Add dependabot updates for Gradle, CodeQL scanning, prevent dynamic maven deps#41

bioball merged 1 commit intoapple:mainapple/pkl-package-docs:mainfrom

bioball:security-hardeningbioball/pkl-package-docs:security-hardeningCopy head branch name to clipboard