Bump github/codeql-action from 3 to 4

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3 to 4.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v3...v4)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

.github/workflows/codeql-analysis.yml

@@ -42,7 +42,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v3
+        uses: github/codeql-action/init@v4
         with:
           languages: ${{ matrix.language }}
           # If you wish to specify custom queries, you can do so here or in a config file.
@@ -53,7 +53,7 @@ jobs:
       # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
       # If this step fails, then you should remove it and run the build manually (see below)
       - name: Autobuild
-        uses: github/codeql-action/autobuild@v3
+        uses: github/codeql-action/autobuild@v4
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 https://git.io/JvXDl
@@ -67,4 +67,4 @@ jobs:
       #   make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v3
+        uses: github/codeql-action/analyze@v4

package-lock.json

@@ -16,14 +16,14 @@
         "http-status-messages": "^1.1.0"
       },
       "devDependencies": {
-        "@vercel/ncc": "^0.45.0",
+        "@vercel/ncc": "^0.38.1",
         "eslint": "^8.57.0",
         "eslint-config-prettier": "^9.1.0",
         "eslint-plugin-github": "^4.10.2",
         "jest": "^29.7.0",
         "make-coverage-badge": "^1.2.0",
         "nock": "^13.5.4",
-        "prettier": "^3.9.6",
+        "prettier": "^3.3.3",
         "undici": "^6.19.2"
       }
     },
@@ -2348,11 +2348,10 @@
       "dev": true
     },
     "node_modules/@vercel/ncc": {
-      "version": "0.45.0",
-      "resolved": "https://registry.npmjs.org/@vercel/ncc/-/ncc-0.45.0.tgz",
-      "integrity": "sha512-8zPi1yO2mHpoKTD+e+Bf0ZT3e+sWHSOyGapm9s7b5R0gxJi3CiFTqmeQiMEyu6ejrz2s09M8JkEoUaTWjBJPQQ==",
+      "version": "0.38.1",
+      "resolved": "https://registry.npmjs.org/@vercel/ncc/-/ncc-0.38.1.tgz",
+      "integrity": "sha512-IBBb+iI2NLu4VQn3Vwldyi2QwaXt5+hTyh58ggAMoCGE6DJmPvwL3KPBWcJl1m9LYPChBLE980Jw+CS4Wokqxw==",
       "dev": true,
-      "license": "MIT",
       "bin": {
         "ncc": "dist/ncc/cli.js"
       }
@@ -6952,11 +6951,10 @@
       }
     },
     "node_modules/prettier": {
-      "version": "3.9.6",
-      "resolved": "https://registry.npmjs.org/prettier/-/prettier-3.9.6.tgz",
-      "integrity": "sha512-OpN0zzVdiaiAhxpuuj5efpIS4sY9j7bY6uR5mnj5yPzGkdkjNKSJeUThPb60Jw29QuAZgA4o+/iB49kFiaBX6g==",
+      "version": "3.3.3",
+      "resolved": "https://registry.npmjs.org/prettier/-/prettier-3.3.3.tgz",
+      "integrity": "sha512-i2tDNA0O5IrMO757lfrdQZCc2jPNDVntV0m/+4whiDfWaTKfMNgR7Qz0NAeGz/nRqF4m5/6CLzbP4/liHt12Ew==",
       "dev": true,
-      "license": "MIT",
       "bin": {
         "prettier": "bin/prettier.cjs"
       },

package.json

@@ -11,14 +11,14 @@
     "http-status-messages": "^1.1.0"
   },
   "devDependencies": {
-    "@vercel/ncc": "^0.45.0",
+    "@vercel/ncc": "^0.38.1",
     "eslint": "^8.57.0",
     "eslint-config-prettier": "^9.1.0",
     "eslint-plugin-github": "^4.10.2",
     "jest": "^29.7.0",
     "make-coverage-badge": "^1.2.0",
     "nock": "^13.5.4",
-    "prettier": "^3.9.6",
+    "prettier": "^3.3.3",
     "undici": "^6.19.2"
   },
   "scripts": {

src/__tests__/internal/deployment.test.js

@@ -121,58 +121,6 @@ describe('Deployment', () => {
       twirpScope.done()
     })
 
-    it('can successfully create a deployment with a 64-character build version', async () => {
-      process.env.GITHUB_SHA = 'a'.repeat(64)
-
-      const twirpScope = nock(process.env.ACTIONS_RESULTS_URL)
-        .post(LIST_ARTIFACTS_TWIRP_PATH)
-        .reply(
-          200,
-          {
-            artifacts: [{ databaseId: 11, name: 'github-pages', size: 221 }]
-          },
-          { headers: { 'content-type': 'application/json' } }
-        )
-
-      mockPool
-        .intercept({
-          path: `/repos/${process.env.GITHUB_REPOSITORY}/pages/deployments`,
-          method: 'POST',
-          body: bodyString => {
-            const body = JSON.parse(bodyString)
-            const keys = Object.keys(body).sort()
-            return (
-              keys.length === 3 &&
-              keys[0] === 'artifact_id' &&
-              keys[1] === 'oidc_token' &&
-              keys[2] === 'pages_build_version' &&
-              body.artifact_id === 11 &&
-              body.pages_build_version === process.env.GITHUB_SHA &&
-              body.oidc_token === fakeJwt
-            )
-          }
-        })
-        .reply(
-          200,
-          {
-            status_url: `https://api.github.com/repos/${process.env.GITHUB_REPOSITORY}/pages/deployments/${process.env.GITHUB_SHA}`,
-            page_url: 'https://actions.github.io/is-awesome'
-          },
-          { headers: { 'content-type': 'application/json' } }
-        )
-
-      const deployment = new Deployment()
-      await deployment.create(fakeJwt)
-
-      expect(process.env.GITHUB_SHA).toHaveLength(64)
-      expect(core.setFailed).not.toHaveBeenCalled()
-      expect(core.info).toHaveBeenLastCalledWith(
-        expect.stringMatching(new RegExp(`^Created deployment for ${process.env.GITHUB_SHA}`))
-      )
-
-      twirpScope.done()
-    })
-
     it('can successfully create a preview deployment', async () => {
       process.env.GITHUB_SHA = 'valid-build-version'