Update github-actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
aws-actions/configure-aws-credentials (changelog)	action	digest	e6de054 → cbe3b39
github/codeql-action (changelog)	action	digest	db488dd → cdf488f
mikepenz/action-junit-report (changelog)	action	digest	d9f48fc → a9170d5

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Configuration

📅 Schedule: (in timezone UTC)

• Branch creation
  • "before 6am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

---

Note

Low Risk
Routine CI action digest bumps with no workflow behavior or application code changes; lowest risk aside from trusting upstream action releases.

Overview
Renovate bumps pinned commit SHAs for three third-party actions across CI workflows; major version tags (v4 / v6) stay the same.

CodeQL (codeql-analysis.yml): github/codeql-action init and analyze move to digest cdf488f….

Corpora tests (detector-corpora-test.yml): aws-actions/configure-aws-credentials moves to digest cbe3b39… for the step that uses AWS_ACCESS_KEY / AWS_SECRET_ACCESS_KEY.

Tests (test.yml): mikepenz/action-junit-report moves to digest a9170d5… for JUnit annotation on tmp/test-results/*.xml.

No application or workflow logic changes—only supply-chain pin updates.

^{Reviewed by Cursor Bugbot for commit c430258. Bugbot is set up for automated code reviews on this repo. Configure here.}

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}