Update github/codeql-action action to v3.25.8

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
github/codeql-action	action	patch	v3.25.7 -> v3.25.8

---

Release Notes

github/codeql-action (github/codeql-action)

v3.25.8

Compare Source

---

Configuration

📅 Schedule: Branch creation - "* 0-4 * * 3" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[github-actions]

[puLL-Merge] - github/[email protected]

Here is a review of the pull request:

Description

This PR updates the CodeQL Action to use version 2.17.4 of the CodeQL CLI by default. It also updates several dependencies and makes some other minor changes and fixes.

Changes

Changes

• src/defaults.json: Updated default CodeQL bundle version to 2.17.4 and prior version to 2.17.3.
• package.json:
  • Updated version to 3.25.8.
  • Updated several dependencies including adm-zip, @typescript-eslint/eslint-plugin, @typescript-eslint/parser, and eslint-plugin-github.
• pr-checks/:
  • Updated versions used in PR checks, changing "latest" to "linked".
  • Updated sync.py to use "linked" instead of "latest".
• CHANGELOG.md: Added entry for version 3.25.8 noting the update to CodeQL CLI 2.17.4.
• Updates to several dependencies:
  • node_modules/adm-zip: Updated to 0.5.13
  • node_modules/@typescript-eslint/*: Updated to 7.12.0
  • node_modules/eslint-plugin-github: Updated to 5.0.0

Possible Issues

None

Security Hotspots

None

In summary, this looks like a routine update to the default CodeQL CLI version used by the Action along with updates to some dependencies. The thorough PR checks should ensure there are no breaking changes. This can be safely merged once the checks pass.