[dependabot]

Bumps the minor-and-patch group with 4 updates in the / directory: shivammathur/setup-php, actions/upload-artifact, actions/download-artifact and sonarsource/sonarqube-scan-action.

Updates shivammathur/setup-php from 2.37.2 to 2.40.0

Release notes

Sourced from shivammathur/setup-php's releases.

2.40.0

Changelog

• Added support for PHP 8.7 nightly builds. This installs PHP builds from the master branch of php/php-src.

- name: Setup PHP 8.7
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.7'

• Added support for Ubuntu 26.04 (ubuntu-26.04). (#1083)

• Added support for pinning tools to SHA-256 and SHA-512 checksums. (#1098, #1099)

- name: Setup PHP with tools pinned to checksums
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.5'
    tools: >
      composer:2.9.8@sha256:59b2c50e10cafa0d8efc19ede9a326d782f096c674a26baf98cf042ce23de890,
      phpunit:12.5.0@sha512:76430b433bd57f96e5fbbabaefc0c82e3a5b19b1a366bd836614344c441a7a87575d77faa07e0e58ecec52061af67584b036adc4311f0764bd4414bc62be4684

• Fixed support for Couchbase, Oracle, and IBM extensions on Ubuntu 26.04. (#1123)

• Added support for cpx. (#1104)

- name: Setup PHP with cpx
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.5'
    tools: cpx

• Added support for Laravel Cloud CLI. (#1106)

- name: Setup PHP with Laravel Cloud CLI
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.5'
    tools: laravel-cloud

• Added configurable verbose logging using the verbose environment variable. Set it to true or v to show command output, or vv or vvv to also enable tracing. Also, deprecated the verbose and more-verbose tags in favor of this environment variable. (#1077, #1118, #1119)

... (truncated)

Commits

• eb7c497 Bump version to 2.40.0
• 7d671ba Resolve PHP formula aliases before invoking Homebrew
• 57747c1 Allow opt-in builds cache on Blacksmith and Depot runners
• 421f97f Keep verbose tests in TypeScript
• dc7811a Bump Node.js dependencies
• 7932293 Bump the github-actions group with 3 updates (#1130)
• 87d00bd Default "Are you willing to submit a PR?" to "No" (#1126)
• f458a14 Remove macOS 14 from README runner listings
• bc12f5c Switch to homebrew-extensions for geos on macOS [skip ci]
• bbf0b63 Try Brew extension installs before refreshing Homebrew
• Additional commits viewable in compare view

Updates actions/upload-artifact from 7.0.1 to 7.0.2

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.2

What's Changed

• Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
• Updates @​actions/artifact to v6.3.1.

New Contributors

• @​tunc-d made their first contribution in actions/upload-artifact#821

Full Changelog: actions/upload-artifact@v7.0.1...v7.0.2

Commits

• cf430e0 Merge pull request #822 from actions/tunc-d-prepare-upload-v7-0-2
• c2acded chore: prepare v7.0.2 release
• 4687c1b Merge pull request #821 from actions/tunc-d-upload-artifact-package-bump
• 8cbe1be Bump @​actions/artifact to 6.3.1
• See full diff in compare view

Updates actions/download-artifact from 8.0.1 to 8.0.2

Release notes

Sourced from actions/download-artifact's releases.

v8.0.2

What's Changed

• Update the readme by @​danwkennedy in actions/download-artifact#473
• Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
• Update @​actions/artifact to 6.3.1 by @​tunc-d in actions/download-artifact#492
• Prepare download-artifact v8.0.2 by @​tunc-d in actions/download-artifact#493

New Contributors

• @​tunc-d made their first contribution in actions/download-artifact#492

Full Changelog: actions/download-artifact@v8.0.1...v8.0.2

Commits

• 9000827 Merge pull request #493 from actions/tunc-d-prepare-download-v8-0-2
• e455989 Prepare download-artifact v8.0.2
• a00b90c Merge pull request #492 from actions/tunc-d-download-artifact-package-bump
• 29bb7ce Update @​actions/artifact to 6.3.1
• 484a0b5 Update the readme (#473)
• See full diff in compare view

Updates sonarsource/sonarqube-scan-action from 8.2.1 to 8.3.0

Release notes

Sourced from sonarsource/sonarqube-scan-action's releases.

v8.3.0

What's Changed

• Fix GPG key retrieval through HTTPS proxies by @​Torbjorn-Svensson in SonarSource/sonarqube-scan-action#265
• Configure Renovate by @​renovate[bot] in SonarSource/sonarqube-scan-action#267
• SQSCANGHA-168 Update actions/cache action to v5.1.0 by @​renovate[bot] in SonarSource/sonarqube-scan-action#269
• Update npm dependencies by @​renovate[bot] in SonarSource/sonarqube-scan-action#268
• Update dependency @​actions/exec to v3 by @​renovate[bot] in SonarSource/sonarqube-scan-action#270
• Update GitHub Actions dependencies (major) by @​renovate[bot] in SonarSource/sonarqube-scan-action#271

New Contributors

• @​Torbjorn-Svensson made their first contribution in SonarSource/sonarqube-scan-action#265
• @​renovate[bot] made their first contribution in SonarSource/sonarqube-scan-action#267

Full Changelog: SonarSource/sonarqube-scan-action@v8.2.2...v8.3.0

v8.2.2

What's Changed

• SQSCANGHA-159 Bump undici from 6.24.1 to 6.28.1 by @​dependabot[bot] in SonarSource/sonarqube-scan-action#261

Full Changelog: SonarSource/sonarqube-scan-action@v8.2.1...v8.2.2

Commits

• d209202 Update GitHub Actions dependencies (major) (#271)
• 0333cb3 Update dependency @​actions/exec to v3 (#270)
• da4450e Update npm dependencies (#268)
• c5094d1 SQSCANGHA-168 Update actions/cache action to v5.1.0 (#269)
• 001613f SQSCANGHA-162 Configure Renovate (#267)
• 6abe0a7 SQSCANGHA-165 Fix GPG key retrieval through HTTPS proxies (#265)
• ba9859e SQSCANGHA-159 Bump undici from 6.24.1 to 6.28.1 (#261)
• 5bc5285 Rename code-quality teams to code-orchestration in CODEOWNERS
• ad82103 SQSCANGHA-158 NO-JIRA Bump actions/checkout from 7.0.0 to 7.0.1 (#260)
• 7451daf SQSCANGHA-157 NO-JIRA Bump actions/setup-node from 6.4.0 to 7.0.0 (#259)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[phil-davis]

This needs https://github.com/owncloud/admin/pull/300

If actions keep updating like this, then there is never a point at which all action updates are past their cooldown period.

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml