Update github/codeql-action to version 3.24.0 (#2264)

Author: asf-rm

.github/workflows/scorecards-analysis.yaml

@@ -70,6 +70,6 @@ jobs:
           retention-days: 5
 
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@b7bf0a3ed3ecfa44160715d7c442788f65f0f923    # 2.1.22
+        uses: github/codeql-action/upload-sarif@e8893c57a1f3a2b659b6b55564fdfdbbd2982911    # 2.1.22
         with:
           sarif_file: results.sarif

src/changelog/.2.x.x/update_github_codeql_action.xml

@@ -3,6 +3,6 @@
        xmlns="http://logging.apache.org/log4j/changelog"
        xsi:schemaLocation="http://logging.apache.org/log4j/changelog https://logging.apache.org/log4j/changelog-0.1.3.xsd"
        type="updated">
-  <issue id="2253" link="https://github.com/apache/logging-log4j2/pull/2253"/>
-  <description format="asciidoc">Update `github/codeql-action` to version `3.23.2`</description>
+  <issue id="2264" link="https://github.com/apache/logging-log4j2/pull/2264"/>
+  <description format="asciidoc">Update `github/codeql-action` to version `3.24.0`</description>
 </entry>

src/site/_release-notes/_2.x.x.adoc

@@ -50,7 +50,7 @@ This releases contains ...
 * Update `co.elastic.clients:elasticsearch-java` to version `8.12.0` (https://github.com/apache/logging-log4j2/pull/2212[2212])
 * Update `com.fasterxml.jackson:jackson-bom` to version `2.16.1` (https://github.com/apache/logging-log4j2/pull/2126[2126])
 * Update `com.google.code.java-allocation-instrumenter:java-allocation-instrumenter` to version `3.3.4` (https://github.com/apache/logging-log4j2/pull/2103[2103])
-* Update `github/codeql-action` to version `3.23.2` (https://github.com/apache/logging-log4j2/pull/2253[2253])
+* Update `github/codeql-action` to version `3.24.0` (https://github.com/apache/logging-log4j2/pull/2264[2264])
 * Update `io.netty:netty-bom` to version `4.1.106.Final` (https://github.com/apache/logging-log4j2/pull/2225[2225])
 * Update `org.apache.logging:logging-parent` to version `10.6.0` (https://github.com/apache/logging-log4j2/pull/2197[2197])
 * Update `org.apache.maven.surefire:surefire-junit47` to version `3.2.5` (https://github.com/apache/logging-log4j2/pull/2178[2178])