chore(deps): bump the github-actions-dependencies group with 2 updates (#1173)

Bumps the github-actions-dependencies group with 2 updates: [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action).


Updates `anthropics/claude-code-action` from 1.0.219 to 1.0.222
- [Release notes](https://github.com/anthropics/claude-code-action/releases)
- [Commits](anthropics/claude-code-action@v1.0.219...v1.0.222)

Updates `github/codeql-action/upload-sarif` from 4.37.9 to 4.38.0
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@cdf488f...b96794f)

---
updated-dependencies:
- dependency-name: anthropics/claude-code-action
  dependency-version: 1.0.222
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions-dependencies
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

.github/workflows/claude-pr-review.yml

@@ -37,7 +37,7 @@ jobs:
           fetch-depth: 0
 
       - name: Claude review (dependency updates)
-        uses: anthropics/claude-code-action@v1.0.219
+        uses: anthropics/claude-code-action@v1.0.222
 
         env:
           GH_TOKEN: ${{ github.token }}
@@ -98,7 +98,7 @@ jobs:
           check-latest: true
 
       - name: Claude review (general)
-        uses: anthropics/claude-code-action@v1.0.219
+        uses: anthropics/claude-code-action@v1.0.222
         env:
           GH_TOKEN: ${{ github.token }}
         with:

.github/workflows/test.yml

@@ -237,7 +237,7 @@ jobs:
       # block a publish over ancillary reporting.
       if: ${{ (success() || failure()) && inputs.upload_sarif && hashFiles('snyk-code.sarif') != '' }}
       continue-on-error: true
-      uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9
+      uses: github/codeql-action/upload-sarif@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4.38.0
       with:
         sarif_file: snyk-code.sarif
         category: snyk-code