fix(ci): repair the two standing red checks (codeql version split + stale hypatia pin)

fix(ci): repair the two standing red checks (codeql version split + stale hypatia pin) #852