Bump github/codeql-action from 4.37.4 to 4.37.5

[dependabot]

Bumps github/codeql-action from 4.37.4 to 4.37.5.

Release notes

Sourced from github/codeql-action's releases.

v4.37.5

• Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the init Action instead of falling back to downloading the bundle before extracting it. #4061

Changelog

Sourced from github/codeql-action's changelog.

4.37.5 - 03 Aug 2026

• Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the init Action instead of falling back to downloading the bundle before extracting it. #4061

Commits

• d1ba80a Merge pull request #4067 from github/update-v4.37.5-1cd4d01d5
• e74600b Update changelog for v4.37.5
• 1cd4d01 Merge pull request #4061 from github/henrymercer/turbo-system
• d2bfc30 Merge pull request #4050 from github/mbg/status/registries
• 68028fc Merge pull request #4062 from github/sam-robson/migrate-enterprise-release-pat
• c29563e ci: use federated enterprise release PAT
• 155e522 Link the PR from the changelog entry
• 2d3b351 Handle network errors when streaming the CodeQL bundle download
• 5d3eb98 Merge pull request #4055 from github/dependabot/npm_and_yarn/npm-minor-203262...
• c5f739b Merge branch 'main' into dependabot/npm_and_yarn/npm-minor-2032624187
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 98.27%. Comparing base (b9ff891) to head (307543c).
⚠️ Report is 3 commits behind head on 3.15.
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@           Coverage Diff           @@
##             3.15   #13333   +/-   ##
=======================================
  Coverage   98.27%   98.27%           
=======================================
  Files         136      136           
  Lines       49417    49417           
  Branches     2666     2666           
=======================================
+ Hits        48563    48564    +1     
  Misses        674      674           
+ Partials      180      179    -1     

Flag	Coverage Δ
CI-GHA	98.27% <ø> (+<0.01%)	⬆️
OS-Linux	98.05% <ø> (+<0.01%)	⬆️
OS-Windows	95.73% <ø> (ø)
OS-macOS	97.23% <ø> (+<0.01%)	⬆️
Py-3.10	97.38% <ø> (+<0.01%)	⬆️
Py-3.11	97.68% <ø> (+<0.01%)	⬆️
Py-3.12	97.76% <ø> (ø)
Py-3.13	97.74% <ø> (ø)
Py-3.14	97.84% <ø> (-0.02%)	⬇️
Py-3.14t	96.84% <ø> (ø)
Py-pypy-3.11	96.66% <ø> (ø)
VM-macos	97.23% <ø> (+<0.01%)	⬆️
VM-ubuntu	98.05% <ø> (+<0.01%)	⬆️
VM-windows	95.73% <ø> (ø)
cython-coverage	38.51% <ø> (-0.01%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

[codspeed-hq]

Merging this PR will not alter performance

✅ 84 untouched benchmarks
⏩ 86 skipped benchmarks¹

---

_{Comparing dependabot/github_actions/3.15/github/codeql-action-4.37.5 (307543c) with 3.15 (b9ff891)²}

Footnotes

1. 86 benchmarks were skipped, so the baseline results were used instead. If they were deleted from the codebase, click here and archive them to remove them from the performance reports. ↩

2. No successful run was found on 3.15 (6361cbc) during the generation of this report, so b9ff891 was used instead as the comparison base. There might be some changes unrelated to this pull request in this report. ↩