From aadce3953454e66bf3ff99eab2634510f6d83bda Mon Sep 17 00:00:00 2001
From: Thomas Niepraschk <niepi@niepi.org>
Date: Fri, 4 Sep 2026 19:02:03 +0200
Subject: [PATCH] Update release GitHub Actions

---
 .github/workflows/ci.yml            | 26 +++++++++++++-------------
 .github/workflows/release-notes.yml |  4 ++--
 2 files changed, 15 insertions(+), 15 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 096ff37..2c61f4f 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -16,10 +16,10 @@ jobs:
 
     steps:
       -   name: "Checkout code"
-          uses: actions/checkout@v3
+          uses: actions/checkout@v6
 
       -   name: Lint Dockerfile
-          uses: hadolint/hadolint-action@v3.0.0
+          uses: hadolint/hadolint-action@v3.1.0
           with:
             dockerfile: "Dockerfile"
             format: "tty"
@@ -32,7 +32,7 @@ jobs:
       -   name: "Export image"
           run: mv dockercache amdcache
       -   name: 'Upload Artifact'
-          uses: actions/upload-artifact@v4
+          uses: actions/upload-artifact@v7
           with:
             name: amdcache
             path: amdcache
@@ -47,10 +47,10 @@ jobs:
 
     steps:
       -   name: "Checkout code"
-          uses: actions/checkout@v3
+          uses: actions/checkout@v6
 
       -   name: Lint Dockerfile
-          uses: hadolint/hadolint-action@v3.0.0
+          uses: hadolint/hadolint-action@v3.1.0
           with:
             dockerfile: "Dockerfile"
             format: "tty"
@@ -63,7 +63,7 @@ jobs:
       -   name: "Export image"
           run: mv dockercache armcache
       -   name: 'Upload Artifact'
-          uses: actions/upload-artifact@v4
+          uses: actions/upload-artifact@v7
           with:
             name: armcache
             path: armcache
@@ -82,16 +82,16 @@ jobs:
 
     steps:
       -   name: "Checkout code"
-          uses: actions/checkout@v3
+          uses: actions/checkout@v6
 
       -   name: Download amd64
-          uses: actions/download-artifact@v4
+          uses: actions/download-artifact@v7
           with:
             name: amdcache
             path: amdcache
 
       -   name: Download arm64
-          uses: actions/download-artifact@v4
+          uses: actions/download-artifact@v7
           with:
             name: armcache
             path: armcache
@@ -148,7 +148,7 @@ jobs:
 
       -   if: github.repository == 'Endava/docker-php' && startsWith(github.ref, 'refs/heads/release/')
           name: Upload Alpine Trivy scan results to GitHub Security tab
-          uses: github/codeql-action/upload-sarif@v2
+          uses: github/codeql-action/upload-sarif@v4
           with:
             sarif_file: 'trivy-results.sarif'
 #
@@ -164,14 +164,14 @@ jobs:
             github-pat: ${{ secrets.PAT }}
       -   if: github.repository == 'Endava/docker-php' && startsWith(github.ref, 'refs/heads/release/')
           name: Login to DockerHub
-          uses: docker/login-action@v2
+          uses: docker/login-action@v4
           with:
             username: ${{ secrets.DOCKER_USERNAME }}
             password: ${{ secrets.DOCKER_PASSWORD }}
 
       -   if: github.repository == 'Endava/docker-php' && startsWith(github.ref, 'refs/heads/release/')
           name: Login to Quay.io
-          uses: docker/login-action@v2
+          uses: docker/login-action@v4
           with:
             registry: quay.io
             username: ${{ secrets.QUAY_USERNAME }}
@@ -179,7 +179,7 @@ jobs:
 
       -   if: github.repository == 'Endava/docker-php' && startsWith(github.ref, 'refs/heads/release/')
           name: Login to ghcr.io
-          uses: docker/login-action@v2
+          uses: docker/login-action@v4
           with:
             registry: ghcr.io
             username: ${{ github.actor }}
diff --git a/.github/workflows/release-notes.yml b/.github/workflows/release-notes.yml
index c9c2901..f80ae38 100644
--- a/.github/workflows/release-notes.yml
+++ b/.github/workflows/release-notes.yml
@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v6
       - name: "Fetch all existing tags"
         run: curl -L -s 'https://registry.hub.docker.com/v2/repositories/endava/php/tags?page_size=9999'|jq -r '."results"[]["name"] | select(test( "^[0-9]+.[0-9]+.[0-9]+$"))' > existing_docker_tags.txt
       - name: "Store the current tag"
@@ -22,7 +22,7 @@ jobs:
       - name: Generate Changelog
         run: docker run --rm -v `pwd`/previous-php-i.txt:/usr/src/app/previous-php-i.txt -v `pwd`/generate-changelog.php:/usr/src/app/generate-changelog.php ghcr.io/endava/docker-php:${{ github.ref_name }} php /usr/src/app/generate-changelog.php ghcr.io/endava/docker-php:${{ github.ref_name }} > RELEASE_NOTES.txt
       - name: Release
-        uses: softprops/action-gh-release@v1
+        uses: softprops/action-gh-release@v3
         if: startsWith(github.ref, 'refs/tags/')
         with:
           body_path: RELEASE_NOTES.txt