chore(deps): update github actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
github/codeql-action	action	patch	v4.37.6 → v4.37.7
jdx/mise-action	action	patch	v4.2.4 → v4.2.5
open-telemetry/shared-workflows	action	minor	v0.6.0 → v0.7.0

---

Release Notes

github/codeql-action (github/codeql-action)

v4.37.7

Compare Source

• Update default CodeQL bundle version to 2.26.3. #​4085

jdx/mise-action (jdx/mise-action)

v4.2.5: : Resilient mise downloads with automatic retries

Compare Source

A small patch release that makes setup more resilient to transient network failures when downloading mise.

Fixed

Retry mise downloads after transient failures (#​597 by @​jdx)

The download helpers previously made a single curl or wget attempt, so a transient GitHub release-asset HTTP or TLS failure would abort setup before mise or any user command could run (see #​596).

Downloads now run through a retry wrapper that makes up to five attempts with a 2s pause between failures, logging a warning on each retry. This applies consistently to binary, checksum, signature, and version fetches. Checksum and minisign verification still run only after a successful download — never inside the retry loop — so integrity guarantees are unchanged.

Full Changelog: jdx/mise-action@v4.2.4...v4.2.5

open-telemetry/shared-workflows (open-telemetry/shared-workflows)

v0.7.0

Compare Source

What's Changed

• Collapse completed author reminders as outdated by @​trask in #​229
• Add controlled PR dashboard promotions by @​trask in #​234
• Add opentelemetry-specification to pull request dashboard by @​jack-berg in #​238
• Run every Scorecard invocation to completion by @​trask in #​237
• Retry transient GitHub API TLS failures by @​trask in #​241
• Route completed review replies by approval state by @​trask in #​243
• Classify review preambles as needing nothing from the author by @​trask in #​245
• Bypass Copilot review for manual reviewer handoffs by @​trask in #​240
• Tell the reviewer-feedback classifier who a comment addresses by @​trask in #​248

New Contributors

• @​jack-berg made their first contribution in #​238

Full Changelog: open-telemetry/shared-workflows@v0.6.0...v0.7.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 07:59 AM, only on Tuesday (* 0-7 * * 2)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.