Update github/codeql-action action to v3.26.13

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
github/codeql-action	action	patch	v3.26.12 -> v3.26.13	v3.27.0

---

Release Notes

github/codeql-action (github/codeql-action)

v3.26.13

Compare Source

---

Configuration

📅 Schedule: Branch creation - "* 0-4 * * 3" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

[puLL-Merge] - github/[email protected]

Description

This PR introduces several changes to the CodeQL action, including updates to dependencies, modifications to workflow files, and additions to feature flags. The main focus seems to be on improving Python standard library extraction behavior and adjusting the Zstandard (zstd) bundle usage.

Changes

Changes

1. .github/workflows/__zstd-bundle-fallback.yml and .github/workflows/__zstd-bundle.yml:

   • Removed Windows from the fallback workflow
   • Adjusted the order of operating systems in the bundle workflow
   • Added a check for the expected file extension based on the runner OS

2. lib/feature-flags.js and src/feature-flags.ts:

   • Added a new feature flag CodeqlActionPythonDefaultIsToNotExtractStdlib

3. src/init-action.ts:

   • Implemented logic to handle the new Python standard library extraction feature flag

4. src/setup-codeql.ts:

   • Modified the useZstdBundle function to exclude Windows platform

5. src/tools-features.ts:

   • Added a new tools feature PythonDefaultIsToNotExtractStdlib

6. Various dependency updates in package.json and node_modules:

   • Updated versions of multiple packages, including TypeScript-related dependencies

7. CHANGELOG.md:

   • Added an entry for version 3.26.13 with no user-facing changes

Possible Issues

The change to exclude Windows from using the zstd bundle in src/setup-codeql.ts might impact performance on Windows systems. This decision seems to be based on testing results, but it's worth monitoring for any unexpected consequences.

Security Hotspots

There are no apparent security hotspots in this change.