From d209202bc7d53ff1cc128f7f907dac145c9d6ae9 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 29 Sep 2026 16:28:37 +0200
Subject: [PATCH] Update GitHub Actions dependencies (major) (#271)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Sebastian Zumbrunn <sebastian.zumbrunn@sonarsource.com>
---
 .github/workflows/qa-main.yml    | 2 +-
 .github/workflows/unit-tests.yml | 4 ++--
 deprecated-c-cpp/action.yml      | 2 +-
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/qa-main.yml b/.github/workflows/qa-main.yml
index 7bd1008..8dcc162 100644
--- a/.github/workflows/qa-main.yml
+++ b/.github/workflows/qa-main.yml
@@ -425,7 +425,7 @@ jobs:
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
       - name: SonarQube Cache
-        uses: actions/cache@caa296126883cff596d87d8935842f9db880ef25 # v5.1.0
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: ${{ github.workspace }}/.sonar/cache
           key: ${{ runner.os }}-${{ runner.arch }}-sonar
diff --git a/.github/workflows/unit-tests.yml b/.github/workflows/unit-tests.yml
index da90526..3cc87ce 100644
--- a/.github/workflows/unit-tests.yml
+++ b/.github/workflows/unit-tests.yml
@@ -10,7 +10,7 @@ jobs:
     runs-on: github-ubuntu-latest-s
     permissions:
       id-token: write
-      contents: read
+      contents: write
 
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
@@ -22,7 +22,7 @@ jobs:
           cache: "npm"
 
       - name: Configure NPM with Repox
-        uses: SonarSource/ci-github-actions/config-npm@v1
+        uses: SonarSource/ci-github-actions/config-npm@v2
 
       - name: Install dependencies
         run: npm ci
diff --git a/deprecated-c-cpp/action.yml b/deprecated-c-cpp/action.yml
index 30cf38e..15dbcf8 100644
--- a/deprecated-c-cpp/action.yml
+++ b/deprecated-c-cpp/action.yml
@@ -71,7 +71,7 @@ runs:
     - name: Cache sonar-scanner installation
       id: cache-sonar-tools
       if: inputs.cache-binaries == 'true'
-      uses: actions/cache@caa296126883cff596d87d8935842f9db880ef25 # v5.1.0
+      uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
       env:
         # The default value is 60mins. Reaching timeout is treated the same as a cache miss.
         SEGMENT_DOWNLOAD_TIMEOUT_MINS: 1