chore(deps): update submodules

[renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change	Pending
github/codeql-action	action	minor	v4.37.9 → v4.38.0	v4.38.1
ruby/setup-ruby	action	minor	v1.321.0 → v1.323.0	v1.325.0 (+1)
zizmorcore/zizmor-action	action	patch	v0.6.3 → v0.6.4

---

Release Notes

github/codeql-action (github/codeql-action)

v4.38.0

Compare Source

• On GitHub-hosted runners, the CodeQL Action now deletes unused CodeQL bundles from the toolcache before downloading a different bundle, which frees up disk space for the analysis. We expect to roll this change out to everyone in September. #​4124
• The CodeQL Action now supports CodeQL releases that are compatible with Linux Arm64 and downloads the native linux-arm64 CodeQL bundle when available. #​4072
• Update default CodeQL bundle version to 2.27.0. #​4129

ruby/setup-ruby (ruby/setup-ruby)

v1.323.0

Compare Source

What's Changed

• Update CRuby releases on Windows by @​ruby-builder-bot in #​937

Full Changelog: ruby/setup-ruby@v1.322.0...v1.323.0

v1.322.0

Compare Source

What's Changed

• Add ruby-4.0.7 by @​ruby-builder-bot in #​936

Full Changelog: ruby/setup-ruby@v1.321.0...v1.322.0

zizmorcore/zizmor-action (zizmorcore/zizmor-action)

v0.6.4

Compare Source

Sponsorship is appreciated!

zizmor 1.30.1 is now the default version.

Release notes: https://docs.zizmor.sh/release-notes/#​1301

---

Configuration

📅 Schedule: (in timezone Australia/Sydney)

• Branch creation
  • "before 6am on wednesday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.