[#4369] Update checkout@v6; use build-mode: none

GitHub now supports CodeQL scans of C and C++ code without building
the executable.

https://github.blog/changelog/2025-10-14-codeql-scanning-rust-and-c-c-without-builds-is-now-generally-available/

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 5a739525b5d741c88e565564635e449e87ad82ea..a40014722abcb688a7ce9986155a365e1a58bfb6 100644 (file)
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -21,25 +21,18 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        language: [ 'cpp', 'python' ]
+        language: [ 'cpp', 'python', 'actions' ]
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v4
+      # Was v6.0.2 as of 2026-02-26.
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd 
 
     - name: Initialize CodeQL
       uses: github/codeql-action/init@v4
       with:
         languages: ${{ matrix.language }}
-
-    - name: Install dependencies
-      run: |
-        ./hammer.py prepare-system -p local -w all
-
-    - name: Build Kea
-      run: |
-        meson setup build --auto-features enabled -D fuzz=enabled -D tests=enabled -D cpp_std=c++20
-        meson compile -C build
+        build-mode: none
 
     - name: Perform CodeQL Analysis
       uses: github/codeql-action/analyze@v4