[mrz1836]

What Changed

• Updated CodeQL action references in .github/workflows/codeql-analysis.yml from commit hash 87557b9c84dde89fdd9b10e88954ac2f4248e463 to 8aad20d150bbac5944a9f9d289da16a4b0d87c1e (v4.36.1 to v4.36.2) across three steps: Initialize CodeQL, Autobuild, and Perform CodeQL Analysis
• Updated Codecov action in .github/workflows/fortress-coverage.yml from commit hash e79a6962e0d4c0c17b229090214935d2e33f8354 to fb8b3582c8e4def4969c97caa2f19720cb33a72f (v6.0.1 to v7.0.0)
• Modified quote escaping in .github/workflows/pull-request-management.yml for jq default values, changing from escaped quotes (\") to regular quotes (") for FORK_LABEL, TRIAGE_LABEL, WELCOME_FORKS, and CLEAN_CACHE environment variables
• Updated Scorecard action in .github/workflows/scorecard.yml from commit hash 7030c9e16d2473a8a312d5fa3ecb37027ca9789d to 62697cfe11c2e2df2dd517cda7eefd5853793920 (v2.5.0 to v2.5.1)

Why It Was Necessary

• Keeping GitHub Actions dependencies up-to-date ensures access to latest security fixes, bug patches, and performance improvements
• The Codecov major version upgrade (v6 to v7) likely addresses the Node.js 20 deprecation warning mentioned in the comment above that step
• Fixing quote escaping in the pull request management workflow improves shell script correctness and maintainability

Testing Performed

• Verify that CodeQL analysis workflow runs successfully with the updated v4.36.2 actions
• Confirm that coverage upload to Codecov completes without errors using v7.0.0 and validates the Node.js version compatibility
• Validate that pull request management workflow correctly sets environment variables with the updated quote syntax

Impact / Risk

• Low Risk: These are patch/minor version updates to GitHub Actions that should maintain backward compatibility
• Potential Impact: The Codecov v7.0.0 upgrade is a major version change and may introduce behavioral differences in coverage reporting, though this is expected to resolve the Node.js deprecation warning
• No Breaking Changes: Workflow functionality remains the same; only implementation dependencies are updated

[mrz1836]

LGTM!