From c3f21680be57d016c0e227b9bcdb7e63b8dea1c6 Mon Sep 17 00:00:00 2001 From: nuno maduro Date: Tue, 12 May 2026 02:31:17 +0100 Subject: [PATCH 1/2] chore: pin GitHub Actions to commit SHAs --- .github/workflows/tests.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml index b061d2f..9702bbc 100644 --- a/.github/workflows/tests.yml +++ b/.github/workflows/tests.yml @@ -15,15 +15,15 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 - name: Setup Node ${{ matrix.node }} - uses: actions/setup-node@v4 + uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 with: node-version: ${{ matrix.node }} - name: Setup PHP - uses: shivammathur/setup-php@v2 + uses: shivammathur/setup-php@accd6127cb78bee3e8082180cb391013d204ef9f # v2 with: php-version: ${{ matrix.php }} tools: composer:v2 From c3e09e7e7bf624f16422dabf57f602f016e863df Mon Sep 17 00:00:00 2001 From: nuno maduro Date: Tue, 12 May 2026 02:31:18 +0100 Subject: [PATCH 2/2] chore: pin GitHub Actions to commit SHAs --- .github/dependabot.yml | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..519a9c8 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,19 @@ +version: 2 +updates: + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly" + groups: + github-actions: + patterns: + - "*" + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly" + target-branch: "3.x" + groups: + github-actions: + patterns: + - "*"