[ammarheidari]

Resolve PRs #333 #334 #335 together

Each individual Dependabot PR upgrades only one github/codeql-action step. GitHub CodeQL explicitly fails with configuration error when init, autobuild, and analyze resolve to different versions (observed in #333/#334/#335 exact-head CodeQL logs). This PR changes all three to the same verified commit 6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee (v4.39.0) in .github/workflows/codeql.yml.

No CodeQL suppression, skipped checks or product/version scope change. Do not merge unless exact-head C#/JS CodeQL, quality/benchmark/dependency checks, CODEOWNER and Codex review all pass. Once this atomic replacement is admitted, close individual #333–#335 as superseded, not merged.

Signed-off-by: Ammar Heidari ammar@arad-itc.org

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-19T06:51:21.723335Z	8f4ead9	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[ammarheidari]

Exact-head final CI verification on 8f4ead906375cbb8ed4461062b43280fb1513686 (2026-10-19): all reported checks SUCCESS, including CodeQL C# and JavaScript, aggregate CodeQL, quality-gate, dependency-review, benchmarks, real Keycloak/Webhook, human CLI/transports, PostgreSQL fencing/restore, HA replay and Windows/macOS/Linux loopback. Codex review COMPLETE without findings; no unresolved review threads. Only fresh CODEOWNER approval remains, so this PR must NOT be merged yet; expected-head protected-main admission follows that approval. Individual Dependabot PRs #333–#335 were already closed unmerged as mutually incompatible standalone updates.