build(deps): bump github/codeql-action from 4.31.2 to 4.31.3

.github/release-drafter.yml

@@ -59,23 +59,23 @@ template: |
     Thank you $CONTRIBUTORS for making this release possible.
 
 autolabeler:
-- label: '📒 Documentation'
-  title: '/(docs|doc:|\[doc\]|README|typos|comment|documentation)/i'
-- label: '☢️ Bug'
-  title: '/(fix|bug)/i'
-- label: '🧹 Updates'
-  title: '/(improve|chore|improvements|missing|update|refactor|deprecated|remove|unused|test)/i'
-- label: '🤖 Dependencies'
-  files:
-    - 'go.mod'
-    - 'go.sum'
-    - '**/go.mod'
-    - '**/go.sum'
-- label: '✏️ Feature'
-  title: '/(feature|feat|create|implement|add|support)/i'
-- label: 'v3'
-  branch:
-    - '/main/'
-- label: 'v2'
-  branch:
-    - '/v2/'
+  - label: '📒 Documentation'
+    title: '/(docs|doc:|\[doc\]|README|typos|comment|documentation)/i'
+  - label: '☢️ Bug'
+    title: '/(fix|bug)/i'
+  - label: '🧹 Updates'
+    title: '/(improve|chore|improvements|missing|update|refactor|deprecated|remove|unused|test)/i'
+  - label: '🤖 Dependencies'
+    files:
+      - 'go.mod'
+      - 'go.sum'
+      - '**/go.mod'
+      - '**/go.sum'
+  - label: '✏️ Feature'
+    title: '/(feature|feat|create|implement|add|support)/i'
+  - label: 'v3'
+    branch:
+      - '/main\/.+/'
+  - label: 'v2'
+    branch:
+      - '/v2\/.+/'

.github/workflows/codeql-analysis.yml

@@ -32,15 +32,15 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@0499de31b99561a6d14a36a5f662c2a54f91beee # v4.31.2
+        uses: github/codeql-action/init@014f16e7ab1402f30e7c3329d33797e7948572db # v4.31.3
         # Override language selection by uncommenting this and choosing your languages
         with:
           languages: go
 
       # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
       # If this step fails, then you should remove it and run the build manually (see below)
       - name: Autobuild
-        uses: github/codeql-action/autobuild@0499de31b99561a6d14a36a5f662c2a54f91beee # v4.31.2
+        uses: github/codeql-action/autobuild@014f16e7ab1402f30e7c3329d33797e7948572db # v4.31.3
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 https://git.io/JvXDl
@@ -54,4 +54,4 @@ jobs:
       #   make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@0499de31b99561a6d14a36a5f662c2a54f91beee # v4.31.2
+        uses: github/codeql-action/analyze@014f16e7ab1402f30e7c3329d33797e7948572db # v4.31.3

.github/workflows/release-drafter.yml

@@ -7,30 +7,22 @@ on:
   # pull_request event is required only for autolabeler
   pull_request:
     types: [opened, reopened, synchronize]
-
-permissions:
-  contents: read
+  # pull_request_target event is required for outside collaborators
+  pull_request_target:
+    types: [opened, reopened, synchronize]
 
 jobs:
   update_release_draft:
     permissions:
       # write permission is required to create a github release
       contents: write
       # write permission is required for autolabeler
-      # otherwise, read permission is required at least
       pull-requests: write
     runs-on: ubuntu-latest
     steps:
-      # (Optional) GitHub Enterprise requires GHE_HOST variable set
-      #- name: Set GHE_HOST
-      #  run: |
-      #    echo "GHE_HOST=${GITHUB_SERVER_URL##https:\/\/}" >> $GITHUB_ENV
-
-      # Drafts your next Release notes as Pull Requests are merged into "master"
       - uses: release-drafter/release-drafter@b1476f6e6eb133afa41ed8589daba6dc69b4d3f5 # v6.1.0
-        # (Optional) specify config name to use, relative to .github/. Default: release-drafter.yml
-        # with:
-        #   config-name: my-config.yml
-        #   disable-autolabeler: true
+        with: # allows autolabeler to run without unmerged PRs from being added to draft
+          disable-releaser: ${{ github.ref_name != 'main' }}
+          disable-autolabeler: false
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}