feat(github-action): update ivuorinen/actions (25.5.26 → 25.6.5) (#158)

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

.github/workflows/action-security.yml

@@ -58,7 +58,7 @@ jobs:
           fi
 
       - name: Run actionlint
-        uses: raven-actions/actionlint@01fce4f43a270a612932cb1c64d40505a029f821 # v2.0.0
+        uses: raven-actions/actionlint@3a24062651993d40fed1019b58ac6fbdfbf276cc # v2.0.1
         with:
           cache: true
           fail-on-error: true
@@ -117,14 +117,14 @@ jobs:
 
       - name: Upload Trivy results
         if: steps.verify-sarif.outputs.has_trivy == 'true'
-        uses: github/codeql-action/upload-sarif@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
+        uses: github/codeql-action/upload-sarif@fca7ace96b7d713c7035871441bd52efbe39e27e # v3.28.19
         with:
           sarif_file: 'trivy-results.sarif'
           category: 'trivy'
 
       - name: Upload Gitleaks results
         if: steps.verify-sarif.outputs.has_gitleaks == 'true'
-        uses: github/codeql-action/upload-sarif@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
+        uses: github/codeql-action/upload-sarif@fca7ace96b7d713c7035871441bd52efbe39e27e # v3.28.19
         with:
           sarif_file: 'gitleaks-report.sarif'
           category: 'gitleaks'

.github/workflows/codeql.yml

@@ -32,15 +32,15 @@ jobs:
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
+        uses: github/codeql-action/init@fca7ace96b7d713c7035871441bd52efbe39e27e # v3.28.19
         with:
           languages: ${{ matrix.language }}
           queries: security-and-quality
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
+        uses: github/codeql-action/autobuild@fca7ace96b7d713c7035871441bd52efbe39e27e # v3.28.19
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
+        uses: github/codeql-action/analyze@fca7ace96b7d713c7035871441bd52efbe39e27e # v3.28.19
         with:
           category: '/language:${{matrix.language}}'

.github/workflows/pr-lint.yml

@@ -70,20 +70,6 @@ jobs:
       - name: MegaLinter
         id: ml
         uses: oxsecurity/megalinter/flavors/cupcake@5a91fb06c83d0e69fbd23756d47438aa723b4a5a # v8.7.0
-        env:
-          PARALLEL: true # Run linters in parallel
-          FILTER_REGEX_EXCLUDE: '(\.automation/test|docs/json-schemas|\.github/workflows)'
-
-          # Error configuration
-          ERROR_ON_MISSING_EXEC_BIT: true
-          CLEAR_REPORT_FOLDER: true
-          PRINT_ALPACA: false
-          SHOW_ELAPSED_TIME: true
-
-          # File configuration
-          YAML_YAMLLINT_CONFIG_FILE: .yamllint.yml
-          YAML_PRETTIER_CONFIG_FILE: .prettierrc.yml
-          YAML_YAMLLINT_FILTER_REGEX_EXCLUDE: '(\.automation/test|docs/json-schemas|\.github/workflows)'
 
       - name: Check MegaLinter Results
         id: check-results
@@ -113,7 +99,7 @@ jobs:
 
       - name: Upload SARIF Report
         if: always() && hashFiles('megalinter-reports/sarif/*.sarif')
-        uses: github/codeql-action/upload-sarif@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
+        uses: github/codeql-action/upload-sarif@fca7ace96b7d713c7035871441bd52efbe39e27e # v3.28.19
         with:
           sarif_file: megalinter-reports/sarif
           category: megalinter

.github/workflows/security-suite.yml

@@ -87,7 +87,7 @@ jobs:
             --enableExperimental
             --failOnCVSS 7
       - name: Upload OWASP Results
-        uses: github/codeql-action/upload-sarif@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
+        uses: github/codeql-action/upload-sarif@fca7ace96b7d713c7035871441bd52efbe39e27e # v3.28.19
         with:
           sarif_file: reports/dependency-check-report.sarif
           category: owasp-dependency-check
@@ -119,7 +119,7 @@ jobs:
         with:
           args: --all-projects --sarif-file-output=snyk-results.sarif
       - name: Upload Snyk Results
-        uses: github/codeql-action/upload-sarif@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
+        uses: github/codeql-action/upload-sarif@fca7ace96b7d713c7035871441bd52efbe39e27e # v3.28.19
         with:
           sarif_file: snyk-results.sarif
           category: snyk
@@ -146,7 +146,7 @@ jobs:
           results_format: sarif
           publish_results: true
       - name: Upload Scorecard Results
-        uses: github/codeql-action/upload-sarif@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
+        uses: github/codeql-action/upload-sarif@fca7ace96b7d713c7035871441bd52efbe39e27e # v3.28.19
         with:
           sarif_file: scorecard-results.sarif
           category: scorecard

README.md

@@ -2,14 +2,20 @@
 
 ## Overview
 
-This project contains a collection of workflows and composable actions to streamline CI/CD
+This project contains a collection of workflows and composable actions to streamline CI/CD processes and ensure code quality. The actions are grouped by purpose for easier discovery.
-processes and ensure code quality. Below is a categorized list of all workflows, grouped by their types.
 
-## Testing Workflows
+## Setup & Caching
 
-- [PHP Tests][php-tests]: Runs PHPUnit tests to ensure PHP code correctness.
+- [Node Setup][node-setup]: Sets up Node.js with caching and tooling.
+- [PHP Composer][php-composer]: Installs PHP dependencies using Composer.
+- [Dotnet Version Detect][dotnet-v-detect]: Detects the required .NET version from `global.json`.
+- [Go Version Detect][go-version-detect]: Detects the required Go version from configuration files.
+- [Common Cache][common-cache]: Provides a consistent caching strategy for multiple languages.
+- [Set Git Config][set-git-config]: Configures Git user information for automated commits.
 
-## Linting and Formatting Workflows
+## Linting & Formatting
+
+### Code Linting
 
 - [Ansible Lint and Fix][ansible-lint-fix]: Lints and fixes Ansible playbooks and roles.
 - [Biome Check][biome-check]: Runs Biome to lint multiple languages and formats.
@@ -18,40 +24,46 @@ processes and ensure code quality. Below is a categorized list of all workflows,
 - [ESLint Check][eslint-check]: Runs ESLint to check for code style violations.
 - [ESLint Fix][eslint-fix]: Automatically fixes code style issues with ESLint.
 - [Go Lint Check][go-lint]: Lints Go code using `golangci-lint`.
+- [PR Lint][pr-lint]: Runs MegaLinter against pull requests.
+- [Python Lint and Fix][python-lint-fix]: Lints and fixes Python code using `flake8` and `black`.
+- [Terraform Lint and Fix][terraform-lint-fix]: Lints and fixes Terraform configurations.
+
+### Code Formatting
+
 - [Prettier Check][prettier-check]: Checks code formatting using Prettier.
 - [Prettier Fix][prettier-fix]: Automatically fixes code formatting with Prettier.
-- [Python Lint and Fix][python-lint-fix]: Lints and fixes Python code using `flake8` and `black`.
+- [Pre-Commit][pre-commit]: Runs `pre-commit` hooks to enforce code quality standards.
-- [Terraform Lint and Fix][terraform-lint-fix]: Lints and fixes Terraform
-  configurations.
 
-## Build Workflows
+## Testing
+
+- [PHP Tests][php-tests]: Runs PHPUnit tests to ensure PHP code correctness.
+- [Laravel PHPUnit][php-laravel-phpunit]: Sets up Laravel and runs Composer tests.
+
+## Build & Package
 
 - [C# Build][csharp-build]: Builds C# projects using the .NET SDK.
-- [Docker Build][docker-build]: Builds Docker images using a Dockerfile.
 - [Go Build][go-build]: Builds Go projects using the `go build` command.
+- [Docker Build][docker-build]: Builds Docker images using a Dockerfile.
 
-## Deployment Workflows
+## Publish & Deployment
 
 - [C# Publish][csharp-publish]: Publishes .NET projects to an output directory.
+- [Docker Publish][docker-publish]: Publishes Docker images to GitHub Packages and Docker Hub.
 - [Docker Publish to Docker Hub][docker-publish-hub]: Publishes Docker images to Docker Hub.
 - [Docker Publish to GitHub Packages][docker-publish-gh]: Publishes Docker images to GitHub's Container Registry.
 - [Publish to NPM][npm-publish]: Publishes packages to the NPM registry.
 
-## Release Workflows
+## Release Management
 
 - [GitHub Release][github-release]: Automates GitHub release creation with custom tags and notes.
 - [Release Monthly][release-monthly]: Creates a monthly GitHub release with autogenerated notes.
 
-## Utility Workflows
+## Repository Maintenance
 
 - [Common File Check][common-file-check]: Checks for the presence of specific files based on a glob pattern.
 - [Compress Images][compress-images]: Optimizes and creates a pull request with compressed images.
-- [Dotnet Version Detect][dotnet-v-detect]: Detects the required .NET version from `global.json`.
+- [Stale][stale]: Closes stale issues and pull requests automatically.
-- [Go Version Detect][go-version-detect]: Detects the required Go version from configuration files.
+- [Sync Labels][sync-labels]: Syncs repository labels from a YAML file.
-- [Node Setup][node-setup]: Sets up a Node.js environment for workflows.
-- [PHP Composer][php-composer]: Installs PHP dependencies using Composer.
-- [Pre-Commit][pre-commit]: Runs `pre-commit` hooks to enforce code quality standards.
-- [Set Git Config][set-git-config]: Configures Git user information for automated commits.
 
 ## License
 
@@ -60,12 +72,14 @@ This project is licensed under the MIT License. See the [LICENSE](LICENSE.md) fi
 [ansible-lint-fix]: ansible-lint-fix/README.md
 [biome-check]: biome-check/README.md
 [biome-fix]: biome-fix/README.md
+[common-cache]: common-cache/README.md
 [common-file-check]: common-file-check/README.md
 [compress-images]: compress-images/README.md
 [csharp-build]: csharp-build/README.md
 [csharp-lint-check]: csharp-lint-check/README.md
 [csharp-publish]: csharp-publish/README.md
 [docker-build]: docker-build/README.md
+[docker-publish]: docker-publish/README.md
 [docker-publish-gh]: docker-publish-gh/README.md
 [docker-publish-hub]: docker-publish-hub/README.md
 [dotnet-v-detect]: dotnet-version-detect/README.md
@@ -78,11 +92,15 @@ This project is licensed under the MIT License. See the [LICENSE](LICENSE.md) fi
 [node-setup]: node-setup/README.md
 [npm-publish]: npm-publish/README.md
 [php-composer]: php-composer/README.md
+[php-laravel-phpunit]: php-laravel-phpunit/README.md
 [php-tests]: php-tests/README.md
+[pr-lint]: pr-lint/README.md
 [pre-commit]: pre-commit/README.md
 [prettier-check]: prettier-check/README.md
 [prettier-fix]: prettier-fix/README.md
 [python-lint-fix]: python-lint-fix/README.md
 [release-monthly]: release-monthly/README.md
 [set-git-config]: set-git-config/README.md
+[stale]: stale/README.md
+[sync-labels]: sync-labels/README.md
 [terraform-lint-fix]: terraform-lint-fix/README.md

ansible-lint-fix/action.yml

@@ -47,6 +47,6 @@ runs:
         fi
 
     - name: Upload SARIF Report
-      uses: github/codeql-action/upload-sarif@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
+      uses: github/codeql-action/upload-sarif@fca7ace96b7d713c7035871441bd52efbe39e27e # v3.28.19
       with:
         sarif_file: ansible-lint.sarif

biome-check/action.yml

@@ -31,6 +31,6 @@ runs:
         biome check . --json > biome-report.json
 
     - name: Upload Biome Results
-      uses: github/codeql-action/upload-sarif@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
+      uses: github/codeql-action/upload-sarif@fca7ace96b7d713c7035871441bd52efbe39e27e # v3.28.19
       with:
         sarif_file: biome-report.json

csharp-lint-check/action.yml

@@ -40,6 +40,6 @@ runs:
         fi
 
     - name: Upload SARIF Report
-      uses: github/codeql-action/upload-sarif@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
+      uses: github/codeql-action/upload-sarif@fca7ace96b7d713c7035871441bd52efbe39e27e # v3.28.19
       with:
         sarif_file: dotnet-format.sarif

eslint-check/action.yml

@@ -239,7 +239,7 @@ runs:
 
     - name: Upload ESLint Results
       if: always() && inputs.report-format == 'sarif'
-      uses: github/codeql-action/upload-sarif@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
+      uses: github/codeql-action/upload-sarif@fca7ace96b7d713c7035871441bd52efbe39e27e # v3.28.19
       with:
         sarif_file: ${{ inputs.working-directory }}/reports/eslint.sarif
         category: eslint

go-lint/action.yml

@@ -266,7 +266,7 @@ runs:
 
     - name: Upload Lint Results
       if: always() && inputs.report-format == 'sarif'
-      uses: github/codeql-action/upload-sarif@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
+      uses: github/codeql-action/upload-sarif@fca7ace96b7d713c7035871441bd52efbe39e27e # v3.28.19
       with:
         sarif_file: ${{ inputs.working-directory }}/reports/golangci-lint.sarif
         category: golangci-lint

pr-lint/action.yml

@@ -29,7 +29,7 @@ runs:
     #   ╰──────────────────────────────────────────────────────────╯
     - name: Setup Git Config
       id: git-config
-      uses: ivuorinen/actions/set-git-config@baed29f713eaa0817982be42681e66511cb092b5 # 25.5.26
+      uses: ivuorinen/actions/set-git-config@fef32ab12bf8924df3460726365d6d9e88a41d6e # 25.6.5
 
     #   ╭──────────────────────────────────────────────────────────╮
     #   │               Install packages for linting               │

prettier-check/action.yml

@@ -305,7 +305,7 @@ runs:
 
     - name: Upload Prettier Results
       if: always() && inputs.report-format == 'sarif'
-      uses: github/codeql-action/upload-sarif@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
+      uses: github/codeql-action/upload-sarif@fca7ace96b7d713c7035871441bd52efbe39e27e # v3.28.19
       with:
         sarif_file: ${{ inputs.working-directory }}/reports/prettier.sarif
         category: prettier

python-lint-fix/action.yml

@@ -213,7 +213,7 @@ runs:
 
     - name: Upload SARIF Report
       if: steps.check-files.outputs.result == 'found'
-      uses: github/codeql-action/upload-sarif@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
+      uses: github/codeql-action/upload-sarif@fca7ace96b7d713c7035871441bd52efbe39e27e # v3.28.19
       with:
         sarif_file: ${{ inputs.working-directory }}/reports/flake8.sarif
         category: 'python-lint'

terraform-lint-fix/action.yml

@@ -225,7 +225,7 @@ runs:
 
     - name: Upload SARIF Report
       if: steps.check-files.outputs.found == 'true' && inputs.format == 'sarif'
-      uses: github/codeql-action/upload-sarif@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
+      uses: github/codeql-action/upload-sarif@fca7ace96b7d713c7035871441bd52efbe39e27e # v3.28.19
       with:
         sarif_file: ${{ inputs.working-directory }}/reports/tflint.sarif
         category: terraform-lint