CI: Update OS images, Do not persist credentials, Checkout v4 (#4071)

* Update OS images, Do not persist credentials, Checkout v4.

* Do not persist credentials in issue-check.

.github/workflows/build.yml

@@ -35,7 +35,7 @@ env:
 
 jobs:
   build:
-    runs-on: windows-latest
+    runs-on: windows-2025
 
     steps:
       - name: Print inputs
@@ -50,6 +50,7 @@ jobs:
         if: github.event.inputs.ref == ''
         with:
           submodules: recursive
+          persist-credentials: false
 
       - name: Checkout specific build and submodules
         uses: actions/checkout@v4
@@ -57,6 +58,7 @@ jobs:
         with:
           ref: ${{ github.event.inputs.ref }}
           submodules: recursive
+          persist-credentials: false
 
       - name: Add MSBuild to PATH
         uses: microsoft/setup-msbuild@v2

.github/workflows/issue-check.yml

@@ -6,10 +6,12 @@ on:
 
 jobs:
   check_keywords:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: Check for keywords in issue title and body
         id: check_keywords