From 067df92a1c2c9d6480b3d9c9a3d7351a2654e51d Mon Sep 17 00:00:00 2001
From: Soner Sayakci <s.sayakci@gmail.com>
Date: Thu, 14 May 2026 10:26:21 +0200
Subject: [PATCH 1/2] chore: update all GitHub Actions to their latest major
 versions

- actions/checkout: v4 -> v6
- actions/cache: v4 -> v5
- actions/upload-artifact: v4/v5 -> v7
- actions/download-artifact: v4 -> v8
- actions/setup-node: v4 -> v6
- actions/github-script: v8 -> v9
- shivammathur/setup-php: pinned 2.35.5 -> v2
- ramsey/composer-install: v3 -> v4
- mukunku/tag-exists-action: v1.6.0 -> v1.7.0
- codecov/codecov-action: v4/v5 -> v6
- docker/build-push-action: v6 -> v7
- shopware/shopware-cli-action: v1 -> v3
- shopware/setup-shopware: main -> v2
---
 .github/workflows/admin-jest.yml         | 2 +-
 .github/workflows/build-docker-image.yml | 2 +-
 .github/workflows/build-zip.yml          | 2 +-
 .github/workflows/e2e.yml                | 4 ++--
 .github/workflows/phpstan.yml            | 2 +-
 .github/workflows/phpunit.yml            | 4 ++--
 .github/workflows/store-release.yml      | 2 +-
 admin-jest/action.yml                    | 2 +-
 ai-release-notes/action.yml              | 6 +++---
 build-zip/action.yml                     | 4 ++--
 cs-fixer/action.yml                      | 4 ++--
 downstream/action.yml                    | 2 +-
 eslint/action.yml                        | 6 +++---
 extension-verifier/action.yml            | 2 +-
 phpstan/action.yml                       | 2 +-
 phpunit/action.yml                       | 2 +-
 project-validate/action.yml              | 2 +-
 setup-extension/action.yml               | 6 +++---
 store-release/action.yml                 | 2 +-
 19 files changed, 29 insertions(+), 29 deletions(-)

diff --git a/.github/workflows/admin-jest.yml b/.github/workflows/admin-jest.yml
index d9eb974..0ff6832 100644
--- a/.github/workflows/admin-jest.yml
+++ b/.github/workflows/admin-jest.yml
@@ -67,7 +67,7 @@ jobs:
 
       - name: Upload Coverage
         if: inputs.uploadCoverage == true
-        uses: codecov/codecov-action@v5
+        uses: codecov/codecov-action@v6
         env:
           CODECOV_TOKEN: ${{ secrets.codecovToken }}
         with:
diff --git a/.github/workflows/build-docker-image.yml b/.github/workflows/build-docker-image.yml
index eb35007..8d41a72 100644
--- a/.github/workflows/build-docker-image.yml
+++ b/.github/workflows/build-docker-image.yml
@@ -78,7 +78,7 @@ jobs:
             GITHUB_REPOSITORY_NAME: ${{ github.event.repository.name }}
 
         - name: Build and push
-          uses: docker/build-push-action@v6
+          uses: docker/build-push-action@v7
           with:
             context: .
             file: ./docker/Dockerfile
diff --git a/.github/workflows/build-zip.yml b/.github/workflows/build-zip.yml
index 236a4ea..fa78ed6 100644
--- a/.github/workflows/build-zip.yml
+++ b/.github/workflows/build-zip.yml
@@ -26,7 +26,7 @@ jobs:
       - name: Validate
         run: shopware-cli extension validate ${{ inputs.extensionName }}.zip
       - name: Upload artifact
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v7
         with:
           name: ${{ inputs.extensionName }}
           path: ${{ inputs.extensionName }}.zip
diff --git a/.github/workflows/e2e.yml b/.github/workflows/e2e.yml
index 4148584..8b4233b 100644
--- a/.github/workflows/e2e.yml
+++ b/.github/workflows/e2e.yml
@@ -110,13 +110,13 @@ jobs:
           fi
       - name: Upload Playwright Artifacts
         if: ${{ inputs.e2eTestFramework == 'playwright' && failure() }}
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v7
         with:
           name: playwright-screenshots
           path: custom/plugins/${{ inputs.extensionName }}/${{ inputs.e2ePath }}/test-results
       - name: Upload Cypress Artifacts
         if: ${{ inputs.e2eTestFramework == 'cypress' && failure() }}
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v7
         with:
           name: cypress-screenshots
           path: custom/plugins/${{ inputs.extensionName }}/${{ inputs.e2ePath }}/cypress/screenshots
\ No newline at end of file
diff --git a/.github/workflows/phpstan.yml b/.github/workflows/phpstan.yml
index 01b529d..11ed6b1 100644
--- a/.github/workflows/phpstan.yml
+++ b/.github/workflows/phpstan.yml
@@ -51,7 +51,7 @@ jobs:
         id: version
         if: ${{ inputs.shopwareVersion == '.auto' || inputs.shopwareVersion == '' }}
       - name: Setup Shopware
-        uses: shopware/setup-shopware@main
+        uses: shopware/setup-shopware@v2
         with:
           shopware-version: ${{ steps.version.outputs.shopware-version || inputs.shopwareVersion }}
           shopware-repository: ${{ inputs.shopware-repository }}
diff --git a/.github/workflows/phpunit.yml b/.github/workflows/phpunit.yml
index e309aa7..b0c276f 100644
--- a/.github/workflows/phpunit.yml
+++ b/.github/workflows/phpunit.yml
@@ -71,7 +71,7 @@ jobs:
         id: version
         if: ${{ inputs.shopwareVersion == '.auto' || inputs.shopwareVersion == '' }}
       - name: Setup Shopware
-        uses: shopware/setup-shopware@main
+        uses: shopware/setup-shopware@v2
         with:
           shopware-version: ${{ steps.version.outputs.shopware-version || inputs.shopwareVersion }}
           shopware-repository: ${{ inputs.shopware-repository }}
@@ -109,7 +109,7 @@ jobs:
           fi
       - name: Upload Coverage
         if: inputs.uploadCoverage == true
-        uses: codecov/codecov-action@v5
+        uses: codecov/codecov-action@v6
         env:
           CODECOV_TOKEN: ${{ secrets.codecovToken }}
         with:
diff --git a/.github/workflows/store-release.yml b/.github/workflows/store-release.yml
index 47ecad0..5d00abd 100644
--- a/.github/workflows/store-release.yml
+++ b/.github/workflows/store-release.yml
@@ -54,7 +54,7 @@ jobs:
           shopware-cli extension zip --git-commit ${{ github.sha }} "${{ inputs.path }}" --release
           mv ${{ inputs.extensionName }}-${{ github.sha }}.zip ${{ inputs.extensionName }}.zip
       - name: Upload Artifact
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v7
         with:
           name: ${{ inputs.extensionName }}
           path: ${{ inputs.extensionName }}.zip
diff --git a/admin-jest/action.yml b/admin-jest/action.yml
index 7a75bce..6af962b 100644
--- a/admin-jest/action.yml
+++ b/admin-jest/action.yml
@@ -24,7 +24,7 @@ runs:
 
     - name: Upload Coverage
       if: inputs.uploadCoverage == true
-      uses: codecov/codecov-action@v4
+      uses: codecov/codecov-action@v6
       with:
         root_dir: ${{ github.workspace }}/custom/plugins/${{ inputs.extensionName }}
         working-directory: ${{ github.workspace }}/custom/plugins/${{ inputs.extensionName }}
diff --git a/ai-release-notes/action.yml b/ai-release-notes/action.yml
index ef5ddfb..f9db9bc 100644
--- a/ai-release-notes/action.yml
+++ b/ai-release-notes/action.yml
@@ -112,7 +112,7 @@ runs:
 
     - name: Generate raw release notes via GitHub API
       id: raw-notes
-      uses: actions/github-script@v8
+      uses: actions/github-script@v9
       env:
         INPUT_PREV_TAG: "${{ steps.prev-tag.outputs.prev_tag }}"
       with:
@@ -138,7 +138,7 @@ runs:
 
     - name: Rewrite release notes with AI
       id: ai-notes
-      uses: actions/github-script@v8
+      uses: actions/github-script@v9
       env:
         GITHUB_TOKEN: "${{ inputs.github-token }}"
         RAW_NOTES: "${{ steps.raw-notes.outputs.body }}"
@@ -251,7 +251,7 @@ runs:
     - name: Create GitHub release
       id: create-release
       if: inputs.create-release == 'true'
-      uses: actions/github-script@v8
+      uses: actions/github-script@v9
       env:
         AI_NOTES: "${{ steps.ai-notes.outputs.notes }}"
         INPUT_RELEASE_NAME: "${{ inputs.release-name }}"
diff --git a/build-zip/action.yml b/build-zip/action.yml
index 3492e31..4ca686c 100644
--- a/build-zip/action.yml
+++ b/build-zip/action.yml
@@ -40,7 +40,7 @@ runs:
           # fetch all git entries for changelog generation
           fetch-depth: 0
     - name: Install shopware-cli
-      uses: shopware/shopware-cli-action@v1
+      uses: shopware/shopware-cli-action@v3
     - name: Build
       shell: bash
       run: shopware-cli extension zip "${{ inputs.path }}" ${{ (inputs.disableGit == 'false' && format('--git-commit {0}', github.sha)) || '--disable-git' }} --release
@@ -51,7 +51,7 @@ runs:
       shell: bash
       run: shopware-cli extension validate ${{ inputs.extensionName }}.zip
     - name: Upload artifact
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       id: upload
       with:
         name: ${{ inputs.extensionName }}.zip
diff --git a/cs-fixer/action.yml b/cs-fixer/action.yml
index b7e2008..0529d06 100644
--- a/cs-fixer/action.yml
+++ b/cs-fixer/action.yml
@@ -15,10 +15,10 @@ runs:
   using: "composite"
   steps:
     - name: Checkout code
-      uses: actions/checkout@v4
+      uses: actions/checkout@v6
 
     - name: Setup PHP
-      uses: shivammathur/setup-php@2.35.5
+      uses: shivammathur/setup-php@v2
       with:
         php-version: 8.2
         tools: php-cs-fixer:3.63.2, cs2pr
diff --git a/downstream/action.yml b/downstream/action.yml
index 5370cc8..4931690 100644
--- a/downstream/action.yml
+++ b/downstream/action.yml
@@ -62,7 +62,7 @@ runs:
   using: "composite"
   steps:
     - name: Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@v6
     - uses: shopware/octo-sts-action@main
       if: ${{ ! inputs.token }}
       id: sts
diff --git a/eslint/action.yml b/eslint/action.yml
index 6de6297..2c835c3 100644
--- a/eslint/action.yml
+++ b/eslint/action.yml
@@ -54,19 +54,19 @@ runs:
       id: version
       if: ${{ inputs.shopwareVersion == '.auto' || inputs.shopwareVersion == '' }}
     - name: Clone Shopware
-      uses: actions/checkout@v4
+      uses: actions/checkout@v6
       with:
         repository: ${{ inputs.shopware-repository || 'shopware/shopware' }}
         ref: ${{ steps.version.outputs.shopware-version || inputs.shopwareVersion }}
         token: ${{ inputs.shopware-github-token }}
 
     - name: Clone Extension
-      uses: actions/checkout@v4
+      uses: actions/checkout@v6
       with:
         path: custom/plugins/${{ inputs.extensionName }}
 
     - name: Setup Node
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@v6
       with:
         node-version: "24.x"
 
diff --git a/extension-verifier/action.yml b/extension-verifier/action.yml
index 342bfa6..095beb9 100644
--- a/extension-verifier/action.yml
+++ b/extension-verifier/action.yml
@@ -22,7 +22,7 @@ runs:
   using: "composite"
   steps:
     - name: Install Shopware-CLI
-      uses: shopware/shopware-cli-action@v1
+      uses: shopware/shopware-cli-action@v3
     - name: Run verifier
       if: inputs.action == 'check'
       shell: bash
diff --git a/phpstan/action.yml b/phpstan/action.yml
index 1451553..b2fff01 100644
--- a/phpstan/action.yml
+++ b/phpstan/action.yml
@@ -25,7 +25,7 @@ runs:
       run: |
         printf "parameters:\n  tmpDir: ${{ inputs.cacheDir }}\nincludes:\n  - phpstan.neon.dist" > phpstan.neon
     - name: PHPStan cache
-      uses: actions/cache@v4
+      uses: actions/cache@v5
       with:
         path: ${{ inputs.cacheDir }}
         key: ${{ runner.OS }}-${{ github.repository }}-phpstan-${{ github.sha }}
diff --git a/phpunit/action.yml b/phpunit/action.yml
index 00f16cc..3d06b44 100644
--- a/phpunit/action.yml
+++ b/phpunit/action.yml
@@ -32,7 +32,7 @@ runs:
         fi
     - name: Upload Coverage
       if: inputs.uploadCoverage == true
-      uses: codecov/codecov-action@v4
+      uses: codecov/codecov-action@v6
       with:
         root_dir: ${{ github.workspace }}/custom/plugins/${{ inputs.extensionName }}
         working-directory: ${{ github.workspace }}/custom/plugins/${{ inputs.extensionName }}
diff --git a/project-validate/action.yml b/project-validate/action.yml
index a262c01..dee7815 100644
--- a/project-validate/action.yml
+++ b/project-validate/action.yml
@@ -35,7 +35,7 @@ runs:
       uses: shopware/shopware-cli-action@v3
 
     - name: Install dependencies
-      uses: ramsey/composer-install@v3
+      uses: ramsey/composer-install@v4
 
     - name: Validate Project
       shell: bash
diff --git a/setup-extension/action.yml b/setup-extension/action.yml
index 69fd2f4..a5d62ef 100644
--- a/setup-extension/action.yml
+++ b/setup-extension/action.yml
@@ -124,7 +124,7 @@ runs:
       if: ${{ inputs.shopwareVersion == '.auto' || inputs.shopwareVersion == '' }}
 
     - name: Setup Shopware
-      uses: shopware/setup-shopware@main
+      uses: shopware/setup-shopware@v2
       with:
         shopware-version: ${{ steps.version.outputs.shopware-version || inputs.shopwareVersion }}
         shopware-repository: ${{ inputs.shopware-repository  || 'shopware/shopware' }}
@@ -144,7 +144,7 @@ runs:
 
     - name: Clone Extension
       if: ${{ ! inputs.extension-zip }}
-      uses: actions/checkout@v4
+      uses: actions/checkout@v6
       with:
         ref: ${{ inputs.extensionRef || github.ref }}
         path: custom/plugins/${{ inputs.extensionName }}
@@ -152,7 +152,7 @@ runs:
 
     - name: Download extension zip
       if: ${{ inputs.extension-zip }}
-      uses: actions/download-artifact@v4
+      uses: actions/download-artifact@v8
       with:
         name: ${{ inputs.extension-zip }}
         path: custom/plugins/${{ inputs.extensionName }}
diff --git a/store-release/action.yml b/store-release/action.yml
index 88747bc..d3da3f2 100644
--- a/store-release/action.yml
+++ b/store-release/action.yml
@@ -64,7 +64,7 @@ runs:
       run: |
         echo "EXTENSION_VERSION=$(shopware-cli extension get-version .)" >> $GITHUB_ENV
     - name: Check Tag existence
-      uses: mukunku/tag-exists-action@v1.6.0
+      uses: mukunku/tag-exists-action@v1.7.0
       id: checkTag
       with:
         tag: ${{ env.EXTENSION_VERSION }}

From 227d774bd05632f726fbc7885446257877a03f72 Mon Sep 17 00:00:00 2001
From: Soner Sayakci <s.sayakci@gmail.com>
Date: Thu, 14 May 2026 10:28:00 +0200
Subject: [PATCH 2/2] fix: keep shopware/setup-shopware at @main

---
 .github/workflows/e2e.yml     | 2 +-
 .github/workflows/phpstan.yml | 2 +-
 .github/workflows/phpunit.yml | 2 +-
 setup-extension/action.yml    | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/e2e.yml b/.github/workflows/e2e.yml
index 8b4233b..bb3ca5c 100644
--- a/.github/workflows/e2e.yml
+++ b/.github/workflows/e2e.yml
@@ -61,7 +61,7 @@ jobs:
         id: version
         if: ${{ inputs.shopwareVersion == '.auto' || inputs.shopwareVersion == '' }}
       - name: Setup Shopware
-        uses: shopware/setup-shopware@v2
+        uses: shopware/setup-shopware@main
         with:
           shopware-version: ${{ steps.version.outputs.shopware-version || inputs.shopwareVersion }}
           php-version: ${{ inputs.phpVersion }}
diff --git a/.github/workflows/phpstan.yml b/.github/workflows/phpstan.yml
index 11ed6b1..01b529d 100644
--- a/.github/workflows/phpstan.yml
+++ b/.github/workflows/phpstan.yml
@@ -51,7 +51,7 @@ jobs:
         id: version
         if: ${{ inputs.shopwareVersion == '.auto' || inputs.shopwareVersion == '' }}
       - name: Setup Shopware
-        uses: shopware/setup-shopware@v2
+        uses: shopware/setup-shopware@main
         with:
           shopware-version: ${{ steps.version.outputs.shopware-version || inputs.shopwareVersion }}
           shopware-repository: ${{ inputs.shopware-repository }}
diff --git a/.github/workflows/phpunit.yml b/.github/workflows/phpunit.yml
index b0c276f..e97d12a 100644
--- a/.github/workflows/phpunit.yml
+++ b/.github/workflows/phpunit.yml
@@ -71,7 +71,7 @@ jobs:
         id: version
         if: ${{ inputs.shopwareVersion == '.auto' || inputs.shopwareVersion == '' }}
       - name: Setup Shopware
-        uses: shopware/setup-shopware@v2
+        uses: shopware/setup-shopware@main
         with:
           shopware-version: ${{ steps.version.outputs.shopware-version || inputs.shopwareVersion }}
           shopware-repository: ${{ inputs.shopware-repository }}
diff --git a/setup-extension/action.yml b/setup-extension/action.yml
index a5d62ef..4660997 100644
--- a/setup-extension/action.yml
+++ b/setup-extension/action.yml
@@ -124,7 +124,7 @@ runs:
       if: ${{ inputs.shopwareVersion == '.auto' || inputs.shopwareVersion == '' }}
 
     - name: Setup Shopware
-      uses: shopware/setup-shopware@v2
+      uses: shopware/setup-shopware@main
       with:
         shopware-version: ${{ steps.version.outputs.shopware-version || inputs.shopwareVersion }}
         shopware-repository: ${{ inputs.shopware-repository  || 'shopware/shopware' }}