From 3d7218809e157875ae3df87fd4908f4a463ec6ac Mon Sep 17 00:00:00 2001
From: Soner Sayakci <s.sayakci@gmail.com>
Date: Thu, 12 Mar 2026 06:16:46 +0100
Subject: [PATCH] chore: update GitHub Actions to latest versions

---
 .github/workflows/integration.yaml  | 14 +++++++-------
 .github/workflows/php-cs-fixer.yaml |  2 +-
 .github/workflows/phpstan.yaml      |  2 +-
 .github/workflows/release.yaml      |  4 ++--
 .github/workflows/unit.yaml         |  6 +++---
 5 files changed, 14 insertions(+), 14 deletions(-)

diff --git a/.github/workflows/integration.yaml b/.github/workflows/integration.yaml
index 418b075..787f45e 100644
--- a/.github/workflows/integration.yaml
+++ b/.github/workflows/integration.yaml
@@ -10,12 +10,12 @@ jobs:
   build:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Install dependencies
         run: composer install
       - name: Build phar
         run: composer run build-phar
-      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # 4
+      - uses: actions/upload-artifact@v7
         with:
           name: installer-phar
           path: shopware-installer.phar.php
@@ -69,7 +69,7 @@ jobs:
           path: new-shopware
 
       - name: Cache Storefront npm packages
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: new-shopware/src/Storefront/Resources/app/storefront/node_modules
           key: ${{ runner.os }}-storefront-${{ hashFiles('new-shopware/src/Storefront/Resources/app/storefront/package-lock.json') }}
@@ -89,7 +89,7 @@ jobs:
           composer -d src/Elasticsearch config version ${SW_RECOVERY_NEXT_VERSION}
 
       - name: Checkout template
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # 4
+        uses: actions/checkout@v6
         with:
           repository: shopware/production
           path: old-shopware
@@ -114,7 +114,7 @@ jobs:
           bin/console system:install --basic-setup --drop-database --create-database
 
       - name: Download WebInstaller
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # 4
+        uses: actions/download-artifact@v8
         with:
           name: installer-phar
           path: old-shopware/public
@@ -123,7 +123,7 @@ jobs:
         working-directory: old-shopware
         run: symfony server:start -d
 
-      - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # 4
+      - uses: actions/setup-node@v6
         with:
           node-version: 22
 
@@ -144,7 +144,7 @@ jobs:
         working-directory: new-shopware/tests/acceptance
         run: npx playwright test --project=Update --trace=on
 
-      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # 4
+      - uses: actions/upload-artifact@v7
         if: always()
         with:
           name: playwright-report-update-${{ matrix.update.type }}-${{ matrix.update.version }}
diff --git a/.github/workflows/php-cs-fixer.yaml b/.github/workflows/php-cs-fixer.yaml
index a329697..e86eaa0 100644
--- a/.github/workflows/php-cs-fixer.yaml
+++ b/.github/workflows/php-cs-fixer.yaml
@@ -9,7 +9,7 @@ jobs:
   php-cs-fixer:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Setup PHP
         uses: shivammathur/setup-php@v2
diff --git a/.github/workflows/phpstan.yaml b/.github/workflows/phpstan.yaml
index f0d6037..071f5ab 100644
--- a/.github/workflows/phpstan.yaml
+++ b/.github/workflows/phpstan.yaml
@@ -9,7 +9,7 @@ jobs:
   phpstan:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Setup PHP
         uses: shivammathur/setup-php@v2
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 3fbba06..5c09008 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -14,7 +14,7 @@ jobs:
       attestations: write
       artifact-metadata: write
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Setup PHP
         uses: shivammathur/setup-php@v2
@@ -29,7 +29,7 @@ jobs:
         run: composer build-phar
 
       - name: Attest Build Provenance
-        uses: actions/attest-build-provenance@v3
+        uses: actions/attest-build-provenance@v4
         with:
           subject-path: shopware-installer.phar.php
 
diff --git a/.github/workflows/unit.yaml b/.github/workflows/unit.yaml
index cd28196..e397f62 100644
--- a/.github/workflows/unit.yaml
+++ b/.github/workflows/unit.yaml
@@ -9,7 +9,7 @@ jobs:
   coverage:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Setup PHP
         uses: shivammathur/setup-php@v2
@@ -24,7 +24,7 @@ jobs:
         run: vendor/bin/phpunit --coverage-clover=coverage.xml
 
       - name: Upload Codecov
-        uses: codecov/codecov-action@v1
+        uses: codecov/codecov-action@v5
         with:
           file: ./coverage.xml
 
@@ -38,7 +38,7 @@ jobs:
           - '8.3'
           - '8.4'
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Setup PHP
         uses: shivammathur/setup-php@v2