chore(deps): Bump the github-actions group with 5 updates

Merged
DE
5d ago
+13-13

Bumps the github-actions group with 5 updates:

PackageFromTo
webiny/action-conventional-commits1.3.01.4.2
icewind1991/nextcloud-version-matrix1.3.11.3.3
shivammathur/setup-php2.35.22.40.0
actions/create-github-app-token3.2.03.3.0
andstor/file-existence-action3.0.03.1.0

Updates webiny/action-conventional-commits from 1.3.0 to 1.4.2

Commits
  • 7f91b15 fix: allow 'improvement' prefix
  • 096eff5 fix: allow 'improvement' prefix
  • b6cc3cc docs: update latest version
  • 6a05e2b feat: use node24
  • b34f00b Merge remote-tracking branch 'origin/master'
  • faccb24 chore: prepare release
  • 6026468 feat: refactor commit message validation to use exception list
  • 0fecf10 feat: refactor commit message validation to use exception list
  • 9ce0777 chore: add reapply as valid commit type
  • 54c7d1f Update action.yml
  • See full diff in compare view

Updates icewind1991/nextcloud-version-matrix from 1.3.1 to 1.3.3

Release notes

Sourced from icewind1991/nextcloud-version-matrix's releases.

1.3.3

What's Changed

New Contributors

Full Changelog: https://github.com/icewind1991/nextcloud-version-matrix/compare/v1.3.2...v1.3.3

1.3.2

What's Changed

New Contributors

Full Changelog: https://github.com/icewind1991/nextcloud-version-matrix/compare/v1...v1.3.2

Commits
  • cd0211f 1.3.3
  • a4d7592 Merge pull request #9 from nickvergessen/perf/noid/hard-code-known-released-v...
  • b7b0de6 perf(versions): Hardcode known PHP versions and Nextcloud PHP version ranges
  • a4b58a2 Merge pull request #8 from DerDreschner/chore/update-dependencies
  • 25ddace feat: Update dependencies to latest version and refactor action to ES6 module
  • 0dbaa18 Merge pull request #7 from DerDreschner/chore/update-github-actions
  • 40f959f Merge pull request #6 from DerDreschner/feat/support-php-min-max-version
  • a0aa85f chore: Update used GitHub Actions and introduce version pinning
  • 7a90367 feat: Support PHP min/max version property in info.xml
  • ca3ece3 Merge pull request #5 from DerDreschner/feat/use-node24
  • Additional commits viewable in compare view

Updates shivammathur/setup-php from 2.35.2 to 2.40.0

Release notes

Sourced from shivammathur/setup-php's releases.

2.40.0

Changelog

  • Added support for PHP 8.7 nightly builds. This installs PHP builds from the master branch of php/php-src.
- name: Setup PHP 8.7
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.7'
  • Added support for Ubuntu 26.04 (ubuntu-26.04). (#1083)

  • Added support for pinning tools to SHA-256 and SHA-512 checksums. (#1098, #1099)

- name: Setup PHP with tools pinned to checksums
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.5'
    tools: >
      composer:2.9.8@sha256:59b2c50e10cafa0d8efc19ede9a326d782f096c674a26baf98cf042ce23de890,
      phpunit:12.5.0@sha512:76430b433bd57f96e5fbbabaefc0c82e3a5b19b1a366bd836614344c441a7a87575d77faa07e0e58ecec52061af67584b036adc4311f0764bd4414bc62be4684
  • Fixed support for Couchbase, Oracle, and IBM extensions on Ubuntu 26.04. (#1123)

  • Added support for cpx. (#1104)

- name: Setup PHP with cpx
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.5'
    tools: cpx
  • Added support for Laravel Cloud CLI. (#1106)
- name: Setup PHP with Laravel Cloud CLI
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.5'
    tools: laravel-cloud
  • Added configurable verbose logging using the verbose environment variable. Set it to true or v to show command output, or vv or vvv to also enable tracing. Also, deprecated the verbose and more-verbose tags in favor of this environment variable. (#1077, #1118, #1119)

... (truncated)

Commits
  • eb7c497 Bump version to 2.40.0
  • 7d671ba Resolve PHP formula aliases before invoking Homebrew
  • 57747c1 Allow opt-in builds cache on Blacksmith and Depot runners
  • 421f97f Keep verbose tests in TypeScript
  • dc7811a Bump Node.js dependencies
  • 7932293 Bump the github-actions group with 3 updates (#1130)
  • 87d00bd Default "Are you willing to submit a PR?" to "No" (#1126)
  • f458a14 Remove macOS 14 from README runner listings
  • bc12f5c Switch to homebrew-extensions for geos on macOS [skip ci]
  • bbf0b63 Try Brew extension installs before refreshing Homebrew
  • Additional commits viewable in compare view

Updates actions/create-github-app-token from 3.2.0 to 3.3.0

Release notes

Sourced from actions/create-github-app-token's releases.

v3.3.0

3.3.0 (2026-10-12)

Features

Bug Fixes

  • deps: bump nested undici from 6.24.0 to 6.29.0 (#403) (12461a3)
  • deps: bump the production-dependencies group across 1 directory with 3 updates (#395) (a69c19d)
Changelog

Sourced from actions/create-github-app-token's changelog.

Changelog

3.3.0 (2026-10-12)

Features

Bug Fixes

  • deps: bump nested undici from 6.24.0 to 6.29.0 (#403) (12461a3)
  • deps: bump the production-dependencies group across 1 directory with 3 updates (#395) (a69c19d)

3.2.0 (2026-05-12)

Features

  • add support for enterprise-level GitHub Apps (#263) (952a2a7)
  • support full repository names in repositories input (#372) (85eb8dd)

Bug Fixes

  • deps: bump @​actions/core from 3.0.0 to 3.0.1 in the production-dependencies group (#364) (43e5c34)
  • validate private-key input (#376) (f24bbd8)
Commits
  • 64ab729 chore(main): release 3.3.0 (#402)
  • f3a828e ci: create signed dist commits in release workflow (#404)
  • 655017f docs: clarify when owner grants access to all repositories (#378)
  • 12461a3 fix(deps): bump nested undici from 6.24.0 to 6.29.0 (#403)
  • a47236f feat: update permission inputs (#399)
  • a69c19d fix(deps): bump the production-dependencies group across 1 directory with 3 u...
  • d5cb7ae build(deps): bump actions/checkout from 6 to 7 (#384)
  • 575da86 build(deps): bump stefanzweifel/git-auto-commit-action from 7.1.0 to 7.2.0 in...
  • e85f677 test: omit stack traces from snapshots (#401)
  • 9419396 build(deps-dev): bump c8 from 11.0.0 to 12.0.0 (#400)
  • Additional commits viewable in compare view

Updates andstor/file-existence-action from 3.0.0 to 3.1.0

Release notes

Sourced from andstor/file-existence-action's releases.

v3.1.0

What's Changed

New Contributors

Full Changelog: https://github.com/andstor/file-existence-action/compare/v3...v3.1.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by cubic

Bumps the github-actions group across all workflow files, updating five actions to their latest pinned versions: webiny/action-conventional-commits, icewind1991/nextcloud-version-matrix, shivammathur/setup-php, actions/create-github-app-token, and andstor/file-existence-action.

All updates are minor or patch releases without breaking changes. Several actions now run on Node 24, which is supported by current GitHub-hosted runners.