chore(deps): update update github actions

.github/workflows/coverage.yml

@@ -6,9 +6,9 @@ jobs:
         runs-on: ubuntu-latest
         steps:
             -   name: Checkout
-                uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+                uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
             -   name: Set up php 8.5
-                uses: shivammathur/setup-php@44454db4f0199b8b9685a5d763dc37cbf79108e1 # 2.36.0
+                uses: shivammathur/setup-php@f3e473d116dcccaddc5834248c87452386958240 # 2.37.2
                 with:
                     php-version: '8.5'
                     coverage: xdebug
@@ -17,7 +17,7 @@ jobs:
             -   name: Run tests and collect coverage
                 run: vendor/bin/pest --coverage-clover clover.xml
             -   name: Upload coverage to Codecov
-                uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
+                uses: codecov/codecov-action@0fb7174895f61a3b6b78fc075e0cd60383518dac # v5.5.5
                 with:
                     token: ${{ secrets.CODECOV_TOKEN }}
                     files: clover.xml

.github/workflows/pr-checks.yml

@@ -19,9 +19,9 @@ jobs:
         runs-on: ubuntu-latest
         steps:
             -   name: Checkout
-                uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+                uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
             -   name: Set up php 8.5
-                uses: shivammathur/setup-php@44454db4f0199b8b9685a5d763dc37cbf79108e1 # 2.36.0
+                uses: shivammathur/setup-php@f3e473d116dcccaddc5834248c87452386958240 # 2.37.2
                 with:
                     php-version: '8.5'
             -   name: Validate composer.json
@@ -33,4 +33,4 @@ jobs:
             -   name: Security check
                 run: composer audit
             -   name: Check workflow files
-                uses: devops-actions/actionlint@469810fd82c015d3c43815cd2b0e4d02eecc4819 # v0.1.11
+                uses: devops-actions/actionlint@9fb9c192862f19e684586ca84b500461bcd8a541 # v0.1.12

.github/workflows/release-please.yml

@@ -16,4 +16,4 @@ jobs:
             pull-requests: write
             issues: write
         steps:
-            -   uses: googleapis/release-please-action@16a9c90856f42705d54a6fda1823352bdc62cf38 # v4
+            -   uses: googleapis/release-please-action@5c625bfb5d1ff62eadeeb3772007f7f66fdcf071 # v4

.github/workflows/scorecard.yml

@@ -32,7 +32,7 @@ jobs:
 
         steps:
             -   name: "Checkout code"
-                uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+                uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
                 with:
                     persist-credentials: false
 
@@ -59,7 +59,7 @@ jobs:
             # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
             # format to the repository Actions tab.
             -   name: "Upload artifact"
-                uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.pre.node20
+                uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.pre.node20
                 with:
                     name: SARIF file
                     path: results.sarif
@@ -68,6 +68,6 @@ jobs:
             # Upload the results to GitHub's code scanning dashboard (optional).
             # Commenting out will disable upload of results to your repo's Code Scanning dashboard
             -   name: "Upload to code-scanning"
-                uses: github/codeql-action/upload-sarif@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
+                uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
                 with:
                     sarif_file: results.sarif

.github/workflows/tests.yml

@@ -15,9 +15,9 @@ jobs:
                         install-command: composer update --prefer-stable --with-all-dependencies --no-interaction
         steps:
             -   name: Checkout
-                uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+                uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
             -   name: Set up php 8.5
-                uses: shivammathur/setup-php@44454db4f0199b8b9685a5d763dc37cbf79108e1 # 2.36.0
+                uses: shivammathur/setup-php@f3e473d116dcccaddc5834248c87452386958240 # 2.37.2
                 with:
                     php-version: '8.5'
             -   name: Validate composer.json