[dependabot]

Bumps the github-actions group with 1 update: php-fast-forward/dev-tools/.github/workflows/wiki-direct.yml.

Updates php-fast-forward/dev-tools/.github/workflows/wiki-direct.yml from 1d623bbe24c50b31ee808f84e0c701778ec225ac to 0dc64e8ce2a53120047c9475a016dce27ac7ecf6

Changelog

Sourced from php-fast-forward/dev-tools/.github/workflows/wiki-direct.yml's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[1.26.0] - 2026-10-16

Added

• Add an opt-in native GitHub Pages reports workflow with an isolated deployment job and verified documentation identity assets from template 2.1.0 or newer. (#363)

Changed

• GitHub Actions(deps): Bump toshimaru/auto-author-assign from 3.0.3 to 3.1.0. (#359)
• Refresh README and documentation with contextual Dash artwork for the DevTools quality pipeline. (#360)
• GitHub Actions(deps): Bump toshimaru/auto-author-assign from 3.0.2 to 3.0.3. (#355)
• Composer(deps): Update ergebnis/phpunit-agent-reporter requirement from ^0.3 to ^1.0. (#356)
• GitHub Actions(deps): Bump actions/checkout from 6 to 7. (#354)
• GitHub Actions(deps): Bump EndBug/add-and-commit from 10 to 11. (#358)
• Publish generated API pages directly to the GitHub Wiki from main without parent submodule-pointer commits, while pull requests generate read-only artifacts. (#366)
• Generate local wiki Markdown in .dev-tools/wiki-generated during normal sync instead of initializing a Wiki submodule; retain explicit wiki --init for legacy use. (#366)
• GitHub Actions(deps): bump actions/upload-artifact from 4.6.2 to 7.0.2. (#369)
• GitHub Actions(deps): bump actions/download-artifact from 4.3.0 to 8.0.2. (#368)

Fixed

• Isolate native Pages PR builds from production deployment queues, preserve full repository history in generated metrics, and retry downloaded identity hashes during CDN propagation. (#364)
• Keep required per-version statuses current across normal and Dependabot reruns through checkout-free lifecycle publishers using verified GitHub run and job metadata. (#362)
• Keep Composer audit and nested dependency-health checks plugin-free after CI installs without plugins, so consumer allowlists do not block vulnerability or dependency analysis. (#362)
• Isolate completed per-version status publication from repository-controlled test jobs, preserve access to private GitHub job metadata, and disable persisted checkout credentials in the reusable test workflow. (#362)
• Restore tests, reports, and dependency checks after ECS and Rector API changes, and replace the abandoned rector/jack dependency checker with Rector Swiss Knife. (#361)

[1.25.6] - 2026-06-04

Fixed

• Sync workflow metadata and managed-asset references requested during agents workflow validation review, including predictable action dispatch condition and label-sync permission updates, plus managed submodule/wiki pointer alignment. (#352)

[1.25.5] - 2026-05-13

Fixed

• Relax workflow fallback Composer install so .dev-tools-actions bootstrap does not require composer.lock when provisioning DevTools runtime in shared GitHub Actions contexts. (#343)
• Skip coverage report generation in reports command when no test surface is detectable (no default tests directory and no testable PHP source), while still generating docs and metrics. (#345)

[1.25.4] - 2026-05-11

Fixed

... (truncated)

Commits

• 0dc64e8 chore: group Dependabot updates by ecosystem (#399)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: continuous-integration, github-actions. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: 0b1d295a-951d-4f0e-988a-fd5e104e8a89

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn

[github-actions]

Changelog

✅ Contribution check passed.

Head: 644f30b4f1676a8c27248862c77f40b7a8228ce9

Base: 065ffd970467b7d6d3bca155fa4e102d9f323a35

Contribution: 1 new valid fragment(s). Policy: ordinary.

• dependabot-24.md — changed, patch

  GitHub Actions(deps): bump php-fast-forward/dev-tools/.github/workflows/wiki-direct.yml from 1d623bbe24c50b31ee808f84e0c701778ec225ac to 0dc64e8ce2a53120047c9475a016dce27ac7ecf6 in the github-actions group Update dependencies: `php-fast-forward/dev-tools/.github/workflows/wiki-direct.yml`.