build(deps-dev): bump conventional-changelog-conventionalcommits (#963) #1105

	# refs https://github.com/github/codeql-action
	name: "Code Scanning - Action"

	on:
	push:
	branches:
	- master
	pull_request:
	branches:
	- master

	jobs:
	CodeQL-Build:
	runs-on: ubuntu-latest

	steps:
	- name: Checkout repository
	uses: actions/checkout@v3
	with:
	fetch-depth: 0

	# If this run was triggered by a pull request event then checkout
	# the head of the pull request instead of the merge commit.
	# Only include this step if you are running this workflow on pull requests.
	- run: git checkout HEAD^2
	if: ${{ github.event_name == 'pull_request' }}
	- name: Set up JDK 11
	uses: actions/setup-java@v3
	with:
	distribution: 'temurin'
	java-version: 11
	cache: gradle
	- name: Gradle Wrapper Validation
	uses: gradle/wrapper-validation-action@v1

	- name: Build
	run: \|
	./gradlew spotbugsMain
	- name: Upload SARIF file
	uses: github/codeql-action/upload-sarif@v1
	with:
	# Path to SARIF file relative to the root of the repository
	sarif_file: build/reports/spotbugs/main.sarif

Provide feedback