Bump github/codeql-action from 4.37.6 to 4.37.7

[dependabot]

Bumps github/codeql-action from 4.37.6 to 4.37.7.

Release notes

Sourced from github/codeql-action's releases.

v4.37.7

• Update default CodeQL bundle version to 2.26.3. #4085

Changelog

Sourced from github/codeql-action's changelog.

4.37.7 - 13 Aug 2026

• Update default CodeQL bundle version to 2.26.3. #4085

Commits

• ff2f1c6 Merge pull request #4093 from github/update-v4.37.7-be7a3dbb8
• 951a133 Update changelog for v4.37.7
• be7a3db Merge pull request #4087 from github/dependabot/npm_and_yarn/npm-minor-0aa561...
• 9310334 Merge pull request #4086 from github/mbg/thread-action-state-to-codeql
• b4d8a54 Rebuild
• ab5db25 Bump the npm-minor group across 1 directory with 8 updates
• 38055a3 Drop logger from databaseInitCluster in interface
• 1f87aed Merge pull request #4085 from github/update-bundle/codeql-bundle-v2.26.3
• dc1b98a Make logger available to getCodeQLForCmd
• 6f0220e Merge pull request #4084 from github/navntoft/bump-undici
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: github-actions. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[mergify]

Automatically approving minor/patch dependency update

[mergify]

Merge Queue Status

• ✅ Entered queue — 2026-08-17 18:17 UTC · Rule: default · triggered by merge protections
• ❌ Checks failed — 2026-08-17 18:21 UTC · on draft merge queue: checking main (614ab40) and [#639 + #638 + #640] together #641
• ✂️ Bisecting to identify the failing PR (round 1/1)
• 🚫 Left the queue — 2026-08-17 18:37 UTC · at 8565a5d23f6e981891fb5d8c590b0c74220dc6bb

This pull request spent 20 minutes 24 seconds in the queue, including 11 minutes 42 seconds running CI.

Reason

The merge conditions cannot be satisfied due to failing checks

• PR Status Check
• @github-actions/PR Status Check

Failing checks:

• ❌ Check PR Size (job log)
• ❌ CI Status Check (job log)
• ❌ Lint GitHub Actions (job log)
• ❌ PR Status Check (job log)

Hint

You may have to fix your CI before adding the pull request to the queue again.
If you update this pull request, to fix the CI, it will automatically be requeued once the queue conditions match again.
If you think this was a flaky issue instead, you can requeue the pull request, without updating it, by posting a @mergifyio queue comment.

Tick the box to put this pull request back in the merge queue (same as @mergifyio queue).

• Requeue this pull request

[dependabot]

Superseded by #647.