Add dependabot config and pin GitHub Actions to a commit SHA (#1073)

Valery Kharseko

12 hours ago f5dc1c1ad32d1df08ceb40f590d1b1952dbb4a2d

 .github/workflows/codeql.yml

@@ -80,12 +80,12 @@

    steps:
      - name: Checkout repository
        uses: actions/checkout@v7
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          submodules: recursive

      - name: Initialize CodeQL
        uses: github/codeql-action/init@v4
        uses: github/codeql-action/init@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1
        with:
          languages: ${{ matrix.language }}
          build-mode: ${{ matrix.build-mode }}
@@ -120,13 +120,13 @@
      # --- Java manual build (only used if the java entry is set to 'manual')
      # - name: Set up JDK 11
      #   if: matrix.language == 'java-kotlin'
      #   uses: actions/setup-java@v5
      #   uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
      #   with:
      #     java-version: '11'
      #     distribution: 'zulu'
      # - name: Cache Maven packages
      #   if: matrix.language == 'java-kotlin'
      #   uses: actions/cache@v6
      #   uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
      #   with:
      #     path: ~/.m2/repository
      #     key: ${{ runner.os }}-m2-repository-${{ hashFiles('**/pom.xml') }}
@@ -139,6 +139,6 @@
      # ---------------------------------------------------------------------

      - name: Perform CodeQL Analysis
        uses: github/codeql-action/analyze@v4
        uses: github/codeql-action/analyze@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1
        with:
          category: "/language:${{ matrix.language }}"