From f8a80d9e69cdcb8e8d9b94867ad5358dea016d81 Mon Sep 17 00:00:00 2001 From: nuno maduro Date: Tue, 12 May 2026 02:22:30 +0100 Subject: [PATCH 1/3] chore: pin GitHub Actions to commit SHAs --- .github/workflows/static.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/static.yml b/.github/workflows/static.yml index 3825c80..375db7a 100644 --- a/.github/workflows/static.yml +++ b/.github/workflows/static.yml @@ -13,10 +13,10 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 - name: Setup PHP - uses: shivammathur/setup-php@v2 + uses: shivammathur/setup-php@accd6127cb78bee3e8082180cb391013d204ef9f # v2 with: php-version: 8.3 tools: composer:v2 From 2a2622b5afc3753d5d8eefaae0eab44dfa0f630d Mon Sep 17 00:00:00 2001 From: nuno maduro Date: Tue, 12 May 2026 02:22:31 +0100 Subject: [PATCH 2/3] chore: pin GitHub Actions to commit SHAs --- .github/workflows/tests.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml index 036f2ef..681097b 100644 --- a/.github/workflows/tests.yml +++ b/.github/workflows/tests.yml @@ -16,10 +16,10 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 - name: Setup PHP - uses: shivammathur/setup-php@v2 + uses: shivammathur/setup-php@accd6127cb78bee3e8082180cb391013d204ef9f # v2 with: php-version: ${{ matrix.php }} tools: composer:v2 From edfeb6ed0f4350c79eff8dd2f88b42d88703fdea Mon Sep 17 00:00:00 2001 From: nuno maduro Date: Tue, 12 May 2026 02:22:32 +0100 Subject: [PATCH 3/3] chore: pin GitHub Actions to commit SHAs --- .github/dependabot.yml | 10 ++++++++++ 1 file changed, 10 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..f6faee6 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,10 @@ +version: 2 +updates: + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly" + groups: + github-actions: + patterns: + - "*"