Skip to content

ci(deps): bump the non-major group across 1 directory with 3 updates - #1198

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/non-major-dcc691d5b2
Open

ci(deps): bump the non-major group across 1 directory with 3 updates#1198
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/non-major-dcc691d5b2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 3, 2026

Copy link
Copy Markdown
Contributor

Bumps the non-major group with 3 updates in the / directory: actions/checkout, shivammathur/setup-php and ridedott/merge-me-action.

Updates actions/checkout from 6.0.2 to 6.0.3

Release notes

Sourced from actions/checkout's releases.

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

Changelog

Sourced from actions/checkout's changelog.

v6.0.3

Commits

Updates shivammathur/setup-php from 2.36.0 to 2.37.1

Release notes

Sourced from shivammathur/setup-php's releases.

2.37.1

Changelog

Security Updates

[!NOTE] This can affect workflows that pass values from users or pull requests to setup-php, for example from comments, dispatch inputs, PR titles/branches, generated matrices, or files such as .php-version and composer.json. Be especially careful with pull_request_target workflows that use any value from the pull request. Workflows that only use fixed trusted values are not expected to be affected, but updating to 2.37.1 is recommended.

[!NOTE]
This only affects workflows where the composer version is pinned like composer:2.9.7, workflows that do not pin the version or use composer:v2 are not affected as those get automatic updates. In case you pin the version, it is highly recommended to upgrade and have automation to do such timely upgrades in your workflows.

Fixes and Improvements

  • Fixed support for phalcon on Windows.

  • Fixed restoring tools when using cached using previous runs.

  • Improved enabling gearman extension on Linux.

  • Fixed fallback when installing PhpManager and VcRedist modules on Windows.

  • Fixed parsing extension inputs with backslash line continuation.

  • Improved workflow examples

    • Added workflow examples for Drupal 11 composer-managed projects and WordPress plugins.
    • Added workflow examples for Yii3 web applications and replaced Yii2 Starter Kit examples.
    • Updated workflow examples to use currently supported PHP versions.
  • Updated OS release mappings for newer Ubuntu releases.

  • Updated internal workflows for Codecov v6 and NPM trusted publishing.

  • Updated Node.js dependencies.

  • Fixed composer version in README. (#1081)

Thanks @​Pyker for the contribution

For the complete list of changes, please refer to the Full Changelog

... (truncated)

Commits

Updates ridedott/merge-me-action from 2.10.145 to 2.10.164

Release notes

Sourced from ridedott/merge-me-action's releases.

v2.10.164

2.10.164 (2026-06-02)

Chores

  • deps-dev: bump @​semantic-release/release-notes-generator from 14.1.0 to 14.1.1 (f15da7cd)
  • deps-dev: bump fast-uri from 3.1.0 to 3.1.2 (13658bbb)
  • deps: bump ridedott/release-me-action from 3.10.107 to 3.10.108 (958c8d18)

v2.10.163

2.10.163 (2026-05-11)

Chores

  • deps: bump ridedott/release-me-action from 3.10.106 to 3.10.107 (2568f177)

v2.10.162

2.10.162 (2026-05-05)

Chores

  • deps-dev: bump @​commitlint/cli from 20.5.0 to 20.5.2 (a3ae3cf)
  • deps-dev: bump @​commitlint/cli from 20.5.2 to 20.5.3 (d8d8c35)
  • deps-dev: bump @​commitlint/config-conventional from 20.5.0 to 20.5.3 (59c0282)
  • deps: bump ridedott/release-me-action from 3.10.105 to 3.10.106 (5382ee3)

v2.10.161

2.10.161 (2026-04-22)

Chores

  • deps: bump actions/setup-node from 6.3.0 to 6.4.0 (2da35ad)

v2.10.160

2.10.160 (2026-04-22)

Chores

  • deps: bump ridedott/release-me-action from 3.10.104 to 3.10.105 (098cd15)

v2.10.159

2.10.159 (2026-04-17)

Chores

... (truncated)

Changelog

Sourced from ridedott/merge-me-action's changelog.

2.10.164 (2026-06-02)

Chores

  • deps-dev: bump @​semantic-release/release-notes-generator from 14.1.0 to 14.1.1 (f15da7cd)
  • deps-dev: bump fast-uri from 3.1.0 to 3.1.2 (13658bbb)
  • deps: bump ridedott/release-me-action from 3.10.107 to 3.10.108 (958c8d18)

2.10.163 (2026-05-11)

Chores

  • deps: bump ridedott/release-me-action from 3.10.106 to 3.10.107 (2568f177)

2.10.162 (2026-05-05)

Chores

  • deps-dev: bump @​commitlint/cli from 20.5.0 to 20.5.2 (a3ae3cf)
  • deps-dev: bump @​commitlint/cli from 20.5.2 to 20.5.3 (d8d8c35)
  • deps-dev: bump @​commitlint/config-conventional from 20.5.0 to 20.5.3 (59c0282)
  • deps: bump ridedott/release-me-action from 3.10.105 to 3.10.106 (5382ee3)

2.10.161 (2026-04-22)

Chores

  • deps: bump actions/setup-node from 6.3.0 to 6.4.0 (2da35ad)

2.10.160 (2026-04-22)

Chores

  • deps: bump ridedott/release-me-action from 3.10.104 to 3.10.105 (098cd15)

2.10.159 (2026-04-17)

Chores

... (truncated)

Commits
  • 2b86691 chore(release): v2.10.164
  • 958c8d1 chore(deps): bump ridedott/release-me-action from 3.10.107 to 3.10.108
  • 13658bb chore(deps-dev): bump fast-uri from 3.1.0 to 3.1.2
  • f15da7c chore(deps-dev): bump @​semantic-release/release-notes-generator from 14.1.0 t...
  • f2b305b chore(release): v2.10.163
  • 2568f17 chore(deps): bump ridedott/release-me-action from 3.10.106 to 3.10.107
  • bdc1160 chore(release): v2.10.162
  • 5382ee3 chore(deps): bump ridedott/release-me-action from 3.10.105 to 3.10.106
  • 59c0282 chore(deps-dev): bump @​commitlint/config-conventional from 20.5.0 to 20.5.3
  • d8d8c35 chore(deps-dev): bump @​commitlint/cli from 20.5.2 to 20.5.3
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the non-major group with 3 updates in the / directory: [actions/checkout](https://github.com/actions/checkout), [shivammathur/setup-php](https://github.com/shivammathur/setup-php) and [ridedott/merge-me-action](https://github.com/ridedott/merge-me-action).


Updates `actions/checkout` from 6.0.2 to 6.0.3
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v6.0.2...v6.0.3)

Updates `shivammathur/setup-php` from 2.36.0 to 2.37.1
- [Release notes](https://github.com/shivammathur/setup-php/releases)
- [Commits](shivammathur/setup-php@2.36.0...2.37.1)

Updates `ridedott/merge-me-action` from 2.10.145 to 2.10.164
- [Release notes](https://github.com/ridedott/merge-me-action/releases)
- [Changelog](https://github.com/ridedott/merge-me-action/blob/master/CHANGELOG.md)
- [Commits](ridedott/merge-me-action@v2.10.145...v2.10.164)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major
- dependency-name: shivammathur/setup-php
  dependency-version: 2.37.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-major
- dependency-name: ridedott/merge-me-action
  dependency-version: 2.10.164
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependency label Jun 3, 2026
@dependabot
dependabot Bot requested review from Lctrs and lctrs-bot as code owners June 3, 2026 11:16
@dependabot dependabot Bot added the dependency label Jun 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants