[dependabot]

Bumps php-fast-forward/dev-tools/.github/workflows/wiki-direct.yml from 84e154046e07cafa6ac09a9e12434b1ff5dcb5e0 to 1d623bbe24c50b31ee808f84e0c701778ec225ac.

Changelog

Sourced from php-fast-forward/dev-tools/.github/workflows/wiki-direct.yml's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[1.26.0] - 2026-10-16

Added

• Add an opt-in native GitHub Pages reports workflow with an isolated deployment job and verified documentation identity assets from template 2.1.0 or newer. (#363)

Changed

• GitHub Actions(deps): Bump toshimaru/auto-author-assign from 3.0.3 to 3.1.0. (#359)
• Refresh README and documentation with contextual Dash artwork for the DevTools quality pipeline. (#360)
• GitHub Actions(deps): Bump toshimaru/auto-author-assign from 3.0.2 to 3.0.3. (#355)
• Composer(deps): Update ergebnis/phpunit-agent-reporter requirement from ^0.3 to ^1.0. (#356)
• GitHub Actions(deps): Bump actions/checkout from 6 to 7. (#354)
• GitHub Actions(deps): Bump EndBug/add-and-commit from 10 to 11. (#358)
• Publish generated API pages directly to the GitHub Wiki from main without parent submodule-pointer commits, while pull requests generate read-only artifacts. (#366)
• Generate local wiki Markdown in .dev-tools/wiki-generated during normal sync instead of initializing a Wiki submodule; retain explicit wiki --init for legacy use. (#366)
• GitHub Actions(deps): bump actions/upload-artifact from 4.6.2 to 7.0.2. (#369)
• GitHub Actions(deps): bump actions/download-artifact from 4.3.0 to 8.0.2. (#368)

Fixed

• Isolate native Pages PR builds from production deployment queues, preserve full repository history in generated metrics, and retry downloaded identity hashes during CDN propagation. (#364)
• Keep required per-version statuses current across normal and Dependabot reruns through checkout-free lifecycle publishers using verified GitHub run and job metadata. (#362)
• Keep Composer audit and nested dependency-health checks plugin-free after CI installs without plugins, so consumer allowlists do not block vulnerability or dependency analysis. (#362)
• Isolate completed per-version status publication from repository-controlled test jobs, preserve access to private GitHub job metadata, and disable persisted checkout credentials in the reusable test workflow. (#362)
• Restore tests, reports, and dependency checks after ECS and Rector API changes, and replace the abandoned rector/jack dependency checker with Rector Swiss Knife. (#361)

[1.25.6] - 2026-06-04

Fixed

• Sync workflow metadata and managed-asset references requested during agents workflow validation review, including predictable action dispatch condition and label-sync permission updates, plus managed submodule/wiki pointer alignment. (#352)

[1.25.5] - 2026-05-13

Fixed

• Relax workflow fallback Composer install so .dev-tools-actions bootstrap does not require composer.lock when provisioning DevTools runtime in shared GitHub Actions contexts. (#343)
• Skip coverage report generation in reports command when no test surface is detectable (no default tests directory and no testable PHP source), while still generating docs and metrics. (#345)

[1.25.4] - 2026-05-11

Fixed

... (truncated)

Commits

• 1d623bb GitHub Actions(deps): bump toshimaru/auto-author-assign from 3.1.0 to 3.1.1 (...
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: continuous-integration, github-actions. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: 3f649227-d13e-492a-8bef-bb5768a442d0

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn

[github-actions]

Changelog

✅ Contribution check passed.

Head: 116dcacee95829d4ad04491275d42f74ef1c034e

Base: 9ea5aa3ca8ad51e180b797b21a277fdd74141fd5

Contribution: 1 new valid fragment(s). Policy: ordinary.

• dependabot-13.md — changed, patch

  GitHub Actions(deps): bump php-fast-forward/dev-tools/.github/workflows/wiki-direct.yml from 84e154046e07cafa6ac09a9e12434b1ff5dcb5e0 to 1d623bbe24c50b31ee808f84e0c701778ec225ac Update dependencies: `php-fast-forward/dev-tools/.github/workflows/wiki-direct.yml`.

[coisa]

@codex review

Review the current HEAD 116dcacee95829d4ad04491275d42f74ef1c034e for regressions and security issues.

[chatgpt-codex-connector]

Codex Review Summary: ✅ Completed

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-11-10T16:04:26.176564Z	116dcac	Manual request
🔒 Security Review	✅ Completed 2026-11-10T16:05:54.792743Z	116dcac	Manual request

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[chatgpt-codex-connector]

Codex Review: Didn't find any major issues. 🎉

Reviewed commit: 116dcacee9

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

🛡️ Codex Security Review · Automatically triggered

Security review completed. No security issues were found in this pull request.

Reviewed commit: 116dcacee9

View security finding report

Only the user who started this review can view the report in Codex.

ℹ️ About Codex security reviews in GitHub

This is an experimental Codex feature. Security reviews are triggered when:

• You comment "@codex security review"
• A regular code review gets triggered (for example, "@codex review" or when a PR is opened), and you’re opted in so security review runs alongside code review

Once complete, Codex will leave suggestions, or a comment if no findings are found.