build(deps): bump the github-actions group with 4 updates

[dependabot]

Bumps the github-actions group with 4 updates: shivammathur/setup-php, webiny/action-conventional-commits, cypress-io/github-action and peter-evans/create-pull-request.

Updates shivammathur/setup-php from 2.35.5 to 2.36.0

Release notes

Sourced from shivammathur/setup-php's releases.

2.36.0

Changelog

• Added support for PHP 8.5 stable release.

- name: Setup PHP 8.5 (stable)
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.5'

• Added support for PHP 8.6.0-dev. Specifying 8.6 in the php-version input should now set up a nightly build from the master branch of php-src. (#1002)

- name: Setup PHP 8.6.0-dev
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.6'

• Added support for pdo_ibm and ibm_db2 extensions.

- name: Setup PHP with pdo_ibm and ibm_db2 extensions
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.5'
    extensions: pdo_ibm, ibm_db2

• Added support to install blackfire extension on PHP 8.5.

- name: Setup PHP with blackfire extension
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.5'
    extensions: blackfire

• Improved support to detect the required libraries when building from source for common extensions. For example installing gnupg from source would install the required libgpgme library automatically. (#1021)

- name: Setup PHP with amqp extension
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.5'
    extensions: gnupg-1.5.4

... (truncated)

Commits

• 44454db Fix check_lists in ppa.sh
• 9d7558f Revert to using php-builder for PHP 8.3 and above for self-hosted
• 7bf05c6 Update README
• 5daa53f Fix shellcheck in darwin.sh
• e8f032a Fix linking
• f96e84a Bump version to 2.36.0
• 4abbbd6 Fix build pdo_oci on macos for PHP 7.0
• a19278e Update actions/checkout to v6
• 4364ed4 Merge pull request #1030 from shivammathur/dependabot/github_actions/develop/...
• 8dcd37f Improve macos php setup
• Additional commits viewable in compare view

Updates webiny/action-conventional-commits from 1.3.0 to 1.3.1

Commits

• faccb24 chore: prepare release
• 6026468 feat: refactor commit message validation to use exception list
• 9ce0777 chore: add reapply as valid commit type
• 54c7d1f Update action.yml
• See full diff in compare view

Updates cypress-io/github-action from 6.10.8 to 7.0.0

Release notes

Sourced from cypress-io/github-action's releases.

v7.0.0

7.0.0 (2026-01-21)

Features

• deps: update action from node20 to node24 (#1639) (dca9861)

BREAKING CHANGES

• deps: Update action from node20 to node24 cypress-io/github-action@v6, using node20, is deprecated

v6.10.9

6.10.9 (2026-01-20)

Bug Fixes

• deps: update @actions/* and debug (#1638) (f790eee)

Changelog

Sourced from cypress-io/github-action's changelog.

Changelog

This document gives an overview of changes to the Cypress GitHub JavaScript Action cypress-io/github-action.

See Releases for full details of changes.

Version	Changes
v7.0.0	Action runs under Node.js 24 instead of Node.js 20
v6.10.0	Examples remove Node.js 23. End of support for Node.js 23.
v6.9.0	Add parameter validation for command
v6.8.0	Examples remove Node.js 18. End of support for Node.js 18.
v6.7.10	Examples updated to Cypress 14
v6.7.9	Migrate to @actions/cache@4.0.0 for continued access to GitHub Actions caching services
v6.7.0	Examples remove Node.js 21. End of support for Node.js 21.
v6.6.0	Add parameter summary-title
v6.5.0	Examples remove Node.js 16. End of support for Node.js 16.
v6.4.0	Action adds PR number and URL if available when recording
v6.3.0	v6 is recommended action version
v6.2.0	Examples updated to Cypress 13
v6.1.0	Examples for Cypress 9 archived in action's v5 branch
v6.0.0	Action runs under Node.js 20 instead of Node.js 16
v5.8.1	Examples remove Node.js 19. End of support for Node.js 19
v5.8.0	Add GitHub step output resultsUrl. Deprecate dashboardUrl.
v5.7.0	Add basic Yarn Modern Plug'n'Play support
v5.6.2	Examples add Node.js 20. End of support and removal of Node.js 14 examples.
v5.6.0	Add check for lockfile presence
v5.5.0	Examples add Yarn Modern
v5.4.0	Examples add Yarn Classic
v5.3.0	Add parameter publish-summary (default true)
v5.2.0	Examples add Node.js 19
v5.1.0	Add parameter auto-cancel-after-failures
v5.0.0	Examples add Node.js 18 and remove Node.js 12
v4.2.2	Dependency on GitHub set-output workflow command removed
v4.2.0	Support for pnpm added
v4.0.0	Support for Cypress 10 and later versions added
v3	Action runs under Node.js 16 instead of Node.js 12
v2	Cypress runs using the Module API
v1	This version is no longer runnable in GitHub due to security changes.

Commits

• dca9861 feat(deps): update action from node20 to node24 (#1639)
• e768e6d chore(deps): update dependency node to v20.20.0 (#1630)
• f790eee fix(deps): update @actions/* and debug (#1638)
• b26b3c2 test(deps): update actions/setup-node to v6 (#1633)
• 8a553ad ci(deps): update semantic-release to 25.0.2 (#1636)
• fa0c464 chore(deps): refresh devDependencies (#1635)
• 24e037e chore(deps): update cypress to 15.9.0 (#1631)
• 76ac25c chore: remove Renovate weekend schedule (#1628)
• c5d9c43 chore: disable Renovate dependencies type update (#1626)
• 945856d chore(deps): update cypress to 15.8.2 (#1621)
• Additional commits viewable in compare view

Updates peter-evans/create-pull-request from 8.0.0 to 8.1.0

Release notes

Sourced from peter-evans/create-pull-request's releases.

Create Pull Request v8.1.0

What's Changed

• README.md: bump given GitHub actions to their latest versions by @​deining in peter-evans/create-pull-request#4265
• build(deps): bump the github-actions group with 2 updates by @​dependabot[bot] in peter-evans/create-pull-request#4273
• build(deps-dev): bump the npm group with 2 updates by @​dependabot[bot] in peter-evans/create-pull-request#4274
• build(deps-dev): bump undici from 6.22.0 to 6.23.0 by @​dependabot[bot] in peter-evans/create-pull-request#4284
• Update distribution by @​actions-bot in peter-evans/create-pull-request#4289
• fix: Handle remote prune failures gracefully on self-hosted runners by @​peter-evans in peter-evans/create-pull-request#4295
• feat: add @​octokit/plugin-retry to handle retriable server errors by @​peter-evans in peter-evans/create-pull-request#4298

New Contributors

• @​deining made their first contribution in peter-evans/create-pull-request#4265

Full Changelog: peter-evans/create-pull-request@v8.0.0...v8.1.0

Commits

• c0f553f feat: add @​octokit/plugin-retry to handle retriable server errors (#4298)
• 7000124 fix: Handle remote prune failures gracefully (#4295)
• 34aa40e build: update distribution (#4289)
• 641099d build(deps-dev): bump undici from 6.22.0 to 6.23.0 (#4284)
• 2271f1d build(deps-dev): bump the npm group with 2 updates (#4274)
• 437c31a build(deps): bump the github-actions group with 2 updates (#4273)
• 0979079 docs: update readme
• 5b751cd README.md: bump given GitHub actions to their latest versions (#4265)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions