[dependabot]

Bumps the github-actions-minor-and-patch group with 6 updates in the / directory:

Package	From	To
actions/create-github-app-token	3.2.0	3.3.0
actions/setup-node	7.0.0	7.1.0
TriPSs/conventional-changelog-action	6.4.0	6.5.0
actions/upload-artifact	7.0.1	7.0.2
shivammathur/setup-php	2.37.2	2.40.0
ruby/setup-ruby	1.321.0	1.331.0

Updates actions/create-github-app-token from 3.2.0 to 3.3.0

Release notes

Sourced from actions/create-github-app-token's releases.

v3.3.0

3.3.0 (2026-10-12)

Features

• update permission inputs (#399) (a47236f)

Bug Fixes

• deps: bump nested undici from 6.24.0 to 6.29.0 (#403) (12461a3)
• deps: bump the production-dependencies group across 1 directory with 3 updates (#395) (a69c19d)

Changelog

Sourced from actions/create-github-app-token's changelog.

Changelog

3.3.0 (2026-10-12)

Features

• update permission inputs (#399) (a47236f)

Bug Fixes

• deps: bump nested undici from 6.24.0 to 6.29.0 (#403) (12461a3)
• deps: bump the production-dependencies group across 1 directory with 3 updates (#395) (a69c19d)

3.2.0 (2026-05-12)

Features

• add support for enterprise-level GitHub Apps (#263) (952a2a7)
• support full repository names in repositories input (#372) (85eb8dd)

Bug Fixes

• deps: bump @​actions/core from 3.0.0 to 3.0.1 in the production-dependencies group (#364) (43e5c34)
• validate private-key input (#376) (f24bbd8)

Commits

• 64ab729 chore(main): release 3.3.0 (#402)
• f3a828e ci: create signed dist commits in release workflow (#404)
• 655017f docs: clarify when owner grants access to all repositories (#378)
• 12461a3 fix(deps): bump nested undici from 6.24.0 to 6.29.0 (#403)
• a47236f feat: update permission inputs (#399)
• a69c19d fix(deps): bump the production-dependencies group across 1 directory with 3 u...
• d5cb7ae build(deps): bump actions/checkout from 6 to 7 (#384)
• 575da86 build(deps): bump stefanzweifel/git-auto-commit-action from 7.1.0 to 7.2.0 in...
• e85f677 test: omit stack traces from snapshots (#401)
• 9419396 build(deps-dev): bump c8 from 11.0.0 to 12.0.0 (#400)
• Additional commits viewable in compare view

Updates actions/setup-node from 7.0.0 to 7.1.0

Release notes

Sourced from actions/setup-node's releases.

v7.1.0

What's Changed

Enhancements:

• Add support for mise.toml file by @​gperdomor in actions/setup-node#1421
• Support absolute paths in node-version-file by @​v-mahabaleshwars in actions/setup-node#1633

Bug fixes:

• Add Node version validation and manifest fetch retry by @​v-jitenderpalsingh in actions/setup-node#1580

Documentation updates:

• README.md: bump actions/checkout to latest version 7 by @​deining in actions/setup-node#1578
• docs: add V7 ESM migration and NODE_AUTH_TOKEN behavior change by @​v-gowridurgad in actions/setup-node#1593
• Fixed cache recommendation syntax by @​SubJunk in actions/setup-node#1603

Dependency updates:

• Update workflow pins and migrate Node matrices to modern versions by @​v-HarithaVattikuti in actions/setup-node#1583
• Upgrade @​actions/cache to 6.2.0 by @​philip-gai in actions/setup-node#1584
• Pin @​types/node to v24 by @​v-priyagupta108 in actions/setup-node#1585
• Override brace-expansion to 5.0.8 by @​v-priyagupta108 with @​Copilot in actions/setup-node#1599
• Upgrade actions/checkout from 7.0.0 to 7.0.1 by @​dependabot in actions/setup-node#1598
• Upgrade prettier from 3.8.4 to 3.9.6 by @​dependabot in actions/setup-node#1590
• Upgrade @​vercel/ncc from 0.44.0 to 0.45.0 by @​dependabot in actions/setup-node#1610
• Upgrade pnpm/action-setup from 6.0.9 to 6.0.10 by @​dependabot in actions/setup-node#1602
• Upgrade baseline-browser-mapping from 2.10.38 to 2.11.22 by @​dependabot in actions/setup-node#1629
• Upgrade @​types/semver from 7.7.1 to 7.8.0 by @​dependabot in actions/setup-node#1616
• Upgrade @​typescript-eslint/parser from 8.62.0 to 8.70.0 by @​dependabot in actions/setup-node#1615
• Upgrade pnpm/action-setup from 6.0.10 to 6.1.0 by @​dependabot in actions/setup-node#1631
• Upgrade jest-each from 30.4.1 to 30.5.2 by @​dependabot in actions/setup-node#1636
• Upgrade eslint-plugin-n from 18.1.0 to 18.3.0 by @​dependabot in actions/setup-node#1638
• Update dependencies and add license files by @​v-HarithaVattikuti in actions/setup-node#1642
• Upgrade eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 by @​dependabot in actions/setup-node#1635

New Contributors

• @​v-jitenderpalsingh made their first contribution in actions/setup-node#1580
• @​philip-gai made their first contribution in actions/setup-node#1584
• @​gperdomor made their first contribution in actions/setup-node#1421
• @​SubJunk made their first contribution in actions/setup-node#1603

Full Changelog: actions/setup-node@v7.0.0...v7.1.0

Commits

• 949feb2 Bump eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 (#1635)
• 7207c4f chore: update dependencies and add license files (#1642)
• 54337e0 Bump eslint-plugin-n from 18.1.0 to 18.3.0 (#1638)
• fb54fa8 Bump jest-each from 30.4.1 to 30.5.2 (#1636)
• 7f84f1d Bump pnpm/action-setup from 6.0.10 to 6.1.0 (#1631)
• 0c54c7b Bump @​typescript-eslint/parser from 8.62.0 to 8.70.0 (#1615)
• a829419 Bump @​types/semver from 7.7.1 to 7.8.0 (#1616)
• 680d1e4 Support absolute paths in node-version-file (#1633)
• db0fb3a Bump baseline-browser-mapping from 2.10.38 to 2.11.22 (#1629)
• 94196ee Bump pnpm/action-setup from 6.0.9 to 6.0.10 (#1602)
• Additional commits viewable in compare view

Updates TriPSs/conventional-changelog-action from 6.4.0 to 6.5.0

Release notes

Sourced from TriPSs/conventional-changelog-action's releases.

v6.5.0

Features

• reorganize test files and update actions (3717631)

Changelog

Sourced from TriPSs/conventional-changelog-action's changelog.

6.5.0 (2026-08-31)

Features

• reorganize test files and update actions (3717631)

6.4.0 (2026-07-08)

Bug Fixes

• refactor template and header/footer handling for improved version bumping logic (b9d2369)
• update template and header/footer handling for improved version bumping logic (f3f10ee)
• update templates and bump version logic for prerelease handling (c8f0be0)

Features

• add pre-release-smart-bump option for intelligent pre-release version bumping (3af15c8)
• improve version bumping logic (193d21b)

6.3.1 (2026-04-23)

Bug Fixes

• pass skipUnstable to file changelog generation (98b99c1)

6.3.0 (2026-03-19)

Features

• Update Node version from 20 to 24 in action.yml (c6d4281)

6.2.0 (2025-10-22)

Features

• add no-verify option to pass to git commit (ad190ee)

... (truncated)

Commits

• 469f0e5 chore(release): v6.5.0 [skip ci]
• 3563d12 feat: reorganize test files and update actions (#287)
• a28be45 Merge branch 'releases/v6' into feat-move-tests
• 5da67da build(deps): bump actions/checkout from 6 to 7 (#297)
• 6d9ca29 build(deps): bump actions/checkout from 6 to 7
• 3717631 feat: reorganize test files and update actions
• See full diff in compare view

Updates actions/upload-artifact from 7.0.1 to 7.0.2

Commits

• cf430e0 Merge pull request #822 from actions/tunc-d-prepare-upload-v7-0-2
• c2acded chore: prepare v7.0.2 release
• 4687c1b Merge pull request #821 from actions/tunc-d-upload-artifact-package-bump
• 8cbe1be Bump @​actions/artifact to 6.3.1
• See full diff in compare view

Updates shivammathur/setup-php from 2.37.2 to 2.40.0

Release notes

Sourced from shivammathur/setup-php's releases.

2.40.0

Changelog

• Added support for PHP 8.7 nightly builds. This installs PHP builds from the master branch of php/php-src.

- name: Setup PHP 8.7
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.7'

• Added support for Ubuntu 26.04 (ubuntu-26.04). (#1083)

• Added support for pinning tools to SHA-256 and SHA-512 checksums. (#1098, #1099)

- name: Setup PHP with tools pinned to checksums
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.5'
    tools: >
      composer:2.9.8@sha256:59b2c50e10cafa0d8efc19ede9a326d782f096c674a26baf98cf042ce23de890,
      phpunit:12.5.0@sha512:76430b433bd57f96e5fbbabaefc0c82e3a5b19b1a366bd836614344c441a7a87575d77faa07e0e58ecec52061af67584b036adc4311f0764bd4414bc62be4684

• Fixed support for Couchbase, Oracle, and IBM extensions on Ubuntu 26.04. (#1123)

• Added support for cpx. (#1104)

- name: Setup PHP with cpx
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.5'
    tools: cpx

• Added support for Laravel Cloud CLI. (#1106)

- name: Setup PHP with Laravel Cloud CLI
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.5'
    tools: laravel-cloud

• Added configurable verbose logging using the verbose environment variable. Set it to true or v to show command output, or vv or vvv to also enable tracing. Also, deprecated the verbose and more-verbose tags in favor of this environment variable. (#1077, #1118, #1119)

... (truncated)

Commits

• eb7c497 Bump version to 2.40.0
• 7d671ba Resolve PHP formula aliases before invoking Homebrew
• 57747c1 Allow opt-in builds cache on Blacksmith and Depot runners
• 421f97f Keep verbose tests in TypeScript
• dc7811a Bump Node.js dependencies
• 7932293 Bump the github-actions group with 3 updates (#1130)
• 87d00bd Default "Are you willing to submit a PR?" to "No" (#1126)
• f458a14 Remove macOS 14 from README runner listings
• bc12f5c Switch to homebrew-extensions for geos on macOS [skip ci]
• bbf0b63 Try Brew extension installs before refreshing Homebrew
• Additional commits viewable in compare view

Updates ruby/setup-ruby from 1.321.0 to 1.331.0

Commits

• 824c0e2 Use ruby's Gem::Version instead of npm's semver to parse rubygems version
• a89e929 Tweak wording in the README, update link and simplify
• fbbff8d Suggest the latest patch release when a version is unavailable
• 651ff0d Add ruby-4.1.0-preview1
• e81a8fa Fix windows msys1 setup
• 1459426 Update CRuby releases on Windows
• 762794c Add ruby-3.4.11
• e8944e8 Add jruby-10.0.7.0,jruby-10.1.2.0
• a0102e0 Add truffleruby-40.0.0,truffleruby+graalvm-40.0.0
• 984c0c8 Update CRuby releases on Windows
• Additional commits viewable in compare view