chore(SOLSYS): bump CodeQL Action from 4.37.6 to 4.37.9

[ThomasAFink]

Summary

• Bump github/codeql-action/init and github/codeql-action/analyze together from 4.37.6 to 4.37.9. Dependabot opened these as separate PRs (chore(SOLSYS): bump github/codeql-action/analyze from 4.37.6 to 4.37.9 #215, chore(SOLSYS): bump github/codeql-action/init from 4.37.6 to 4.37.9 #216), but CodeQL refuses a version mismatch (Loaded a configuration file for version '4.37.6', but running version '4.37.9').
• Group future github/codeql-action/* Dependabot updates so init and analyze stay on the same SHA.

Test plan

• Analyze Python (🛡️ CodeQL Advanced) is green
• Ruff and unit tests stay green
• Close chore(SOLSYS): bump github/codeql-action/analyze from 4.37.6 to 4.37.9 #215 and chore(SOLSYS): bump github/codeql-action/init from 4.37.6 to 4.37.9 #216 after this lands

Summary by CodeRabbit

• Chores
  • Updated the CodeQL security scanning actions to a newer version.
  • Grouped CodeQL action dependency updates for more streamlined maintenance.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Team

Run ID: c1aae261-8c41-4935-811f-6fdf9f3994d2

📥 Commits

Reviewing files that changed from the base of the PR and between cd4af5e and a3878df.

📒 Files selected for processing (2)

• .github/dependabot.yml
• .github/workflows/codeql.yml

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.

---

📝 Walkthrough

Walkthrough

The pull request groups CodeQL action updates in Dependabot and updates the CodeQL workflow actions from v4.37.6 to v4.37.9. Existing workflow settings remain unchanged.

Changes

CodeQL Action Maintenance

Layer / File(s)	Summary
Group and pin CodeQL actions .github/dependabot.yml, .github/workflows/codeql.yml	Dependabot groups github/codeql-action/* updates. The workflow updates the pinned SHAs and version tags for the init and analyze actions to v4.37.9. Configuration inputs remain unchanged.

Estimated code review effort: 1 (Trivial) | ~3 minutes

Merge Risk: ⚪ Minimal · up to a3878

This change keeps the CodeQL initialization and analysis actions on the same updated version and groups future updates consistently. No actionable merge-blocking risk remains beyond normal checks and review.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely describes the primary change: upgrading CodeQL Action from 4.37.6 to 4.37.9.
Linked Issues check	✅ Passed	The pull request upgrades github/codeql-action/analyze from 4.37.6 to 4.37.9 and updates init to the same version. This satisfies issue #215 and prevents component version mismatches.
Out of Scope Changes check	✅ Passed	All changes support the linked objective. The Dependabot grouping keeps future CodeQL Action updates synchronized, and the workflow changes update only the required CodeQL Action versions.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…

Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (2 skipped: 2 unsupported.)

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/codeql-action-4.37.9

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}