ci: update GitHub Actions workflows

- Pin cake-build/cake-action to v3.0.1 for reproducible builds
- Update macOS runner to macos-15-intel (add TODO for macos-15-arm64)
- Upgrade CodeQL actions from v2 to v4
- Update actions/checkout from v3 to v5

Author: devlead

.github/workflows/build.yml

@@ -24,7 +24,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [windows-latest, macos-latest, ubuntu-latest]
+        os: [windows-latest, macos-15-intel ubuntu-latest] # TODO: Add macos-15-arm64, native tests currently only run on x64
     steps:
       - name: Get the sources
         uses: actions/checkout@v5
@@ -45,7 +45,7 @@ jobs:
 
       - name: Run Cake script
         id: build-cake
-        uses: cake-build/cake-action@master
+        uses: cake-build/cake-action@v3.0.1
         env:
           AZURE_DEVOPS_NUGET_API_KEY: ${{ secrets.AZURE_DEVOPS_NUGET_API_KEY }}
           AZURE_DEVOPS_NUGET_API_URL: ${{ secrets.AZURE_DEVOPS_NUGET_API_URL }}
@@ -55,7 +55,7 @@ jobs:
 
       - name: Validate Integration Tests
         id: validate-cake
-        uses: cake-build/cake-action@master
+        uses: cake-build/cake-action@v3.0.1
         with:
           script-path: tests/integration/Cake.Common/Build/GitHubActions/ValidateGitHubActionsProvider.cake
           cake-version: tool-manifest

.github/workflows/codeql-analysis.yml

@@ -20,17 +20,17 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v3
+      uses: actions/checkout@v5
       with:
         fetch-depth: 0
 
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v2
+      uses: github/codeql-action/init@v4
       with:
         languages: ${{ matrix.language }}
 
     - name: Autobuild
-      uses: github/codeql-action/autobuild@v2
+      uses: github/codeql-action/autobuild@v4
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v2
+      uses: github/codeql-action/analyze@v4

.github/workflows/release.yml

@@ -49,7 +49,7 @@ jobs:
 
 
       - name: Build & Release Cake 
-        uses: cake-build/cake-action@master
+        uses: cake-build/cake-action@v3.0.1
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           CAKE_GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}