Bump github/codeql-action from 4.37.8 to 4.37.9 in the actions group (#2583)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

.github/workflows/codeql.yml

@@ -41,7 +41,7 @@ jobs:
           go-version: "1.26.0"
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v4.37.8 #immutable
+        uses: github/codeql-action/init@v4.37.9 #immutable
         with:
           languages: go
           build-mode: manual
@@ -54,6 +54,6 @@ jobs:
 
           go test -v ./internal/test/compilecheck -run '^TestCompileCheck/go:1\.25$'
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v4.37.8 #immutable
+        uses: github/codeql-action/analyze@v4.37.9 #immutable
         with:
           category: "/language:go"

.github/workflows/scorecard.yml

@@ -66,6 +66,6 @@ jobs:
       # Upload the results to GitHub's code scanning dashboard (optional).
       # Commenting out will disable upload of results to your repo's Code Scanning dashboard
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@v4.37.8 #immutable
+        uses: github/codeql-action/upload-sarif@v4.37.9 #immutable
         with:
           sarif_file: results.sarif