ci: add codeql group to dependabot config

[chrisgacsal]

Overview

Update CodeQL actions in one go.

Summary by CodeRabbit

• Chores
  • Grouped CodeQL GitHub Actions dependencies for streamlined update management.

Greptile Summary

Adds a Dependabot group so updates to the repository’s CodeQL GitHub Actions are handled together.

• Defines a codeql group for the GitHub Actions ecosystem.
• Covers the CodeQL init, analyze, and upload-sarif action paths used by repository workflows.

Confidence Score: 5/5

The PR appears safe to merge because the new wildcard pattern covers the repository’s active CodeQL action references.

The configuration-only change groups existing CodeQL sub-actions without altering workflow execution or leaving an active CodeQL reference outside the intended pattern.

Important Files Changed

Filename	Overview
.github/dependabot.yaml	Adds a focused CodeQL action group consistent with the existing Dependabot configuration; no actionable issues identified.

_{Reviews (1): Last reviewed commit: "ci: add codeql group to dependabot confi..." | Re-trigger Greptile}

[coderabbitai]

📝 Walkthrough

Walkthrough

Changes

Dependabot grouping

Layer / File(s)	Summary
Add CodeQL dependency group .github/dependabot.yaml	Adds a codeql group for github/codeql-action and its subpackages.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Suggested reviewers: borbelyr-kong

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly summarizes the change to group CodeQL dependencies in the Dependabot configuration.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch ci/dependabot

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}