diff --git a/template/.github/{% if include_actions %}workflows{% endif %}/{% if repo_visibility == 'public' %}codeql.yml{% endif %}.jinja b/template/.github/{% if include_actions %}workflows{% endif %}/{% if repo_visibility == 'public' %}codeql.yml{% endif %}.jinja
index 8e7b855..afd4b7e 100644
--- a/template/.github/{% if include_actions %}workflows{% endif %}/{% if repo_visibility == 'public' %}codeql.yml{% endif %}.jinja	
+++ b/template/.github/{% if include_actions %}workflows{% endif %}/{% if repo_visibility == 'public' %}codeql.yml{% endif %}.jinja	
@@ -32,7 +32,7 @@ jobs:
         uses: actions/checkout@v7.0.1
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v4.38.2
+        uses: github/codeql-action/init@v4.38.3
         with:
           languages: python
           # Scopes the scan to shipped code. Without it the default suite reads test