From 3d4ef3184b7141b18f2d0823b8fe62d2c67218bf Mon Sep 17 00:00:00 2001
From: 28winz-bot <28.winz@gmail.com>
Date: Tue, 11 Aug 2026 06:31:55 +0700
Subject: [PATCH] fix(quarkus-verification): modernize stale CI references (ZAP
 image + GitHub Actions v4) (#2424)

* fix(quarkus-verification): use current ghcr.io/zaproxy/zaproxy:stable image

The owasp/zap2docker-* images are deprecated (ZAP left the OWASP org). The
current canonical image published by the ZAP project is
ghcr.io/zaproxy/zaproxy:stable; the packaged scan scripts (zap-api-scan.py)
are unchanged.

Applies to the source skill and the ja-JP, tr translated copies.

Refs: https://www.zaproxy.org/docs/docker/about/

* chore(quarkus-verification): bump GitHub Actions v3 -> v4

actions/checkout, actions/setup-java, actions/cache and codecov/codecov-action
were pinned at v3 (which runs on the deprecated Node 16 runtime). Bump to v4.

Applies to the source skill and the ja-JP, tr translated copies.

* docs(quarkus): finish current CI example refresh

---------

Co-authored-by: haelyra <49814733+haelyra@users.noreply.github.com>
---
 docs/es/skills/quarkus-verification/SKILL.md    |  2 +-
 docs/ja-JP/skills/quarkus-verification/SKILL.md | 11 ++++++-----
 docs/tr/skills/quarkus-verification/SKILL.md    | 11 ++++++-----
 skills/quarkus-verification/SKILL.md            | 11 ++++++-----
 4 files changed, 19 insertions(+), 16 deletions(-)

diff --git a/docs/es/skills/quarkus-verification/SKILL.md b/docs/es/skills/quarkus-verification/SKILL.md
index ac5519e3b..5dbdac002 100644
--- a/docs/es/skills/quarkus-verification/SKILL.md
+++ b/docs/es/skills/quarkus-verification/SKILL.md
@@ -179,7 +179,7 @@ mvn quarkus:list-extensions
 ### OWASP ZAP (Pruebas de Seguridad de API)
 
 ```bash
-docker run -t owasp/zap2docker-stable zap-api-scan.py \
+docker run -t ghcr.io/zaproxy/zaproxy:stable zap-api-scan.py \
   -t http://localhost:8080/q/openapi \
   -f openapi
 ```
diff --git a/docs/ja-JP/skills/quarkus-verification/SKILL.md b/docs/ja-JP/skills/quarkus-verification/SKILL.md
index 0f11612ad..5c147b159 100644
--- a/docs/ja-JP/skills/quarkus-verification/SKILL.md
+++ b/docs/ja-JP/skills/quarkus-verification/SKILL.md
@@ -186,7 +186,7 @@ mvn quarkus:list-extensions
 ### OWASP ZAP (API Security Testing)
 
 ```bash
-docker run -t owasp/zap2docker-stable zap-api-scan.py \
+docker run -t ghcr.io/zaproxy/zaproxy:stable zap-api-scan.py \
   -t http://localhost:8080/q/openapi \
   -f openapi
 ```
@@ -436,16 +436,16 @@ jobs:
   verify:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v7
 
       - name: Set up JDK 21
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v5
         with:
           java-version: '21'
           distribution: 'temurin'
 
       - name: Cache Maven packages
-        uses: actions/cache@v3
+        uses: actions/cache@v6
         with:
           path: ~/.m2
           key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
@@ -460,8 +460,9 @@ jobs:
         run: mvn org.owasp:dependency-check-maven:check
 
       - name: Upload Coverage
-        uses: codecov/codecov-action@v3
+        uses: codecov/codecov-action@v7
         with:
+          token: ${{ secrets.CODECOV_TOKEN }}
           files: target/site/jacoco/jacoco.xml
 ```
 
diff --git a/docs/tr/skills/quarkus-verification/SKILL.md b/docs/tr/skills/quarkus-verification/SKILL.md
index b7d423660..f20c967c3 100644
--- a/docs/tr/skills/quarkus-verification/SKILL.md
+++ b/docs/tr/skills/quarkus-verification/SKILL.md
@@ -186,7 +186,7 @@ mvn quarkus:list-extensions
 ### OWASP ZAP (API Güvenlik Testi)
 
 ```bash
-docker run -t owasp/zap2docker-stable zap-api-scan.py \
+docker run -t ghcr.io/zaproxy/zaproxy:stable zap-api-scan.py \
   -t http://localhost:8080/q/openapi \
   -f openapi
 ```
@@ -436,16 +436,16 @@ jobs:
   verify:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v7
 
       - name: Set up JDK 21
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v5
         with:
           java-version: '21'
           distribution: 'temurin'
 
       - name: Cache Maven packages
-        uses: actions/cache@v3
+        uses: actions/cache@v6
         with:
           path: ~/.m2
           key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
@@ -460,8 +460,9 @@ jobs:
         run: mvn org.owasp:dependency-check-maven:check
 
       - name: Upload Coverage
-        uses: codecov/codecov-action@v3
+        uses: codecov/codecov-action@v7
         with:
+          token: ${{ secrets.CODECOV_TOKEN }}
           files: target/site/jacoco/jacoco.xml
 ```
 
diff --git a/skills/quarkus-verification/SKILL.md b/skills/quarkus-verification/SKILL.md
index 7452cbb47..1dc7ec093 100644
--- a/skills/quarkus-verification/SKILL.md
+++ b/skills/quarkus-verification/SKILL.md
@@ -187,7 +187,7 @@ mvn quarkus:list-extensions
 ### OWASP ZAP (API Security Testing)
 
 ```bash
-docker run -t owasp/zap2docker-stable zap-api-scan.py \
+docker run -t ghcr.io/zaproxy/zaproxy:stable zap-api-scan.py \
   -t http://localhost:8080/q/openapi \
   -f openapi
 ```
@@ -437,16 +437,16 @@ jobs:
   verify:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v7
 
       - name: Set up JDK 21
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v5
         with:
           java-version: '21'
           distribution: 'temurin'
 
       - name: Cache Maven packages
-        uses: actions/cache@v3
+        uses: actions/cache@v6
         with:
           path: ~/.m2
           key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
@@ -461,8 +461,9 @@ jobs:
         run: mvn org.owasp:dependency-check-maven:check
 
       - name: Upload Coverage
-        uses: codecov/codecov-action@v3
+        uses: codecov/codecov-action@v7
         with:
+          token: ${{ secrets.CODECOV_TOKEN }}
           files: target/site/jacoco/jacoco.xml
 ```