Update github/codeql-action to version 3.22.11 (#2093)

Author: asf-rm

.github/workflows/scorecards-analysis.yaml

@@ -66,6 +66,6 @@ jobs:
           retention-days: 5
 
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@305f6546310b9203e892c28c1484e82977f4f63d    # 2.1.22
+        uses: github/codeql-action/upload-sarif@b374143c1149a9115d881581d29b8390bbcbb59c    # 2.1.22
         with:
           sarif_file: results.sarif

src/changelog/.2.x.x/update_github_codeql_action.xml

@@ -3,6 +3,6 @@
        xmlns="http://logging.apache.org/log4j/changelog"
        xsi:schemaLocation="http://logging.apache.org/log4j/changelog https://logging.apache.org/log4j/changelog-0.1.2.xsd"
        type="changed">
-  <issue id="2087" link="https://github.com/apache/logging-log4j2/pull/2087"/>
-  <description format="asciidoc">Update `github/codeql-action` to version `2.22.10`</description>
+  <issue id="2093" link="https://github.com/apache/logging-log4j2/pull/2093"/>
+  <description format="asciidoc">Update `github/codeql-action` to version `3.22.11`</description>
 </entry>

src/site/_release-notes/_2.x.x.adoc

@@ -34,7 +34,7 @@ This releases contains ...
 * Update `commons-io:commons-io` to version `2.15.1` (https://github.com/apache/logging-log4j2/pull/2034[2034])
 * Update `commons-logging:commons-logging` to version `1.3.0` (https://github.com/apache/logging-log4j2/pull/2050[2050])
 * Update `de.flapdoodle.reverse:de.flapdoodle.reverse` to version `1.7.2` (https://github.com/apache/logging-log4j2/pull/1979[1979])
-* Update `github/codeql-action` to version `2.22.10` (https://github.com/apache/logging-log4j2/pull/2087[2087])
+* Update `github/codeql-action` to version `3.22.11` (https://github.com/apache/logging-log4j2/pull/2093[2093])
 * Update `net.java.dev.jna:jna` to version `5.14.0` (https://github.com/apache/logging-log4j2/pull/2081[2081])
 * Update `org.apache.activemq:activemq-broker` to version `6.0.1` (https://github.com/apache/logging-log4j2/pull/2043[2043])
 * Update `org.apache.aries.spifly:org.apache.aries.spifly.dynamic.bundle` to version `1.3.7` (https://github.com/apache/logging-log4j2/pull/2058[2058])