From bd2b156f460b1319ad1454d010a7e9102dc503d4 Mon Sep 17 00:00:00 2001
From: Liviu-Mihail Concioiu <liviu.concioiu@gmail.com>
Date: Wed, 21 Oct 2026 22:56:19 +0200
Subject: [PATCH] Bump GitHub actions

Signed-off-by: Liviu-Mihail Concioiu <liviu.concioiu@gmail.com>
---
 .github/workflows/lint-and-analyse-php.yml |  8 ++++++--
 .github/workflows/lint-docs.yml            |  4 +++-
 .github/workflows/mutation-tests.yml       |  4 +++-
 .github/workflows/tests.yml                | 10 ++++++----
 4 files changed, 18 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/lint-and-analyse-php.yml b/.github/workflows/lint-and-analyse-php.yml
index 69678477..5ff2c5cf 100644
--- a/.github/workflows/lint-and-analyse-php.yml
+++ b/.github/workflows/lint-and-analyse-php.yml
@@ -16,7 +16,9 @@ jobs:
         php-version: [ '7.2' ]
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
+        with:
+          persist-credentials: false
 
       - name: Set up PHP ${{ matrix.php-version }}
         uses: shivammathur/setup-php@v2
@@ -39,7 +41,9 @@ jobs:
         php-version: [ '7.2' ]
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
+        with:
+          persist-credentials: false
 
       - name: Set up PHP ${{ matrix.php-version }}
         uses: shivammathur/setup-php@v2
diff --git a/.github/workflows/lint-docs.yml b/.github/workflows/lint-docs.yml
index 83955e4d..f055c819 100644
--- a/.github/workflows/lint-docs.yml
+++ b/.github/workflows/lint-docs.yml
@@ -13,7 +13,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
+        with:
+          persist-credentials: false
 
       - name: lint php documentation
         uses: sudo-bot/action-doctum@v5
diff --git a/.github/workflows/mutation-tests.yml b/.github/workflows/mutation-tests.yml
index 4571d5b6..b66fc790 100644
--- a/.github/workflows/mutation-tests.yml
+++ b/.github/workflows/mutation-tests.yml
@@ -19,7 +19,9 @@ jobs:
         operating-system: [ ubuntu-latest ]
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
+        with:
+          persist-credentials: false
 
       - name: Fetch github.base_ref (for diffing)
         if: ${{ github.base_ref != '' }}
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index da270695..9554f9bc 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -23,10 +23,11 @@ jobs:
           - { php-version: '8.6', experimental: true, os: ubuntu-latest, composer-options: '--ignore-platform-req=php+' }
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           # Fetch some commits for Scrutinizer coverage upload
           fetch-depth: 15
+          persist-credentials: false
 
       - name: Set up PHP ${{ matrix.php-version }}
         uses: shivammathur/setup-php@v2
@@ -53,7 +54,7 @@ jobs:
         run: composer run phpunit
 
       - name: Send coverage
-        uses: codecov/codecov-action@v6
+        uses: codecov/codecov-action@v7
         # Do not run this step on forked versions of the main repository (example: contributor forks)
         if: github.repository == 'phpmyadmin/sql-parser'
         with:
@@ -64,7 +65,7 @@ jobs:
           report_type: coverage
 
       - name: Upload test results
-        uses: codecov/codecov-action@v6
+        uses: codecov/codecov-action@v7
         # Do not run this step on forked versions of the main repository (example: contributor forks)
         if: ${{ github.repository == 'phpmyadmin/sql-parser' && !cancelled() }}
         with:
@@ -133,10 +134,11 @@ jobs:
           - { php-version: '8.6', experimental: true, os: ubuntu-latest, composer-options: '--ignore-platform-req=php+' }
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           # Fetch some commits for Scrutinizer coverage upload
           fetch-depth: 15
+          persist-credentials: false
 
       - name: Set up PHP ${{ matrix.php-version }}
         uses: shivammathur/setup-php@v2