Update github/codeql-action to version 2.22.9 (#2077)

Author: asf-rm

.github/workflows/scorecards-analysis.yaml

@@ -66,6 +66,6 @@ jobs:
           retention-days: 5
 
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@407ffafae6a767df3e0230c3df91b6443ae8df75    # 2.1.22
+        uses: github/codeql-action/upload-sarif@c0d1daa7f7e14667747d73a7dbbe8c074bc8bfe2    # 2.1.22
         with:
           sarif_file: results.sarif

src/changelog/.2.x.x/update_github_codeql_action.xml

@@ -3,6 +3,6 @@
        xmlns="http://logging.apache.org/log4j/changelog"
        xsi:schemaLocation="http://logging.apache.org/log4j/changelog https://logging.apache.org/log4j/changelog-0.1.2.xsd"
        type="changed">
-  <issue id="2005" link="https://github.com/apache/logging-log4j2/pull/2005"/>
-  <description format="asciidoc">Update `github/codeql-action` to version `2.22.8`</description>
+  <issue id="2077" link="https://github.com/apache/logging-log4j2/pull/2077"/>
+  <description format="asciidoc">Update `github/codeql-action` to version `2.22.9`</description>
 </entry>

src/site/_release-notes/_2.x.x.adoc

@@ -33,7 +33,7 @@ This releases contains ...
 * Update `commons-io:commons-io` to version `2.15.1` (https://github.com/apache/logging-log4j2/pull/2034[2034])
 * Update `commons-logging:commons-logging` to version `1.3.0` (https://github.com/apache/logging-log4j2/pull/2050[2050])
 * Update `de.flapdoodle.reverse:de.flapdoodle.reverse` to version `1.7.2` (https://github.com/apache/logging-log4j2/pull/1979[1979])
-* Update `github/codeql-action` to version `2.22.8` (https://github.com/apache/logging-log4j2/pull/2005[2005])
+* Update `github/codeql-action` to version `2.22.9` (https://github.com/apache/logging-log4j2/pull/2077[2077])
 * Update `org.apache.activemq:activemq-broker` to version `6.0.1` (https://github.com/apache/logging-log4j2/pull/2043[2043])
 * Update `org.apache.aries.spifly:org.apache.aries.spifly.dynamic.bundle` to version `1.3.7` (https://github.com/apache/logging-log4j2/pull/2058[2058])
 * Update `org.apache.commons:commons-compress` to version `1.25.0` (https://github.com/apache/logging-log4j2/pull/2045[2045])