Update github/codeql-action action to v4.37.7

[thomhurst]

This PR contains the following updates:

Package	Type	Update	Change
github/codeql-action	action	patch	v4.37.6 → v4.37.7

---

Release Notes

github/codeql-action (github/codeql-action)

v4.37.7

Compare Source

• Update default CodeQL bundle version to 2.26.3. #​4085

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: ef6748b6-7614-410f-8cab-a3df82be78da

📥 Commits

Reviewing files that changed from the base of the PR and between 58a715f and 8583e25.

📒 Files selected for processing (1)

• .github/workflows/codeql.yml

---

📝 Walkthrough

Walkthrough

The CodeQL workflow now pins its initialization, analysis, SARIF upload, and retry upload actions to the v4.37.7 commit. Workflow control flow and inputs remain unchanged.

Changes

CodeQL workflow update

Layer / File(s)	Summary
Update CodeQL action pins .github/workflows/codeql.yml	All CodeQL action references change from v4.37.6 to v4.37.7. Existing workflow inputs and retry behavior remain unchanged.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Mergeability Score: ⚪ Minimal · up to 8583e

This PR updates the CodeQL action patch version and does not introduce any actionable merge-blocking risk; it is merge-ready after normal checks and review.

Poem

A rabbit checks the workflow bright,
Four pins now point to version right.
No steps hop, no inputs sway,
CodeQL follows the newer way.
Nibble, commit, and ship today!

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely describes the update of the GitHub CodeQL Action to version 4.37.7.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch renovate/github-codeql-action-4.x

---

_{Comment @coderabbitai help to get the list of available commands.}

[claude]

Automated Review

This is a trivial, automated Renovate dependency-bump PR: it updates the pinned version comment for github/codeql-action from v4.37.6 → v4.37.7 across all four uses: steps in .github/workflows/codeql.yml (init, analyze, upload-sarif, and the retry upload-sarif step).

Findings: None. All four references are updated consistently in lockstep, so there's no version-mismatch risk. No application code, logic, or behavior is touched — this is purely a CI workflow action version bump (patch release, updates the default CodeQL bundle to 2.26.3 per upstream release notes). Looks good to merge.