chore(deps): bump the github-actions group with 3 updates by dependabot[bot] · Pull Request #59 · folio-sec/wrap-api-example

dependabot · 2026-10-11T19:12:41Z

Bumps the github-actions group with 3 updates: reviewdog/action-actionlint, shivammathur/setup-php and actions/setup-node.

Updates reviewdog/action-actionlint from 1.78.0 to 1.80.0

Release notes

Sourced from reviewdog/action-actionlint's releases.

Release v1.80.0

What's Changed

chore(deps): update dependency pyflakes to v4.0.3 by @renovate[bot] in reviewdog/action-actionlint#250

Full Changelog: reviewdog/action-actionlint@v1.79.1...v1.80.0

Release v1.79.1

What's Changed

chore(deps): update python:3.14.8-alpine3.24 docker digest to f6a589d by @renovate[bot] in reviewdog/action-actionlint#249

Full Changelog: reviewdog/action-actionlint@v1.79.0...v1.79.1

Release v1.79.0

What's Changed

chore(deps): update dependency pyflakes to v4.0.2 by @renovate[bot] in reviewdog/action-actionlint#248

Full Changelog: reviewdog/action-actionlint@v1.78.1...v1.79.0

Release v1.78.1

What's Changed

chore(deps): update python docker tag to v3.14.8 by @renovate[bot] in reviewdog/action-actionlint#247

Full Changelog: reviewdog/action-actionlint@v1.78.0...v1.78.1

Commits

a8ac3ee bump v1.80.0
1e5dbb7 Merge branch 'main' into releases/v1
130b9f8 Merge pull request #250 from reviewdog/renovate/pyflakes-4.x
c9958fc chore(deps): update dependency pyflakes to v4.0.3
1758727 bump v1.79.1
835705a Merge branch 'main' into releases/v1
2b6687f Merge pull request #249 from reviewdog/renovate/python-3.14.8-alpine3.24
91d36b3 chore(deps): update python:3.14.8-alpine3.24 docker digest to f6a589d
a1e3e7f bump v1.79.0
0a63bd8 Merge branch 'main' into releases/v1
Additional commits viewable in compare view

Updates shivammathur/setup-php from 2.37.2 to 2.40.0

Release notes

Sourced from shivammathur/setup-php's releases.

2.40.0

Changelog

Added support for PHP 8.7 nightly builds. This installs PHP builds from the master branch of php/php-src.
- name: Setup PHP 8.7
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.7'
Added support for Ubuntu 26.04 (ubuntu-26.04). (#1083)

Added support for pinning tools to SHA-256 and SHA-512 checksums. (#1098, #1099)
- name: Setup PHP with tools pinned to checksums
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.5'
    tools: >
      composer:2.9.8@sha256:59b2c50e10cafa0d8efc19ede9a326d782f096c674a26baf98cf042ce23de890,
      phpunit:12.5.0@sha512:76430b433bd57f96e5fbbabaefc0c82e3a5b19b1a366bd836614344c441a7a87575d77faa07e0e58ecec52061af67584b036adc4311f0764bd4414bc62be4684
Fixed support for Couchbase, Oracle, and IBM extensions on Ubuntu 26.04. (#1123)

Added support for cpx. (#1104)
- name: Setup PHP with cpx
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.5'
    tools: cpx
Added support for Laravel Cloud CLI. (#1106)
- name: Setup PHP with Laravel Cloud CLI
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.5'
    tools: laravel-cloud
Added configurable verbose logging using the verbose environment variable. Set it to true or v to show command output, or vv or vvv to also enable tracing. Also, deprecated the verbose and more-verbose tags in favor of this environment variable. (#1077, #1118, #1119)

... (truncated)

Commits

eb7c497 Bump version to 2.40.0
7d671ba Resolve PHP formula aliases before invoking Homebrew
57747c1 Allow opt-in builds cache on Blacksmith and Depot runners
421f97f Keep verbose tests in TypeScript
dc7811a Bump Node.js dependencies
7932293 Bump the github-actions group with 3 updates (#1130)
87d00bd Default "Are you willing to submit a PR?" to "No" (#1126)
f458a14 Remove macOS 14 from README runner listings
bc12f5c Switch to homebrew-extensions for geos on macOS [skip ci]
bbf0b63 Try Brew extension installs before refreshing Homebrew
Additional commits viewable in compare view

Updates actions/setup-node from 7.0.0 to 7.1.0

Release notes

Sourced from actions/setup-node's releases.

v7.1.0

What's Changed

Enhancements:

Add support for mise.toml file by @gperdomor in actions/setup-node#1421

Support absolute paths in node-version-file by @v-mahabaleshwars in actions/setup-node#1633

Bug fixes:

Add Node version validation and manifest fetch retry by @v-jitenderpalsingh in actions/setup-node#1580

Documentation updates:

README.md: bump actions/checkout to latest version 7 by @deining in actions/setup-node#1578

docs: add V7 ESM migration and NODE_AUTH_TOKEN behavior change by @v-gowridurgad in actions/setup-node#1593

Fixed cache recommendation syntax by @SubJunk in actions/setup-node#1603

Dependency updates:

Update workflow pins and migrate Node matrices to modern versions by @v-HarithaVattikuti in actions/setup-node#1583

Upgrade @actions/cache to 6.2.0 by @philip-gai in actions/setup-node#1584

Pin @types/node to v24 by @v-priyagupta108 in actions/setup-node#1585

Override brace-expansion to 5.0.8 by @v-priyagupta108 with @Copilot in actions/setup-node#1599

Upgrade actions/checkout from 7.0.0 to 7.0.1 by @dependabot in actions/setup-node#1598

Upgrade prettier from 3.8.4 to 3.9.6 by @dependabot in actions/setup-node#1590

Upgrade @vercel/ncc from 0.44.0 to 0.45.0 by @dependabot in actions/setup-node#1610

Upgrade pnpm/action-setup from 6.0.9 to 6.0.10 by @dependabot in actions/setup-node#1602

Upgrade baseline-browser-mapping from 2.10.38 to 2.11.22 by @dependabot in actions/setup-node#1629

Upgrade @types/semver from 7.7.1 to 7.8.0 by @dependabot in actions/setup-node#1616

Upgrade @typescript-eslint/parser from 8.62.0 to 8.70.0 by @dependabot in actions/setup-node#1615

Upgrade pnpm/action-setup from 6.0.10 to 6.1.0 by @dependabot in actions/setup-node#1631

Upgrade jest-each from 30.4.1 to 30.5.2 by @dependabot in actions/setup-node#1636

Upgrade eslint-plugin-n from 18.1.0 to 18.3.0 by @dependabot in actions/setup-node#1638

Update dependencies and add license files by @v-HarithaVattikuti in actions/setup-node#1642

Upgrade eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 by @dependabot in actions/setup-node#1635

New Contributors

@v-jitenderpalsingh made their first contribution in actions/setup-node#1580

@philip-gai made their first contribution in actions/setup-node#1584

@gperdomor made their first contribution in actions/setup-node#1421

@SubJunk made their first contribution in actions/setup-node#1603

Full Changelog: actions/setup-node@v7.0.0...v7.1.0

Commits

949feb2 Bump eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 (#1635)
7207c4f chore: update dependencies and add license files (#1642)
54337e0 Bump eslint-plugin-n from 18.1.0 to 18.3.0 (#1638)
fb54fa8 Bump jest-each from 30.4.1 to 30.5.2 (#1636)
7f84f1d Bump pnpm/action-setup from 6.0.10 to 6.1.0 (#1631)
0c54c7b Bump @typescript-eslint/parser from 8.62.0 to 8.70.0 (#1615)
a829419 Bump @types/semver from 7.7.1 to 7.8.0 (#1616)
680d1e4 Support absolute paths in node-version-file (#1633)
db0fb3a Bump baseline-browser-mapping from 2.10.38 to 2.11.22 (#1629)
94196ee Bump pnpm/action-setup from 6.0.9 to 6.0.10 (#1602)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the github-actions group with 3 updates: [reviewdog/action-actionlint](https://github.com/reviewdog/action-actionlint), [shivammathur/setup-php](https://github.com/shivammathur/setup-php) and [actions/setup-node](https://github.com/actions/setup-node). Updates `reviewdog/action-actionlint` from 1.78.0 to 1.80.0 - [Release notes](https://github.com/reviewdog/action-actionlint/releases) - [Commits](reviewdog/action-actionlint@1129829...a8ac3ee) Updates `shivammathur/setup-php` from 2.37.2 to 2.40.0 - [Release notes](https://github.com/shivammathur/setup-php/releases) - [Commits](shivammathur/setup-php@f3e473d...eb7c497) Updates `actions/setup-node` from 7.0.0 to 7.1.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@8207627...949feb2) --- updated-dependencies: - dependency-name: reviewdog/action-actionlint dependency-version: 1.80.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: shivammathur/setup-php dependency-version: 2.40.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/setup-node dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>

coderabbitai · 2026-10-11T19:13:09Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI
Review profile: CHILL
Plan: Advanced
Run ID: 40116719-665b-4ec5-afda-424ca029d989

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

dependabot Bot added ci dependencies Pull requests that update a dependency file labels Oct 11, 2026

github-actions Bot enabled auto-merge (squash) October 11, 2026 19:12

github-actions Bot merged commit 898511c into main Oct 11, 2026
18 checks passed

dependabot Bot deleted the dependabot/github_actions/github-actions-229cab90fe branch October 11, 2026 19:13

Navigation Menu

Repository navigation

chore(deps): bump the github-actions group with 3 updates - #59

chore(deps): bump the github-actions group with 3 updates#59
github-actions[bot] merged 1 commit into
mainfrom
dependabot/github_actions/github-actions-229cab90fe

dependabot Bot commented on behalf of github Oct 11, 2026

Uh oh!

coderabbitai Bot commented Oct 11, 2026

Review skipped

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 11, 2026

Release v1.80.0

What's Changed

Release v1.79.1

What's Changed

Release v1.79.0

What's Changed

Release v1.78.1

What's Changed

2.40.0

Changelog

v7.1.0

What's Changed

Enhancements:

Bug fixes:

Documentation updates:

Dependency updates:

New Contributors

Uh oh!

coderabbitai Bot commented Oct 11, 2026

Review skipped

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants