And yet I received an update from

        uses: github/codeql-action/init@8a06050a8c0348fb4738f28e0cfbb6727cf054ce # v4.31.2

to

        uses: github/codeql-action/init@0499de31b99561a6d14a36a5f662c2a54f91beee # v4.31.2

So someone must've moved the tag, even though that release is supposed to be immutable. https://github.com/github/codeql-action/releases