meta: group github/codeql-action/* Dependabot updates

[MattIPv4]

Description

As seen with #874 + #866 + #870 + #871, all parts of the codeql action need to be updated together in a single PR.

Validation

Valid config.

Related Issues

N/A

Check List

• I have read the Contributing Guidelines and made commit messages that follow the guideline.
• I have run node --run test and all tests passed.
• I have check code formatting with node --run format & node --run lint.
• I've covered new added functionality with unit tests if necessary.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
api-docs-tooling	Ready	Preview	Jul 1, 2026 4:35pm

[cursor]

PR Summary

Low Risk
Only changes Dependabot configuration; no runtime code or workflow logic is modified.

Overview
Adds a Dependabot group on the github-actions ecosystem so every github/codeql-action/* bump (e.g. init, autobuild, analyze, upload-sarif) lands in one PR instead of several parallel ones.

This mirrors the existing npm grouping pattern in the same file and targets the version skew that showed up across multiple separate CodeQL action update PRs.

^{Reviewed by Cursor Bugbot for commit 1ec4954. Bugbot is set up for automated code reviews on this repo. Configure here.}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 84.99%. Comparing base (a43c90f) to head (1ec4954).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #875   +/-   ##
=======================================
  Coverage   84.99%   84.99%           
=======================================
  Files         179      179           
  Lines       16407    16407           
  Branches     1483     1483           
=======================================
  Hits        13945    13945           
  Misses       2452     2452           
  Partials       10       10           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[github-actions]

api-links Generator

apilinks.json

Expected values to be strictly deep-equal:
+ actual - expected
... Skipped lines

  {
    'Agent.defaultMaxSockets': 'https://github.com/nodejs/node/blob/HEAD/lib/_http_agent.js#L291',
    'Buffer.alloc': 'https://github.com/nodejs/node/blob/HEAD/lib/buffer.js#L433',
    'Buffer.allocUnsafe': 'https://github.com/nodejs/node/blob/HEAD/lib/buffer.js#L447',
    'Buffer.allocUnsafeSlow': 'https://github.com/nodejs/node/blob/HEAD/lib/buffer.js#L459',
...
    'socket.addSourceSpecificMembership': 'https://github.com/nodejs/node/blob/HEAD/lib/dgram.js#L1043',
+   'socket.address': 'https://github.com/nodejs/node/blob/HEAD/lib/net.js#L860',
-   'socket.address': 'https://github.com/nodejs/node/blob/HEAD/lib/dgram.js#L932',
    'socket.bind': 'https://github.com/nodejs/node/blob/HEAD/lib/dgram.js#L284',
    'socket.bindSync': 'https://github.com/nodejs/node/blob/HEAD/lib/dgram.js#L437',
    'socket.close': 'https://github.com/nodejs/node/blob/HEAD/lib/dgram.js#L895',
+   'socket.connect': 'https://github.com/nodejs/node/blob/HEAD/lib/net.js#L1427',
-   'socket.connect': 'https://github.com/nodejs/node/blob/HEAD/lib/dgram.js#L481',
    'socket.connectSync': 'https://github.com/nodejs/node/blob/HEAD/lib/dgram.js#L514',
    'socket.destroySoon': 'https://github.com/nodejs/node/blob/HEAD/lib/net.js#L1002',
    'socket.disconnect': 'https://github.com/nodejs/node/blob/HEAD/lib/dgram.js#L607',
    'socket.dropMembership': 'https://github.com/nodejs/node/blob/HEAD/lib/dgram.js#L1028',
    'socket.dropSourceSpecificMembership': 'https://github.com/nodejs/node/blob/HEAD/lib/dgram.js#L1061',
...
    'socket.read': 'https://github.com/nodejs/node/blob/HEAD/lib/net.js#L985',
+   'socket.ref': 'https://github.com/nodejs/node/blob/HEAD/lib/net.js#L1778',
-   'socket.ref': 'https://github.com/nodejs/node/blob/HEAD/lib/dgram.js#L1118',
    'socket.remoteAddress': 'https://github.com/nodejs/node/blob/HEAD/lib/dgram.js#L944',
    'socket.resetAndDestroy': 'https://github.com/nodejs/node/blob/HEAD/lib/net.js#L947',
    'socket.resume': 'https://github.com/nodejs/node/blob/HEAD/lib/net.js#L976',
    'socket.send': 'https://github.com/nodejs/node/blob/HEAD/lib/dgram.js#L732',
    'socket.sendto': 'https://github.com/nodejs/node/blob/HEAD/lib/dgram.js#L621',
...
    'socket.setTypeOfService': 'https://github.com/nodejs/node/blob/HEAD/lib/net.js#L807',
+   'socket.unref': 'https://github.com/nodejs/node/blob/HEAD/lib/net.js#L1792',
-   'socket.unref': 'https://github.com/nodejs/node/blob/HEAD/lib/dgram.js#L1128',
    'socket[SymbolAsyncDispose]': 'https://github.com/nodejs/node/blob/HEAD/lib/dgram.js#L919',
    'socket[kAfterAsyncWrite]': 'https://github.com/nodejs/node/blob/HEAD/lib/net.js#L1136',
    'socket[kReinitializeHandle]': 'https://github.com/nodejs/node/blob/HEAD/lib/net.js#L1495',
    'string_decoder.StringDecoder': 'https://github.com/nodejs/node/blob/HEAD/lib/string_decoder.js#L60',
    'timers.clearImmediate': 'https://github.com/nodejs/node/blob/HEAD/lib/timers.js#L226',

orama-db Generator

File	Base	Head	Diff
orama-db.json	8.89 MB	8.89 MB	-1.08 KB (-0.01%)