From 8cf0e5d61271102c26910dc3f2436932d2148063 Mon Sep 17 00:00:00 2001
From: Wouter Born <github@maindrain.net>
Date: Mon, 12 Oct 2026 16:22:48 +0200
Subject: [PATCH] Update GitHub Action versions

---
 .github/workflows/ci_cd.yml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/ci_cd.yml b/.github/workflows/ci_cd.yml
index be96e7f..7b7704c 100644
--- a/.github/workflows/ci_cd.yml
+++ b/.github/workflows/ci_cd.yml
@@ -36,7 +36,7 @@ jobs:
         run: |
           brew install xcresultparser swiftlint
           curl --fail --location --silent --show-error \
-            https://raw.githubusercontent.com/SonarSource/sonar-scanning-examples/de677435078ca8873be775e7f718d8dd0669c03d/swift-coverage/swift-coverage-example/xccov-to-sonarqube-generic.sh \
+            https://raw.githubusercontent.com/SonarSource/sonar-scanning-examples/7e7cba7dedc50d72a7f5715bce8c6517f5d324b4/swift-coverage/swift-coverage-example/xccov-to-sonarqube-generic.sh \
             -o xccov-to-sonarqube-generic.sh
 
       - name: Swift Package Manager cache
@@ -55,7 +55,7 @@ jobs:
 
       - name: Upload SwiftLint SARIF
         if: ${{ !cancelled() }}
-        uses: github/codeql-action/upload-sarif@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # 4.37.3
+        uses: github/codeql-action/upload-sarif@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2
         with:
           sarif_file: swiftlint.sarif
           category: swiftlint
@@ -76,7 +76,7 @@ jobs:
           -resultBundlePath ORLib.xcresult
 
       - name: Upload XCResult bundle
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         if: ${{ always() && !cancelled() && hashFiles('ORLib.xcresult/**') != '' }}
         with:
           name: ORLib-xcresult
@@ -94,13 +94,13 @@ jobs:
           bash xccov-to-sonarqube-generic.sh ORLib.xcresult/ > Coverage.xml
 
       - name: SonarQube Scan
-        uses: SonarSource/sonarqube-scan-action@22918119ff8e1ca75a623e15c8296b6ea4fbe28f # v8.2.1
+        uses: SonarSource/sonarqube-scan-action@d209202bc7d53ff1cc128f7f907dac145c9d6ae9 # v8.3.0
         if: ${{ !cancelled() }}
         env:
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
 
       - name: Publish Test Report with Insights
-        uses: ctrf-io/github-test-reporter@e500b992f936420eb633c91644cf10d4d71df700 # v1.1.0
+        uses: ctrf-io/github-test-reporter@dbb08957b5b2af918b39136ab2c5532002c7649b # v1.3.2
         if: ${{ !cancelled() }}
         with:
           report-path: 'junit.xml'