Bump github/codeql-action from 1 to 2

Created by: dependabot[bot]

Bumps github/codeql-action from 1 to 2.

Changelog

Sourced from github/codeql-action's changelog.

Commits

• 03e2e3c Merge pull request #1065 from github/henrymercer/remove-extraneous-commit
• 3bb6c41 Remove an extraneous commit during the release process
• 38fc5eb Merge pull request #1064 from github/mergeback/v2.1.10-to-main-75b4f1c4
• a82d691 Merge branch 'main' into mergeback/v2.1.10-to-main-75b4f1c4
• ca6773e Update checked-in dependencies
• 8dbd965 Merge pull request #1063 from github/aeisenberg/contrib
• ef73e3b Update changelog and version after v2.1.10
• 75b4f1c Merge pull request #1062 from github/update-v2.1.10-7cf0ed5e
• d468c94 Update contributing.md
• 7c55012 Merge pull request #1039 from github/rasmuswl/pip-python2-fix
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)