Update github/codeql-action action to v3.26.13

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
github/codeql-action	action	patch	v3.26.12 -> v3.26.13	v3.27.0

---

Release Notes

github/codeql-action (github/codeql-action)

v3.26.13

Compare Source

---

Configuration

📅 Schedule: Branch creation - "* 0-4 * * 3" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

[puLL-Merge] - github/codeql-action@v3.26.12..v3.26.13

Description

This PR makes several changes to the CodeQL Action, including updates to workflow files, dependencies, and the addition of a new feature flag for Python standard library extraction. The main motivations appear to be improving performance, updating dependencies, and preparing for a change in Python extraction behavior.

Changes

Changes

1. .github/workflows/__zstd-bundle-fallback.yml:

   • Removed Windows from the list of operating systems.

2. .github/workflows/__zstd-bundle.yml:

   • Reordered operating systems (Windows moved to the end).
   • Modified the check for the tools URL extension to account for Windows using .tar.gz instead of .tar.zst.

3. src/feature-flags.ts:

   • Added a new feature flag CodeqlActionPythonDefaultIsToNotExtractStdlib.

4. src/init-action.ts:

   • Implemented logic to handle the new Python standard library extraction feature flag.

5. src/setup-codeql.ts:

   • Modified the useZstdBundle function to exclude Windows, as gzip performs better on this platform.

6. src/tools-features.ts:

   • Added a new ToolsFeature enum value PythonDefaultIsToNotExtractStdlib.

7. Package updates:

   • Updated various dependencies, including TypeScript-related packages and ESLint plugins.

8. CHANGELOG.md:

   • Added an entry for version 3.26.13 with "No user facing changes".

Possible Issues

• The change in Python standard library extraction behavior might affect some existing workflows. Careful testing and communication with users may be necessary.

Security Hotspots

None identified. The changes appear to be focused on performance improvements and feature additions rather than introducing potential security vulnerabilities.