Bump github/codeql-action from 2.3.5 to 2.3.6 (#6786)

Bumps [github/codeql-action](https://github.com/github/codeql-action)
from 2.3.5 to 2.3.6.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/83f0fe6c4988d98a455712a27f0255212bba9bd4"><code>83f0fe6</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/1713">#1713</a>
from github/update-v2.3.6-96f284028</li>
<li><a
href="https://github.com/github/codeql-action/commit/5c8f4be0e98de2abecc7af538676cf2384a881fc"><code>5c8f4be</code></a>
Update changelog for v2.3.6</li>
<li><a
href="https://github.com/github/codeql-action/commit/96f284028262d223858647b5680642a84608cc87"><code>96f2840</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/1711">#1711</a>
from github/henrymercer/improve-supported-versions-u...</li>
<li><a
href="https://github.com/github/codeql-action/commit/89c4c9e65cd3faf5d84dba8f43bb308fae40336d"><code>89c4c9e</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/1678">#1678</a>
from github/henrymercer/default-setup-safeguarding</li>
<li><a
href="https://github.com/github/codeql-action/commit/26f16a5e63c7bebdcf17b2a6d1c7fc1861a0c611"><code>26f16a5</code></a>
Rephrase the still supported calculation to make it clearer</li>
<li><a
href="https://github.com/github/codeql-action/commit/955f8596aed9d71c454c46b251302b150bc1adcb"><code>955f859</code></a>
Fix sign error</li>
<li><a
href="https://github.com/github/codeql-action/commit/e7cff66ce1871fdb3b9cdf054e5550485c0b8d12"><code>e7cff66</code></a>
Fix push</li>
<li><a
href="https://github.com/github/codeql-action/commit/afdba763260a797d16bcce8e498641fefd604731"><code>afdba76</code></a>
Wait a week before dropping support for end of life GHES versions</li>
<li><a
href="https://github.com/github/codeql-action/commit/07e43a22080d8828875556729afa669d200b9515"><code>07e43a2</code></a>
Open PR with gh CLI</li>
<li><a
href="https://github.com/github/codeql-action/commit/9632771630d75f08faa5a3b6f5afc9d44a6a65b0"><code>9632771</code></a>
Address review comments</li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/0225834cc549ee0ca93cb085b92954821a145866...83f0fe6c4988d98a455712a27f0255212bba9bd4">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=2.3.5&new-version=2.3.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

.github/workflows/scorecards-analysis.yml

@@ -51,6 +51,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@0225834cc549ee0ca93cb085b92954821a145866
+        uses: github/codeql-action/upload-sarif@83f0fe6c4988d98a455712a27f0255212bba9bd4
         with:
           sarif_file: results.sarif