feat: Update CodeQL (hiero-ledger#584)

Signed-off-by: aceppaluni <aceppaluni@gmail.com>
Signed-off-by: Daniel Ntege <danientege785@gmail.com>
Co-authored-by: Daniel Ntege <danientege785@gmail.com>
Signed-off-by: Ntege Daniel <danientege785@gmail.com>

Author: aceppaluni

.github/scripts/helpers/logger.js

@@ -45,4 +45,4 @@ export function createDelegatingLogger() {
     log: (...args) => getLogger().log(...args),
     error: (...args) => getLogger().error(...args),
   };
-}
+}

.github/workflows/codeql.yml

@@ -50,14 +50,14 @@ jobs:
           node-version: 20
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3
+        uses: github/codeql-action/init@d1ba80a13dd99fba24a470575428917156a28b43 # v4.37.5
         with:
           languages: ${{ matrix.language }}
           build-mode: ${{ matrix.build-mode }}
           queries: security-extended
           dependency-caching: true
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3
+        uses: github/codeql-action/analyze@d1ba80a13dd99fba24a470575428917156a28b43 # v4.37.5
         with:
           category: "/language:${{ matrix.language }}"

.github/workflows/on-pr-update.yml

@@ -33,10 +33,16 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           persist-credentials: false
+      - name: Debug logger export
+        run: |
+          echo "=== logger files ==="
+          find .github -name "logger.js" -print
 
+          echo "=== logger contents ==="
+          sed -n '1,120p' .github/scripts/helpers/logger.js
       - name: Run Bot
         uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
-            const script = require('./.github/scripts/bot-on-pr-update.js');
-            await script({ github, context });
+            const script = await import('./.github/scripts/bot-on-pr-update.js');
+            await script.default({ github, context });

.github/workflows/on-pr.yml

@@ -36,9 +36,16 @@ jobs:
         with:
           persist-credentials: false
 
+      - name: Debug logger export
+        run: |
+          echo "=== logger files ==="
+          find .github -name "logger.js" -print
+
+          echo "=== logger contents ==="
+          sed -n '1,120p' .github/scripts/helpers/logger.js
       - name: Run Bot
         uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
-            const script = require('./.github/scripts/bot-on-pr-open.js');
-            await script({ github, context });
+            const script = await import('./.github/scripts/bot-on-pr-open.js');
+            await script.default({ github, context });