[dependabot]

Bumps the github-actions group with 2 updates: stefanzweifel/git-auto-commit-action and shivammathur/setup-php.

Updates stefanzweifel/git-auto-commit-action from 7.2.0 to 7.2.1

Release notes

Sourced from stefanzweifel/git-auto-commit-action's releases.

v7.2.1

Fixed

• Accept repositories where .git is a file (#417) @​stefanzweifel
• README: Update actions (#413) @​jackbayliss
• Remove unused gitStatusMessage variable in the entrypoint (#415) @​ChihweiLHBird

Changelog

Sourced from stefanzweifel/git-auto-commit-action's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

Unreleased

TBD

v7.2.1 - 2026-10-22

Fixed

• Accept repositories where .git is a file (#417) @​stefanzweifel
• README: Update actions (#413) @​jackbayliss
• Remove unused gitStatusMessage variable in the entrypoint (#415) @​ChihweiLHBird

v7.2.0 - 2026-06-28

Added

• Add hooks to run shell snippets around git operations (#411) @​stefanzweifel
• Emit warning for pull_request_target trigger usage (#410) @​stefanzweifel

Fixed

• docs(action): fix input and output descriptions in action.yml (#406) @​kranthipoturaju
• docs: fix typos, grammar, and formatting across markdown files (#408) @​kranthipoturaju
• docs: fix broken and redirecting URLs in README.md (#407) @​kranthipoturaju
• README: clearify meaning of the repository field (#404) @​gucio321

Dependency Updates

• Bump actions/checkout from 6 to 7 (#409) [@dependabot[bot]](https://github.com/@[dependabot[bot]](https://github.com/apps/dependabot))
• Bump release-drafter/release-drafter from 6 to 7 (#403) [@dependabot[bot]](https://github.com/@[dependabot[bot]](https://github.com/apps/dependabot))

v7.1.0 - 2025-12-17

Added

• Add skip_push input option (#401) @​kvanzuijlen

Changes

• docs: fix typo in README.md (#400) @​GideonBear

Dependency Updates

... (truncated)

Commits

• d0b0110 Accept repositories where .git is a file (#417)
• 9264814 Remove unused gitStatusMessage variable in the entrypoint (#415)
• 4b4693c README: Update actions (#413)
• 53ee9ba Update CHANGELOG
• See full diff in compare view

Updates shivammathur/setup-php from 2.37.2 to 2.40.0

Release notes

Sourced from shivammathur/setup-php's releases.

2.40.0

Changelog

• Added support for PHP 8.7 nightly builds. This installs PHP builds from the master branch of php/php-src.

- name: Setup PHP 8.7
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.7'

• Added support for Ubuntu 26.04 (ubuntu-26.04). (#1083)

• Added support for pinning tools to SHA-256 and SHA-512 checksums. (#1098, #1099)

- name: Setup PHP with tools pinned to checksums
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.5'
    tools: >
      composer:2.9.8@sha256:59b2c50e10cafa0d8efc19ede9a326d782f096c674a26baf98cf042ce23de890,
      phpunit:12.5.0@sha512:76430b433bd57f96e5fbbabaefc0c82e3a5b19b1a366bd836614344c441a7a87575d77faa07e0e58ecec52061af67584b036adc4311f0764bd4414bc62be4684

• Fixed support for Couchbase, Oracle, and IBM extensions on Ubuntu 26.04. (#1123)

• Added support for cpx. (#1104)

- name: Setup PHP with cpx
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.5'
    tools: cpx

• Added support for Laravel Cloud CLI. (#1106)

- name: Setup PHP with Laravel Cloud CLI
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.5'
    tools: laravel-cloud

• Added configurable verbose logging using the verbose environment variable. Set it to true or v to show command output, or vv or vvv to also enable tracing. Also, deprecated the verbose and more-verbose tags in favor of this environment variable. (#1077, #1118, #1119)

... (truncated)

Commits

• eb7c497 Bump version to 2.40.0
• 7d671ba Resolve PHP formula aliases before invoking Homebrew
• 57747c1 Allow opt-in builds cache on Blacksmith and Depot runners
• 421f97f Keep verbose tests in TypeScript
• dc7811a Bump Node.js dependencies
• 7932293 Bump the github-actions group with 3 updates (#1130)
• 87d00bd Default "Are you willing to submit a PR?" to "No" (#1126)
• f458a14 Remove macOS 14 from README runner listings
• bc12f5c Switch to homebrew-extensions for geos on macOS [skip ci]
• bbf0b63 Try Brew extension installs before refreshing Homebrew
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions