build(deps): bump github/codeql-action from 3.29.8 to 3.29.9 (#205)

Bumps [github/codeql-action](https://github.com/github/codeql-action)
from 3.29.8 to 3.29.9.

Release notes
Sourced from github/codeql-action's releases.

v3.29.9
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.9 - 12 Aug 2025
No user facing changes.

See the full CHANGELOG.md for more information.

Changelog
Sourced from github/codeql-action's changelog.

CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]
No user facing changes.

3.29.9 - 12 Aug 2025
No user facing changes.

3.29.8 - 08 Aug 2025
Fix an issue where the Action would autodetect unsupported languages such as HTML. #3015
3.29.7 - 07 Aug 2025
This release rolls back 3.29.6 to address issues with language autodetection. It is identical to 3.29.5.

3.29.6 - 07 Aug 2025
The cleanup-level input to the analyze Action is now deprecated. The CodeQL Action has written a limited amount of intermediate results to the database since version 2.2.5, and now automatically manages cleanup. #2999
Update default CodeQL bundle version to 2.22.3. #3000
3.29.5 - 29 Jul 2025
Update default CodeQL bundle version to 2.22.2. #2986
3.29.4 - 23 Jul 2025
No user facing changes.

3.29.3 - 21 Jul 2025
No user facing changes.

3.29.2 - 30 Jun 2025
Experimental: When the quality-queries input for the init action is provided with an argument, separate .quality.sarif files are produced and uploaded for each language with the results of the specified queries. Do not use this in production as it is part of an internal experiment and subject to change at any time. #2935
3.29.1 - 27 Jun 2025
Fix bug in PR analysis where user-provided include query filter fails to exclude non-included queries. #2938
Update default CodeQL bundle version to 2.22.1. #2950
3.29.0 - 11 Jun 2025
Update default CodeQL bundle version to 2.22.0. #2925
Bump minimum CodeQL bundle version to 2.16.6. #2912
... (truncated)

Author: dependabot[bot]

.github/workflows/scorecard.yml

@@ -73,6 +73,6 @@ jobs:
       # Upload the results to GitHub's code scanning dashboard (optional).
       # Commenting out will disable upload of results to your repo's Code Scanning dashboard
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@76621b61decf072c1cee8dd1ce2d2a82d33c17ed # v3.29.8
+        uses: github/codeql-action/upload-sarif@df559355d593797519d70b90fc8edd5db049e7a2 # v3.29.9
         with:
           sarif_file: results.sarif