dependabot: base image versions are not digest refreshes - #533

Feature flags do not specify a default CLI version. Falling back to the CLI version shipped with the Action. This is 2.23.5.

This run of the CodeQL Action does not have permission to access the CodeQL Action API endpoints. As a result, it will not be opted into any experimental features. This could be because the Action is running on a pull request from a fork. If not, please ensure the workflow has at least the 'security-events: read' permission. Details: Resource not accessible by integration - https://docs.github.com/rest