Fix CodeQL workflow: update all codeql-action steps to v4.37.6 and add grouping

Co-authored-by: peterkir <250545+peterkir@users.noreply.github.com>

Author: Copilot

.github/dependabot.yml

@@ -14,6 +14,10 @@ updates:
     directory: "/"
     schedule:
       interval: "daily"
+    groups:
+      codeql-action:
+        patterns:
+        - "github/codeql-action*"
 
   # Maintain dependencies for maven
   - package-ecosystem: "maven"

.github/workflows/codeql.yml

@@ -57,12 +57,12 @@ jobs:
     - name: Set up Gradle
       uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb
     - name: Initialize CodeQL Analysis
-      uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e
+      uses: github/codeql-action/init@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6
       with:
         languages: 'java'
     - name: Build for CodeQL Analysis
       id: build
       run: |
         ./.github/scripts/codeql-build.sh
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e
+      uses: github/codeql-action/analyze@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6