[deps] DevOps: Update gh minor

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
anchore/scan-action	action	patch	v5.2.0 -> v5.2.1
checkmarx/ast-github-action	action	patch	2.0.36 -> 2.0.38
github/codeql-action	action	patch	v3.27.0 -> v3.27.4

---

Release Notes

anchore/scan-action (anchore/scan-action)

v5.2.1

Compare Source

New in scan-action v5.2.1

• update Grype to v0.84.0 (#​404) [anchore-actions-token-generator]
• bump @​actions/cache from 3.2.4 to 3.3.0 (#​402) [dependabot]

checkmarx/ast-github-action (checkmarx/ast-github-action)

v2.0.38

Compare Source

What's Changed

Other Changes

• Update CLI version to 2.3.5 by @​sarahCx in https://github.com/Checkmarx/ast-github-action/pull/208

New Contributors

• @​sarahCx made their first contribution in https://github.com/Checkmarx/ast-github-action/pull/208

Full Changelog: Checkmarx/ast-github-action@2.0.37...2.0.38

v2.0.37

Compare Source

What's Changed

Other Changes

• Update cli version to 2.3.3 by @​Korjen97 in https://github.com/Checkmarx/ast-github-action/pull/207

Full Changelog: Checkmarx/ast-github-action@2.0.36...2.0.37

github/codeql-action (github/codeql-action)

v3.27.4

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.4 - 14 Nov 2024

No user facing changes.

See the full CHANGELOG.md for more information.

v3.27.3

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.3 - 12 Nov 2024

No user facing changes.

See the full CHANGELOG.md for more information.

v3.27.2

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.2 - 12 Nov 2024

• Fixed an issue where setting up the CodeQL tools would sometimes fail with the message "Invalid value 'undefined' for header 'authorization'". #​2590

See the full CHANGELOG.md for more information.

v3.27.1

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.1 - 08 Nov 2024

• The CodeQL Action now downloads bundles compressed using Zstandard on GitHub Enterprise Server when using Linux or macOS runners. This speeds up the installation of the CodeQL tools. This feature is already available to GitHub.com users. #​2573
• Update default CodeQL bundle version to 2.19.3. #​2576

See the full CHANGELOG.md for more information.

---

Configuration

📅 Schedule: Branch creation - "every 2nd week starting on the 2 week of the year before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[bitwarden-bot]

Internal tracking:

• ID: PM-14703
• Link: https://bitwarden.atlassian.net/browse/PM-14703

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 43.05%. Comparing base (b2b0f1e) to head (0ac8b51).

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #5016   +/-   ##
=======================================
  Coverage   43.05%   43.05%           
=======================================
  Files        1409     1409           
  Lines       64710    64710           
  Branches     5915     5915           
=======================================
  Hits        27859    27859           
  Misses      35622    35622           
  Partials     1229     1229           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

---

🚨 Try these New Features:

• Flaky Tests Detection - Detect and resolve failed and flaky tests
• JS Bundle Analysis - Avoid shipping oversized bundles