refactor: update macOS job configuration and upgrade checkout action to v4

Author: 1a1a11a

.github/workflows/build.yml

@@ -2,34 +2,37 @@ name: build
 
 on: [push, pull_request]
 
+permissions:
+  contents: read
+
 env:
   # Customize the CMake build type here (Release, Debug, RelWithDebInfo, etc.)
   BUILD_TYPE: Release
 
 jobs:
-  # macos:
-  #   name: macos / clang
-  #   runs-on: macos-10.15
-  #   env:
-  #     CC: clang
-  #   steps:
-  #     - uses: actions/checkout@v2
-  #     - name: Prepare1
-  #       run: brew install gcc glib google-perftools libomp
-  #     - name: Prepare2
-  #       run: bash scripts/setup.sh
-  #     - name: Configure CMake
-  #       run: cmake -B ${{github.workspace}}/build -DCMAKE_BUILD_TYPE=${{env.BUILD_TYPE}}
-  #     - name: build
-  #       run: cmake --build ${{github.workspace}}/build --config ${{env.BUILD_TYPE}}
-  #     - name: Run
-  #       continue-on-error: true
-  #       run: make test
+  macos:
+    name: macos / clang
+    runs-on: macos-latest
+    env:
+      CC: clang
+    steps:
+      - uses: actions/checkout@v4
+      - name: Prepare1
+        run: brew install gcc glib google-perftools libomp
+      - name: Prepare2
+        run: bash scripts/setup.sh
+      - name: Configure CMake
+        run: cmake -B ${{github.workspace}}/build -DCMAKE_BUILD_TYPE=${{env.BUILD_TYPE}}
+      - name: build
+        run: cmake --build ${{github.workspace}}/build --config ${{env.BUILD_TYPE}}
+      - name: Run
+        continue-on-error: true
+        run: make test
 
   ubuntu:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
       - name: Prepare
         run: bash scripts/install_dependency.sh
       - name: Configure CMake with LSan
@@ -49,7 +52,7 @@ jobs:
   selfhosted:
     runs-on: self-hosted
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
       - name: Configure CMake
         run: cmake -B ${{github.workspace}}/build -DCMAKE_BUILD_TYPE=${{env.BUILD_TYPE}} -DENABLE_GLCACHE=on -DENABLE_LRB=on
       - name: Build