From fb93fb157798f1168c43bc0f81366e6fde61249d Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 15 Dec 2025 18:08:33 +0000
Subject: [PATCH] build(deps): Bump the dependencies group

Bumps the dependencies group in /.github/workflows with 4 updates: [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request), [actions/upload-artifact](https://github.com/actions/upload-artifact), [actions/download-artifact](https://github.com/actions/download-artifact) and [actions/cache](https://github.com/actions/cache).


Updates `peter-evans/create-pull-request` from 7 to 8
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](https://github.com/peter-evans/create-pull-request/compare/v7...v8)

Updates `actions/upload-artifact` from 5 to 6
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v5...v6)

Updates `actions/download-artifact` from 6 to 7
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v6...v7)

Updates `actions/cache` from 4 to 5
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v4...v5)

---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: actions/upload-artifact
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: actions/download-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: actions/cache
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/composer-root-version.yaml | 2 +-
 .github/workflows/e2e-tests.yaml             | 6 +++---
 .github/workflows/release.yaml               | 6 +++---
 .github/workflows/security.yaml              | 2 +-
 4 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/composer-root-version.yaml b/.github/workflows/composer-root-version.yaml
index 6aba40d5..1f9683fe 100644
--- a/.github/workflows/composer-root-version.yaml
+++ b/.github/workflows/composer-root-version.yaml
@@ -132,7 +132,7 @@ jobs:
 
             -   name: Create Pull Request
                 if: env.composer_root_version_changed == 'true'
-                uses: peter-evans/create-pull-request@v7
+                uses: peter-evans/create-pull-request@v8
                 with:
                     token: ${{ secrets.GITHUB_TOKEN }}
                     branch-suffix: random
diff --git a/.github/workflows/e2e-tests.yaml b/.github/workflows/e2e-tests.yaml
index f0692717..6a60ab3a 100644
--- a/.github/workflows/e2e-tests.yaml
+++ b/.github/workflows/e2e-tests.yaml
@@ -49,7 +49,7 @@ jobs:
             -   name: Ensure the PHAR works
                 run: bin/php-scoper.phar --version
 
-            -   uses: actions/upload-artifact@v5
+            -   uses: actions/upload-artifact@v6
                 name: Upload the PHAR artifact
                 with:
                     name: php-scoper-phar-${{ matrix.php }}
@@ -121,7 +121,7 @@ jobs:
                 uses: ./.github/actions/install-vendor
 
             -   name: Retrieve built PHAR
-                uses: actions/download-artifact@v6
+                uses: actions/download-artifact@v7
                 with:
                     name: php-scoper-phar-${{ matrix.php }}
                     path: bin
@@ -186,7 +186,7 @@ jobs:
                     java-version: 11
 
             -   name: Retrieve built PHP-Scoper PHAR
-                uses: actions/download-artifact@v6
+                uses: actions/download-artifact@v7
                 with:
                     name: php-scoper-phar-${{ matrix.php-version }}
                     path: bin
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 01b7831a..f041e4d1 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -69,7 +69,7 @@ jobs:
                        bin/php-scoper.phar
 
             -   name: Upload the PHAR artifact
-                uses: actions/upload-artifact@v5
+                uses: actions/upload-artifact@v6
                 with:
                     name: php-scoper-phar
                     path: |
@@ -85,7 +85,7 @@ jobs:
         permissions:
             contents: write
         steps:
-            -   uses: actions/download-artifact@v6
+            -   uses: actions/download-artifact@v7
                 with:
                     name: php-scoper-phar
                     path: .
@@ -112,7 +112,7 @@ jobs:
                 with:
                     php-version: '8.2'
 
-            -   uses: actions/download-artifact@v6
+            -   uses: actions/download-artifact@v7
                 with:
                     name: php-scoper-phar
                     path: .
diff --git a/.github/workflows/security.yaml b/.github/workflows/security.yaml
index 013ff092..eeb41e98 100644
--- a/.github/workflows/security.yaml
+++ b/.github/workflows/security.yaml
@@ -26,7 +26,7 @@ jobs:
                     fetch-depth: 0
 
             -   name: Cache the vulnerability database
-                uses: actions/cache@v4
+                uses: actions/cache@v5
                 id: cache-db
                 with:
                     path: ~/.symfony/cache