TimWolla · Nov 5, 2026
@@ -0,0 +1,93 @@
+# This file is machine-generated by `gh actions-lock`.
+# Do not edit by hand; run `gh actions-lock` to update.
+# Docs: https://gh.io/actions-lockfile
+version: 'v0.0.3'
+workflows:
+    '.github/workflows/close-needs-feedback.yml':
+        - 'imhoffd/needs-reply@v2.0.0'
+    '.github/workflows/integrate.yaml':
+        - 'actions/cache@v6.1.0'
+        - 'actions/checkout@v7.0.1'
+        - 'shivammathur/setup-php@2.40.0'
+    '.github/workflows/pr-closed.yml':
+        - 'appleboy/ssh-action@v1.2.5'
+    '.github/workflows/preview-deploy.yml':
+        - 'actions/download-artifact@v8.0.2'
+        - 'easingthemes/ssh-deploy@main'
+        - 'peter-evans/create-or-update-comment@v5.0.0'
+        - 'peter-evans/find-comment@v4.0.0'
+    '.github/workflows/preview-tests.yml':
+        - 'actions/cache@v6.1.0'
+        - 'actions/checkout@v7.0.1'
+        - 'actions/setup-node@v7.1.0'
+        - 'actions/upload-artifact@v7.0.2'
+        - 'shivammathur/setup-php@2.40.0'
+    '.github/workflows/remove-needs-feedback.yml':
+        - 'actions-ecosystem/action-add-labels@v1.1.3'
+        - 'actions-ecosystem/action-remove-labels@v1.3.0'
+dependencies:
+    'actions-ecosystem/action-add-labels@v1.1.3':
+        ref: 'v1.1.3'
+        commit: 'sha1-18f1af5e3544586314bbe15c0273249c770b2daf'
+        owner_id: 56633079
+        repo_id: 260786220
+    'actions-ecosystem/action-remove-labels@v1.3.0':
+        ref: 'v1.3.0'
+        commit: 'sha1-2ce5d41b4b6aa8503e285553f75ed56e0a40bae0'
+        owner_id: 56633079
+        repo_id: 260787457
+    'actions/cache@v6.1.0':
+        ref: 'v6.1.0'
+        commit: 'sha1-55cc8345863c7cc4c66a329aec7e433d2d1c52a9'
+        owner_id: 44036562
+        repo_id: 215566462
+    'actions/checkout@v7.0.1':
+        ref: 'v7.0.1'
+        commit: 'sha1-3d3c42e5aac5ba805825da76410c181273ba90b1'
+        owner_id: 44036562
+        repo_id: 197814629
+    'actions/download-artifact@v8.0.2':
+        ref: 'v8.0.2'
+        commit: 'sha1-9000827ccba6bdab643e8b6fd33ac0654aef8333'
+        owner_id: 44036562
+        repo_id: 192626254
+    'actions/setup-node@v7.1.0':
+        ref: 'v7.1.0'
+        commit: 'sha1-949feb2413d6458794dcd2491c4babbbce0c15c1'
+        owner_id: 44036562
+        repo_id: 189476904
+    'actions/upload-artifact@v7.0.2':
+        ref: 'v7.0.2'
+        commit: 'sha1-cf430e030ddbb5b0abf93d22962f4752f3646cd9'
+        owner_id: 44036562
+        repo_id: 192625955
+    'appleboy/ssh-action@v1.2.5':
+        ref: 'v1.2.5'
+        commit: 'sha1-0ff4204d59e8e51228ff73bce53f80d53301dee2'
+        owner_id: 21979
+        repo_id: 186202082
+    'easingthemes/ssh-deploy@main':
+        ref: 'main'
+        commit: 'sha1-2cc5b27bf3029d0455dd5e09fe02633904031447'
+        owner_id: 2750284
+        repo_id: 210941897
+    'imhoffd/needs-reply@v2.0.0':
+        ref: 'v2.0.0'
+        commit: 'sha1-71e8d5144caa0d4a1e292348bfafa3866d08c855'
+        owner_id: 236501
+        repo_id: 271127651
+    'peter-evans/create-or-update-comment@v5.0.0':
+        ref: 'v5.0.0'
+        commit: 'sha1-e8674b075228eee787fea43ef493e45ece1004c9'
+        owner_id: 18365890
+        repo_id: 223708643
+    'peter-evans/find-comment@v4.0.0':
+        ref: 'v4.0.0'
+        commit: 'sha1-b30e6a3c0ed37e7c023ccd3f1db5c6c0b0c23aad'
+        owner_id: 18365890
+        repo_id: 256447541
+    'shivammathur/setup-php@2.40.0':
+        ref: '2.40.0'
+        commit: 'sha1-eb7c497e18156a6bbabfef1d3a82760b9eda3962'
+        owner_id: 1571086
+        repo_id: 206578964
@@ -16,7 +16,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Close old issues that need feedback
-        uses: dwieeb/needs-reply@v2
+        uses: imhoffd/needs-reply@v2.0.0
         with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}
           issue-label: "Status: Needs Feedback"

@@ -21,10 +21,10 @@ jobs:
 
     steps:
       - name: "Checkout"
-        uses: "actions/checkout@v7"
+        uses: "actions/checkout@v7.0.1"
 
       - name: "Set up PHP"
-        uses: "shivammathur/setup-php@v2"
+        uses: "shivammathur/setup-php@2.40.0"
         with:
           coverage: "xdebug"
           extensions: "none, curl, dom, json, mbstring, tokenizer, xml, xmlwriter, iconv"
@@ -40,7 +40,7 @@ jobs:
         run: "echo \"COMPOSER_CACHE_DIR=$(composer config cache-dir)\" >> $GITHUB_ENV"
 
       - name: "Cache dependencies installed with composer"
-        uses: "actions/cache@v6"
+        uses: "actions/cache@v6.1.0"
         with:
           path: "${{ env.COMPOSER_CACHE_DIR }}"
           key: "php-${{ matrix.php-version }}-composer-${{ hashFiles('composer.lock') }}"
@@ -66,10 +66,10 @@ jobs:
 
     steps:
       - name: "Checkout"
-        uses: "actions/checkout@v7"
+        uses: "actions/checkout@v7.0.1"
 
       - name: "Set up PHP"
-        uses: "shivammathur/setup-php@v2"
+        uses: "shivammathur/setup-php@2.40.0"
         with:
           coverage: "none"
           extensions: "none, curl, dom, json, mbstring, tokenizer, xml, xmlwriter, iconv"
@@ -85,7 +85,7 @@ jobs:
         run: "echo \"COMPOSER_CACHE_DIR=$(composer config cache-dir)\" >> $GITHUB_ENV"
 
       - name: "Cache dependencies installed with composer"
-        uses: "actions/cache@v6"
+        uses: "actions/cache@v6.1.0"
         with:
           path: "${{ env.COMPOSER_CACHE_DIR }}"
           key: "php-${{ matrix.php-version }}-composer-${{ hashFiles('composer.lock') }}"
@@ -122,10 +122,10 @@ jobs:
 
     steps:
       - name: "Checkout"
-        uses: "actions/checkout@v7"
+        uses: "actions/checkout@v7.0.1"
 
       - name: "Set up PHP"
-        uses: "shivammathur/setup-php@v2"
+        uses: "shivammathur/setup-php@2.40.0"
         with:
           coverage: "none"
           extensions: "none, curl, dom, json, mbstring, tokenizer, xml, xmlwriter, iconv"
@@ -138,7 +138,7 @@ jobs:
         run: "echo \"COMPOSER_CACHE_DIR=$(composer config cache-dir)\" >> $GITHUB_ENV"
 
       - name: "Cache dependencies installed with composer"
-        uses: "actions/cache@v6"
+        uses: "actions/cache@v6.1.0"
         with:
           path: "${{ env.COMPOSER_CACHE_DIR }}"
           key: "php-${{ matrix.php-version }}-composer-${{ hashFiles('composer.lock') }}"
@@ -165,10 +165,10 @@ jobs:
 
     steps:
       - name: "Checkout"
-        uses: "actions/checkout@v7"
+        uses: "actions/checkout@v7.0.1"
 
       - name: "Set up PHP"
-        uses: "shivammathur/setup-php@v2"
+        uses: "shivammathur/setup-php@2.40.0"
         with:
           coverage: "none"
           extensions: "none, curl, dom, json, mbstring, tokenizer, xml, xmlwriter, iconv"
@@ -184,7 +184,7 @@ jobs:
         run: "echo \"COMPOSER_CACHE_DIR=$(composer config cache-dir)\" >> $GITHUB_ENV"
 
       - name: "Cache dependencies installed with composer"
-        uses: "actions/cache@v6"
+        uses: "actions/cache@v6.1.0"
         with:
           path: "${{ env.COMPOSER_CACHE_DIR }}"
           key: "php-${{ matrix.php-version }}-composer-${{ hashFiles('composer.lock') }}"

@@ -20,7 +20,7 @@ jobs:
 
     steps:
       - name: Download PR number
-        uses: actions/download-artifact@v8
+        uses: actions/download-artifact@v8.0.2
         with:
           name: pr-number.txt
           path: ./pr-number-artifact/
@@ -34,7 +34,7 @@ jobs:
           echo "pr_number=$PR_NUMBER" >> $GITHUB_OUTPUT
 
       - name: Download PR code as artifact
-        uses: actions/download-artifact@v8
+        uses: actions/download-artifact@v8.0.2
         with:
           name: pr-code
           path: ./
@@ -56,15 +56,15 @@ jobs:
           ARGS: "-rlgoDzc"
 
       - name: Find existing preview comment
-        uses: peter-evans/find-comment@v4
+        uses: peter-evans/find-comment@v4.0.0
         id: fc
         with:
           issue-number: ${{ steps.pr-number.outputs.pr_number }}
           comment-author: 'github-actions[bot]'
           body-includes: 'Preview for commit'
 
       - name: Create or update preview comment
-        uses: peter-evans/create-or-update-comment@v5
+        uses: peter-evans/create-or-update-comment@v5.0.0
         with:
           issue-number: ${{ steps.pr-number.outputs.pr_number }}
           comment-id: ${{ steps.fc.outputs.comment-id }}
@@ -80,7 +80,7 @@ jobs:
 
     steps:
       - name: Download PR number
-        uses: actions/download-artifact@v8
+        uses: actions/download-artifact@v8.0.2
         with:
           name: pr-number.txt
           path: ./pr-number-artifact/
@@ -94,7 +94,7 @@ jobs:
           echo "pr_number=$PR_NUMBER" >> $GITHUB_OUTPUT
 
       - name: Download regression report
-        uses: actions/download-artifact@v8
+        uses: actions/download-artifact@v8.0.2
         with:
           name: playwright-report
           path: ./playwright-report/
@@ -112,15 +112,15 @@ jobs:
           SCRIPT_BEFORE: bash /home/thephpfoundation/scripts/pr_created_pre.sh web-php-regression-report ${{ steps.pr-number.outputs.pr_number }}
 
       - name: Find regression report comment
-        uses: peter-evans/find-comment@v4
+        uses: peter-evans/find-comment@v4.0.0
         id: snapshot
         with:
           issue-number: ${{ steps.pr-number.outputs.pr_number }}
           comment-author: 'github-actions[bot]'
           body-includes: 'Regression report for commit'
 
       - name: Create or update regression report comment
-        uses: peter-evans/create-or-update-comment@v5
+        uses: peter-evans/create-or-update-comment@v5.0.0
         with:
           issue-number: ${{ steps.pr-number.outputs.pr_number }}
           comment-id: ${{ steps.snapshot.outputs.comment-id }}

@@ -20,35 +20,35 @@ jobs:
       HTTP_HOST: "localhost:8080"
 
     steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@v7.0.1
         with:
           ref: "refs/pull/${{ github.event.number }}/merge"
 
       - name: Save PR number
         run: echo ${{ github.event.number }} > pr-number.txt
 
       - name: Upload PR code as artifact
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@v7.0.2
         with:
           name: pr-code
           path: ./
           retention-days: 1
 
       - name: Upload PR number artifact
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@v7.0.2
         with:
           name: pr-number.txt
           path: ./pr-number.txt
           retention-days: 1
 
-      - uses: shivammathur/setup-php@v2
+      - uses: shivammathur/setup-php@2.40.0
         with:
           coverage: "none"
           extensions: "none, curl, dom, json, mbstring, tokenizer, xml, xmlwriter, iconv"
           php-version: "${{ matrix.php-version }}"
 
       - name: Use Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@v7
+        uses: actions/setup-node@v7.1.0
         with:
           node-version: ${{ matrix.node-version }}
 
@@ -62,7 +62,7 @@ jobs:
         run: "echo \"COMPOSER_CACHE_DIR=$(composer config cache-dir)\" >> $GITHUB_ENV"
 
       - name: "Cache dependencies installed with composer"
-        uses: actions/cache@v6
+        uses: actions/cache@v6.1.0
         with:
           path: "${{ env.COMPOSER_CACHE_DIR }}"
           key: "php-${{ matrix.php-version }}-composer-${{ hashFiles('composer.lock') }}"
@@ -81,7 +81,7 @@ jobs:
         run: "make tests_e2e"
 
       - name: Upload playwright report
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@v7.0.2
         if: ${{ !cancelled() }}
         with:
           name: playwright-report

@@ -16,9 +16,9 @@ jobs:
       issues: write
       pull-requests: write
     steps:
-      - uses: actions-ecosystem/action-remove-labels@v1
+      - uses: actions-ecosystem/action-remove-labels@v1.3.0
         with:
           labels: "Status: Needs Feedback"
-      - uses: actions-ecosystem/action-add-labels@v1
+      - uses: actions-ecosystem/action-add-labels@v1.1.3
         with:
           labels: "Status: Needs Triage"