build: update github/codeql-action action to v4.30.8 (main)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
github/codeql-action	action	patch	v4.30.7 -> v4.30.8

---

Release Notes

github/codeql-action (github/codeql-action)

v4.30.8

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.30.8 - 10 Oct 2025

No user facing changes.

See the full CHANGELOG.md for more information.

---

Configuration

📅 Schedule: Branch creation - "on sunday and wednesday" in timezone America/Tijuana, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: undefined

Post-upgrade command 'git restore .yarn/releases/yarn-1.22.22.cjs pnpm-lock.yaml .npmrc' has not been added to the allowed list in allowedCommands

File name: undefined

Post-upgrade command 'pnpm install --frozen-lockfile' has not been added to the allowed list in allowedCommands

File name: undefined

Post-upgrade command 'pnpm bazel run //.github/actions/deploy-docs-site:main.update' has not been added to the allowed list in allowedCommands

File name: undefined

Post-upgrade command 'pnpm bazel run //packages/common:base_currencies_file.update' has not been added to the allowed list in allowedCommands

File name: undefined

Post-upgrade command 'pnpm bazel run //packages/common/locales:closure_locale_file.update' has not been added to the allowed list in allowedCommands

File name: undefined

Post-upgrade command 'pnpm bazel run //packages/core:base_locale_file.update' has not been added to the allowed list in allowedCommands