Bump the github-actions group with 2 updates

Bumps the github-actions group with 2 updates: [github/codeql-action](/~https://github.com/github/codeql-action) and [ruby/setup-ruby](/~https://github.com/ruby/setup-ruby).


Updates `github/codeql-action` from 2 to 3
- [Release notes](/~https://github.com/github/codeql-action/releases)
- [Changelog](/~https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@v2...v3)

Updates `ruby/setup-ruby` from 1.161.0 to 1.165.1
- [Release notes](/~https://github.com/ruby/setup-ruby/releases)
- [Commits](ruby/setup-ruby@8575951...360dc86)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: ruby/setup-ruby
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>

.github/workflows/codeql-analysis.yml

@@ -29,17 +29,17 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v2
+      uses: github/codeql-action/init@v3
       with:
         languages: ${{ matrix.language }}
 
     # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
     # If this step fails, then you should remove it and run the build manually (see below)
     - name: Autobuild
-      uses: github/codeql-action/autobuild@v2
+      uses: github/codeql-action/autobuild@v3
     #- run: |
     #   make bootstrap
     #   make release
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v2
+      uses: github/codeql-action/analyze@v3

.github/workflows/lint.yml

@@ -18,7 +18,7 @@ jobs:
       - name: checkout
         uses: actions/checkout@v4
 
-      - uses: ruby/setup-ruby@8575951200e472d5f2d95c625da0c7bec8217c42 # pin@v1.161.0
+      - uses: ruby/setup-ruby@360dc864d5da99d54fcb8e9148c14a84b90d3e88 # pin@v1.165.1
         with:
           bundler-cache: true