chore(deps): update github/codeql-action action to v4.31.11 (#4853)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[github/codeql-action](https://redirect.github.com/github/codeql-action)
| action | patch | `v4.31.10` → `v4.31.11` |

---

### Release Notes

<details>
<summary>github/codeql-action (github/codeql-action)</summary>

###
[`v4.31.11`](https://redirect.github.com/github/codeql-action/releases/tag/v4.31.11)

[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v4.31.10...v4.31.11)

- When running a Default Setup workflow with [Actions debugging
enabled](https://docs.github.com/en/actions/how-tos/monitor-workflows/enable-debug-logging),
the CodeQL Action will now use more unique names when uploading logs
from the Dependabot authentication proxy as workflow artifacts. This
ensures that the artifact names do not clash between multiple jobs in a
build matrix.
[#&#8203;3409](https://redirect.github.com/github/codeql-action/pull/3409)
- Improved error handling throughout the CodeQL Action.
[#&#8203;3415](https://redirect.github.com/github/codeql-action/pull/3415)
- Added experimental support for automatically excluding [generated
files](https://docs.github.com/en/repositories/working-with-files/managing-files/customizing-how-changed-files-appear-on-github)
from the analysis. This feature is not currently enabled for any
analysis. In the future, it may be enabled by default for some
GitHub-managed analyses.
[#&#8203;3318](https://redirect.github.com/github/codeql-action/pull/3318)
- The changelog extracts that are included with releases of the CodeQL
Action are now shorter to avoid duplicated information from appearing in
Dependabot PRs.
[#&#8203;3403](https://redirect.github.com/github/codeql-action/pull/3403)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 8am every weekday" (UTC),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-specification).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi45Mi4xIiwidXBkYXRlZEluVmVyIjoiNDIuOTIuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIl19-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

.github/workflows/ossf-scorecard.yml

@@ -42,6 +42,6 @@ jobs:
       # Upload the results to GitHub's code scanning dashboard (optional).
       # Commenting out will disable upload of results to your repo's Code Scanning dashboard
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@cdefb33c0f6224e58673d9004f47f7cb3e328b89 # v4.31.10
+        uses: github/codeql-action/upload-sarif@19b2f06db2b6f5108140aeb04014ef02b648f789 # v4.31.11
         with:
           sarif_file: results.sarif