chore(github-tag): update tag github/codeql-action to v4.38.0 [automerge]

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
github/codeql-action	action	minor	v4.37.9 → v4.38.0	v4.38.2 (+1)

---

Release Notes

github/codeql-action (github/codeql-action)

v4.38.0

Compare Source

• On GitHub-hosted runners, the CodeQL Action now deletes unused CodeQL bundles from the toolcache before downloading a different bundle, which frees up disk space for the analysis. We expect to roll this change out to everyone in September. #​4124
• The CodeQL Action now supports CodeQL releases that are compatible with Linux Arm64 and downloads the native linux-arm64 CodeQL bundle when available. #​4072
• Update default CodeQL bundle version to 2.27.0. #​4129

---

Configuration

📅 Schedule: (in timezone Europe/Amsterdam)

• Branch creation
  • "every weekend,on Friday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
actions/github/codeql-action/analyze	b96794f015dfd88f77b49b1c93e0fa7110f94c63	Unknown	Unknown
actions/github/codeql-action/init	b96794f015dfd88f77b49b1c93e0fa7110f94c63	Unknown	Unknown

Scanned Files

• .github/workflows/codeql.yml

[coderabbitai]

Navigate logical layers of code changes, visualize relationships, and explore their blast radius.

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 32c7ad1a-d6e5-4be6-bbf1-435880885398

📥 Commits

Reviewing files that changed from the base of the PR and between d660244 and af269e3.

📒 Files selected for processing (1)

• .github/workflows/codeql.yml

Included review availability: This review used your included allowance. Your plan provides up to 10 included reviews per hour; 5 remain after this review.

---

📝 Walkthrough

Walkthrough

The CodeQL workflow now uses github/codeql-action v4.38.0 for initialization and analysis. No other workflow behavior changes.

Changes

CodeQL Action Update

Layer / File(s)	Summary
Update CodeQL action pins .github/workflows/codeql.yml	The initialization and analysis steps now use github/codeql-action v4.38.0.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~3 minutes

Change: Other

Suggested reviewers: devsecninja

Merge Risk: ⚪ Minimal · up to af269

No actionable workflow issue is established by the newer release alone; the current change is mergeable subject to normal checks.

Architecture Summary

Architecture risk: 🔵 Low · up to af269

The changed surface does not map to a changed system, dependency edge, entrypoint, or external dependency.

Changed systems: None identified.

Architecture concerns
No architecture-level concerns identified.

Review details

Before / after behavior

• observed — Modified behavior in .github/workflows/codeql.yml: The initialization step’s pinned github/codeql-action version changes from v4.37.9 to v4.38.0.
• observed — Modified behavior in .github/workflows/codeql.yml: The analysis step’s pinned github/codeql-action version changes from v4.37.9 to v4.38.0.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely describes the main change: updating the GitHub CodeQL action tag to v4.38.0.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

---

_{Comment @coderabbitai help to get the list of available commands.}