build: update all github actions (main)

[angular-robot]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	patch	v6.0.1 → v6.0.2
actions/checkout	action	digest	8e8c483 → de0fac2
github/codeql-action	action	minor	v4.31.10 → v4.32.3

---

Release Notes

actions/checkout (actions/checkout)

v6.0.2

Compare Source

• Fix tag handling: preserve annotations and explicit fetch-tags by @​ericsciple in #​2356

github/codeql-action (github/codeql-action)

v4.32.3

Compare Source

• Added experimental support for testing connections to private package registries. This feature is not currently enabled for any analysis. In the future, it may be enabled by default for Default Setup. #​3466

v4.32.2

Compare Source

• Update default CodeQL bundle version to 2.24.1. #​3460

v4.32.1

Compare Source

• A warning is now shown in Default Setup workflow logs if a private package registry is configured using a GitHub Personal Access Token (PAT), but no username is configured. #​3422
• Fixed a bug which caused the CodeQL Action to fail when repository properties cannot successfully be retrieved. #​3421

v4.32.0

Compare Source

• Update default CodeQL bundle version to 2.24.0. #​3425

v4.31.11

Compare Source

• When running a Default Setup workflow with Actions debugging enabled, the CodeQL Action will now use more unique names when uploading logs from the Dependabot authentication proxy as workflow artifacts. This ensures that the artifact names do not clash between multiple jobs in a build matrix. #​3409
• Improved error handling throughout the CodeQL Action. #​3415
• Added experimental support for automatically excluding generated files from the analysis. This feature is not currently enabled for any analysis. In the future, it may be enabled by default for some GitHub-managed analyses. #​3318
• The changelog extracts that are included with releases of the CodeQL Action are now shorter to avoid duplicated information from appearing in Dependabot PRs. #​3403

---

• If you want to rebase/retry this PR, check this box

[angular-robot]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: .github/workflows/scorecard.yml

Command failed: bazel mod deps --lockfile_mode=update
2026/02/17 10:18:12 Downloading https://releases.bazel.build/8.5.1/release/bazel-8.5.1-linux-x86_64...
Extracting Bazel installation...
Starting local Bazel server (8.5.1) and connecting to it...
 no actions running
 no actions running
 no actions running
 no actions running
WARNING: For repository 'aspect_rules_js', the root module requires module version aspect_rules_js@2.9.1, but got aspect_rules_js@2.9.2 in the resolved dependency graph. Please update the version in your MODULE.bazel or set --check_direct_dependencies=off
WARNING: For repository 'tar.bzl', the root module requires module version tar.bzl@0.7.0, but got tar.bzl@0.8.1 in the resolved dependency graph. Please update the version in your MODULE.bazel or set --check_direct_dependencies=off
WARNING: For repository 'aspect_rules_ts', the root module requires module version aspect_rules_ts@3.8.3, but got aspect_rules_ts@3.8.4 in the resolved dependency graph. Please update the version in your MODULE.bazel or set --check_direct_dependencies=off
 no actions running
 no actions running
 no actions running
 no actions running
 no actions running
 no actions running
 no actions running
WARNING: Download from https://github.com/bazel-contrib/bazel-lib/releases/download/v3.0.0/bazel-lib-v3.0.0.tar.gz failed: class java.io.IOException GET returned 502 Bad Gateway or Proxy Error
INFO: Repository bazel_lib+ instantiated at:
  <builtin>: in <toplevel>
Repository rule http_archive defined at:
  /home/runner/.cache/bazel/_bazel_runner/a0f6903365cf8a25e13082bbd338c505/external/bazel_tools/tools/build_defs/repo/http.bzl:431:31: in <toplevel>
ERROR: /home/runner/.cache/bazel/_bazel_runner/a0f6903365cf8a25e13082bbd338c505/external/bazel_tools/tools/build_defs/repo/http.bzl:156:45: An error occurred during the fetch of repository 'bazel_lib+':
   Traceback (most recent call last):
	File "/home/runner/.cache/bazel/_bazel_runner/a0f6903365cf8a25e13082bbd338c505/external/bazel_tools/tools/build_defs/repo/http.bzl", line 156, column 45, in _http_archive_impl
		download_info = ctx.download_and_extract(
Error in download_and_extract: java.io.IOException: Error downloading [https://github.com/bazel-contrib/bazel-lib/releases/download/v3.0.0/bazel-lib-v3.0.0.tar.gz] to /home/runner/.cache/bazel/_bazel_runner/a0f6903365cf8a25e13082bbd338c505/external/bazel_lib+/temp11597935007009470498/bazel-lib-v3.0.0.tar.gz: GET returned 502 Bad Gateway or Proxy Error
ERROR: no such package '@@bazel_lib+//lib': java.io.IOException: Error downloading [https://github.com/bazel-contrib/bazel-lib/releases/download/v3.0.0/bazel-lib-v3.0.0.tar.gz] to /home/runner/.cache/bazel/_bazel_runner/a0f6903365cf8a25e13082bbd338c505/external/bazel_lib+/temp11597935007009470498/bazel-lib-v3.0.0.tar.gz: GET returned 502 Bad Gateway or Proxy Error