github-actions: bump the minor-patch-dependencies group with 3 updates

Bumps the minor-patch-dependencies group with 3 updates: [github/codeql-action](https://github.com/github/codeql-action), [shivammathur/setup-php](https://github.com/shivammathur/setup-php) and [dessant/reaction-comments](https://github.com/dessant/reaction-comments).


Updates `github/codeql-action` from 2 to 3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@v2...v3)

Updates `shivammathur/setup-php` from 2.27.0 to 2.28.0
- [Release notes](https://github.com/shivammathur/setup-php/releases)
- [Commits](shivammathur/setup-php@2.27.0...2.28.0)

Updates `dessant/reaction-comments` from 3 to 4
- [Release notes](https://github.com/dessant/reaction-comments/releases)
- [Changelog](https://github.com/dessant/reaction-comments/blob/main/CHANGELOG.md)
- [Commits](dessant/reaction-comments@v3...v4)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: minor-patch-dependencies
- dependency-name: shivammathur/setup-php
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-dependencies
- dependency-name: dessant/reaction-comments
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: minor-patch-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>

.github/workflows/codeql.yml

@@ -57,7 +57,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: "Initialize CodeQL"
-        uses: "github/codeql-action/init@v2"
+        uses: "github/codeql-action/init@v3"
         with:
           languages: "${{ matrix.language }}"
           # If you wish to specify custom queries, you can do so here or in a config file.
@@ -70,7 +70,7 @@ jobs:
       # Autobuild attempts to build any compiled languages  (C/C++, C#, Go, or Java).
       # If this step fails, then you should remove it and run the build manually (see below)
       - name: "Autobuild"
-        uses: "github/codeql-action/autobuild@v2"
+        uses: "github/codeql-action/autobuild@v3"
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -83,6 +83,6 @@ jobs:
       #     ./location_of_script_within_repo/buildscript.sh
 
       - name: "Perform CodeQL Analysis"
-        uses: "github/codeql-action/analyze@v2"
+        uses: "github/codeql-action/analyze@v3"
         with:
           category: "/language:${{matrix.language}}"

.github/workflows/continuous-integration.yml

@@ -84,7 +84,7 @@ jobs:
           persist-credentials: false
 
       - name: "Install PHP"
-        uses: "shivammathur/setup-php@2.27.0"
+        uses: "shivammathur/setup-php@2.28.0"
         with:
           php-version: "${{ matrix.php-version }}"
           extensions: "none, phar, json, opcache, curl, iconv, mbstring, ctype, dom, intl, simplexml, tokenizer, xml, xmlwriter"
@@ -141,7 +141,7 @@ jobs:
           persist-credentials: false
 
       - name: "Install PHP"
-        uses: "shivammathur/setup-php@2.27.0"
+        uses: "shivammathur/setup-php@2.28.0"
         with:
           php-version: "${{ matrix.php-version }}"
           extensions: "none, phar, json, opcache, curl, iconv, mbstring, dom, intl, simplexml, tokenizer, xml, xmlwriter"
@@ -197,7 +197,7 @@ jobs:
           persist-credentials: false
 
       - name: "Install PHP"
-        uses: "shivammathur/setup-php@2.27.0"
+        uses: "shivammathur/setup-php@2.28.0"
         with:
           php-version: "${{ matrix.php-version }}"
           extensions: "none, phar, json, opcache, curl, iconv, mbstring, dom, intl, simplexml, tokenizer, xml, xmlwriter"

.github/workflows/reactions.yml

@@ -23,7 +23,7 @@ jobs:
   action:
     runs-on: "ubuntu-22.04"
     steps:
-      - uses: "dessant/reaction-comments@v3"
+      - uses: "dessant/reaction-comments@v4"
         with:
           github-token: "${{ secrets.GITHUB_TOKEN }}"
           issue-comment: >