ci: adds a codeql actions group to the dependabot configuration

[Vincent Biret (baywet)]

follow up to #8070

[Copilot]

🟢 Approval recommended

The configuration is valid; only the PR metadata needs minor clarification.

Pull request overview

Adds Dependabot grouping for related GitHub Actions updates.

Changes:

• Groups CodeQL sub-actions.
• Groups artifact upload/download actions.

File summaries

File	Description
.github/dependabot.yml	Defines CodeQL and artifact action update groups.

Review details

• Files reviewed: 1/1 changed files
• Comments generated: 1
• Review effort level: Balanced

---

💡 Add a code-review agent skill for context-aware, tailored reviews. Learn more in the docs.

[github-actions]

MAF Automated Review — Iteration 1

Result: No findings
Scope: full PR (2 commit(s)): 7f2baa71333f, 57413c83192a
Model: gpt-5.6-sol-fast

Overview

This PR groups CodeQL and artifact action updates within the existing weekly Dependabot configuration. The patterns match dependencies used in the repository, the workflows retain immutable SHA pins, and generated changes remain subject to code-owner review and relevant PR workflows. No concrete runtime, compatibility, or security defect was established.

Reviewed the supplied pull-request change set across correctness, security/reliability, architecture, and failure behavior.
No publishable findings remained after source verification for this scope.

[Copilot]

🔵 Needs a closer look

The title and description incorrectly characterize the artifact-action change as a CodeQL update.

Review details

Suppressed comments (1)

.github/dependabot.yml:93

• The PR title says this adds a CodeQL Actions group, but that group was already introduced by merged PR #8070; this change adds an artifact-actions group instead. Please update the title and description to identify the artifact grouping so the review and repository history accurately describe the change.

      artifact-actions:
        patterns:
          - "actions/upload-artifact"
          - "actions/download-artifact"

• Files reviewed: 1/1 changed files
• Comments generated: 0 new
• Review effort level: Balanced