ci: update CodeQL workflow

Author: sebthom

.github/workflows/build.yml

@@ -10,6 +10,7 @@ on:  # https://docs.github.com/en/actions/reference/workflows-and-actions/events
     paths-ignore:
     - '**/*.md'
     - '.github/*.yml'
+    - '.github/workflows/bump-version.yml'
     - '.github/workflows/codeql.yml'
     - '.github/workflows/licensecheck.yml'
     - '.github/workflows/validate_pr.yml'
@@ -23,6 +24,7 @@ on:  # https://docs.github.com/en/actions/reference/workflows-and-actions/events
     - '**/*.md'
     - '.github/*.yml'
     - '.github/workflows/bump-version.yml'
+    - '.github/workflows/codeql.yml'
     - '.github/workflows/licensecheck.yml'
     - '.github/workflows/validate_pr.yml'
     - '**/.project'

.github/workflows/codeql.yml

@@ -2,15 +2,14 @@
 name: CodeQL
 
 on:  # https://docs.github.com/en/actions/reference/workflows-and-actions/events-that-trigger-workflows
+  schedule:
+    # https://docs.github.com/en/actions/reference/workflows-and-actions/events-that-trigger-workflows#schedule
+    - cron: "30 18 * * 1"   # Mondays 18:30 UTC
   push:
     branches: [ "main" ]
     paths-ignore:
     - '**/*.md'
     - '.github/*.yml'
-    - '.github/workflows/build.yml'
-    - '.github/workflows/bump-version.yml'
-    - '.github/workflows/licensecheck.yml'
-    - '.github/workflows/validate_pr.yml'
     - '**/.project'
     - '**/.settings/*.prefs'
     - '.gitignore'
@@ -21,10 +20,6 @@ on:  # https://docs.github.com/en/actions/reference/workflows-and-actions/events
     paths-ignore:
     - '**/*.md'
     - '.github/*.yml'
-    - '.github/workflows/build.yml'
-    - '.github/workflows/bump-version.yml'
-    - '.github/workflows/licensecheck.yml'
-    - '.github/workflows/validate_pr.yml'
     - '**/.project'
     - '**/.settings/*.prefs'
     - '.gitignore'
@@ -40,11 +35,17 @@ jobs:
   analyze:
   ###########################################################
 
+    concurrency:
+      group: codeql-${{ github.workflow }}-${{ github.ref }}-${{ matrix.language }}
+      cancel-in-progress: true
+
     strategy:
       fail-fast: false
       matrix:
         include:
         # build-mode: https://github.com/github/codeql-action#build-modes
+        - language: actions
+          build-mode: none
         - language: java-kotlin
           build-mode: none
         - language: javascript-typescript
@@ -85,7 +86,7 @@ jobs:
     # CodeQL executes https://github.com/ferstl/depgraph-maven-plugin
     - name: "Install: JDK 25 for Maven/Tycho ☕"
       uses: actions/setup-java@v5  # https://github.com/actions/setup-java
-      if: ${{ matrix.language }} == 'java'
+      if: matrix.language == 'java'
       with:
         distribution: temurin
         java-version: 25