Bump the github-actions group across 1 directory with 2 updates

.github/workflows/code-quality-js.yml

@@ -21,7 +21,7 @@ jobs:
 
         steps:
             -   name: Checkout repository
-                uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+                uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
                 with:
                     # Do not store git credentials in .git -> could be leaked/exposed by infected/malicious action.
                     persist-credentials: false

.github/workflows/code-quality-php.yml

@@ -25,13 +25,13 @@ jobs:
 
         steps:
             -   name: Checkout repository
-                uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+                uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
                 with:
                     # Do not store git credentials in .git -> could be leaked/exposed by infected/malicious action.
                     persist-credentials: false
 
             -   name: Setup PHP and tools
-                uses: shivammathur/setup-php@7c071dfe9dc99bdf297fa79cb49ea005b9fcadbc # v2.37.1
+                uses: shivammathur/setup-php@f3e473d116dcccaddc5834248c87452386958240 # v2.37.2
                 with:
                     php-version: ${{ matrix.php }}
                     tools: composer:v2, cs2pr, phpcs

.github/workflows/composer-diff.yml

@@ -22,14 +22,14 @@ jobs:
             pull-requests: write  # Required to post the diff as a sticky comment
         steps:
             -   name: Checkout repository
-                uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+                uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
                 with:
                     fetch-depth: 0 # Required for IonBazan/composer-diff-action
                     # Do not store git credentials in .git -> could be leaked/exposed by infected/malicious action.
                     persist-credentials: false
 
             -   name: Setup PHP and tools
-                uses: shivammathur/setup-php@7c071dfe9dc99bdf297fa79cb49ea005b9fcadbc # v2.37.1
+                uses: shivammathur/setup-php@f3e473d116dcccaddc5834248c87452386958240 # v2.37.2
                 with:
                     php-version: 8.3
                     tools: composer:v2

.github/workflows/example-plugin.yml

@@ -18,7 +18,7 @@ jobs:
             contents: write  # Required to upload assets to the GitHub release
         steps:
             -   name: Checkout repository
-                uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+                uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
                 with:
                     # Do not store git credentials in .git -> could be leaked/exposed by infected/malicious action.
                     persist-credentials: false
@@ -40,7 +40,7 @@ jobs:
                 run: npm ci
 
             -   name: Setup PHP and tools
-                uses: shivammathur/setup-php@7c071dfe9dc99bdf297fa79cb49ea005b9fcadbc # v2.37.1
+                uses: shivammathur/setup-php@f3e473d116dcccaddc5834248c87452386958240 # v2.37.2
                 with:
                     php-version: 8.3
                     tools: composer:v2

.github/workflows/npm-package.yml

@@ -15,7 +15,7 @@ jobs:
         runs-on: ubuntu-latest
         steps:
             -   name: Checkout repository
-                uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+                uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
                 with:
                     # Do not store git credentials in .git -> could be leaked/exposed by infected/malicious action.
                     persist-credentials: false

.github/workflows/php-package.yml

@@ -17,13 +17,13 @@ jobs:
             contents: write  # Required to upload assets to the GitHub release
         steps:
             -   name: Checkout repository
-                uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+                uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
                 with:
                     # Do not store git credentials in .git -> could be leaked/exposed by infected/malicious action.
                     persist-credentials: false
 
             -   name: Setup PHP and tools
-                uses: shivammathur/setup-php@7c071dfe9dc99bdf297fa79cb49ea005b9fcadbc # v2.37.1
+                uses: shivammathur/setup-php@f3e473d116dcccaddc5834248c87452386958240 # v2.37.2
                 with:
                     php-version: 8.1
                     tools: composer:v2