Upgrade GitHub Actions to latest versions (#25573)
## Summary Upgrade GitHub Actions to their latest versions for improved features, bug fixes, and security updates. ## Changes | Action | Old Version(s) | New Version | Release | Files | |--------|---------------|-------------|---------|-------| | `github/codeql-action/upload-sarif` | [`17573ee`](https://github.com/github/codeql-action/upload-sarif/commit/17573ee1cc1b9d061760f3a006fc4aac4f944fd5) | [`ab28d5c`](https://github.com/github/codeql-action/upload-sarif/commit/ab28d5ce09b08e4700b2296d39d684a7ac71d1e7) | [Release](https://github.com/github/codeql-action/upload-sarif/releases/tag/v4) | scorecard.yml | | `ilammy/msvc-dev-cmd` | [`cec98b9`](https://github.com/ilammy/msvc-dev-cmd/commit/cec98b9d092141f74527d0afa6feb2af698cfe89) | [`0b201ec`](https://github.com/ilammy/msvc-dev-cmd/commit/0b201ec74fa43914dc39ae48a89fd1d8cb592756) | [Release](https://github.com/ilammy/msvc-dev-cmd/releases/tag/release/v1) | test_cpp.yml | | `shivammathur/setup-php` | [`bf6b4fb`](https://github.com/shivammathur/setup-php/commit/bf6b4fbd49ca58e4608c9c89fba0b8d90bd2a39f) | [`44454db`](https://github.com/shivammathur/setup-php/commit/44454db4f0199b8b9685a5d763dc37cbf79108e1) | [Release](https://github.com/shivammathur/setup-php/releases/tag/v2) | test_php.yml | ## Why upgrade? Keeping GitHub Actions up to date ensures: - **Security**: Latest security patches and fixes - **Features**: Access to new functionality and improvements - **Compatibility**: Better support for current GitHub features - **Performance**: Optimizations and efficiency improvements ### Security Note Actions that were previously pinned to commit SHAs remain pinned to SHAs (updated to the latest release SHA) to maintain the security benefits of immutable references. ### Testing These changes only affect CI/CD workflow configurations and should not impact application functionality. The workflows should be tested by running them on a branch before merging. Closes #25573 COPYBARA_INTEGRATE_REVIEW=https://github.com/protocolbuffers/protobuf/pull/25573 from salmanmkc:upgrade-github-actions-node24-general 38d4709fc69793da2adc332074ae96a3ccc34302 PiperOrigin-RevId: 917209106
S
Salman Chishti committed
80340d257c3979fb7590caed7b73907c85f2d5e4
Parent: a738075
Committed by Copybara-Service <copybara-worker@google.com>
on 5/18/2026, 2:04:38 PM