Update version of codeql-analysis.yml

[tvqphuoc01]

codeQL v1 was deprecated: https://github.blog/changelog/2023-01-18-code-scanning-codeql-action-v1-is-now-deprecated/

CodeQL v2 will be deprecate soon so we will move to v3 -> https://github.blog/changelog/2024-01-12-code-scanning-deprecation-of-codeql-action-v2/

[gabriel-tessier]

Maybe we can use dependabot to keep actions up to date.

https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot

[tvqphuoc01]

@gabriel-tessier seem like we don't have permission to config dependabot 🤔

[gabriel-tessier]

@gabriel-tessier seem like we don't have permission to config dependabot 🤔

Thanks for sharing about dependabot, it's not really a big a deal, we can always do it manually if it change one time each n years.

[gabriel-tessier]

@tvqphuoc01
In the first review I commented about the latest checkout version that is now v4. You marked my comment as resolved but I still see v3 and there's no new commit.
Did I mess something or there's a reason to stick with v3?