diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index e5aa114..07cfccb 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -37,6 +37,6 @@ jobs:
       # process, the preload bridge, and the React renderer are all in scope, and
       # none of it needs compiling first for CodeQL to read it.
       - name: Analyze
-        uses: github/codeql-action/analyze@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4
+        uses: github/codeql-action/analyze@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4
         with:
           category: /language:javascript-typescript