From 8338bf6147499abf17313eb5a5566328676f930a Mon Sep 17 00:00:00 2001
From: Claude <noreply@anthropic.com>
Date: Thu, 27 Aug 2026 10:50:30 +0000
Subject: [PATCH] ci: remove the superseded legacy CodeQL workflow
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Enabling Advanced Security added .github/workflows/codeql.yml, so the
repository has been running two CodeQL setups in parallel:

  codeql-analysis.yml  javascript only          checkout@v3, codeql-action@v2
  codeql.yml           javascript-typescript    checkout@v7, codeql-action@v4
                       + actions

The new one is a strict superset: it covers the same JavaScript/TypeScript
code plus the workflow files themselves, and it is the only one of the two
whose actions are not on the deprecated Node 20 runtime — the legacy file is
the sole remaining source of this warning on every run:

  The following actions target Node.js 20 but are being forced to run on
  Node.js 24: actions/checkout@v3, github/codeql-action/analyze@v2,
  github/codeql-action/autobuild@v2, github/codeql-action/init@v2

bQuery/bQuery already carries codeql.yml alone, so this also brings the two
repositories in line.

Deliberately landed on main by itself rather than inside the DevTools
extension pull request: while the file exists on main but not on a branch,
code scanning reports the missing configuration and fails the aggregate
check. Removing it here first lets that branch pick the deletion up by
merging main, with no window where the two disagree.
---
 .github/workflows/codeql-analysis.yml | 71 ---------------------------
 1 file changed, 71 deletions(-)
 delete mode 100644 .github/workflows/codeql-analysis.yml

diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
deleted file mode 100644
index bfcc659..0000000
--- a/.github/workflows/codeql-analysis.yml
+++ /dev/null
@@ -1,71 +0,0 @@
-# For most projects, this workflow file will not need changing; you simply need
-# to commit it to your repository.
-#
-# You may wish to alter this file to override the set of languages analyzed,
-# or to provide custom queries or build logic.
-#
-# ******** NOTE ********
-# We have attempted to detect the languages in your repository. Please check
-# the `language` matrix defined below to confirm you have the correct set of
-# supported CodeQL languages.
-#
-name: "CodeQL"
-
-on:
-    push:
-        branches: ["main"]
-    pull_request:
-        # The branches below must be a subset of the branches above
-        branches: ["main"]
-    schedule:
-        - cron: "37 13 * * 4"
-
-jobs:
-    analyze:
-        name: Analyze
-        runs-on: ubuntu-latest
-        permissions:
-            actions: read
-            contents: read
-            security-events: write
-
-        strategy:
-            fail-fast: false
-            matrix:
-                language: ["javascript"]
-                # CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python', 'ruby' ]
-                # Learn more about CodeQL language support at https://aka.ms/codeql-docs/language-support
-
-        steps:
-            - name: Checkout repository
-              uses: actions/checkout@v3
-
-            # Initializes the CodeQL tools for scanning.
-            - name: Initialize CodeQL
-              uses: github/codeql-action/init@v2
-              with:
-                  languages: ${{ matrix.language }}
-                  # If you wish to specify custom queries, you can do so here or in a config file.
-                  # By default, queries listed here will override any specified in a config file.
-                  # Prefix the list here with "+" to use these queries and those in the config file.
-
-                  # Details on CodeQL's query packs refer to : https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
-                  # queries: security-extended,security-and-quality
-
-            # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
-            # If this step fails, then you should remove it and run the build manually (see below)
-            - name: Autobuild
-              uses: github/codeql-action/autobuild@v2
-
-            # ℹ️ Command-line programs to run using the OS shell.
-            # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
-
-            #   If the Autobuild fails above, remove it and uncomment the following three lines.
-            #   modify them (or add more) to build your code if your project, please refer to the EXAMPLE below for guidance.
-
-            # - run: |
-            #   echo "Run, Build Application using script"
-            #   ./location_of_script_within_repo/buildscript.sh
-
-            - name: Perform CodeQL Analysis
-              uses: github/codeql-action/analyze@v2