GH Actions: Bump the action-runners group with 5 updates by dependabot[bot] · Pull Request #1040 · WordPress/Requests

dependabot · 2026-03-20T22:15:18Z

Bumps the action-runners group with 5 updates:

Package	From	To
shivammathur/setup-php	`2.36.0`	`2.37.0`
actions/cache	`5.0.3`	`5.0.4`
codecov/codecov-action	`5.5.2`	`5.5.3`
actions/download-artifact	`8.0.0`	`8.0.1`
ruby/setup-ruby	`1.290.0`	`1.295.0`

Updates shivammathur/setup-php from 2.36.0 to 2.37.0

Release notes

Sourced from shivammathur/setup-php's releases.

2.37.0

Changelog

Updated the action to use Node.js 24. (#1049)

Added support for master in the php-version input. It should now set up a nightly build from the master branch of php-src.

Added support to install ioncube and zephir_parser extensions on PHP 8.5.

Expanded support for installing extensions using Homebrew on macOS from the shivammathur/homebrew-extensions tap. This includes pdo_firebird, sqlsrv, pdo_sqlsrv, pecl_http, swow, xhprof, and several other supported extensions.

Improved switching PHP versions on Linux. Missing alternatives should now be registered automatically before switching versions. #1067

Improved support for Homebrew on macOS. It should now retry stuck brew commands with an inactivity watchdog.

Improved support for adding tools. It should now correctly use the latest release download URL when a version is not specified. (#1064)

Improved tool setup and caching on self-hosted runners.

Improved support for sqlsrv and pdo_sqlsrv on PHP 8.1 and 8.2.

Fixed installing pecl_http on Windows. Switched to downloads.php.net for fixing ICU version post install.

Fixed cached couchbase installs on macOS using the shivammathur/cache-extensions action.

Replaced @actions/core with local functions to reduce bundle size.

Refactored to use ES2024+ features for Node 24.

Updated actions used in examples to their latest versions.

Updated Node.js dependencies.

Thanks @theluckystrike for the contribution 🎉

Thanks @code-kudu, @ssddanbrown, @RoundingWell, and @ntzrbtr for the sponsorship ❤️

For the complete list of changes, please refer to the Full Changelog

Commits

accd612 Update dependencies
a5c2146 Improve tool cache to not cache persistent urls
6a1d559 Fix regression in pecl_http support [skip ci]
076a5e3 Update actions in examples [skip ci]
00c8f84 Add support for ionCube for PHP 8.5 [skip ci]
c033e31 Add support for zephir parser for PHP 8.5 [skip ci]
bc6f40a Switch to downloads.php.net in Get-ICUUrl [skip ci]
fe26b50 Fix support for pecl_http on Windows [skip ci]
e67ff94 Fix caching couchbase on macOS [skip ci]
4e89813 Improve switch_version on Linux
Additional commits viewable in compare view

Updates actions/cache from 5.0.3 to 5.0.4

Release notes

Sourced from actions/cache's releases.

v5.0.4

What's Changed

Add release instructions and update maintainer docs by @Link- in actions/cache#1696

Potential fix for code scanning alert no. 52: Workflow does not contain permissions by @Link- in actions/cache#1697

Fix workflow permissions and cleanup workflow names / formatting by @Link- in actions/cache#1699

docs: Update examples to use the latest version by @XZTDean in actions/cache#1690

Fix proxy integration tests by @Link- in actions/cache#1701

Fix cache key in examples.md for bun.lock by @RyPeck in actions/cache#1722

Update dependencies & patch security vulnerabilities by @Link- in actions/cache#1738

New Contributors

@XZTDean made their first contribution in actions/cache#1690

@RyPeck made their first contribution in actions/cache#1722

Full Changelog: actions/cache@v5...v5.0.4

Changelog

Sourced from actions/cache's changelog.

Releases

How to prepare a release

[!NOTE]
Relevant for maintainers with write access only.

Switch to a new branch from main.

Run npm test to ensure all tests are passing.

Update the version in https://github.com/actions/cache/blob/main/package.json.

Run npm run build to update the compiled files.

Update this https://github.com/actions/cache/blob/main/RELEASES.md with the new version and changes in the ## Changelog section.

Run licensed cache to update the license report.

Run licensed status and resolve any warnings by updating the https://github.com/actions/cache/blob/main/.licensed.yml file with the exceptions.

Commit your changes and push your branch upstream.

Open a pull request against main and get it reviewed and merged.

Draft a new release https://github.com/actions/cache/releases use the same version number used in package.json

Create a new tag with the version number.

Auto generate release notes and update them to match the changes you made in RELEASES.md.

Toggle the set as the latest release option.

Publish the release.

Navigate to https://github.com/actions/cache/actions/workflows/release-new-action-version.yml

There should be a workflow run queued with the same version number.

Approve the run to publish the new version and update the major tags for this action.

Changelog

5.0.4

Bump minimatch to v3.1.5 (fixes ReDoS via globstar patterns)

Bump undici to v6.24.1 (WebSocket decompression bomb protection, header validation fixes)

Bump fast-xml-parser to v5.5.6

5.0.3

Bump @actions/cache to v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)

Bump @actions/core to v2.0.3

5.0.2

Bump @actions/cache to v5.0.3 #1692

5.0.1

Update @azure/storage-blob to ^12.29.1 via @actions/cache@5.0.1 #1685

5.0.0

[!IMPORTANT] actions/cache@v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1.

... (truncated)

Commits

6682284 Merge pull request #1738 from actions/prepare-v5.0.4
e340396 Update RELEASES
8a67110 Add licenses
1865903 Update dependencies & patch security vulnerabilities
5656298 Merge pull request #1722 from RyPeck/patch-1
4e380d1 Fix cache key in examples.md for bun.lock
b7e8d49 Merge pull request #1701 from actions/Link-/fix-proxy-integration-tests
984a21b Add traffic sanity check step
acf2f1f Fix resolution
95a07c5 Add wait for proxy
Additional commits viewable in compare view

Updates codecov/codecov-action from 5.5.2 to 5.5.3

Release notes

Sourced from codecov/codecov-action's releases.

v5.5.3

What's Changed

build(deps): bump actions/github-script from 7.0.1 to 8.0.0 by @dependabot[bot] in codecov/codecov-action#1874

chore(release): bump to 5.5.3 by @thomasrockhu-codecov in codecov/codecov-action#1922

Full Changelog: codecov/codecov-action@v5.5.2...v5.5.3

Changelog

Sourced from codecov/codecov-action's changelog.

v5.5.2

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.1..v5.5.2

v5.5.1

What's Changed

fix: overwrite pr number on fork by @thomasrockhu-codecov in codecov/codecov-action#1871

build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by @app/dependabot in codecov/codecov-action#1868

build(deps): bump github/codeql-action from 3.29.9 to 3.29.11 by @app/dependabot in codecov/codecov-action#1867

fix: update to use local app/ dir by @thomasrockhu-codecov in codecov/codecov-action#1872

docs: fix typo in README by @datalater in codecov/codecov-action#1866

Document a codecov-cli version reference example by @webknjaz in codecov/codecov-action#1774

build(deps): bump github/codeql-action from 3.28.18 to 3.29.9 by @app/dependabot in codecov/codecov-action#1861

build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by @app/dependabot in codecov/codecov-action#1833

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.0..v5.5.1

v5.5.0

What's Changed

feat: upgrade wrapper to 0.2.4 by @jviall in codecov/codecov-action#1864

Pin actions/github-script by Git SHA by @martincostello in codecov/codecov-action#1859

fix: check reqs exist by @joseph-sentry in codecov/codecov-action#1835

fix: Typo in README by @spalmurray in codecov/codecov-action#1838

docs: Refine OIDC docs by @spalmurray in codecov/codecov-action#1837

build(deps): bump github/codeql-action from 3.28.17 to 3.28.18 by @app/dependabot in codecov/codecov-action#1829

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.3..v5.5.0

v5.4.3

What's Changed

build(deps): bump github/codeql-action from 3.28.13 to 3.28.17 by @app/dependabot in codecov/codecov-action#1822

fix: OIDC on forks by @joseph-sentry in codecov/codecov-action#1823

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.2..v5.4.3

v5.4.2

... (truncated)

Commits

1af5884 chore(release): bump to 5.5.3 (#1922)
c143300 build(deps): bump actions/github-script from 7.0.1 to 8.0.0 (#1874)
See full diff in compare view

Updates actions/download-artifact from 8.0.0 to 8.0.1

Release notes

Sourced from actions/download-artifact's releases.

v8.0.1

What's Changed

Support for CJK characters in the artifact name by @danwkennedy in actions/download-artifact#471

Add a regression test for artifact name + content-type mismatches by @danwkennedy in actions/download-artifact#472

Full Changelog: actions/download-artifact@v8...v8.0.1

Commits

3e5f45b Add regression tests for CJK characters (#471)
e6d03f6 Add a regression test for artifact name + content-type mismatches (#472)
See full diff in compare view

Updates ruby/setup-ruby from 1.290.0 to 1.295.0

Release notes

Sourced from ruby/setup-ruby's releases.

v1.295.0

What's Changed

Update CRuby releases on Windows by @ruby-builder-bot in ruby/setup-ruby#890

Full Changelog: ruby/setup-ruby@v1.294.0...v1.295.0

v1.294.0

What's Changed

Add ruby-4.0.2 by @ruby-builder-bot in ruby/setup-ruby#889

Full Changelog: ruby/setup-ruby@v1.293.0...v1.294.0

v1.293.0

What's Changed

Update README to remove JRuby version notes by @headius in ruby/setup-ruby#887

Update CRuby releases on Windows by @ruby-builder-bot in ruby/setup-ruby#888

Full Changelog: ruby/setup-ruby@v1.292.0...v1.293.0

v1.292.0

What's Changed

Update Node to 24 by @eregon in ruby/setup-ruby#886

Full Changelog: ruby/setup-ruby@v1.291.0...v1.292.0

v1.291.0

What's Changed

Add ruby-3.4.9 by @ruby-builder-bot in ruby/setup-ruby#885

Full Changelog: ruby/setup-ruby@v1.290.0...v1.291.0

Commits

319994f Update CRuby releases on Windows
c984c1a Add ruby-4.0.2
dffb23f Update CRuby releases on Windows
ea73ddb Update README to remove JRuby version notes
4eb9f11 Update Node to 24
9d13dd6 Add ruby-3.4.9
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

jrfnl · 2026-03-21T00:18:55Z

@dependabot rebase

Bumps the action-runners group with 5 updates: | Package | From | To | | --- | --- | --- | | [shivammathur/setup-php](https://github.com/shivammathur/setup-php) | `2.36.0` | `2.37.0` | | [actions/cache](https://github.com/actions/cache) | `5.0.3` | `5.0.4` | | [codecov/codecov-action](https://github.com/codecov/codecov-action) | `5.5.2` | `5.5.3` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `8.0.0` | `8.0.1` | | [ruby/setup-ruby](https://github.com/ruby/setup-ruby) | `1.290.0` | `1.295.0` | Updates `shivammathur/setup-php` from 2.36.0 to 2.37.0 - [Release notes](https://github.com/shivammathur/setup-php/releases) - [Commits](shivammathur/setup-php@44454db...accd612) Updates `actions/cache` from 5.0.3 to 5.0.4 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@cdf6c1f...6682284) Updates `codecov/codecov-action` from 5.5.2 to 5.5.3 - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](codecov/codecov-action@671740a...1af5884) Updates `actions/download-artifact` from 8.0.0 to 8.0.1 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@70fc10c...3e5f45b) Updates `ruby/setup-ruby` from 1.290.0 to 1.295.0 - [Release notes](https://github.com/ruby/setup-ruby/releases) - [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb) - [Commits](ruby/setup-ruby@6ca151f...319994f) --- updated-dependencies: - dependency-name: shivammathur/setup-php dependency-version: 2.37.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: action-runners - dependency-name: actions/cache dependency-version: 5.0.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: action-runners - dependency-name: codecov/codecov-action dependency-version: 5.5.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: action-runners - dependency-name: actions/download-artifact dependency-version: 8.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: action-runners - dependency-name: ruby/setup-ruby dependency-version: 1.295.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: action-runners ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added the Type: testing/chores/QA label Mar 20, 2026

jrfnl mentioned this pull request Mar 21, 2026

Release checklist for 2.0.18 #1019

Open

20 tasks

dependabot bot force-pushed the dependabot/github_actions/develop/action-runners-5d16c4140d branch from d053acd to 4dd632f Compare March 21, 2026 00:20

jrfnl added this to the 2.0.18 milestone Mar 21, 2026

jrfnl approved these changes Mar 21, 2026

View reviewed changes

jrfnl merged commit 11ad7b4 into develop Mar 21, 2026
38 checks passed

jrfnl deleted the dependabot/github_actions/develop/action-runners-5d16c4140d branch March 21, 2026 00:24

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

GH Actions: Bump the action-runners group with 5 updates#1040

GH Actions: Bump the action-runners group with 5 updates#1040
jrfnl merged 1 commit intodevelopfrom
dependabot/github_actions/develop/action-runners-5d16c4140d

dependabot bot commented on behalf of github Mar 20, 2026 •

edited

Loading

Uh oh!

jrfnl commented Mar 21, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot bot commented on behalf of github Mar 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

2.37.0

Changelog

v5.0.4

What's Changed

New Contributors

Releases

How to prepare a release

Changelog

5.0.4

5.0.3

5.0.2

5.0.1

5.0.0

v5.5.3

What's Changed

v5.5.2

What's Changed

v5.5.1

What's Changed

v5.5.0

What's Changed

v5.4.3

What's Changed

v5.4.2

v8.0.1

What's Changed

v1.295.0

What's Changed

v1.294.0

What's Changed

v1.293.0

What's Changed

v1.292.0

What's Changed

v1.291.0

What's Changed

Uh oh!

jrfnl commented Mar 21, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Mar 20, 2026 •

edited

Loading