build(deps): bump the github-actions group across 1 directory with 2 updates

[dependabot]

Bumps the github-actions group with 2 updates in the / directory: pnpm/action-setup and github/codeql-action.

Updates pnpm/action-setup from 6.0.9 to 6.0.10

Release notes

Sourced from pnpm/action-setup's releases.

v6.0.10

What's Changed

• docs(README): point users to the successor pnpm/setup action by @​BlackHole1 in pnpm/action-setup#282
• refactor: introduce restore keys for cache by @​SukkaW in pnpm/action-setup#280
• ci: use pnpm 11 for pr-check by @​jamietanna in pnpm/action-setup#284
• fix: update pnpm to v11.19.0 by @​jamietanna in pnpm/action-setup#283
• docs: update README to include devEngines.packageManager by @​nemchik in pnpm/action-setup#273

New Contributors

• @​jamietanna made their first contribution in pnpm/action-setup#284
• @​nemchik made their first contribution in pnpm/action-setup#273

Full Changelog: pnpm/action-setup@v6...v6.0.10

Commits

• 0977fd9 docs: Update README to include devEngines.packageManager (#273)
• 48261ac fix: update pnpm to v11.19.0 (#283)
• 75677f7 ci: use pnpm 11 for pr-check (#284)
• 769ae71 refactor: introduce restore keys for cache (#280)
• 6fed91f docs(README): point users to the successor pnpm/setup action (#282)
• See full diff in compare view

Updates github/codeql-action from 4.37.4 to 4.37.7

Release notes

Sourced from github/codeql-action's releases.

v4.37.7

• Update default CodeQL bundle version to 2.26.3. #4085

v4.37.6

• Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to .github/codeql-config.yml to align it with the suggested path that is used elsewhere. #4070

v4.37.5

• Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the init Action instead of falling back to downloading the bundle before extracting it. #4061

Changelog

Sourced from github/codeql-action's changelog.

4.37.7 - 13 Aug 2026

• Update default CodeQL bundle version to 2.26.3. #4085

4.37.6 - 04 Aug 2026

• Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to .github/codeql-config.yml to align it with the suggested path that is used elsewhere. #4070

4.37.5 - 03 Aug 2026

• Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the init Action instead of falling back to downloading the bundle before extracting it. #4061

Commits

• ff2f1c6 Merge pull request #4093 from github/update-v4.37.7-be7a3dbb8
• 951a133 Update changelog for v4.37.7
• be7a3db Merge pull request #4087 from github/dependabot/npm_and_yarn/npm-minor-0aa561...
• 9310334 Merge pull request #4086 from github/mbg/thread-action-state-to-codeql
• b4d8a54 Rebuild
• ab5db25 Bump the npm-minor group across 1 directory with 8 updates
• 38055a3 Drop logger from databaseInitCluster in interface
• 1f87aed Merge pull request #4085 from github/update-bundle/codeql-bundle-v2.26.3
• dc1b98a Make logger available to getCodeQLForCmd
• 6f0220e Merge pull request #4084 from github/navntoft/bump-undici
• Additional commits viewable in compare view