Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 12, 2026

Bumps the gh-actions-packages group with 1 update: github/codeql-action.

Updates github/codeql-action from 4.31.9 to 4.31.10

Release notes

Sourced from github/codeql-action's releases.

v4.31.10

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.10 - 12 Jan 2026

  • Update default CodeQL bundle version to 2.23.9. #3393

See the full CHANGELOG.md for more information.

Changelog

Sourced from github/codeql-action's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

4.31.10 - 12 Jan 2026

  • Update default CodeQL bundle version to 2.23.9. #3393

4.31.9 - 16 Dec 2025

No user facing changes.

4.31.8 - 11 Dec 2025

  • Update default CodeQL bundle version to 2.23.8. #3354

4.31.7 - 05 Dec 2025

  • Update default CodeQL bundle version to 2.23.7. #3343

4.31.6 - 01 Dec 2025

No user facing changes.

4.31.5 - 24 Nov 2025

  • Update default CodeQL bundle version to 2.23.6. #3321

4.31.4 - 18 Nov 2025

No user facing changes.

4.31.3 - 13 Nov 2025

  • CodeQL Action v3 will be deprecated in December 2026. The Action now logs a warning for customers who are running v3 but could be running v4. For more information, see Upcoming deprecation of CodeQL Action v3.
  • Update default CodeQL bundle version to 2.23.5. #3288

4.31.2 - 30 Oct 2025

No user facing changes.

4.31.1 - 30 Oct 2025

  • The add-snippets input has been removed from the analyze action. This input has been deprecated since CodeQL Action 3.26.4 in August 2024 when this removal was announced.

4.31.0 - 24 Oct 2025

... (truncated)

Commits
  • cdefb33 Merge pull request #3394 from github/update-v4.31.10-0fa411efd
  • cfa77c6 Update changelog for v4.31.10
  • 0fa411e Merge pull request #3393 from github/update-bundle/codeql-bundle-v2.23.9
  • c284324 Add changelog note
  • 83e7d00 Update default bundle to codeql-bundle-v2.23.9
  • f6a16be Merge pull request #3391 from github/dependabot/npm_and_yarn/npm-minor-f1cdf5...
  • c1f5f1a Rebuild
  • 1805d8d Bump the npm-minor group with 2 updates
  • b2951d2 Merge pull request #3353 from github/kaspersv/bump-min-cli-v-for-overlay
  • 41448d9 Merge pull request #3287 from github/henrymercer/generate-mergeback-last
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the gh-actions-packages group with 1 update: [github/codeql-action](https://github.com/github/codeql-action).


Updates `github/codeql-action` from 4.31.9 to 4.31.10
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@5d4e8d1...cdefb33)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.31.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gh-actions-packages
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added comp: tooling Build & Tooling tag: dependencies Dependencies related changes tag: no release notes Changes to exclude from release notes labels Jan 12, 2026
@dependabot dependabot bot requested a review from a team as a code owner January 12, 2026 21:28
@dependabot dependabot bot requested review from bric3 and removed request for a team January 12, 2026 21:28
@dependabot dependabot bot added tag: no release notes Changes to exclude from release notes tag: dependencies Dependencies related changes comp: tooling Build & Tooling labels Jan 12, 2026
@pr-commenter
Copy link

pr-commenter bot commented Jan 12, 2026

Benchmarks

Startup

Parameters

Baseline Candidate
baseline_or_candidate baseline candidate
git_branch master dependabot/github_actions/gh-actions-packages-e42aeb3dac
git_commit_date 1768246063 1768253310
git_commit_sha 8760758 afa2523
release_version 1.59.0-SNAPSHOT~876075884d 1.59.0-SNAPSHOT~afa25237b6
See matching parameters
Baseline Candidate
application insecure-bank insecure-bank
ci_job_date 1768255109 1768255109
ci_job_id 1344762543 1344762543
ci_pipeline_id 90306545 90306545
cpu_model Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version Linux runner-zfyrx7zua-project-304-concurrent-0-jw0c3myn 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux Linux runner-zfyrx7zua-project-304-concurrent-0-jw0c3myn 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
module Agent Agent
parent None None

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 52 metrics, 13 unstable metrics.

Startup time reports for petclinic
gantt
    title petclinic - global startup overhead: candidate=1.59.0-SNAPSHOT~afa25237b6, baseline=1.59.0-SNAPSHOT~876075884d

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.093 s) : 0, 1092999
Total [baseline] (10.784 s) : 0, 10783537
Agent [candidate] (1.09 s) : 0, 1090140
Total [candidate] (10.752 s) : 0, 10752343
section appsec
Agent [baseline] (1.265 s) : 0, 1264722
Total [baseline] (10.987 s) : 0, 10987467
Agent [candidate] (1.264 s) : 0, 1263502
Total [candidate] (11.041 s) : 0, 11041045
section iast
Agent [baseline] (1.236 s) : 0, 1236077
Total [baseline] (11.265 s) : 0, 11264771
Agent [candidate] (1.224 s) : 0, 1223658
Total [candidate] (11.14 s) : 0, 11139844
section profiling
Agent [baseline] (1.21 s) : 0, 1210096
Total [baseline] (10.93 s) : 0, 10930489
Agent [candidate] (1.204 s) : 0, 1204277
Total [candidate] (10.93 s) : 0, 10930025
Loading
  • baseline results
Module Variant Duration Δ tracing
Agent tracing 1.093 s -
Agent appsec 1.265 s 171.723 ms (15.7%)
Agent iast 1.236 s 143.078 ms (13.1%)
Agent profiling 1.21 s 117.097 ms (10.7%)
Total tracing 10.784 s -
Total appsec 10.987 s 203.93 ms (1.9%)
Total iast 11.265 s 481.234 ms (4.5%)
Total profiling 10.93 s 146.952 ms (1.4%)
  • candidate results
Module Variant Duration Δ tracing
Agent tracing 1.09 s -
Agent appsec 1.264 s 173.362 ms (15.9%)
Agent iast 1.224 s 133.518 ms (12.2%)
Agent profiling 1.204 s 114.136 ms (10.5%)
Total tracing 10.752 s -
Total appsec 11.041 s 288.703 ms (2.7%)
Total iast 11.14 s 387.502 ms (3.6%)
Total profiling 10.93 s 177.682 ms (1.7%)
gantt
    title petclinic - break down per module: candidate=1.59.0-SNAPSHOT~afa25237b6, baseline=1.59.0-SNAPSHOT~876075884d

    dateFormat X
    axisFormat %s
section tracing
crashtracking [baseline] (1.191 ms) : 0, 1191
crashtracking [candidate] (1.193 ms) : 0, 1193
BytebuddyAgent [baseline] (655.762 ms) : 0, 655762
BytebuddyAgent [candidate] (655.279 ms) : 0, 655279
GlobalTracer [baseline] (284.973 ms) : 0, 284973
GlobalTracer [candidate] (283.669 ms) : 0, 283669
AppSec [baseline] (33.074 ms) : 0, 33074
AppSec [candidate] (32.841 ms) : 0, 32841
Debugger [baseline] (68.884 ms) : 0, 68884
Debugger [candidate] (67.173 ms) : 0, 67173
Remote Config [baseline] (636.947 µs) : 0, 637
Remote Config [candidate] (655.336 µs) : 0, 655
Telemetry [baseline] (8.97 ms) : 0, 8970
Telemetry [candidate] (8.982 ms) : 0, 8982
Flare Poller [baseline] (3.8 ms) : 0, 3800
Flare Poller [candidate] (4.555 ms) : 0, 4555
section appsec
crashtracking [baseline] (1.189 ms) : 0, 1189
crashtracking [candidate] (1.179 ms) : 0, 1179
BytebuddyAgent [baseline] (689.673 ms) : 0, 689673
BytebuddyAgent [candidate] (689.307 ms) : 0, 689307
GlobalTracer [baseline] (258.414 ms) : 0, 258414
GlobalTracer [candidate] (258.695 ms) : 0, 258695
AppSec [baseline] (174.11 ms) : 0, 174110
AppSec [candidate] (172.247 ms) : 0, 172247
Debugger [baseline] (67.567 ms) : 0, 67567
Debugger [candidate] (68.618 ms) : 0, 68618
Remote Config [baseline] (770.019 µs) : 0, 770
Remote Config [candidate] (758.497 µs) : 0, 758
Telemetry [baseline] (9.382 ms) : 0, 9382
Telemetry [candidate] (9.319 ms) : 0, 9319
Flare Poller [baseline] (3.821 ms) : 0, 3821
Flare Poller [candidate] (3.69 ms) : 0, 3690
IAST [baseline] (24.403 ms) : 0, 24403
IAST [candidate] (24.364 ms) : 0, 24364
section iast
crashtracking [baseline] (1.206 ms) : 0, 1206
crashtracking [candidate] (1.183 ms) : 0, 1183
BytebuddyAgent [baseline] (798.749 ms) : 0, 798749
BytebuddyAgent [candidate] (790.546 ms) : 0, 790546
GlobalTracer [baseline] (259.258 ms) : 0, 259258
GlobalTracer [candidate] (256.508 ms) : 0, 256508
AppSec [baseline] (34.951 ms) : 0, 34951
AppSec [candidate] (34.724 ms) : 0, 34724
Debugger [baseline] (66.228 ms) : 0, 66228
Debugger [candidate] (65.542 ms) : 0, 65542
Remote Config [baseline] (572.887 µs) : 0, 573
Remote Config [candidate] (609.867 µs) : 0, 610
Telemetry [baseline] (8.481 ms) : 0, 8481
Telemetry [candidate] (8.476 ms) : 0, 8476
Flare Poller [baseline] (3.62 ms) : 0, 3620
Flare Poller [candidate] (3.532 ms) : 0, 3532
IAST [baseline] (27.403 ms) : 0, 27403
IAST [candidate] (27.018 ms) : 0, 27018
section profiling
ProfilingAgent [baseline] (96.558 ms) : 0, 96558
ProfilingAgent [candidate] (96.432 ms) : 0, 96432
crashtracking [baseline] (1.224 ms) : 0, 1224
crashtracking [candidate] (1.213 ms) : 0, 1213
BytebuddyAgent [baseline] (706.184 ms) : 0, 706184
BytebuddyAgent [candidate] (700.877 ms) : 0, 700877
GlobalTracer [baseline] (222.097 ms) : 0, 222097
GlobalTracer [candidate] (221.323 ms) : 0, 221323
AppSec [baseline] (32.312 ms) : 0, 32312
AppSec [candidate] (32.134 ms) : 0, 32134
Debugger [baseline] (68.285 ms) : 0, 68285
Debugger [candidate] (68.387 ms) : 0, 68387
Remote Config [baseline] (625.372 µs) : 0, 625
Remote Config [candidate] (683.513 µs) : 0, 684
Telemetry [baseline] (8.899 ms) : 0, 8899
Telemetry [candidate] (8.964 ms) : 0, 8964
Flare Poller [baseline] (3.697 ms) : 0, 3697
Flare Poller [candidate] (4.327 ms) : 0, 4327
Profiling [baseline] (97.139 ms) : 0, 97139
Profiling [candidate] (97.01 ms) : 0, 97010
Loading
Startup time reports for insecure-bank
gantt
    title insecure-bank - global startup overhead: candidate=1.59.0-SNAPSHOT~afa25237b6, baseline=1.59.0-SNAPSHOT~876075884d

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.083 s) : 0, 1082971
Total [baseline] (8.771 s) : 0, 8770550
Agent [candidate] (1.087 s) : 0, 1087031
Total [candidate] (8.767 s) : 0, 8766930
section iast
Agent [baseline] (1.235 s) : 0, 1234817
Total [baseline] (9.341 s) : 0, 9341389
Agent [candidate] (1.224 s) : 0, 1224306
Total [candidate] (9.376 s) : 0, 9376337
Loading
  • baseline results
Module Variant Duration Δ tracing
Agent tracing 1.083 s -
Agent iast 1.235 s 151.846 ms (14.0%)
Total tracing 8.771 s -
Total iast 9.341 s 570.839 ms (6.5%)
  • candidate results
Module Variant Duration Δ tracing
Agent tracing 1.087 s -
Agent iast 1.224 s 137.275 ms (12.6%)
Total tracing 8.767 s -
Total iast 9.376 s 609.407 ms (7.0%)
gantt
    title insecure-bank - break down per module: candidate=1.59.0-SNAPSHOT~afa25237b6, baseline=1.59.0-SNAPSHOT~876075884d

    dateFormat X
    axisFormat %s
section tracing
crashtracking [baseline] (1.188 ms) : 0, 1188
crashtracking [candidate] (1.197 ms) : 0, 1197
BytebuddyAgent [baseline] (650.842 ms) : 0, 650842
BytebuddyAgent [candidate] (653.403 ms) : 0, 653403
GlobalTracer [baseline] (282.575 ms) : 0, 282575
GlobalTracer [candidate] (283.937 ms) : 0, 283937
AppSec [baseline] (32.571 ms) : 0, 32571
AppSec [candidate] (32.618 ms) : 0, 32618
Debugger [baseline] (66.909 ms) : 0, 66909
Debugger [candidate] (66.081 ms) : 0, 66081
Remote Config [baseline] (631.606 µs) : 0, 632
Remote Config [candidate] (631.322 µs) : 0, 631
Telemetry [baseline] (8.927 ms) : 0, 8927
Telemetry [candidate] (8.965 ms) : 0, 8965
Flare Poller [baseline] (3.693 ms) : 0, 3693
Flare Poller [candidate] (4.61 ms) : 0, 4610
section iast
crashtracking [baseline] (1.205 ms) : 0, 1205
crashtracking [candidate] (1.178 ms) : 0, 1178
BytebuddyAgent [baseline] (800.701 ms) : 0, 800701
BytebuddyAgent [candidate] (791.449 ms) : 0, 791449
GlobalTracer [baseline] (258.021 ms) : 0, 258021
GlobalTracer [candidate] (256.91 ms) : 0, 256910
IAST [baseline] (26.871 ms) : 0, 26871
IAST [candidate] (26.939 ms) : 0, 26939
AppSec [baseline] (31.738 ms) : 0, 31738
AppSec [candidate] (32.676 ms) : 0, 32676
Debugger [baseline] (67.844 ms) : 0, 67844
Debugger [candidate] (66.992 ms) : 0, 66992
Remote Config [baseline] (589.144 µs) : 0, 589
Remote Config [candidate] (587.696 µs) : 0, 588
Telemetry [baseline] (8.589 ms) : 0, 8589
Telemetry [candidate] (8.502 ms) : 0, 8502
Flare Poller [baseline] (3.648 ms) : 0, 3648
Flare Poller [candidate] (3.599 ms) : 0, 3599
Loading

Load

Parameters

Baseline Candidate
baseline_or_candidate baseline candidate
git_branch master dependabot/github_actions/gh-actions-packages-e42aeb3dac
git_commit_date 1768246063 1768253310
git_commit_sha 8760758 afa2523
release_version 1.59.0-SNAPSHOT~876075884d 1.59.0-SNAPSHOT~afa25237b6
See matching parameters
Baseline Candidate
application insecure-bank insecure-bank
ci_job_date 1768255717 1768255717
ci_job_id 1344762546 1344762546
ci_pipeline_id 90306545 90306545
cpu_model Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version Linux runner-zfyrx7zua-project-304-concurrent-1-0n0tueje 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux Linux runner-zfyrx7zua-project-304-concurrent-1-0n0tueje 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

Summary

Found 0 performance improvements and 3 performance regressions! Performance is the same for 17 metrics, 16 unstable metrics.

scenario Δ mean agg_http_req_duration_p50 Δ mean agg_http_req_duration_p95 Δ mean throughput candidate mean agg_http_req_duration_p50 candidate mean agg_http_req_duration_p95 candidate mean throughput baseline mean agg_http_req_duration_p50 baseline mean agg_http_req_duration_p95 baseline mean throughput
scenario:load:insecure-bank:iast:high_load worse
[+77.517µs; +200.386µs] or [+3.232%; +8.354%]
same
[-48.982µs; +466.189µs] or [-0.679%; +6.465%]
unstable
[-206.587op/s; +96.525op/s] or [-14.070%; +6.574%]
2.538ms 7.419ms 1413.281op/s 2.399ms 7.211ms 1468.312op/s
scenario:load:petclinic:code_origins:high_load worse
[+0.556ms; +1.637ms] or [+3.185%; +9.381%]
worse
[+0.597ms; +2.627ms] or [+2.098%; +9.232%]
unstable
[-43.805op/s; +15.680op/s] or [-16.591%; +5.939%]
18.545ms 30.070ms 249.969op/s 17.449ms 28.457ms 264.031op/s
Request duration reports for insecure-bank
gantt
    title insecure-bank - request duration [CI 0.99] : candidate=1.59.0-SNAPSHOT~afa25237b6, baseline=1.59.0-SNAPSHOT~876075884d
    dateFormat X
    axisFormat %s
section baseline
no_agent (1.187 ms) : 1176, 1199
.   : milestone, 1187,
iast (3.113 ms) : 3073, 3153
.   : milestone, 3113,
iast_FULL (5.827 ms) : 5769, 5884
.   : milestone, 5827,
iast_GLOBAL (3.704 ms) : 3646, 3761
.   : milestone, 3704,
profiling (1.899 ms) : 1883, 1915
.   : milestone, 1899,
tracing (1.796 ms) : 1781, 1811
.   : milestone, 1796,
section candidate
no_agent (1.186 ms) : 1175, 1197
.   : milestone, 1186,
iast (3.238 ms) : 3199, 3277
.   : milestone, 3238,
iast_FULL (5.687 ms) : 5631, 5742
.   : milestone, 5687,
iast_GLOBAL (3.602 ms) : 3550, 3653
.   : milestone, 3602,
profiling (1.892 ms) : 1876, 1907
.   : milestone, 1892,
tracing (1.801 ms) : 1786, 1816
.   : milestone, 1801,
Loading
  • baseline results
Variant Request duration [CI 0.99] Δ no_agent
no_agent 1.187 ms [1.176 ms, 1.199 ms] -
iast 3.113 ms [3.073 ms, 3.153 ms] 1.926 ms (162.2%)
iast_FULL 5.827 ms [5.769 ms, 5.884 ms] 4.639 ms (390.8%)
iast_GLOBAL 3.704 ms [3.646 ms, 3.761 ms] 2.516 ms (212.0%)
profiling 1.899 ms [1.883 ms, 1.915 ms] 711.445 µs (59.9%)
tracing 1.796 ms [1.781 ms, 1.811 ms] 608.761 µs (51.3%)
  • candidate results
Variant Request duration [CI 0.99] Δ no_agent
no_agent 1.186 ms [1.175 ms, 1.197 ms] -
iast 3.238 ms [3.199 ms, 3.277 ms] 2.052 ms (173.0%)
iast_FULL 5.687 ms [5.631 ms, 5.742 ms] 4.5 ms (379.4%)
iast_GLOBAL 3.602 ms [3.55 ms, 3.653 ms] 2.415 ms (203.6%)
profiling 1.892 ms [1.876 ms, 1.907 ms] 705.233 µs (59.4%)
tracing 1.801 ms [1.786 ms, 1.816 ms] 614.828 µs (51.8%)
Request duration reports for petclinic
gantt
    title petclinic - request duration [CI 0.99] : candidate=1.59.0-SNAPSHOT~afa25237b6, baseline=1.59.0-SNAPSHOT~876075884d
    dateFormat X
    axisFormat %s
section baseline
no_agent (19.227 ms) : 19025, 19430
.   : milestone, 19227,
appsec (18.579 ms) : 18390, 18768
.   : milestone, 18579,
code_origins (17.671 ms) : 17496, 17846
.   : milestone, 17671,
iast (17.689 ms) : 17514, 17864
.   : milestone, 17689,
profiling (18.732 ms) : 18546, 18919
.   : milestone, 18732,
tracing (17.741 ms) : 17564, 17918
.   : milestone, 17741,
section candidate
no_agent (18.864 ms) : 18672, 19056
.   : milestone, 18864,
appsec (18.713 ms) : 18524, 18903
.   : milestone, 18713,
code_origins (18.669 ms) : 18480, 18859
.   : milestone, 18669,
iast (17.843 ms) : 17670, 18017
.   : milestone, 17843,
profiling (18.799 ms) : 18605, 18993
.   : milestone, 18799,
tracing (17.724 ms) : 17549, 17898
.   : milestone, 17724,
Loading
  • baseline results
Variant Request duration [CI 0.99] Δ no_agent
no_agent 19.227 ms [19.025 ms, 19.43 ms] -
appsec 18.579 ms [18.39 ms, 18.768 ms] -648.3 µs (-3.4%)
code_origins 17.671 ms [17.496 ms, 17.846 ms] -1.556 ms (-8.1%)
iast 17.689 ms [17.514 ms, 17.864 ms] -1.538 ms (-8.0%)
profiling 18.732 ms [18.546 ms, 18.919 ms] -495.133 µs (-2.6%)
tracing 17.741 ms [17.564 ms, 17.918 ms] -1.486 ms (-7.7%)
  • candidate results
Variant Request duration [CI 0.99] Δ no_agent
no_agent 18.864 ms [18.672 ms, 19.056 ms] -
appsec 18.713 ms [18.524 ms, 18.903 ms] -150.461 µs (-0.8%)
code_origins 18.669 ms [18.48 ms, 18.859 ms] -194.573 µs (-1.0%)
iast 17.843 ms [17.67 ms, 18.017 ms] -1.02 ms (-5.4%)
profiling 18.799 ms [18.605 ms, 18.993 ms] -64.765 µs (-0.3%)
tracing 17.724 ms [17.549 ms, 17.898 ms] -1.14 ms (-6.0%)

Dacapo

Parameters

Baseline Candidate
baseline_or_candidate baseline candidate
git_branch master dependabot/github_actions/gh-actions-packages-e42aeb3dac
git_commit_date 1768246063 1768253310
git_commit_sha 8760758 afa2523
release_version 1.59.0-SNAPSHOT~876075884d 1.59.0-SNAPSHOT~afa25237b6
See matching parameters
Baseline Candidate
application biojava biojava
ci_job_date 1768255454 1768255454
ci_job_id 1344762548 1344762548
ci_pipeline_id 90306545 90306545
cpu_model Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version Linux runner-zfyrx7zua-project-304-concurrent-2-ncfick0k 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux Linux runner-zfyrx7zua-project-304-concurrent-2-ncfick0k 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

Summary

Found 1 performance improvements and 0 performance regressions! Performance is the same for 11 metrics, 0 unstable metrics.

scenario Δ mean execution_time candidate mean execution_time baseline mean execution_time
scenario:dacapo:tomcat:appsec better
[-1.308ms; -0.970ms] or [-35.913%; -26.636%]
2.503ms 3.641ms
Execution time for tomcat
gantt
    title tomcat - execution time [CI 0.99] : candidate=1.59.0-SNAPSHOT~afa25237b6, baseline=1.59.0-SNAPSHOT~876075884d
    dateFormat X
    axisFormat %s
section baseline
no_agent (1.465 ms) : 1453, 1476
.   : milestone, 1465,
appsec (3.641 ms) : 3426, 3856
.   : milestone, 3641,
iast (2.205 ms) : 2140, 2270
.   : milestone, 2205,
iast_GLOBAL (2.249 ms) : 2184, 2315
.   : milestone, 2249,
profiling (2.086 ms) : 2032, 2141
.   : milestone, 2086,
tracing (2.029 ms) : 1978, 2080
.   : milestone, 2029,
section candidate
no_agent (1.471 ms) : 1460, 1483
.   : milestone, 1471,
appsec (2.503 ms) : 2448, 2557
.   : milestone, 2503,
iast (2.206 ms) : 2141, 2271
.   : milestone, 2206,
iast_GLOBAL (2.246 ms) : 2181, 2312
.   : milestone, 2246,
profiling (2.065 ms) : 2011, 2120
.   : milestone, 2065,
tracing (2.03 ms) : 1978, 2081
.   : milestone, 2030,
Loading
  • baseline results
Variant Execution Time [CI 0.99] Δ no_agent
no_agent 1.465 ms [1.453 ms, 1.476 ms] -
appsec 3.641 ms [3.426 ms, 3.856 ms] 2.177 ms (148.6%)
iast 2.205 ms [2.14 ms, 2.27 ms] 740.38 µs (50.6%)
iast_GLOBAL 2.249 ms [2.184 ms, 2.315 ms] 784.779 µs (53.6%)
profiling 2.086 ms [2.032 ms, 2.141 ms] 621.418 µs (42.4%)
tracing 2.029 ms [1.978 ms, 2.08 ms] 564.558 µs (38.5%)
  • candidate results
Variant Execution Time [CI 0.99] Δ no_agent
no_agent 1.471 ms [1.46 ms, 1.483 ms] -
appsec 2.503 ms [2.448 ms, 2.557 ms] 1.031 ms (70.1%)
iast 2.206 ms [2.141 ms, 2.271 ms] 734.337 µs (49.9%)
iast_GLOBAL 2.246 ms [2.181 ms, 2.312 ms] 774.965 µs (52.7%)
profiling 2.065 ms [2.011 ms, 2.12 ms] 594.14 µs (40.4%)
tracing 2.03 ms [1.978 ms, 2.081 ms] 558.218 µs (37.9%)
Execution time for biojava
gantt
    title biojava - execution time [CI 0.99] : candidate=1.59.0-SNAPSHOT~afa25237b6, baseline=1.59.0-SNAPSHOT~876075884d
    dateFormat X
    axisFormat %s
section baseline
no_agent (15.52 s) : 15520000, 15520000
.   : milestone, 15520000,
appsec (14.576 s) : 14576000, 14576000
.   : milestone, 14576000,
iast (18.066 s) : 18066000, 18066000
.   : milestone, 18066000,
iast_GLOBAL (17.684 s) : 17684000, 17684000
.   : milestone, 17684000,
profiling (14.965 s) : 14965000, 14965000
.   : milestone, 14965000,
tracing (14.755 s) : 14755000, 14755000
.   : milestone, 14755000,
section candidate
no_agent (15.196 s) : 15196000, 15196000
.   : milestone, 15196000,
appsec (14.711 s) : 14711000, 14711000
.   : milestone, 14711000,
iast (18.188 s) : 18188000, 18188000
.   : milestone, 18188000,
iast_GLOBAL (17.807 s) : 17807000, 17807000
.   : milestone, 17807000,
profiling (14.747 s) : 14747000, 14747000
.   : milestone, 14747000,
tracing (14.605 s) : 14605000, 14605000
.   : milestone, 14605000,
Loading
  • baseline results
Variant Execution Time [CI 0.99] Δ no_agent
no_agent 15.52 s [15.52 s, 15.52 s] -
appsec 14.576 s [14.576 s, 14.576 s] -944.0 ms (-6.1%)
iast 18.066 s [18.066 s, 18.066 s] 2.546 s (16.4%)
iast_GLOBAL 17.684 s [17.684 s, 17.684 s] 2.164 s (13.9%)
profiling 14.965 s [14.965 s, 14.965 s] -555.0 ms (-3.6%)
tracing 14.755 s [14.755 s, 14.755 s] -765.0 ms (-4.9%)
  • candidate results
Variant Execution Time [CI 0.99] Δ no_agent
no_agent 15.196 s [15.196 s, 15.196 s] -
appsec 14.711 s [14.711 s, 14.711 s] -485.0 ms (-3.2%)
iast 18.188 s [18.188 s, 18.188 s] 2.992 s (19.7%)
iast_GLOBAL 17.807 s [17.807 s, 17.807 s] 2.611 s (17.2%)
profiling 14.747 s [14.747 s, 14.747 s] -449.0 ms (-3.0%)
tracing 14.605 s [14.605 s, 14.605 s] -591.0 ms (-3.9%)

@PerfectSlayer PerfectSlayer merged commit 07c23bc into master Jan 13, 2026
570 of 574 checks passed
@PerfectSlayer PerfectSlayer deleted the dependabot/github_actions/gh-actions-packages-e42aeb3dac branch January 13, 2026 07:08
@github-actions github-actions bot added this to the 1.59.0 milestone Jan 13, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

comp: tooling Build & Tooling tag: dependencies Dependencies related changes tag: no release notes Changes to exclude from release notes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants