ci(deps): bump github/codeql-action from 3.24.10 to 3.25.0 in the github-actions group

[dependabot]

Bumps the github-actions group with 1 update: github/codeql-action.

Updates github/codeql-action from 3.24.10 to 3.25.0

Changelog

Sourced from github/codeql-action's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

[UNRELEASED]

No user facing changes.

3.25.0 - 15 Apr 2024

• The deprecated feature for extracting dependencies for a Python analysis has been removed. #2224

  As a result, the following inputs and environment variables are now ignored:

  • The setup-python-dependencies input to the init Action
  • The CODEQL_ACTION_DISABLE_PYTHON_DEPENDENCY_INSTALLATION environment variable

  We recommend removing any references to these from your workflows. For more information, see the release notes for CodeQL Action v3.23.0 and v2.23.0.

• Automatically overwrite an existing database if found on the filesystem. #2229

• Bump the minimum CodeQL bundle version to 2.12.6. #2232

• A more relevant log message and a diagnostic are now emitted when the file program is not installed on a Linux runner, but is required for Go tracing to succeed. #2234

3.24.10 - 05 Apr 2024

• Update default CodeQL bundle version to 2.17.0. #2219
• Add a deprecation warning for customers using CodeQL version 2.12.5 and earlier. These versions of CodeQL were discontinued on 26 March 2024 alongside GitHub Enterprise Server 3.8, and will be unsupported by CodeQL Action versions 3.25.0 and later and versions 2.25.0 and later. #2220
  • If you are using one of these versions, please update to CodeQL CLI version 2.12.6 or later. For instance, if you have specified a custom version of the CLI using the 'tools' input to the 'init' Action, you can remove this input to use the default version.
  • Alternatively, if you want to continue using a version of the CodeQL CLI between 2.11.6 and 2.12.5, you can replace github/codeql-action/*@v3 by github/codeql-action/*@v3.24.10 and github/codeql-action/*@v2 by github/codeql-action/*@v2.24.10 in your code scanning workflow to ensure you continue using this version of the CodeQL Action.

3.24.9 - 22 Mar 2024

• Update default CodeQL bundle version to 2.16.5. #2203

3.24.8 - 18 Mar 2024

• Improve the ease of debugging extraction issues by increasing the verbosity of the extractor logs when running in debug mode. #2195

3.24.7 - 12 Mar 2024

• Update default CodeQL bundle version to 2.16.4. #2185

3.24.6 - 29 Feb 2024

No user facing changes.

3.24.5 - 23 Feb 2024

• Update default CodeQL bundle version to 2.16.3. #2156

... (truncated)

Commits

• df5a14d Merge pull request #2238 from github/update-v3.25.0-2b2cee522
• 3f70eaa Update changelog for v3.25.0
• 2b2cee5 Merge pull request #2234 from github/mbg/clearer-file-command-failure
• 4fcf7a2 Add changelog entry
• d30d1ca Merge pull request #2237 from github/henrymercer/more-configuration-errors
• 5558536 Add configuration error for unsupported build mode
• fa75c14 Capture rate limit and ref not existing config errors
• 5a599c6 Merge pull request #2236 from github/henrymercer/feature-flags-with-tool-feat...
• 829376a Allow feature flags to specify tool feature requirements
• efc4746 Downgrade log levels for some messages to debug
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Compressed layer size comparison

Comparing ghcr.io/philips-software/amp-devcontainer:latest to ghcr.io/philips-software/amp-devcontainer@sha256:f0546a72306a4aa4fe3706caf8949863b3ef55b548b2d09487356bb7a04f71b4

OS/Platform	Previous Size	Current Size	Delta
linux/amd64	595.06M	595.06M	0.00 (+0.00%)
linux/arm64	572.30M	572.30M	0.00 (+0.00%)

[github-actions]

🦙 MegaLinter status: ✅ SUCCESS

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
✅ ACTION	actionlint	14		0	0.11s
✅ DOCKERFILE	hadolint	1		0	0.53s
✅ JSON	eslint-plugin-jsonc	8	0	0	3.37s
✅ JSON	prettier	8	0	0	0.62s
✅ JSON	v8r	8		0	3.44s
✅ MARKDOWN	markdownlint	8	0	0	1.09s
✅ MARKDOWN	markdown-link-check	8		0	7.61s
✅ MARKDOWN	markdown-table-formatter	8	0	0	0.36s
✅ REPOSITORY	checkov	yes		no	17.77s
✅ REPOSITORY	gitleaks	yes		no	0.39s
✅ REPOSITORY	git_diff	yes		no	0.01s
✅ REPOSITORY	grype	yes		no	10.33s
✅ REPOSITORY	secretlint	yes		no	1.38s
✅ REPOSITORY	trivy	yes		no	10.45s
✅ REPOSITORY	trivy-sbom	yes		no	3.11s
✅ REPOSITORY	trufflehog	yes		no	6.32s
✅ SPELL	lychee	44		0	0.98s
✅ YAML	prettier	18	0	0	1.26s
✅ YAML	v8r	18		0	16.74s
✅ YAML	yamllint	18		0	0.42s

See detailed report in MegaLinter reports

MegaLinter is graciously provided by

[github-actions]

Test Results

20 tests  ±0   20 ✅ ±0   42s ⏱️ +3s
 1 suites ±0    0 💤 ±0 
 1 files   ±0    0 ❌ ±0 

Results for commit dbd7f00. ± Comparison against base commit aa28065.

[github-actions]

Pull Request Report (#383)

Static measures

Description	Value
Number of added lines	3
Number of deleted lines	3
Number of changed files	3
Number of commits	1
Number of reviews	1
Number of comments (w/o review comments)	3
Number of reviews that contains a comment to resolve	0
Number of reviews that requested a change from the author	0
Number of reviews that approved the Pull Request	1
Get the total number of participants of a Pull Request	3

Time related measures

Description	Value
PR lead time (from creation to close of PR)	3.7 Hours
Time that was spend on the branch before the PR was created	0 Sec
Time that was spend on the branch before the PR was merged	3.7 Hours
Time to merge after last review	14.1 Min

Status check related measures

Description	Value
Total runtime for last status check run (Workflow for PR)	19 Min
Total time spend in last status check run on PR	13.5 Min