CI code scanning

.github/workflows/codeql.yml

@@ -24,12 +24,20 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v5
+
+      - name: Cache SPM packages
+        uses: actions/cache@v5
+        with:
+          path: ~/.swiftpm
+          key: spm-${{ runner.os }}-${{ hashFiles('**/Package.resolved') }}
+          restore-keys: |
+            spm-${{ runner.os }}
 
       - name: Select Xcode
         run: sudo xcode-select -s /Applications/Xcode_26.5.app
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v3
+        uses: github/codeql-action/init@v4
         with:
           languages: swift
 
@@ -39,9 +47,10 @@ jobs:
             -project AutoRoute.xcodeproj \
             -scheme AutoRoute \
             -destination 'platform=iOS Simulator,name=iPhone 17,arch=arm64' \
+            -derivedDataPath .build/DerivedData \
             -skipPackagePluginValidation
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v3
+        uses: github/codeql-action/analyze@v4
         with:
           category: "/language:swift"

.github/workflows/ios.yml

@@ -22,12 +22,10 @@ jobs:
       - name: Cache SPM packages
         uses: actions/cache@v5
         with:
-          path: |
-            ~/Library/Developer/Xcode/DerivedData
-            ~/.swiftpm
+          path: ~/.swiftpm
           key: spm-${{ runner.os }}-${{ hashFiles('**/Package.resolved') }}
           restore-keys: |
-            spm-${{ runner.os }}-
+            spm-${{ runner.os }}
 
       - name: Select Xcode
         run: sudo xcode-select -s /Applications/Xcode_26.5.app