Refresh pinned GitHub Actions to latest stable release SHAs (#50)

* Initial plan

* Plan: upgrade pinned actions to latest stable SHAs

Agent-Logs-Url: https://github.com/advanced-security/codeql-development-template/sessions/39367a91-1edf-4c15-8d71-f920cb90b7fe

Co-authored-by: data-douser <70299490+data-douser@users.noreply.github.com>

* Upgrade actions/cache v4→v5.0.5, install-qlt main→v0.0.26; ignore codeql-pack.lock.yml

Agent-Logs-Url: https://github.com/advanced-security/codeql-development-template/sessions/39367a91-1edf-4c15-8d71-f920cb90b7fe

Co-authored-by: data-douser <70299490+data-douser@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: data-douser <70299490+data-douser@users.noreply.github.com>

Author: Copilot

.github/actions/setup-codeql-environment/action.yml

@@ -101,7 +101,7 @@ runs:
     - name: Cache QLT and CodeQL packages
       id: cache-codeql
       if: inputs.install-codeql == 'true'
-      uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
+      uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
       with:
         path: |
           ~/.qlt/packages
@@ -112,7 +112,7 @@ runs:
 
     - name: Install QLT (CodeQL Development Toolkit)
       id: install-qlt
-      uses: advanced-security/codeql-development-toolkit/.github/actions/install-qlt@da8bc39fd7dc759c8a528b7c2e7534675c06c62c # main
+      uses: advanced-security/codeql-development-toolkit/.github/actions/install-qlt@177984f7fc369b131c844b3a50d8d1e9a8e5223b # v0.0.26
       with:
         qlt-version: "latest"
         add-to-path: true
@@ -435,7 +435,7 @@ runs:
     - name: Cache language runtimes
       id: cache-runtimes
       if: inputs.install-language-runtimes == 'true'
-      uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
+      uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
       with:
         path: |
           ~/go/pkg/mod
@@ -493,7 +493,7 @@ runs:
     - name: Cache .NET packages
       if: inputs.install-language-runtimes == 'true' && contains(inputs.languages, 'csharp')
       id: cache-dotnet-packages
-      uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
+      uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
       with:
         path: |
           ~/.nuget/packages
@@ -527,7 +527,7 @@ runs:
     - name: Cache C++ build tools
       if: inputs.install-language-runtimes == 'true' && contains(inputs.languages, 'cpp')
       id: cache-cpp-tools
-      uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
+      uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
       with:
         path: |
           ~/.ccache

.gitignore

@@ -10,3 +10,6 @@ models-output.json
 *.testproj
 trap
 
+# Generated by `codeql pack install` (not committed)
+codeql-pack.lock.yml
+