chore(deps): update sonarqube support dependencies

| datasource  | package                      | from     | to       |
| ----------- | ---------------------------- | -------- | -------- |
| github-tags | github/codeql-action         | v3.25.13 | v3.25.14 |
| github-tags | renovatebot/pre-commit-hooks | 37.440.4 | 38.5.0   |

.github/workflows/scorecard.yaml

@@ -45,6 +45,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@2d790406f505036ef40ecba973cc774a50395aac # v3.25.13
+        uses: github/codeql-action/upload-sarif@5cf07d8b700b67e235fbb65cbc84f69c0cf10464 # v3.25.14
         with:
           sarif_file: results.sarif

.pre-commit-config.yaml

@@ -48,6 +48,6 @@ repos:
     hooks:
       - id: golangci-lint
   - repo: https://github.com/renovatebot/pre-commit-hooks
-    rev: 37.440.4
+    rev: 38.5.0
     hooks:
       - id: renovate-config-validator