Merge pull request #4073 from github/mergeback/v4.37.6-to-main-5595ccaf

Mergeback v4.37.6 refs/heads/releases/v4 into main

Author: mbg

CHANGELOG.md

@@ -6,6 +6,10 @@ See the [releases page](https://github.com/github/codeql-action/releases) for th
 
 No user facing changes.
 
+## 4.37.6 - 04 Aug 2026
+
+- Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to `.github/codeql-config.yml` to align it with the suggested path that is used elsewhere. [#4070](https://github.com/github/codeql-action/pull/4070)
+
 ## 4.37.5 - 03 Aug 2026
 
 - Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the `init` Action instead of falling back to downloading the bundle before extracting it. [#4061](https://github.com/github/codeql-action/pull/4061)

lib/entry-points.js

@@ -1,6 +1,6 @@
 {
   "name": "codeql",
-  "version": "4.37.6",
+  "version": "4.37.7",
   "private": true,
   "description": "CodeQL action",
   "scripts": {