Merge Dependabot updates for GitHub Actions

- Update SonarSource/sonarqube-scan-action from v5 to v7
- Update github/codeql-action from v3 to v4
- Update stefanzweifel/git-auto-commit-action from v5 to v7
- Update CHANGELOG.md with dependency updates

Consolidates PRs #128, #129, #130 from Dependabot.

Author: claude

.github/workflows/ci.yml

@@ -193,7 +193,7 @@ jobs:
           name: coverage
 
       - name: SonarQube Scan
-        uses: SonarSource/sonarqube-scan-action@v5
+        uses: SonarSource/sonarqube-scan-action@v7
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}  # Needed to get PR information, if any
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

.github/workflows/codeql-analysis.yml

@@ -42,7 +42,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v3
+        uses: github/codeql-action/init@v4
         with:
           languages: ${{ matrix.language }}
           # If you wish to specify custom queries, you can do so here or in a config file.
@@ -51,7 +51,7 @@ jobs:
           # queries: ./path/to/local/query, your-org/your-repo/queries@main
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@v3
+        uses: github/codeql-action/autobuild@v4
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v3
+        uses: github/codeql-action/analyze@v4

.github/workflows/draft_release.yml

@@ -30,7 +30,7 @@ jobs:
           python3 -m mdformat CHANGELOG.md
 
       - name: Commit changes
-        uses: stefanzweifel/git-auto-commit-action@v5
+        uses: stefanzweifel/git-auto-commit-action@v7
         id: make-commit
         with:
           branch: release/${{ github.event.inputs.tag }}

CHANGELOG.md

@@ -25,7 +25,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Update GitHub Action `actions/download-artifact` to v4
 - Update GitHub Action `actions/upload-artifact` to v4
 - Update GitHub Action `codecov/codecov-action` from v4 to v5
-- Use GitHub Action `SonarSource/sonarqube-scan-action` v5
+- Use GitHub Action `SonarSource/sonarqube-scan-action` v7
+- Update GitHub Action `github/codeql-action` from v3 to v4
+- Update GitHub Action `stefanzweifel/git-auto-commit-action` from v5 to v7
 - Update `github.com/pre-commit/pre-commit-hooks` hook to v6.0.0
 - Update `https://github.com/PyCQA/doc8/` hook to v2.0.0
 - Update `github.com/codespell-project/codespell` hook to v2.4.1