ci(deps): bump falkcorp/github-common/.github/workflows/reusable-ci.yml from 1.10.4 to 1.10.7

[dependabot]

Bumps falkcorp/github-common/.github/workflows/reusable-ci.yml from 1.10.4 to 1.10.7.

Release notes

Sourced from falkcorp/github-common/.github/workflows/reusable-ci.yml's releases.

v1.10.7

Draft release for v1.10.7 — will be published when ready.

Latest RC: v1.10.7-rc.2

🚀 What's Changed

📋 Commits since v1.10.5:

• fix(ci): move shellcheck disables inside run blocks so actionlint sees them (bfb912c)
• fix(ci): replace SC2015 A&&B||C pattern with if/then/else in reusable-burndown (e5f4ff9)
• chore: bump gha-release-* pins to consolidated v2.0.0 actions (483f3af)
• chore: migrate jdfalk/ refs to falkcorp/ org (77eb361)
• feat(burndown): add decompose job for [failed-batch-hard] tasks (2b9f83e)
• feat(burndown): add task_filter input + TASK_FILTER env var (cc57f80)
• deps(deps-dev): bump the dependencies group with 2 updates (fe22fc6)
• fix(burndown): reduce max-parallel from 4 to 2 to avoid rate limits (2d3ef22)
• fix(burndown): bump runner image to 483ee34 (safe-ai-util-mcp fixed) (89b4db4)
• docs: record reusable security workflow fix (8d38c68)
• fix(ci): use supported CodeQL mode for JavaScript (7068a41)
• deps(deps-dev): bump the dependencies group with 2 updates (2495152)
• ci: use advanced codeql security workflow (20e83cd)
• ci: add rust build helper commands (767acd4)
• ci: allow github code quality permission (dc09ca8)
• deps(deps): bump the dependencies group with 2 updates (cb52123)
• fix(setup-ci-app): serve form via localhost, open default browser (41c69d5)
• deps(deps): bump the dependencies group with 7 updates (603ad73)
• chore: pin burndown-runner-image to v1.7.0 (d558a336) (acbc1ec)
• feat(workflow): add reusable-triage-poll.yml (30-min async triage cron) (b3778b1)
• feat(burndown): --from-env, drop Python scripts, expose workflow inputs (2e30fe8)
• fix(burndown): switch triage+implementer to OpenAI, o4-mini for triage (3f152bd)
• chore(burndown): pin image to 1e06cc4 (binary pre-baked) (c9c38d4)
• feat(burndown): remove checkout+build steps, use pre-baked binary (236f956)
• fix(burndown): stage triage artifact and graceful aggregate on zero dispatch (42a1744)
• fix(burndown): hardcode runner image — env context unavailable in reusable container.image (1a52124)
• feat(burndown): add reusable per-repo burndown workflow (66b3fa6)
• deps(deps): bump the dependencies group with 17 updates (939d441)
• feat(scripts): add sync-gitignore.py for managed ignore block across repos (1e106b5)
• chore(gitignore): sync managed ignore block (64f69dc)
• fix(ci): handle missing artifacts dir in reusable-release cleanup step (aac93cb)
• fix(ci): update jdfalk/* action pins to current SHAs (fe1e308)
• feat(ci): add reusable-ci-minimal workflow with manual cache (cf20689)
• docs(config): default packages.registries to false; annotate github: true risk (e9e5ec4)
• fix(scaffold): default docker base to ubuntu:22.04 + drop --break-system-packages (ed36e5b)
• fix(release): replace secrets-in-if with env-bridge guard step (dd8fae1)
• fix(release): pass GH_TOKEN to Publish-to-GitHub-Packages step (dac2f69)
• deps(deps): bump the dependencies group with 7 updates (96c132f)
• feat(scaffold): add --with-docker, --with-reusable-workflows, --with-{changelog,todo,claudemd} (e94e3e9)
• fix(release): skip app-token mint when CI_APP_ID is unset; add migrate-loop (c46f978)
• fix(bootstrap): quote dependabot schedule.time; clear interaction-limits (d413e65)

... (truncated)

Commits

• bfb912c fix(ci): move shellcheck disables inside run blocks so actionlint sees them
• e5f4ff9 fix(ci): replace SC2015 A&&B||C pattern with if/then/else in reusable-burndown
• 483f3af chore: bump gha-release-* pins to consolidated v2.0.0 actions
• 77eb361 chore: migrate jdfalk/ refs to falkcorp/ org
• 2b9f83e feat(burndown): add decompose job for [failed-batch-hard] tasks
• cc57f80 feat(burndown): add task_filter input + TASK_FILTER env var
• fe22fc6 deps(deps-dev): bump the dependencies group with 2 updates
• 2d3ef22 fix(burndown): reduce max-parallel from 4 to 2 to avoid rate limits
• 89b4db4 fix(burndown): bump runner image to 483ee34 (safe-ai-util-mcp fixed)
• 8d38c68 docs: record reusable security workflow fix
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)