Update all patch versions

Author: renovate[bot]

.github/workflows/build-native.yml

@@ -41,7 +41,7 @@ jobs:
     env:
       BUILD_ARCHITECTURE: ${{ matrix.arch }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       # - if: ${{ matrix.goarch == 'arm64' }}
       #   uses: docker/setup-qemu-action@v3
       #   with:

.github/workflows/build-packages.yml

@@ -41,7 +41,7 @@ jobs:
     env:
       BUILD_ARCHITECTURE: ${{ matrix.arch }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - if: ${{ matrix.goarch == 'arm64' }}
         uses: docker/setup-qemu-action@v3
         with:

.github/workflows/build-php-deps.yml

@@ -19,7 +19,7 @@ jobs:
     env:
       COMPOSER_ALLOW_SUPERUSER: 1
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Build PHP dependencies
         run: |
           source ./tools/read_properties.sh

.github/workflows/generate-component-tests-matrix.yml

@@ -21,7 +21,7 @@ jobs:
     outputs:
       matrix: ${{ steps.generate.outputs.matrix }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - id: generate
         run: |
           MATRIX_JSON=$(./tools/test/component/generate_matrix.sh | jq --raw-input --slurp -c 'split("\n") | map(select(length > 0)) | map({ "row": . } )')

.github/workflows/generate-php-versions.yml

@@ -21,7 +21,7 @@ jobs:
     outputs:
       php-versions: ${{ steps.generate.outputs.php-versions }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - id: generate
         run: |
           source ./tools/read_properties.sh

.github/workflows/native-dev-tools-build.yml

@@ -41,7 +41,7 @@ jobs:
       matrix: ${{ fromJson(needs.setup-build-matrix.outputs.matrix-combinations) }}
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Set up Docker Buildx
         if: contains(matrix.arch, 'arm64')

.github/workflows/release.yml

@@ -22,7 +22,7 @@ jobs:
     outputs:
       tag_name: ${{ steps.get_tag.outputs.tag_name }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - id: get_tag
         run: |
           source ./tools/read_properties.sh
@@ -63,7 +63,7 @@ jobs:
             echo "Please set GITHUB_TOKEN in the environment to perform a release"
             exit 1
           fi
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Download package artifacts
         uses: actions/download-artifact@v7
         with:

.github/workflows/scorecard.yml

@@ -23,7 +23,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: ossf/scorecard-action@05b42c624433fc40578a4040d5cf5e36ddca8cde # v2.4.2
+      - uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3
         with:
           results_file: results.sarif
           results_format: sarif

.github/workflows/test-otel-unit.yml

@@ -26,7 +26,7 @@ jobs:
     env:
       PHP_VERSION: ${{ matrix.php-version }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Download package artifacts for Debian AMD64
         uses: actions/download-artifact@v7
         with:

.github/workflows/test-packages-component-tests.yml

@@ -27,7 +27,7 @@ jobs:
     env:
       MATRIX_ROW: ${{ matrix.row }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Download built packages
         uses: actions/download-artifact@v7
         with: