Update github/codeql-action action to v4.37.4

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
github/codeql-action	action	patch	v4.37.3 → v4.37.4

---

Release Notes

github/codeql-action (github/codeql-action)

v4.37.4

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[semanticdiff-com]

Review changes with  

Changed Files

File	Status
.github/workflows/daily-malicious-code-scan.lock.yml	18% smaller

[deepsource-io]

DeepSource Code Review

We reviewed changes in 5a8bba7...1ad05ae on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall Grade

Security   Reliability   Complexity   Hygiene

Code Review Summary

Analyzer	Status	Updated (UTC)	Details
Shell		Aug 2, 2026 1:56a.m.	Review ↗
Python		Aug 2, 2026 1:56a.m.	Review ↗
Docker		Aug 2, 2026 1:56a.m.	Review ↗
Secrets		Aug 2, 2026 1:56a.m.	Review ↗

---

Important

AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.

[mergify]

Merge Queue Status

• ✅ Entered queue — 2026-08-02 01:55 UTC · Rule: Github Actions Updates · triggered by rule autoqueue
• ✅ Checks passed · on draft merge queue: checking main (5a8bba7) and [#2805 + #2806] together #2807
• ✅ Merged — 2026-08-02 01:59 UTC · at b9e6e59858c58a3ebe366674caced17168104bbc

This pull request spent 4 minutes 21 seconds in the queue, including 3 minutes 5 seconds running CI.

Required conditions to merge

• github-review-approved [🛡 GitHub repository ruleset rule main]
  • Update github/codeql-action action to v4.37.4 #2805
  • Update github/gh-aw-actions action to v0.84.2 - autoclosed #2806
• any of [🛡 GitHub repository ruleset rule main]:
  • check-neutral = @mergify/Mergify Merge Protections
  • check-skipped = @mergify/Mergify Merge Protections
  • check-success = @mergify/Mergify Merge Protections

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[mergify]

Thank you for your contribution @renovate[bot]! Your pull request has been merged.