From 5014773f34b04970f6797268665cd00ce5f99f89 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 15 May 2026 16:34:23 +0000 Subject: [PATCH 1/2] Bump the github-actions group across 1 directory with 2 updates Bumps the github-actions group with 2 updates in the / directory: [shivammathur/setup-php](https://github.com/shivammathur/setup-php) and [github/codeql-action](https://github.com/github/codeql-action). Updates `shivammathur/setup-php` from 2.37.0 to 2.37.1 - [Release notes](https://github.com/shivammathur/setup-php/releases) - [Commits](https://github.com/shivammathur/setup-php/compare/accd6127cb78bee3e8082180cb391013d204ef9f...7c071dfe9dc99bdf297fa79cb49ea005b9fcadbc) Updates `github/codeql-action` from 4.35.2 to 4.35.5 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/95e58e9a2cdfd71adc6e0353d5c52f41a045d225...9e0d7b8d25671d64c341c19c0152d693099fb5ba) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.35.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: shivammathur/setup-php dependency-version: 2.37.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/github-container-registry.yml | 2 +- .github/workflows/reusable-workflow-lint.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/github-container-registry.yml b/.github/workflows/github-container-registry.yml index 73fe34e..19ad48e 100644 --- a/.github/workflows/github-container-registry.yml +++ b/.github/workflows/github-container-registry.yml @@ -45,7 +45,7 @@ jobs: persist-credentials: false - name: Setup PHP - uses: shivammathur/setup-php@accd6127cb78bee3e8082180cb391013d204ef9f # 2.37.0 + uses: shivammathur/setup-php@7c071dfe9dc99bdf297fa79cb49ea005b9fcadbc # 2.37.1 with: php-version: 'latest' diff --git a/.github/workflows/reusable-workflow-lint.yml b/.github/workflows/reusable-workflow-lint.yml index dda3490..70f1a32 100644 --- a/.github/workflows/reusable-workflow-lint.yml +++ b/.github/workflows/reusable-workflow-lint.yml @@ -66,7 +66,7 @@ jobs: GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} - name: Upload SARIF file - uses: github/codeql-action/upload-sarif@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2 + uses: github/codeql-action/upload-sarif@9e0d7b8d25671d64c341c19c0152d693099fb5ba # v4.35.5 with: sarif_file: results.sarif category: zizmor From 7f3bf458fb1aafe7aeb9dbd2d6a96cc80f8b8cbd Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Fri, 15 May 2026 17:16:51 +0000 Subject: [PATCH 2/2] Update workflow template to keep setup-php 2.37.1 pin Agent-Logs-Url: https://github.com/WordPress/wpdev-docker-images/sessions/8c478ba8-fcf1-4833-99c2-7939e4282022 Co-authored-by: desrosj <359867+desrosj@users.noreply.github.com> --- templates/workflow.yml-template | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/templates/workflow.yml-template b/templates/workflow.yml-template index 8ae4f1b..91b1870 100644 --- a/templates/workflow.yml-template +++ b/templates/workflow.yml-template @@ -63,7 +63,7 @@ jobs: persist-credentials: false - name: Setup PHP - uses: shivammathur/setup-php@accd6127cb78bee3e8082180cb391013d204ef9f # 2.37.0 + uses: shivammathur/setup-php@7c071dfe9dc99bdf297fa79cb49ea005b9fcadbc # 2.37.1 with: php-version: 'latest'