[Wei Weng (weng271190436)]

Summary

• Group github/codeql-action/* updates into one Dependabot PR so init, autobuild, and analyze stay synchronized.
• Update all three CodeQL steps to the same SHA for v4.39.1, resolving the mixed-version failure reported in chore: bump github/codeql-action/autobuild from 4.37.4 to 4.39.1 #434.
• Preserve the weekly schedule, seven-day cooldown, and existing SHA-pinning convention.

Supersedes #433 and #434.

Validation

• Parsed both YAML files successfully.
• Verified the group covers init, autobuild, and analyze but excludes actions/checkout.
• Verified all three steps use the same SHA and that it matches the upstream v4.39.1 tag.
• Verified the existing schedule and cooldown are unchanged.
• git diff --check passed.
• Full CodeQL analysis will run in GitHub Actions; it was not run locally.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 67.03%. Comparing base (632ed6d) to head (97b1716).

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #437      +/-   ##
==========================================
- Coverage   67.21%   67.03%   -0.19%     
==========================================
  Files          34       34              
  Lines        3859     3859              
==========================================
- Hits         2594     2587       -7     
- Misses       1085     1092       +7     
  Partials      180      180              

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.