Skip to content

chore(deps): bump the github-actions-updates group with 3 updates#262

Merged
justlevine merged 1 commit intodevelopfrom
dependabot/github_actions/github-actions-updates-8782a51fd6
Mar 16, 2026
Merged

chore(deps): bump the github-actions-updates group with 3 updates#262
justlevine merged 1 commit intodevelopfrom
dependabot/github_actions/github-actions-updates-8782a51fd6

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 16, 2026

Bumps the github-actions-updates group with 3 updates: shivammathur/setup-php, ramsey/composer-install and dorny/paths-filter.

Updates shivammathur/setup-php from 2.36.0 to 2.37.0

Release notes

Sourced from shivammathur/setup-php's releases.

2.37.0

Changelog

  • Updated the action to use Node.js 24. (#1049)

  • Added support for master in the php-version input. It should now set up a nightly build from the master branch of php-src.

  • Added support to install ioncube and zephir_parser extensions on PHP 8.5.

  • Expanded support for installing extensions using Homebrew on macOS from the shivammathur/homebrew-extensions tap. This includes pdo_firebird, sqlsrv, pdo_sqlsrv, pecl_http, swow, xhprof, and several other supported extensions.

  • Improved switching PHP versions on Linux. Missing alternatives should now be registered automatically before switching versions. #1067

  • Improved support for Homebrew on macOS. It should now retry stuck brew commands with an inactivity watchdog.

  • Improved support for adding tools. It should now correctly use the latest release download URL when a version is not specified. (#1064)

  • Improved tool setup and caching on self-hosted runners.

  • Improved support for sqlsrv and pdo_sqlsrv on PHP 8.1 and 8.2.

  • Fixed installing pecl_http on Windows. Switched to downloads.php.net for fixing ICU version post install.

  • Fixed cached couchbase installs on macOS using the shivammathur/cache-extensions action.

  • Replaced @actions/core with local functions to reduce bundle size.

  • Refactored to use ES2024+ features for Node 24.

  • Updated actions used in examples to their latest versions.

  • Updated Node.js dependencies.

Thanks @​theluckystrike for the contribution 🎉

Thanks @​code-kudu, @​ssddanbrown, @​RoundingWell, and @​ntzrbtr for the sponsorship ❤️

For the complete list of changes, please refer to the Full Changelog

Commits
  • accd612 Update dependencies
  • a5c2146 Improve tool cache to not cache persistent urls
  • 6a1d559 Fix regression in pecl_http support [skip ci]
  • 076a5e3 Update actions in examples [skip ci]
  • 00c8f84 Add support for ionCube for PHP 8.5 [skip ci]
  • c033e31 Add support for zephir parser for PHP 8.5 [skip ci]
  • bc6f40a Switch to downloads.php.net in Get-ICUUrl [skip ci]
  • fe26b50 Fix support for pecl_http on Windows [skip ci]
  • e67ff94 Fix caching couchbase on macOS [skip ci]
  • 4e89813 Improve switch_version on Linux
  • Additional commits viewable in compare view

Updates ramsey/composer-install from 3.2.0 to 4.0.0

Release notes

Sourced from ramsey/composer-install's releases.

4.0.0

What's Changed

  • chore: Bump actions/cache from 4.2.4 to 5.0.3 by @​dependabot[bot] in ramsey/composer-install#278

    This necessitates a new major version because actions/cache v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1. This is a breaking change for anyone using self-hosted runners.

Full Changelog: ramsey/composer-install@3.2.1...4.0.0

3.2.1

What's Changed

Full Changelog: ramsey/composer-install@3.2.0...3.2.1

Commits
  • 65e4f84 docs: update badges for v4 branch
  • 853e7d7 chore: Bump actions/cache from 4.2.4 to 5.0.3 (#278)
  • a8d0d95 docs: change example OS name to match reality
  • e8b962c docs: use pinned hash in all examples
  • 822ffe8 fix: use format() to construct file names for hashFiles()
  • 261fbb7 chore: pin actions used in CI workflow
  • See full diff in compare view

Updates dorny/paths-filter from 3.0.2 to 4.0.1

Release notes

Sourced from dorny/paths-filter's releases.

v4.0.0

What's Changed

New Contributors

Full Changelog: dorny/paths-filter@v3.0.3...v4.0.0

v3.0.3

What's Changed

New Contributors

Full Changelog: dorny/paths-filter@v3...v3.0.3

Changelog

Sourced from dorny/paths-filter's changelog.

Changelog

v4.0.0

v3.0.3

v3.0.2

v3.0.1

v3.0.0

v2.11.1

v2.11.0

v2.10.2

v2.10.1

v2.10.0

v2.9.3

v2.9.2

v2.9.1

v2.9.0

... (truncated)

Commits
  • fbd0ab8 feat: add merge_group event support
  • efb1da7 feat: add dist/ freshness check to PR workflow
  • d8f7b06 Merge pull request #302 from dorny/issue-299
  • addbc14 Update README for v4
  • 9d7afb8 Update CHANGELOG for v4.0.0
  • 782470c Merge branch 'releases/v3'
  • d1c1ffe Update CHANGELOG for v3.0.3
  • ce10459 Merge pull request #294 from saschabratton/master
  • 5f40380 feat: update action runtime to node24
  • 668c092 Merge pull request #279 from wardpeet/patch-1
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the github-actions-updates group with 3 updates: [shivammathur/setup-php](https://github.com/shivammathur/setup-php), [ramsey/composer-install](https://github.com/ramsey/composer-install) and [dorny/paths-filter](https://github.com/dorny/paths-filter).


Updates `shivammathur/setup-php` from 2.36.0 to 2.37.0
- [Release notes](https://github.com/shivammathur/setup-php/releases)
- [Commits](shivammathur/setup-php@44454db...accd612)

Updates `ramsey/composer-install` from 3.2.0 to 4.0.0
- [Release notes](https://github.com/ramsey/composer-install/releases)
- [Commits](ramsey/composer-install@a35c6eb...65e4f84)

Updates `dorny/paths-filter` from 3.0.2 to 4.0.1
- [Release notes](https://github.com/dorny/paths-filter/releases)
- [Changelog](https://github.com/dorny/paths-filter/blob/master/CHANGELOG.md)
- [Commits](dorny/paths-filter@de90cc6...fbd0ab8)

---
updated-dependencies:
- dependency-name: shivammathur/setup-php
  dependency-version: 2.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-updates
- dependency-name: ramsey/composer-install
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-updates
- dependency-name: dorny/paths-filter
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Mar 16, 2026
@changeset-bot
Copy link

changeset-bot bot commented Mar 16, 2026

⚠️ No Changeset found

Latest commit: f9fde2d

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@coveralls
Copy link

Pull Request Test Coverage Report for Build 23170487891

Details

  • 0 of 0 changed or added relevant lines in 0 files are covered.
  • No unchanged relevant lines lost coverage.
  • Overall coverage remained the same at 59.571%

Totals Coverage Status
Change from base Build 23099245648: 0.0%
Covered Lines: 484
Relevant Lines: 720

💛 - Coveralls

@justlevine justlevine merged commit 2f5c279 into develop Mar 16, 2026
18 of 19 checks passed
@justlevine justlevine deleted the dependabot/github_actions/github-actions-updates-8782a51fd6 branch March 16, 2026 23:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants