And yet I received an update from
uses: github/codeql-action/init@8a06050a8c0348fb4738f28e0cfbb6727cf054ce # v4.31.2
to uses: github/codeql-action/init@0499de31b99561a6d14a36a5f662c2a54f91beee # v4.31.2
So someone must've moved the tag, even though that release is supposed to be immutable.
https://github.com/github/codeql-action/releases replies(1):