For posterity, following the recommendation and pinning the recommended version (e.g., v3.25.11) of the Action on a GHES instance that uses the CodeQL Action sync tool could lead to an error where the CodeQL bundle wasn't found because only the latest bundle (i.e., the default bundle for v3 at the time of syncing ) for the major version was synchronized.

Maybe we should explicitly state something like: we recommend pinning to the major version tag v3 even on GHES in order to get the most recent updates to the action.

• How do we clarify that Enterprise Server 3.10 does not support CodeQL Action v3, because it does not support running Actions using Node 20? And Enterprise Server 3.11 only supports CodeQL Action v3 if you pull in v3 using GitHub Connect?

I'll add a new column "Notes" to add this info.

Does the Dotcom entry still make sense? It might be worth removing it.

No. Now that it is explicitly "minimum" version, I agree that this should be removed.