Update all patch versions

Author: renovate[bot]

.github/workflows/build-native.yml

@@ -41,7 +41,7 @@ jobs:
     env:
       BUILD_ARCHITECTURE: ${{ matrix.arch }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       # - if: ${{ matrix.goarch == 'arm64' }}
       #   uses: docker/setup-qemu-action@v3
       #   with:

.github/workflows/build-packages.yml

@@ -41,7 +41,7 @@ jobs:
     env:
       BUILD_ARCHITECTURE: ${{ matrix.arch }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - if: ${{ matrix.goarch == 'arm64' }}
         uses: docker/setup-qemu-action@v3
         with:

.github/workflows/build-php-deps.yml

@@ -19,7 +19,7 @@ jobs:
     env:
       COMPOSER_ALLOW_SUPERUSER: 1
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Build PHP dependencies
         run: |
           source ./tools/read_properties.sh

.github/workflows/generate-component-tests-matrix.yml

@@ -21,7 +21,7 @@ jobs:
     outputs:
       matrix: ${{ steps.generate.outputs.matrix }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - id: generate
         run: |
           MATRIX_JSON=$(./tools/test/component/generate_matrix.sh | jq --raw-input --slurp -c 'split("\n") | map(select(length > 0)) | map({ "row": . } )')

.github/workflows/generate-php-versions.yml

@@ -21,7 +21,7 @@ jobs:
     outputs:
       php-versions: ${{ steps.generate.outputs.php-versions }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - id: generate
         run: |
           source ./tools/read_properties.sh

.github/workflows/native-dev-tools-build.yml

@@ -41,7 +41,7 @@ jobs:
       matrix: ${{ fromJson(needs.setup-build-matrix.outputs.matrix-combinations) }}
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Set up Docker Buildx
         if: contains(matrix.arch, 'arm64')

.github/workflows/scorecard.yml

@@ -19,11 +19,11 @@ jobs:
       # Needed for GitHub OIDC token if publish_results is true
       id-token: write
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
         with:
           persist-credentials: false
 
-      - uses: ossf/scorecard-action@05b42c624433fc40578a4040d5cf5e36ddca8cde # v2.4.2
+      - uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3
         with:
           results_file: results.sarif
           results_format: sarif
@@ -42,6 +42,6 @@ jobs:
       # Upload the results to GitHub's code scanning dashboard (optional).
       # Commenting out will disable upload of results to your repo's Code Scanning dashboard
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@9e907b5e64f6b83e7804b09294d44122997950d6 # v4.32.3
+        uses: github/codeql-action/upload-sarif@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
         with:
           sarif_file: results.sarif

.github/workflows/test-otel-unit.yml

@@ -26,7 +26,7 @@ jobs:
     env:
       PHP_VERSION: ${{ matrix.php-version }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Download package artifacts for Debian AMD64
         uses: actions/download-artifact@v7
         with:

.github/workflows/test-packages-component-tests.yml

@@ -27,7 +27,7 @@ jobs:
     env:
       MATRIX_ROW: ${{ matrix.row }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Download built packages
         uses: actions/download-artifact@v7
         with:

.github/workflows/test-php-static-and-unit.yml

@@ -27,7 +27,7 @@ jobs:
     env:
       PHP_VERSION: ${{ matrix.php-version }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Invoke test_php_static_and_unit.sh
         run: ./tools/test/test_php_static_and_unit.sh --php_versions "${PHP_VERSION}" --logs_dir "${PWD}/${{ env.UNIT_TESTS_LOGS_SUB_DIR }}"
       - uses: actions/upload-artifact@v6