Merge branch '5.11.x'

Author: williamdes

.github/workflows/lint-and-analyse-php.yml

@@ -1,5 +1,8 @@
 name: Lint and analyse PHP files
 
+permissions:
+  contents: read
+
 on:
   push:
   pull_request:
@@ -13,7 +16,7 @@ jobs:
         php-version: [ '8.2' ]
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Set up PHP ${{ matrix.php-version }}
         uses: shivammathur/setup-php@v2
@@ -36,7 +39,7 @@ jobs:
         php-version: [ '8.2' ]
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Set up PHP ${{ matrix.php-version }}
         uses: shivammathur/setup-php@v2

.github/workflows/lint-docs.yml

@@ -1,5 +1,8 @@
 name: Lint PHP documentation
 
+permissions:
+  contents: read
+
 on:
   push:
   pull_request:
@@ -10,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: lint php documentation
         uses: sudo-bot/action-doctum@v5

.github/workflows/mutation-tests.yml

@@ -1,5 +1,8 @@
 name: Mutation tests
 
+permissions:
+  contents: read
+
 on:
   push:
     branches:
@@ -20,7 +23,7 @@ jobs:
         operating-system: [ ubuntu-latest ]
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Fetch github.base_ref (for diffing)
         if: ${{ github.base_ref != '' }}

.github/workflows/tests.yml

@@ -1,5 +1,8 @@
 name: Run tests
 
+permissions:
+  contents: read
+
 on:
   push:
   pull_request:
@@ -20,7 +23,7 @@ jobs:
           - { php-version: '8.5', experimental: true, os: ubuntu-latest, composer-options: '--ignore-platform-req=php+' }
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           # Fetch some commits for Scrutinizer coverage upload
           fetch-depth: 15
@@ -46,7 +49,26 @@ jobs:
         run: composer run phpunit
 
       - name: Send coverage
-        uses: codecov/codecov-action@v3
+        uses: codecov/codecov-action@v6
+        # Do not run this step on forked versions of the main repository (example: contributor forks)
+        if: github.repository == 'phpmyadmin/sql-parser'
+        with:
+          fail_ci_if_error: true
+          token: ${{ secrets.CODECOV_TOKEN }}
+          flags: unit-${{ matrix.php-version }}-${{ matrix.os }}
+          name: phpunit-${{ matrix.php-version }}-${{ matrix.os }}
+          report_type: coverage
+
+      - name: Upload test results
+        uses: codecov/codecov-action@v6
+        # Do not run this step on forked versions of the main repository (example: contributor forks)
+        if: ${{ github.repository == 'phpmyadmin/sql-parser' && !cancelled() }}
+        with:
+          fail_ci_if_error: true
+          token: ${{ secrets.CODECOV_TOKEN }}
+          flags: unit-${{ matrix.php-version }}-${{ matrix.os }}
+          name: phpunit-${{ matrix.php-version }}-${{ matrix.os }}
+          report_type: test_results
 
       - name: Send coverage to Scrutinizer
         uses: sudo-bot/action-scrutinizer@latest
@@ -69,7 +91,7 @@ jobs:
           - { php-version: '8.5', experimental: true, os: ubuntu-latest, composer-options: '--ignore-platform-req=php+' }
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           # Fetch some commits for Scrutinizer coverage upload
           fetch-depth: 15