From dc0600fb0aa78485d96495f63311e8103bd31eba Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 13 Sep 2026 05:03:59 +0000 Subject: [PATCH 1/2] chore(deps): bump the github-actions group across 1 directory with 4 updates Bumps the github-actions group with 4 updates in the / directory: [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action), [actions/cache](https://github.com/actions/cache), [github/codeql-action](https://github.com/github/codeql-action) and [ossf/scorecard-action](https://github.com/ossf/scorecard-action). Updates `zizmorcore/zizmor-action` from 0.5.6 to 0.6.3 - [Release notes](https://github.com/zizmorcore/zizmor-action/releases) - [Commits](https://github.com/zizmorcore/zizmor-action/compare/v0.5.6...v0.6.3) Updates `actions/cache` from 5 to 6 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/v5...v6) Updates `github/codeql-action` from 4.36.2 to 4.37.9 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v4.36.2...v4.37.9) Updates `ossf/scorecard-action` from 2.4.3 to 2.4.4 - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](https://github.com/ossf/scorecard-action/compare/v2.4.3...v2.4.4) --- updated-dependencies: - dependency-name: actions/cache dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: github/codeql-action dependency-version: 4.37.7 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: ossf/scorecard-action dependency-version: 2.4.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: zizmorcore/zizmor-action dependency-version: 0.6.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/actions-security.yml | 2 +- .github/workflows/main.yml | 12 ++++++------ .github/workflows/scorecard.yml | 2 +- 3 files changed, 8 insertions(+), 8 deletions(-) diff --git a/.github/workflows/actions-security.yml b/.github/workflows/actions-security.yml index 321c1196..ada3c9d0 100644 --- a/.github/workflows/actions-security.yml +++ b/.github/workflows/actions-security.yml @@ -24,7 +24,7 @@ jobs: persist-credentials: false - name: Run zizmor - uses: zizmorcore/zizmor-action@v0.5.6 + uses: zizmorcore/zizmor-action@v0.6.3 with: advanced-security: false annotations: true diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index b5cc7361..ef41aaf0 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -56,7 +56,7 @@ jobs: key: ${{ env.EXTENSIONS_CACHE_KEY }} - name: Cache PHP extensions - uses: actions/cache@v5 + uses: actions/cache@v6 with: path: ${{ steps.extcache.outputs.dir }} key: ${{ steps.extcache.outputs.key }} @@ -114,7 +114,7 @@ jobs: key: ${{ env.EXTENSIONS_CACHE_KEY }} - name: Cache PHP extensions - uses: actions/cache@v5 + uses: actions/cache@v6 with: path: ${{ steps.extcache.outputs.dir }} key: ${{ steps.extcache.outputs.key }} @@ -163,7 +163,7 @@ jobs: key: ${{ env.EXTENSIONS_CACHE_KEY }} - name: Cache PHP extensions - uses: actions/cache@v5 + uses: actions/cache@v6 with: path: ${{ steps.extcache.outputs.dir }} key: ${{ steps.extcache.outputs.key }} @@ -217,7 +217,7 @@ jobs: key: ${{ env.EXTENSIONS_CACHE_KEY }} - name: Cache PHP extensions - uses: actions/cache@v5 + uses: actions/cache@v6 with: path: ${{ steps.extcache.outputs.dir }} key: ${{ steps.extcache.outputs.key }} @@ -252,7 +252,7 @@ jobs: - name: Upload Psalm report to GitHub Code Scanning if: ${{ always() && hashFiles('results.sarif') != '' }} - uses: github/codeql-action/upload-sarif@v4.36.2 + uses: github/codeql-action/upload-sarif@v4.37.9 with: sarif_file: results.sarif category: psalm @@ -318,7 +318,7 @@ jobs: key: ${{ env.EXTENSIONS_CACHE_KEY }} - name: Cache PHP extensions - uses: actions/cache@v5 + uses: actions/cache@v6 with: path: ${{ steps.extcache.outputs.dir }} key: ${{ steps.extcache.outputs.key }} diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index db6d7a28..51d7741f 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -29,7 +29,7 @@ jobs: persist-credentials: false - name: Run OpenSSF Scorecard - uses: ossf/scorecard-action@v2.4.3 + uses: ossf/scorecard-action@v2.4.4 with: results_file: scorecard-results.json results_format: json From 52dc71ee848b4c6283d9d28ed8a398903f6be140 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 17 Sep 2026 06:03:15 +0000 Subject: [PATCH 2/2] chore(deps-dev): update guzzlehttp/guzzle requirement Updates the requirements on [guzzlehttp/guzzle](https://github.com/guzzle/guzzle) to permit the latest version. - [Release notes](https://github.com/guzzle/guzzle/releases) - [Changelog](https://github.com/guzzle/guzzle/blob/8.2/CHANGELOG.md) - [Commits](https://github.com/guzzle/guzzle/compare/7.15.3...8.2.0) --- updated-dependencies: - dependency-name: guzzlehttp/guzzle dependency-version: 8.2.0 dependency-type: direct:development ... Signed-off-by: dependabot[bot] --- composer.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/composer.json b/composer.json index 028edb06..a4c27b91 100644 --- a/composer.json +++ b/composer.json @@ -92,7 +92,7 @@ "cweagans/composer-patches": "^2.0.0", "fakerphp/faker": "^1.24.1", "google/recaptcha": "^1.5", - "guzzlehttp/guzzle": "^7.15.3", + "guzzlehttp/guzzle": "^8.2.0", "jetbrains/phpstorm-attributes": "^1.3", "joshtronic/php-loremipsum": "^3.0.0", "league/csv": "^9.28.0", @@ -126,7 +126,7 @@ "cweagans/composer-patches": "^2.0.0", "fakerphp/faker": "^1.24.1", "google/recaptcha": "^1.5", - "guzzlehttp/guzzle": "^7.15.3", + "guzzlehttp/guzzle": "^8.2.0", "jetbrains/phpstorm-attributes": "^1.3", "joshtronic/php-loremipsum": "^3.0.0", "league/csv": "^9.28.0",