This is the earliest CodeQL version supported by GHES. Bumping to this version resolves some flaky tests caused by the "We still have not reached idleness" deadlock, as this deadlock is fixed in 2.4.5.
windows-2019
Build tracing currently does not support Windows 2022, so use `windows-2019` instead of`windows-latest`.
security-events: write
This is not necessary.