dependabot[bot] 91280239f7 ci(deps): bump the github-actions group with 7 updates (#8408) ...

Bumps the github-actions group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [shivammathur/setup-php](https://github.com/shivammathur/setup-php) | `2.37.2` | `2.40.0` |
| [actions/setup-node](https://github.com/actions/setup-node) | `7.0.0` | `7.1.0` |
| [github/codeql-action/init](https://github.com/github/codeql-action) | `4.38.2` | `4.38.3` |
| [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.38.2` | `4.38.3` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `7.0.1` | `7.0.2` |
| [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog) | `3.99.0` | `3.99.2` |
| [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.38.2` | `4.38.3` |


Updates `shivammathur/setup-php` from 2.37.2 to 2.40.0
- [Release notes](https://github.com/shivammathur/setup-php/releases)
- [Commits](https://github.com/shivammathur/setup-php/compare/f3e473d116dcccaddc5834248c87452386958240...eb7c497e18156a6bbabfef1d3a82760b9eda3962)

Updates `actions/setup-node` from 7.0.0 to 7.1.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v7...949feb2413d6458794dcd2491c4babbbce0c15c1)

Updates `github/codeql-action/init` from 4.38.2 to 4.38.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2...24c54180a607b1449ed407dd24f251e4e9147c8d)

Updates `github/codeql-action/analyze` from 4.38.2 to 4.38.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2...24c54180a607b1449ed407dd24f251e4e9147c8d)

Updates `actions/upload-artifact` from 7.0.1 to 7.0.2
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v7.0.1...cf430e030ddbb5b0abf93d22962f4752f3646cd9)

Updates `trufflesecurity/trufflehog` from 3.99.0 to 3.99.2
- [Release notes](https://github.com/trufflesecurity/trufflehog/releases)
- [Commits](https://github.com/trufflesecurity/trufflehog/compare/b2b0a92070f206ab7b5a1105d82a7f2f48d92341...e76dff8a7e57d6df0c60ad8cbf5d5cba505a8fc9)

Updates `github/codeql-action/upload-sarif` from 4.38.2 to 4.38.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2...24c54180a607b1449ed407dd24f251e4e9147c8d)

---
updated-dependencies:
- dependency-name: shivammathur/setup-php
  dependency-version: 2.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/setup-node
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: github/codeql-action/init
  dependency-version: 4.38.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: github/codeql-action/analyze
  dependency-version: 4.38.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: trufflesecurity/trufflehog
  dependency-version: 3.99.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.38.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

2026-10-16 08:05:45 -04:00

..

actions

ci: install locked shared plugin test dependencies (#8345)

2026-10-14 00:01:08 -07:00

instructions

docs: establish polling performance rules for coding agents (#8291)

2026-10-10 20:23:18 -04:00

ISSUE_TEMPLATE

chore: file new issues with the namespaced labels (#7942)

2026-09-04 14:10:10 -07:00

prompts

ci: consolidate security and performance workflows (#7200)

2026-07-13 14:34:49 -04:00

scripts

fix(ci): [develop] harden dependency installs and Docker build boundaries (#8294)

2026-10-14 22:52:37 -04:00

workflows

ci(deps): bump the github-actions group with 7 updates (#8408)

2026-10-16 08:05:45 -04:00

actionlint.yaml

fix: resolve shellcheck and actionlint issues (#6876)

2026-03-24 08:10:13 -04:00

BRANCH_PROTECTION.md

build: raise the 1.3 floor to PHP 8.3 (#7939)

2026-09-06 08:44:40 -07:00

ci-images.txt

ci: pull database and Rocky Linux images from GHCR (#8377)

2026-10-14 19:34:23 -04:00

CODEOWNERS

chore(governance): add CODEOWNERS and branch-protection doc (#7293)

2026-07-13 14:51:16 -04:00

copilot-instructions.md

docs(agents): keep maintenance fixes within scope (#8387)

2026-10-14 22:40:03 -04:00

dependabot.yml

ci: install locked shared plugin test dependencies (#8345)

2026-10-14 00:01:08 -07:00

FUNDING.yml

Update copyrights to 2026 (#6620)

2026-02-15 22:21:52 -05:00

perf-baseline.json

ci: consolidate security and performance workflows (#7200)

2026-07-13 14:34:49 -04:00