Merge pull request #17094 from phalcon/5.0.x

5.14.1 Release

Author: niden

.github/actions/build-phalcon-win/action.yml

@@ -34,7 +34,7 @@ runs:
   using: 'composite'
   steps:
     - name: Setup Downloads Cache
-      uses: actions/cache@v5
+      uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
       with:
         path: ${{ inputs.cache-dir }}
         key: Windows-downloads-${{ hashFiles('**/.github/actions/build-phalcon-win/action.yml') }}
@@ -69,7 +69,7 @@ runs:
         Write-Output "SOURCE_DIR=$SourceDir" | Out-File -FilePath $env:GITHUB_ENV -Encoding utf8 -Append
 
     - name: Setup PHP SDK tool kit
-      uses: zephir-lang/setup-php-sdk@v1
+      uses: zephir-lang/setup-php-sdk@19bfb985d9dfb9eb59d74039169948c878190678 # v1
       with:
         php_version: ${{ inputs.php-version }}
         ts: ${{ inputs.ts }}
@@ -79,13 +79,13 @@ runs:
         cache_dir: ${{ inputs.cache-dir }}
 
     - name: Configure Developer Command Prompt for MSVC
-      uses: ilammy/msvc-dev-cmd@v1
+      uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1
       with:
         arch: ${{ inputs.arch }}
 
     - name: Configure Developer Command Prompt for MSVC toolset 14.16 (PHP 7.4)
       if: inputs.php-version == '7.4'
-      uses: ilammy/msvc-dev-cmd@v1
+      uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1
       with:
         arch: ${{ inputs.arch }}
         toolset: 14.16

.github/dependabot.yml

@@ -0,0 +1,14 @@
+version: 2
+
+updates:
+  # Keep the SHA-pinned GitHub Actions current. Dependabot opens reviewable
+  # pull requests that bump both the commit SHA and the trailing "# version"
+  # comment; it never merges on its own. "/" covers .github/workflows, and the
+  # glob covers the composite actions under .github/actions.
+  - package-ecosystem: "github-actions"
+    directories:
+      - "/"
+      - "/.github/actions/*"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 10

.github/workflows/build-docker.yml

@@ -20,29 +20,29 @@ jobs:
 
     name: Build Dockerfile PHP ${{ matrix.php }}
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
 
       - name: Login to Github Registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Login to Docker Hub
-        uses: docker/login-action@v3
+        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
         with:
           username: ${{ secrets.DOCKERHUB_LOGIN }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
+        uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
 
       - name: Build and push
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
         with:
           push: true
           file: resources/docker/develop/Dockerfile