ms) : 2006, 2109
.   : milestone, 2057,
tracing (2.03 ms) : 1980, 2079
.   : milestone, 2030,
Loading
  • baseline results
Variant Execution Time [CI 0.99] Δ no_agent
no_agent 1.474 ms [1.463 ms, 1.486 ms] -
appsec 3.633 ms [3.423 ms, 3.843 ms] 2.159 ms (146.4%)
iast 2.207 ms [2.143 ms, 2.271 ms] 732.856 µs (49.7%)
iast_GLOBAL 2.258 ms [2.194 ms, 2.322 ms] 783.235 µs (53.1%)
profiling 2.072 ms [2.019 ms, 2.125 ms] 597.651 µs (40.5%)
tracing 2.039 ms [1.989 ms, 2.09 ms] 565.014 µs (38.3%)
  • candidate results
Variant Execution Time [CI 0.99] Δ no_agent
no_agent 1.477 ms [1.465 ms, 1.488 ms] -
appsec 3.709 ms [3.494 ms, 3.924 ms] 2.233 ms (151.2%)
iast 2.213 ms [2.149 ms, 2.276 ms] 735.885 µs (49.8%)
iast_GLOBAL 2.245 ms [2.181 ms, 2.309 ms] 767.859 µs (52.0%)
profiling 2.057 ms [2.006 ms, 2.109 ms] 580.662 µs (39.3%)
tracing 2.03 ms [1.98 ms, 2.079 ms] 552.958 µs (37.4%)
Execution time for biojava
gantt
    title biojava - execution time [CI 0.99] : candidate=1.55.0-SNAPSHOT~71e9c6a990, baseline=1.55.0-SNAPSHOT~235820c10a
    dateFormat X
    axisFormat %s
section baseline
no_agent (15.533 s) : 15533000, 15533000
.   : milestone, 15533000,
appsec (15.161 s) : 15161000, 15161000
.   : milestone, 15161000,
iast (18.451 s) : 18451000, 18451000
.   : milestone, 18451000,
iast_GLOBAL (17.874 s) : 17874000, 17874000
.   : milestone, 17874000,
profiling (14.913 s) : 14913000, 14913000
.   : milestone, 14913000,
tracing (15.024 s) : 15024000, 15024000
.   : milestone, 15024000,
section candidate
no_agent (14.928 s) : 14928000, 14928000
.   : milestone, 14928000,
appsec (14.965 s) : 14965000, 14965000
.   : milestone, 14965000,
iast (18.612 s) : 18612000, 18612000
.   : milestone, 18612000,
iast_GLOBAL (17.872 s) : 17872000, 17872000
.   : milestone, 17872000,
profiling (15.106 s) : 15106000, 15106000
.   : milestone, 15106000,
tracing (15.109 s) : 15109000, 15109000
.   : milestone, 15109000,
Loading
  • baseline results
Variant Execution Time [CI 0.99] Δ no_agent
no_agent 15.533 s [15.533 s, 15.533 s] -
appsec 15.161 s [15.161 s, 15.161 s] -372.0 ms (-2.4%)
iast 18.451 s [18.451 s, 18.451 s] 2.918 s (18.8%)
iast_GLOBAL 17.874 s [17.874 s, 17.874 s] 2.341 s (15.1%)
profiling 14.913 s [14.913 s, 14.913 s] -620.0 ms (-4.0%)
tracing 15.024 s [15.024 s, 15.024 s] -509.0 ms (-3.3%)
  • candidate results
Variant Execution Time [CI 0.99] Δ no_agent
no_agent 14.928 s [14.928 s, 14.928 s] -
appsec 14.965 s [14.965 s, 14.965 s] 37.0 ms (0.2%)
iast 18.612 s [18.612 s, 18.612 s] 3.684 s (24.7%)
iast_GLOBAL 17.872 s [17.872 s, 17.872 s] 2.944 s (19.7%)
profiling 15.106 s [15.106 s, 15.106 s] 178.0 ms (1.2%)
tracing 15.109 s [15.109 s, 15.109 s] 181.0 ms (1.2%)

@datadog-datadog-prod-us1
Copy link
Contributor

datadog-datadog-prod-us1 bot commented Oct 20, 2025

🎯 Code Coverage
Patch Coverage: 100.00%
Total Coverage: 59.69% (-0.01%)

View detailed report

This comment will be updated automatically if new data arrives.
🔗 Commit SHA: 71e9c6a | Docs | Was this helpful? Give us feedback!

@PerfectSlayer PerfectSlayer enabled auto-merge (squash) October 21, 2025 17:56
@PerfectSlayer
Copy link
Contributor

Retrying debugger and enabling auto-merge

@PerfectSlayer PerfectSlayer merged commit 87124e5 into master Oct 21, 2025
534 checks passed
@PerfectSlayer PerfectSlayer deleted the dependabot/github_actions/gh-actions-packages-ff6e0617b3 branch October 21, 2025 18:07
@github-actions github-actions bot added this to the 1.55.0 milestone Oct 21, 2025
amarziali pushed a commit that referenced this pull request Oct 27, 2025
…#9810)

Bumps the gh-actions-packages group with 1 update: [github/codeql-action](https://github.com/github/codeql-action).


Updates `github/codeql-action` from 4.30.8 to 4.30.9
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@f443b60...16140ae)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.30.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gh-actions-packages
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

comp: tooling Build & Tooling tag: dependencies Dependencies related changes tag: no release notes Changes to exclude from release notes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants