Code scanning is a feature that you use to analyze the code in a GitHub repository to find security vulnerabilities and coding errors.

Create codeql-analysis.yml

…leak-program-members

Fix resource leak when import program members

…leak-program-members

Follows the PR treasure-data#114 bump up v0.6.25

…en-central

Get ready for Maven Central by adding sources and javadoc JARs

…abot-update

Update CodeQL actions to v2 and enable Dependabot for GitHub Actions

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 2 to 3.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v2...v3)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v2...v3)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

…thub_actions/actions/upload-artifact-3

Bump actions/upload-artifact from 2 to 3

…thub_actions/actions/checkout-3

Bump actions/checkout from 2 to 3

Bumps [actions/setup-java](https://github.com/actions/setup-java) from 1 to 3.
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](actions/setup-java@v1...v3)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

…thub_actions/actions/setup-java-3

Bump actions/setup-java from 1 to 3

…_artifacts

Update coverage location

Catch up to Java 11