chore(deps): update github/codeql-action action to v4.38.1

[thomhurst]

This PR contains the following updates:

Package	Type	Update	Change
github/codeql-action	action	patch	v4.38.0 → v4.38.1

---

Release Notes

github/codeql-action (github/codeql-action)

v4.38.1

Compare Source

• The CodeQL Action now has experimental support for CodeQL releases for which per-language bundles are available. Per-language bundles support analysis for a single language and are therefore smaller than the combined bundles that allow analysis for all supported languages. As a result, per-language bundles take up less space on disk and are faster to download. We expect to roll this change out to everyone in the coming weeks. #​4146

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.
To continue using code reviews, add credits to your account and enable them for code reviews in your settings.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 3a949036-0558-4b1d-b92e-366d874f6c0f

📥 Commits

Reviewing files that changed from the base of the PR and between b07d115 and ed3ec23.

📒 Files selected for processing (1)

• .github/workflows/codeql.yml

Included review availability: Your plan provides up to 4 included reviews per hour; 2 remain after this review.

---

📝 Walkthrough

Walkthrough

The CodeQL workflow updates its init, analyze, and upload-sarif action pins from v4.38.0 to v4.38.1. Workflow structure, conditions, and retry behavior remain unchanged.

Changes

CodeQL Action Update

Layer / File(s)	Summary
Update CodeQL action pins .github/workflows/codeql.yml	The workflow pins the initialization, analysis, and SARIF upload actions to v4.38.1. The conditional retry upload guard remains unchanged.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

Merge Risk: ⚪ Minimal · up to ed3ec

No concrete merge-blocking risk remains; the workflow logic and retry behavior are unchanged.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely describes the main change: updating github/codeql-action to v4.38.1.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{A rabbit checks the workflow line
Four CodeQL pins now safely shine
The retry guard stays in place
While fresh action versions run the race
Carrots wait beside the build gate}

_{Comment @coderabbitai help to get the list of available commands.}