build: update all non-major dependencies

[angular-robot]

This PR contains the following updates:

Package	Type	Update	Change
github/codeql-action	action	patch	v3.28.17 -> v3.28.18
renovate (source)	dependencies	minor	40.13.0 -> 40.14.0

---

Release Notes

github/codeql-action (github/codeql-action)

v3.28.18

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.18 - 16 May 2025

• Update default CodeQL bundle version to 2.21.3. #​2893
• Skip validating SARIF produced by CodeQL for improved performance. #​2894
• The number of threads and amount of RAM used by CodeQL can now be set via the CODEQL_THREADS and CODEQL_RAM runner environment variables. If set, these environment variables override the threads and ram inputs respectively. #​2891

See the full CHANGELOG.md for more information.

renovatebot/renovate (renovate)

v40.14.0

Compare Source

Features

• manager/mise: support astro, ccache and redis (#​35989) (f187692)

v40.13.1

Compare Source

Bug Fixes

• deps: update ghcr.io/renovatebot/base-image docker tag to v9.65.1 (main) (#​35990) (941ea58)

Miscellaneous Chores

• deps: update dependency @​semantic-release/exec to v7.1.0 (main) (#​35988) (3c78745)
• deps: update dependency eslint-config-prettier to v10.1.5 (main) (#​35972) (96ecbe7)
• deps: update github/codeql-action action to v3.28.18 (main) (#​35981) (4cf8139)

---

Configuration

📅 Schedule: Branch creation - "after 10:00pm every weekday,before 5:00am every weekday,every weekend" in timezone America/Tijuana, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.