build(deps-dev): bump all

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
cspell (source)	8.4.1 -> 8.5.0					devDependencies	minor
dorny/paths-filter	v3.0.1 -> v3.0.2					action	patch
github/codeql-action	47b3d88 -> 8a470fd					action	digest
returntocorp/semgrep	6b8e487 -> 7f817a2					container	digest

---

Release Notes

streetsidesoftware/cspell (cspell)

v8.5.0

Compare Source

Note: Version bump only for package cspell-monorepo

dorny/paths-filter (dorny/paths-filter)

v3.0.2

Compare Source

• Add config parameter for predicate quantifier

---

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[netlify]

👷 Deploy Preview for open-inf-is processing.

Name	Link
🔨 Latest commit	814133c
🔍 Latest deploy log	https://app.netlify.com/sites/open-inf-is/deploys/65e518ee9c6e36000844f136