Bump action and setup codecov using the token method

Author: williamdes

.github/workflows/lint-and-analyse-php.yml

@@ -13,7 +13,7 @@ jobs:
         php-version: [ '7.2' ]
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Set up PHP ${{ matrix.php-version }}
         uses: shivammathur/setup-php@v2
@@ -36,7 +36,7 @@ jobs:
         php-version: [ '7.4' ]
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Set up PHP ${{ matrix.php-version }}
         uses: shivammathur/setup-php@v2

.github/workflows/lint-docs.yml

@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: lint php documentation
         uses: sudo-bot/action-doctum@v5

.github/workflows/mutation-tests.yml

@@ -16,7 +16,7 @@ jobs:
         operating-system: [ ubuntu-latest ]
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Fetch github.base_ref (for diffing)
         if: ${{ github.base_ref != '' }}

.github/workflows/tests.yml

@@ -20,7 +20,7 @@ jobs:
           - { php-version: '8.5', experimental: true, os: ubuntu-latest, composer-options: '--ignore-platform-req=php+' }
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           # Fetch some commits for Scrutinizer coverage upload
           fetch-depth: 15
@@ -50,7 +50,26 @@ jobs:
         run: composer run phpunit
 
       - name: Send coverage
-        uses: codecov/codecov-action@v3
+        uses: codecov/codecov-action@v5
+        # Do not run this step on forked versions of the main repository (example: contributor forks)
+        if: github.repository == 'phpmyadmin/sql-parser'
+        with:
+          fail_ci_if_error: true
+          token: ${{ secrets.CODECOV_TOKEN }}
+          flags: unit-${{ matrix.php-version }}-${{ matrix.os }}
+          name: phpunit-${{ matrix.php-version }}-${{ matrix.os }}
+          report_type: coverage
+
+      - name: Upload test results
+        uses: codecov/codecov-action@v5
+        # Do not run this step on forked versions of the main repository (example: contributor forks)
+        if: ${{ github.repository == 'phpmyadmin/sql-parser' && !cancelled() }}
+        with:
+          fail_ci_if_error: true
+          token: ${{ secrets.CODECOV_TOKEN }}
+          flags: unit-${{ matrix.php-version }}-${{ matrix.os }}
+          name: phpunit-${{ matrix.php-version }}-${{ matrix.os }}
+          report_type: test_results
 
       - name: Send coverage to Scrutinizer
         uses: sudo-bot/action-scrutinizer@latest
@@ -73,7 +92,7 @@ jobs:
           - { php-version: '8.5', experimental: true, os: ubuntu-latest, composer-options: '--ignore-platform-req=php+' }
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           # Fetch some commits for Scrutinizer coverage upload
           fetch-depth: 15