Name the CodeQL action release the pin points to

The CodeQL workflow pins github/codeql-action to 1c5b6756, commented
as v4. v4 is a moving tag and now points to 2892aa5e (v4.38.2), so
zizmor (ref-version-mismatch) reports that the comment does not match
the pin. 1c5b6756 is v4.38.1, and the comments now say so. The pinned
commit stays the same; Dependabot updates it, and the comment with it.

Author: abashev

.github/workflows/codeql-analysis.yml

@@ -37,7 +37,7 @@ jobs:
           java-version: '21'
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4
+        uses: github/codeql-action/init@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1
         with:
           languages: ${{ matrix.language }}
           build-mode: ${{ matrix.build-mode }}
@@ -48,6 +48,6 @@ jobs:
         run: ./gradlew --no-build-cache clean compileJava compileTestJava
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4
+        uses: github/codeql-action/analyze@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1
         with:
           category: "/language:${{matrix.language}}"