chore(deps): update github/codeql-action action to v3.25.5

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
github/codeql-action	action	patch	v3.25.4 -> v3.25.5	v3.25.6

---

Release Notes

github/codeql-action (github/codeql-action)

v3.25.5

Compare Source

---

Configuration

📅 Schedule: Branch creation - "* 0-4 * * 3" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[github-actions]

[puLL-Merge] - github/codeql-action@v3.25.4..v3.25.5

Description

This PR makes several changes to the CodeQL Action codebase:

• It adds a compatibility matrix to the README describing the recommended versions of the CodeQL Action, CodeQL CLI, and GitHub Enterprise Server to use together.
• It updates several dependencies and the CodeQL Action version to 3.25.5.
• It modifies the feature flags system to distinguish between "legacy" and new feature flags, with legacy feature flag names ending in _enabled.
• It changes the autobuild behavior to end tracing early, before the analyze step, to improve performance and reliability.
• It adds handling for a few new error messages from the CLI.
• It modifies the workflow validation to not warn about a missing push trigger if there is a workflow_call trigger.

The main motivation seems to be continuing to improve the CodeQL Action, keep dependencies up-to-date, provide clear compatibility guidance, and fix some edge case bugs.

Changes

Changes

• .github/workflows/: Adds fail-fast: false to all the test workflow job matrices
• CHANGELOG.md, package.json, package-lock.json: Update version to 3.25.5 and add changelog notes
• CONTRIBUTING.md: Add a note to update the compatibility table in the README when deprecating a CodeQL version
• README.md: Add a matrix describing recommended CodeQL Action, CLI and GHES version compatibility
• lib/, src/:
  • End tracing early before running the analyze step in autobuild-action.ts and analyze.ts
  • Add a few new CLI error message patterns in cli-errors.ts
  • Rename AutobuildDirectTracingEnabled feature flag and add legacyApi flag in feature-flags.ts
  • Modify runAutobuild in codeql.ts to remove handling of direct tracing feature flag
  • Update hasWorkflowTrigger logic in workflow.ts to handle workflow_call triggers
• lib/*.test.ts, src/*.test.ts: Update tests for the code changes
• pr-checks/sync.py: Add fail-fast: false when generating the PR check workflow matrices