[web-php] master: Add `.github/workflows/actions.lock` (#2054)
| From: | Tim Düsterhus via GitHub | Date: | Sat, 07 Nov 2026 10:03:13 +0000 |
| Subject: | [web-php] master: Add `.github/workflows/actions.lock` (#2054) | ||
| Groups: | php.webmaster | ||
| Request: | Send a blank email to php-webmaster+get-34164@lists.php.net to get a copy of this message | ||
Author: Tim Düsterhus (TimWolla)
Committer: GitHub (web-flow)
Pusher: TimWolla
Date: 2026-11-07T11:03:11+01:00
Commit: https://github.com/php/web-php/commit/05857b00247c0f743c86aed201e3aca9b796f99d
Raw diff: https://github.com/php/web-php/commit/05857b00247c0f743c86aed201e3aca9b796f99d.diff
Add
.github/workflows/actions.lock (#2054)
Changed paths:
A .github/workflows/actions.lock
M .github/workflows/close-needs-feedback.yml
M .github/workflows/integrate.yaml
M .github/workflows/preview-deploy.yml
M .github/workflows/preview-tests.yml
M .github/workflows/remove-needs-feedback.yml
Diff:
diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock
new file mode 100644
index 0000000000..cc9dc736ea
--- /dev/null
+++ b/.github/workflows/actions.lock
@@ -0,0 +1,93 @@
+# This file is machine-generated by gh actions-lock.
+# Do not edit by hand; run gh actions-lock to update.
+# Docs: https://gh.io/actions-lockfile
+version: 'v0.0.3'
+workflows:
+ '.github/workflows/close-needs-feedback.yml':
+ - 'imhoffd/needs-reply@v2.0.0'
+ '.github/workflows/integrate.yaml':
+ - 'actions/cache@v6.1.0'
+ - 'actions/checkout@v7.0.1'
+ - 'shivammathur/setup-php@2.40.0'
+ '.github/workflows/pr-closed.yml':
+ - 'appleboy/ssh-action@v1.2.5'
+ '.github/workflows/preview-deploy.yml':
+ - 'actions/download-artifact@v8.0.2'
+ - 'easingthemes/ssh-deploy@main'
+ - 'peter-evans/create-or-update-comment@v5.0.0'
+ - 'peter-evans/find-comment@v4.0.0'
+ '.github/workflows/preview-tests.yml':
+ - 'actions/cache@v6.1.0'
+ - 'actions/checkout@v7.0.1'
+ - 'actions/setup-node@v7.1.0'
+ - 'actions/upload-artifact@v7.0.2'
+ - 'shivammathur/setup-php@2.40.0'
+ '.github/workflows/remove-needs-feedback.yml':
+ - 'actions-ecosystem/action-add-labels@v1.1.3'
+ - 'actions-ecosystem/action-remove-labels@v1.3.0'
+dependencies:
+ 'actions-ecosystem/action-add-labels@v1.1.3':
+ ref: 'v1.1.3'
+ commit: 'sha1-18f1af5e3544586314bbe15c0273249c770b2daf'
+ owner_id: 56633079
+ repo_id: 260786220
+ 'actions-ecosystem/action-remove-labels@v1.3.0':
+ ref: 'v1.3.0'
+ commit: 'sha1-2ce5d41b4b6aa8503e285553f75ed56e0a40bae0'
+ owner_id: 56633079
+ repo_id: 260787457
+ 'actions/cache@v6.1.0':
+ ref: 'v6.1.0'
+ commit: 'sha1-55cc8345863c7cc4c66a329aec7e433d2d1c52a9'
+ owner_id: 44036562
+ repo_id: 215566462
+ 'actions/checkout@v7.0.1':
+ ref: 'v7.0.1'
+ commit: 'sha1-3d3c42e5aac5ba805825da76410c181273ba90b1'
+ owner_id: 44036562
+ repo_id: 197814629
+ 'actions/download-artifact@v8.0.2':
+ ref: 'v8.0.2'
+ commit: 'sha1-9000827ccba6bdab643e8b6fd33ac0654aef8333'
+ owner_id: 44036562
+ repo_id: 192626254
+ 'actions/setup-node@v7.1.0':
+ ref: 'v7.1.0'
+ commit: 'sha1-949feb2413d6458794dcd2491c4babbbce0c15c1'
+ owner_id: 44036562
+ repo_id: 189476904
+ 'actions/upload-artifact@v7.0.2':
+ ref: 'v7.0.2'
+ commit: 'sha1-cf430e030ddbb5b0abf93d22962f4752f3646cd9'
+ owner_id: 44036562
+ repo_id: 192625955
+ 'appleboy/ssh-action@v1.2.5':
+ ref: 'v1.2.5'
+ commit: 'sha1-0ff4204d59e8e51228ff73bce53f80d53301dee2'
+ owner_id: 21979
+ repo_id: 186202082
+ 'easingthemes/ssh-deploy@main':
+ ref: 'main'
+ commit: 'sha1-2cc5b27bf3029d0455dd5e09fe02633904031447'
+ owner_id: 2750284
+ repo_id: 210941897
+ 'imhoffd/needs-reply@v2.0.0':
+ ref: 'v2.0.0'
+ commit: 'sha1-71e8d5144caa0d4a1e292348bfafa3866d08c855'
+ owner_id: 236501
+ repo_id: 271127651
+ 'peter-evans/create-or-update-comment@v5.0.0':
+ ref: 'v5.0.0'
+ commit: 'sha1-e8674b075228eee787fea43ef493e45ece1004c9'
+ owner_id: 18365890
+ repo_id: 223708643
+ 'peter-evans/find-comment@v4.0.0':
+ ref: 'v4.0.0'
+ commit: 'sha1-b30e6a3c0ed37e7c023ccd3f1db5c6c0b0c23aad'
+ owner_id: 18365890
+ repo_id: 256447541
+ 'shivammathur/setup-php@2.40.0':
+ ref: '2.40.0'
+ commit: 'sha1-eb7c497e18156a6bbabfef1d3a82760b9eda3962'
+ owner_id: 1571086
+ repo_id: 206578964
diff --git a/.github/workflows/close-needs-feedback.yml b/.github/workflows/close-needs-feedback.yml
index 27231303f1..3fd9d3bac5 100644
--- a/.github/workflows/close-needs-feedback.yml
+++ b/.github/workflows/close-needs-feedback.yml
@@ -16,7 +16,7 @@ jobs:
pull-requests: write
steps:
- name: Close old issues that need feedback
- uses: dwieeb/needs-reply@v2
+ uses: imhoffd/needs-reply@v2.0.0
with:
repo-token: ${{ secrets.GITHUB_TOKEN }}
issue-label: "Status: Needs Feedback"
diff --git a/.github/workflows/integrate.yaml b/.github/workflows/integrate.yaml
index 42103b874c..c46f1079c9 100644
--- a/.github/workflows/integrate.yaml
+++ b/.github/workflows/integrate.yaml
@@ -21,10 +21,10 @@ jobs:
steps:
- name: "Checkout"
- uses: "actions/checkout@v7"
+ uses: "actions/checkout@v7.0.1"
- name: "Set up PHP"
- uses: "shivammathur/setup-php@v2"
+ uses: "shivammathur/setup-php@2.40.0"
with:
coverage: "xdebug"
extensions: "none, curl, dom, json, mbstring, tokenizer, xml, xmlwriter, iconv"
@@ -40,7 +40,7 @@ jobs:
run: "echo \"COMPOSER_CACHE_DIR=$(composer config cache-dir)\" >>
$GITHUB_ENV"
- name: "Cache dependencies installed with composer"
- uses: "actions/cache@v6"
+ uses: "actions/cache@v6.1.0"
with:
path: "${{ env.COMPOSER_CACHE_DIR }}"
key: "php-${{ matrix.php-version }}-composer-${{
hashFiles('composer.lock') }}"
@@ -66,10 +66,10 @@ jobs:
steps:
- name: "Checkout"
- uses: "actions/checkout@v7"
+ uses: "actions/checkout@v7.0.1"
- name: "Set up PHP"
- uses: "shivammathur/setup-php@v2"
+ uses: "shivammathur/setup-php@2.40.0"
with:
coverage: "none"
extensions: "none, curl, dom, json, mbstring, tokenizer, xml, xmlwriter, iconv"
@@ -85,7 +85,7 @@ jobs:
run: "echo \"COMPOSER_CACHE_DIR=$(composer config cache-dir)\" >>
$GITHUB_ENV"
- name: "Cache dependencies installed with composer"
- uses: "actions/cache@v6"
+ uses: "actions/cache@v6.1.0"
with:
path: "${{ env.COMPOSER_CACHE_DIR }}"
key: "php-${{ matrix.php-version }}-composer-${{
hashFiles('composer.lock') }}"
@@ -122,10 +122,10 @@ jobs:
steps:
- name: "Checkout"
- uses: "actions/checkout@v7"
+ uses: "actions/checkout@v7.0.1"
- name: "Set up PHP"
- uses: "shivammathur/setup-php@v2"
+ uses: "shivammathur/setup-php@2.40.0"
with:
coverage: "none"
extensions: "none, curl, dom, json, mbstring, tokenizer, xml, xmlwriter, iconv"
@@ -138,7 +138,7 @@ jobs:
run: "echo \"COMPOSER_CACHE_DIR=$(composer config cache-dir)\" >>
$GITHUB_ENV"
- name: "Cache dependencies installed with composer"
- uses: "actions/cache@v6"
+ uses: "actions/cache@v6.1.0"
with:
path: "${{ env.COMPOSER_CACHE_DIR }}"
key: "php-${{ matrix.php-version }}-composer-${{
hashFiles('composer.lock') }}"
@@ -165,10 +165,10 @@ jobs:
steps:
- name: "Checkout"
- uses: "actions/checkout@v7"
+ uses: "actions/checkout@v7.0.1"
- name: "Set up PHP"
- uses: "shivammathur/setup-php@v2"
+ uses: "shivammathur/setup-php@2.40.0"
with:
coverage: "none"
extensions: "none, curl, dom, json, mbstring, tokenizer, xml, xmlwriter, iconv"
@@ -184,7 +184,7 @@ jobs:
run: "echo \"COMPOSER_CACHE_DIR=$(composer config cache-dir)\" >>
$GITHUB_ENV"
- name: "Cache dependencies installed with composer"
- uses: "actions/cache@v6"
+ uses: "actions/cache@v6.1.0"
with:
path: "${{ env.COMPOSER_CACHE_DIR }}"
key: "php-${{ matrix.php-version }}-composer-${{
hashFiles('composer.lock') }}"
diff --git a/.github/workflows/preview-deploy.yml b/.github/workflows/preview-deploy.yml
index de76e78a13..db3a64603d 100644
--- a/.github/workflows/preview-deploy.yml
+++ b/.github/workflows/preview-deploy.yml
@@ -20,7 +20,7 @@ jobs:
steps:
- name: Download PR number
- uses: actions/download-artifact@v8
+ uses: actions/download-artifact@v8.0.2
with:
name: pr-number.txt
path: ./pr-number-artifact/
@@ -34,7 +34,7 @@ jobs:
echo "pr_number=$PR_NUMBER" >> $GITHUB_OUTPUT
- name: Download PR code as artifact
- uses: actions/download-artifact@v8
+ uses: actions/download-artifact@v8.0.2
with:
name: pr-code
path: ./
@@ -56,7 +56,7 @@ jobs:
ARGS: "-rlgoDzc"
- name: Find existing preview comment
- uses: peter-evans/find-comment@v4
+ uses: peter-evans/find-comment@v4.0.0
id: fc
with:
issue-number: ${{ steps.pr-number.outputs.pr_number }}
@@ -64,7 +64,7 @@ jobs:
body-includes: 'Preview for commit'
- name: Create or update preview comment
- uses: peter-evans/create-or-update-comment@v5
+ uses: peter-evans/create-or-update-comment@v5.0.0
with:
issue-number: ${{ steps.pr-number.outputs.pr_number }}
comment-id: ${{ steps.fc.outputs.comment-id }}
@@ -80,7 +80,7 @@ jobs:
steps:
- name: Download PR number
- uses: actions/download-artifact@v8
+ uses: actions/download-artifact@v8.0.2
with:
name: pr-number.txt
path: ./pr-number-artifact/
@@ -94,7 +94,7 @@ jobs:
echo "pr_number=$PR_NUMBER" >> $GITHUB_OUTPUT
- name: Download regression report
- uses: actions/download-artifact@v8
+ uses: actions/download-artifact@v8.0.2
with:
name: playwright-report
path: ./playwright-report/
@@ -112,7 +112,7 @@ jobs:
SCRIPT_BEFORE: bash /home/thephpfoundation/scripts/pr_created_pre.sh
web-php-regression-report ${{ steps.pr-number.outputs.pr_number }}
- name: Find regression report comment
- uses: peter-evans/find-comment@v4
+ uses: peter-evans/find-comment@v4.0.0
id: snapshot
with:
issue-number: ${{ steps.pr-number.outputs.pr_number }}
@@ -120,7 +120,7 @@ jobs:
body-includes: 'Regression report for commit'
- name: Create or update regression report comment
- uses: peter-evans/create-or-update-comment@v5
+ uses: peter-evans/create-or-update-comment@v5.0.0
with:
issue-number: ${{ steps.pr-number.outputs.pr_number }}
comment-id: ${{ steps.snapshot.outputs.comment-id }}
diff --git a/.github/workflows/preview-tests.yml b/.github/workflows/preview-tests.yml
index f91b279128..296612156f 100644
--- a/.github/workflows/preview-tests.yml
+++ b/.github/workflows/preview-tests.yml
@@ -20,7 +20,7 @@ jobs:
HTTP_HOST: "localhost:8080"
steps:
- - uses: actions/checkout@v7
+ - uses: actions/checkout@v7.0.1
with:
ref: "refs/pull/${{ github.event.number }}/merge"
@@ -28,27 +28,27 @@ jobs:
run: echo ${{ github.event.number }} > pr-number.txt
- name: Upload PR code as artifact
- uses: actions/upload-artifact@v7
+ uses: actions/upload-artifact@v7.0.2
with:
name: pr-code
path: ./
retention-days: 1
- name: Upload PR number artifact
- uses: actions/upload-artifact@v7
+ uses: actions/upload-artifact@v7.0.2
with:
name: pr-number.txt
path: ./pr-number.txt
retention-days: 1
- - uses: shivammathur/setup-php@v2
+ - uses: shivammathur/setup-php@2.40.0
with:
coverage: "none"
extensions: "none, curl, dom, json, mbstring, tokenizer, xml, xmlwriter, iconv"
php-version: "${{ matrix.php-version }}"
- name: Use Node.js ${{ matrix.node-version }}
- uses: actions/setup-node@v7
+ uses: actions/setup-node@v7.1.0
with:
node-version: ${{ matrix.node-version }}
@@ -62,7 +62,7 @@ jobs:
run: "echo \"COMPOSER_CACHE_DIR=$(composer config cache-dir)\" >>
$GITHUB_ENV"
- name: "Cache dependencies installed with composer"
- uses: actions/cache@v6
+ uses: actions/cache@v6.1.0
with:
path: "${{ env.COMPOSER_CACHE_DIR }}"
key: "php-${{ matrix.php-version }}-composer-${{
hashFiles('composer.lock') }}"
@@ -81,7 +81,7 @@ jobs:
run: "make tests_e2e"
- name: Upload playwright report
- uses: actions/upload-artifact@v7
+ uses: actions/upload-artifact@v7.0.2
if: ${{ !cancelled() }}
with:
name: playwright-report
diff --git a/.github/workflows/remove-needs-feedback.yml
b/.github/workflows/remove-needs-feedback.yml
index 8d1ff3e0a0..f3ca9c474c 100644
--- a/.github/workflows/remove-needs-feedback.yml
+++ b/.github/workflows/remove-needs-feedback.yml
@@ -16,9 +16,9 @@ jobs:
issues: write
pull-requests: write
steps:
- - uses: actions-ecosystem/action-remove-labels@v1
+ - uses: actions-ecosystem/action-remove-labels@v1.3.0
with:
labels: "Status: Needs Feedback"
- - uses: actions-ecosystem/action-add-labels@v1
+ - uses: actions-ecosystem/action-add-labels@v1.1.3
with:
labels: "Status: Needs Triage"