Merge pull request #703 from crazy-max/group-codeql-dependabot-updates

chore: group codeql dependabot updates

.github/dependabot.yml

@@ -10,6 +10,9 @@ updates:
       crazy-max-dot-github:
         patterns:
           - "crazy-max/.github/*"
+      codeql-actions:
+        patterns:
+          - "github/codeql-action/*"
     labels:
       - "dependencies"
       - "bot"

dist/licenses.txt

@@ -4410,12 +4410,11 @@ THE SOFTWARE.
 
 -----------
 
-The following npm packages may be included in this product:
+The following npm package may be included in this product:
 
  - csv-parse@7.0.0
- - csv-parse@7.0.1
 
-These packages each contain the following license:
+This package contains the following license:
 
 The MIT License (MIT)
 

package.json

@@ -29,7 +29,7 @@
     "@actions/github": "^9.1.1",
     "@docker/actions-toolkit": "^0.92.0",
     "@renovate/pep440": "^1.0.0",
-    "csv-parse": "^7.0.1",
+    "csv-parse": "^7.0.0",
     "handlebars": "^4.7.9",
     "moment": "^2.30.1",
     "moment-timezone": "^0.6.2",

yarn.lock

@@ -2844,13 +2844,6 @@ __metadata:
   languageName: node
   linkType: hard
 
-"csv-parse@npm:^7.0.1":
-  version: 7.0.1
-  resolution: "csv-parse@npm:7.0.1"
-  checksum: 10/5c914f01181dbb381068b98e17b49361d853faa95db3e8e82bc96b6a0de5313ecc8325a77db35ff66644d7747099965ba3167ec21bd9ce4500edf21b5bdd49bf
-  languageName: node
-  linkType: hard
-
 "debug@npm:4, debug@npm:^4.3.1, debug@npm:^4.3.2, debug@npm:^4.3.4":
   version: 4.3.4
   resolution: "debug@npm:4.3.4"
@@ -2906,7 +2899,7 @@ __metadata:
     "@typescript-eslint/parser": "npm:^8.56.1"
     "@vitest/coverage-v8": "npm:^4.0.18"
     "@vitest/eslint-plugin": "npm:^1.6.9"
-    csv-parse: "npm:^7.0.1"
+    csv-parse: "npm:^7.0.0"
     dotenv: "npm:^17.3.1"
     esbuild: "npm:^0.28.0"
     eslint: "npm:^9.39.3"