Merge remote-tracking branch 'mirror-gh'

Author: offa

.github/workflows/codeql.yml

@@ -23,7 +23,7 @@ jobs:
       - name: Setup
         run: script/ci_setup.sh
       - name: CodeQL Initialization
-        uses: github/codeql-action/init@v4
+        uses: github/codeql-action/init@v4.37.6
         with:
           languages: cpp, actions
           queries: +security-and-quality
@@ -32,4 +32,4 @@ jobs:
             paths-ignore:
             - 'googletest/**'
       - name: CodeQL Analysis
-        uses: github/codeql-action/analyze@v4
+        uses: github/codeql-action/analyze@v4.37.6