Bump github/codeql-action from 4.37.5 to 4.37.6

[dependabot]

Bumps github/codeql-action from 4.37.5 to 4.37.6.

Release notes

Sourced from github/codeql-action's releases.

v4.37.6

• Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to .github/codeql-config.yml to align it with the suggested path that is used elsewhere. #4070

Changelog

Sourced from github/codeql-action's changelog.

4.37.6 - 04 Aug 2026

• Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to .github/codeql-config.yml to align it with the suggested path that is used elsewhere. #4070

Commits

• 5595cca Merge pull request #4071 from github/update-v4.37.6-6a9359a1b
• ec9c757 Add change note for PR 4070
• 45c8742 Update changelog for v4.37.6
• 6a9359a Merge pull request #4070 from github/mbg/remote-address/change-file-default
• 065cdc0 Change DEFAULT_CONFIG_FILE_NAME
• f99dd5a Merge pull request #4066 from github/dependabot/npm_and_yarn/js-yaml-5.2.2
• 1804b21 Merge pull request #4068 from github/mergeback/v4.37.5-to-main-d1ba80a1
• 3020a2f Rebuild
• 93c3a5a Update changelog and version after v4.37.5
• 266c7bd Rebuild
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Compatibility matrix for picocsv

		HEAD
java-io-util	v0.0.38	🔥
java-sql-util	v1.0.7	✅
java-console-properties	v1.4.1	🔥
sasquatch	v1.1.2	🔥

java-io-util @ v0.0.38 -> HEAD

[ERROR] Failed to execute goal on project java-io-picocsv: Could not resolve dependencies for project com.github.nbbrd.java-io-util:java-io-picocsv:jar:0.0.38
[ERROR] dependency: com.github.nbbrd.picocsv:picocsv:jar:2.6.1-SNAPSHOT (compile)
[ERROR] 	Could not find artifact com.github.nbbrd.picocsv:picocsv:jar:2.6.1-SNAPSHOT
[ERROR] -> [Help 1]
[ERROR] 
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR] 
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/DependencyResolutionException
[ERROR] 
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <args> -rf :java-io-picocsv

java-console-properties @ v1.4.1 -> HEAD

[ERROR] Failed to execute goal on project java-console-properties: Could not resolve dependencies for project com.github.nbbrd.java-console-properties:java-console-properties:jar:1.4.1
[ERROR] dependency: com.github.nbbrd.picocsv:picocsv:jar:2.6.1-SNAPSHOT (compile?)
[ERROR] 	Could not find artifact com.github.nbbrd.picocsv:picocsv:jar:2.6.1-SNAPSHOT
[ERROR] -> [Help 1]
[ERROR] 
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR] 
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/DependencyResolutionException

sasquatch @ v1.1.2 -> HEAD

[ERROR] Failed to execute goal on project sasquatch-tck: Could not resolve dependencies for project com.github.nbbrd.sasquatch:sasquatch-tck:jar:1.1.2
[ERROR] dependency: com.github.nbbrd.picocsv:picocsv:jar:2.6.1-SNAPSHOT (compile)
[ERROR] 	Could not find artifact com.github.nbbrd.picocsv:picocsv:jar:2.6.1-SNAPSHOT
[ERROR] -> [Help 1]
[ERROR] Failed to execute goal on project sasquatch-sassy: Could not resolve dependencies for project com.github.nbbrd.sasquatch:sasquatch-sassy:jar:1.1.2
[ERROR] dependency: com.github.nbbrd.picocsv:picocsv:jar:2.6.1-SNAPSHOT (test)
[ERROR] 	Could not find artifact com.github.nbbrd.picocsv:picocsv:jar:2.6.1-SNAPSHOT
[ERROR] -> [Help 1]
[ERROR] Failed to execute goal on project sasquatch-parso: Could not resolve dependencies for project com.github.nbbrd.sasquatch:sasquatch-parso:jar:1.1.2
[ERROR] dependency: com.github.nbbrd.picocsv:picocsv:jar:2.6.1-SNAPSHOT (test)
[ERROR] 	Could not find artifact com.github.nbbrd.picocsv:picocsv:jar:2.6.1-SNAPSHOT
[ERROR] -> [Help 1]
[ERROR] Failed to execute goal on project sasquatch-ri: Could not resolve dependencies for project com.github.nbbrd.sasquatch:sasquatch-ri:jar:1.1.2
[ERROR] dependency: com.github.nbbrd.picocsv:picocsv:jar:2.6.1-SNAPSHOT (test)
[ERROR] 	Could not find artifact com.github.nbbrd.picocsv:picocsv:jar:2.6.1-SNAPSHOT
[ERROR] -> [Help 1]
[ERROR] Failed to execute goal on project sasquatch-biostatmatt: Could not resolve dependencies for project com.github.nbbrd.sasquatch:sasquatch-biostatmatt:jar:1.1.2
[ERROR] dependency: com.github.nbbrd.picocsv:picocsv:jar:2.6.1-SNAPSHOT (test)
[ERROR] 	Could not find artifact com.github.nbbrd.picocsv:picocsv:jar:2.6.1-SNAPSHOT
[ERROR] -> [Help 1]
[ERROR] Failed to execute goal on project sasquatch-cli: Could not resolve dependencies for project com.github.nbbrd.sasquatch:sasquatch-cli:jar:1.1.2
[ERROR] dependency: com.github.nbbrd.picocsv:picocsv:jar:2.6.1-SNAPSHOT (compile)
[ERROR] 	Could not find artifact com.github.nbbrd.picocsv:picocsv:jar:2.6.1-SNAPSHOT
[ERROR] -> [Help 1]
[ERROR] 
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR] 
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/DependencyResolutionException
[ERROR] 
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <args> -rf :sasquatch-tck