chore: pin codeql-action to SHA and remove release trigger for v4_development

[pmathew92]

Summary

Two CI fixes on v4_development so the 4.0.0 release PR doesn't regress main's hardening:

1. Pin github/codeql-action/* to a commit SHA. v4 used bare @v4 tags for init / autobuild / analyze, which would have replaced main's SHA-pinned versions on merge. Now pinned to 8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2 (matching main), consistent with the other SHA-pinned actions in this workflow.

2. Remove the release trigger for v4_development. Removed github.event.pull_request.base.ref == 'v4_development' from release the job's .

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 2326a09d-de37-400b-98c0-48c13882fd6e

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch fix/ci-pins-release-trigger

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[coderabbitai]

Caution

Review failed

An error occurred during the review process. Please try again later.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch fix/ci-pins-release-trigger

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}