chore(deps): update all non-major github action dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/setup-python	action	minor	v5.4.0 -> v5.5.0
github/codeql-action	action	patch	v3.28.11 -> v3.28.13

Review

• Updates have been tested and work
• If updates are AWS related, versions match the infrastructure (e.g. Lambda runtime, database, etc.)

---

Release Notes

actions/setup-python (actions/setup-python)

v5.5.0

Compare Source

What's Changed

Enhancements:

• Support free threaded Python versions like '3.13t' by @​colesbury in https://github.com/actions/setup-python/pull/973
• Enhance Workflows: Include ubuntu-arm runners, Add e2e Testing for free threaded and Upgrade @​action/cache from 4.0.0 to 4.0.3 by @​priya-kinthali in https://github.com/actions/setup-python/pull/1056
• Add support for .tool-versions file in setup-python by @​mahabaleshwars in https://github.com/actions/setup-python/pull/1043

Bug fixes:

• Fix architecture for pypy on Linux ARM64 by @​mayeut in https://github.com/actions/setup-python/pull/1011
  This update maps arm64 to aarch64 for Linux ARM64 PyPy installations.

Dependency updates:

• Upgrade @​vercel/ncc from 0.38.1 to 0.38.3 by @​dependabot in https://github.com/actions/setup-python/pull/1016
• Upgrade @​actions/glob from 0.4.0 to 0.5.0 by @​dependabot in https://github.com/actions/setup-python/pull/1015

New Contributors

• @​colesbury made their first contribution in https://github.com/actions/setup-python/pull/973
• @​mahabaleshwars made their first contribution in https://github.com/actions/setup-python/pull/1043

Full Changelog: actions/setup-python@v5...v5.5.0

github/codeql-action (github/codeql-action)

v3.28.13

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.13 - 24 Mar 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.28.12

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.12 - 19 Mar 2025

• Dependency caching should now cache more dependencies for Java build-mode: none extractions. This should speed up workflows and avoid inconsistent alerts in some cases.
• Update default CodeQL bundle version to 2.20.7. #​2810

See the full CHANGELOG.md for more information.

---

Configuration

📅 Schedule: Branch creation - "every weekend" in timezone America/Montreal, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.