Update github/codeql-action digest to 294a9d9 (#399)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

.github/workflows/analysis.yml

@@ -21,12 +21,12 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@8214744c546c1e5c8f03dde8fab3a7353211988d # v3
+        uses: github/codeql-action/init@294a9d92911152fe08befb9ec03e240add280cb3 # v3
         with:
           languages: 'python'
           config-file: ./.github/codeql/codeql-config.yml
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@8214744c546c1e5c8f03dde8fab3a7353211988d # v3
+        uses: github/codeql-action/analyze@294a9d92911152fe08befb9ec03e240add280cb3 # v3
   bandit:
     name: Bandit
     runs-on: ubuntu-latest
@@ -45,7 +45,7 @@ jobs:
         run: bandit -r ./cxroots -x ./cxroots/tests --format sarif --output out.sarif
       - name: Upload SARIF file
         if: always()
-        uses: github/codeql-action/upload-sarif@8214744c546c1e5c8f03dde8fab3a7353211988d # v3
+        uses: github/codeql-action/upload-sarif@294a9d92911152fe08befb9ec03e240add280cb3 # v3
         with:
           sarif_file: out.sarif
           category: Bandit