Update GH actions, spellcheck Quarto docs

Author: Blake-Madden

.github/workflows/codeql.yml

@@ -32,7 +32,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
       with:
           submodules: 'true'
 

.github/workflows/cppcheck.yml

@@ -5,8 +5,10 @@ jobs:
   build:
     name: cppcheck-test
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
 
       - name: create test file
         run: |
@@ -16,7 +18,7 @@ jobs:
         uses: deep5050/cppcheck-action@main
         with:
           github_token: ${{ secrets.GITHUB_TOKEN}}
-          std: c++17
+          std: c++20
           inline_suppression: enable
           exclude_check: ./tests
           output_file: cppcheck_report.txt

.github/workflows/doxygen.yml

@@ -5,8 +5,10 @@ jobs:
   build:
     name: doxygen-test
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           submodules: 'true'
 

.github/workflows/mac-unit-tests.yml

@@ -5,8 +5,10 @@ jobs:
   build:
     name: unit-tests
     runs-on: macos-latest
+    permissions:
+      contents: read
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           submodules: 'true'
 

.github/workflows/msvc.yml

@@ -28,7 +28,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           submodules: 'true'
 

.github/workflows/quneiform.yml

@@ -5,8 +5,10 @@ jobs:
   build:
     name: quneiform
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
       - name: install quneiform
         run: |

.github/workflows/spell-check.yml

@@ -3,19 +3,22 @@ on: [push]
 
 jobs:
   check-unix:
-    runs-on: ubuntu-latest
     name: Check Spelling
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Install codespell
         run: |
           pip install codespell
       - name: Run codespell
         run: |
-          codespell src/ *.md
+          # just spellcheck the overviews and manual, that's where the bulk of docs are
+          codespell *.md *.qmd
           rc=$?
           if [ $rc != 0 ]; then
           cat <<EOF

.github/workflows/unit-tests.yml

@@ -5,8 +5,10 @@ jobs:
   build:
     name: unit-tests
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           submodules: 'true'
 

.github/workflows/windows-unit-tests.yml

@@ -9,8 +9,10 @@ jobs:
   build:
     name: unit-tests
     runs-on: windows-latest
+    permissions:
+      contents: read
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           submodules: 'true'
       - run: git config --global core.autocrlf input