chore(deps): bump the actions-minor-patch group with 2 updates

[dependabot]

Bumps the actions-minor-patch group with 2 updates: github/codeql-action and denoland/setup-deno.

Updates github/codeql-action from 4.36.2 to 4.36.3

Release notes

Sourced from github/codeql-action's releases.

v4.36.3

No user facing changes.

Changelog

Sourced from github/codeql-action's changelog.

4.36.3 - 01 Jul 2026

No user facing changes.

Commits

• 54f647b Merge pull request #3984 from github/update-v4.36.3-1f34ec164
• e78819e Trigger checks
• 2c9d3d6 Update changelog for v4.36.3
• 1f34ec1 Merge pull request #3983 from github/mbg/repo-props/ff-for-config-file-prop
• d5f0145 Log when repository property has a value but is ignored
• f27f563 Add test for when the FF is off
• 0025d0f Use FF
• f7fa18f Add FF for config file repo property
• 628fc3f Merge pull request #3979 from github/henrymercer/overlay-db-cleanup-size-tele...
• 9cfb67b Add clarifying comments
• Additional commits viewable in compare view

Updates denoland/setup-deno from 2.0.4 to 2.0.5

Release notes

Sourced from denoland/setup-deno's releases.

v2.0.5

What's Changed

• fix: update README and tests by @​crowlKats in denoland/setup-deno#85
• 2.0.1 by @​crowlKats in denoland/setup-deno#86
• Add problem matchers for deno lint by @​r7kamura in denoland/setup-deno#62
• refactor: use GitHub downloads for stable version download by @​crowlKats in denoland/setup-deno#91
• 2.0.2 by @​crowlKats in denoland/setup-deno#92
• refactor: convert action to TS and bundle code by @​csvn in denoland/setup-deno#95
• feat: add "lts" version option by @​sebdanielsson in denoland/setup-deno#97
• feat: add built-in caching via inputs by @​csvn in denoland/setup-deno#89
• feat: include a hash of deno.lock files in the cache key automatically by @​dsherret in denoland/setup-deno#98
• fix: switch back to package.json as it's necessary for GH actions by @​dsherret in denoland/setup-deno#101
• 2.0.3 by @​crowlKats in denoland/setup-deno#102
• Update actions/checkout by @​katayama8000 in denoland/setup-deno#106
• docs: add lts as possible release-channel output by @​csvn in denoland/setup-deno#99
• docs: condense Deno version information in one section by @​csvn in denoland/setup-deno#100
• docs: fix identifier for latest stable release by @​Ms2ger in denoland/setup-deno#115
• feat: upgrade Node.js runtime from node20 to node24 by @​nikicat in denoland/setup-deno#123
• 2.0.4 by @​crowlKats in denoland/setup-deno#125
• chore: use versions.json from dl.deno.land by @​crowlKats in denoland/setup-deno#130
• 2.0.5 by @​crowlKats in denoland/setup-deno#131

New Contributors

• @​r7kamura made their first contribution in denoland/setup-deno#62
• @​csvn made their first contribution in denoland/setup-deno#95
• @​sebdanielsson made their first contribution in denoland/setup-deno#97
• @​katayama8000 made their first contribution in denoland/setup-deno#106
• @​Ms2ger made their first contribution in denoland/setup-deno#115
• @​nikicat made their first contribution in denoland/setup-deno#123

Full Changelog: denoland/setup-deno@v2.0.0...v2.0.5

Commits

• 22d081f 2.0.5 (#131)
• 28c677f chore: use versions.json from dl.deno.land (#130)
• ff4860f 2.0.4 (#125)
• 6a293fc feat: upgrade Node.js runtime from node20 to node24 (#123)
• 390061a docs: fix identifier for latest stable release (#115)
• bdaa2e4 docs: condense Deno version information in one section (#100)
• e4ff81c docs: add lts as possible release-channel output (#99)
• bac1f72 Update actions/checkout (#106)
• 2f7698f 2.0.3 (#102)
• ee64dd3 fix: switch back to package.json as it's necessary for GH actions (#101)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[changeset-bot]

⚠️ No Changeset found

Latest commit: ae4ea51

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[coderdan]

Superseded by #670 — same change re-pushed from a maintainer branch so CI runs with the repo secrets the dependabot actor doesn't receive.

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml