chore(deps): update update github actions

Author: renovate[bot]

.github/workflows/coverage.yml

@@ -8,7 +8,7 @@ jobs:
             -   name: Checkout
                 uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
             -   name: Set up php 8.5
-                uses: shivammathur/setup-php@44454db4f0199b8b9685a5d763dc37cbf79108e1 # 2.36.0
+                uses: shivammathur/setup-php@accd6127cb78bee3e8082180cb391013d204ef9f # 2.37.0
                 with:
                     php-version: '8.5'
                     coverage: xdebug
@@ -17,7 +17,7 @@ jobs:
             -   name: Run tests and collect coverage
                 run: vendor/bin/pest --coverage-clover clover.xml
             -   name: Upload coverage to Codecov
-                uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
+                uses: codecov/codecov-action@75cd11691c0faa626561e295848008c8a7dddffe # v5.5.4
                 with:
                     token: ${{ secrets.CODECOV_TOKEN }}
                     files: clover.xml

.github/workflows/pr-checks.yml

@@ -21,7 +21,7 @@ jobs:
             -   name: Checkout
                 uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
             -   name: Set up php 8.5
-                uses: shivammathur/setup-php@44454db4f0199b8b9685a5d763dc37cbf79108e1 # 2.36.0
+                uses: shivammathur/setup-php@accd6127cb78bee3e8082180cb391013d204ef9f # 2.37.0
                 with:
                     php-version: '8.5'
             -   name: Validate composer.json

.github/workflows/release-please.yml

@@ -16,4 +16,4 @@ jobs:
             pull-requests: write
             issues: write
         steps:
-            -   uses: googleapis/release-please-action@16a9c90856f42705d54a6fda1823352bdc62cf38 # v4
+            -   uses: googleapis/release-please-action@5c625bfb5d1ff62eadeeb3772007f7f66fdcf071 # v4

.github/workflows/scorecard.yml

@@ -59,7 +59,7 @@ jobs:
             # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
             # format to the repository Actions tab.
             -   name: "Upload artifact"
-                uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.pre.node20
+                uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.pre.node20
                 with:
                     name: SARIF file
                     path: results.sarif
@@ -68,6 +68,6 @@ jobs:
             # Upload the results to GitHub's code scanning dashboard (optional).
             # Commenting out will disable upload of results to your repo's Code Scanning dashboard
             -   name: "Upload to code-scanning"
-                uses: github/codeql-action/upload-sarif@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
+                uses: github/codeql-action/upload-sarif@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
                 with:
                     sarif_file: results.sarif

.github/workflows/tests.yml

@@ -17,7 +17,7 @@ jobs:
             -   name: Checkout
                 uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
             -   name: Set up php 8.5
-                uses: shivammathur/setup-php@44454db4f0199b8b9685a5d763dc37cbf79108e1 # 2.36.0
+                uses: shivammathur/setup-php@accd6127cb78bee3e8082180cb391013d204ef9f # 2.37.0
                 with:
                     php-version: '8.5'
             -   name: Validate composer.json