This necessitates a new major version because actions/cache v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1. This is a breaking change for anyone using self-hosted runners.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Bumps [ramsey/composer-install](https://github.com/ramsey/composer-install) from 3 to 4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/ramsey/composer-install/releases">ramsey/composer-install's releases</a>.</em></p>
<blockquote>
<h2>4.0.0</h2>
<h2>What's Changed</h2>
<ul>
<li>
<p>chore: Bump actions/cache from 4.2.4 to 5.0.3 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/ramsey/composer-install/pull/278">ramsey/composer-install#278</a></p>
<p>This necessitates a new major version because actions/cache v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1. This is a breaking change for anyone using self-hosted runners.</p>
</li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/ramsey/composer-install/compare/3.2.1...4.0.0">https://github.com/ramsey/composer-install/compare/3.2.1...4.0.0</a></p>
<h2>3.2.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Fix missing cache key hash of <code>composer.json</code> (and <code>composer.lock</code>), as reported in <a href="https://redirect.github.com/ramsey/composer-install/issues/277">ramsey/composer-install#277</a>.</li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/ramsey/composer-install/compare/3.2.0...3.2.1">https://github.com/ramsey/composer-install/compare/3.2.0...3.2.1</a></p>
<h2>3.2.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Pin cache action version by <a href="https://github.com/saibotk"><code>@saibotk</code></a> in <a href="https://redirect.github.com/ramsey/composer-install/pull/271">ramsey/composer-install#271</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/saibotk"><code>@saibotk</code></a> made their first contribution in <a href="https://redirect.github.com/ramsey/composer-install/pull/271">ramsey/composer-install#271</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/ramsey/composer-install/compare/3.1.1...3.2.0">https://github.com/ramsey/composer-install/compare/3.1.1...3.2.0</a></p>
<h2>3.1.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Use the value of the <code>COMPOSER</code> environment variable if it exists; fixes <a href="https://redirect.github.com/ramsey/composer-install/pull/264">ramsey/composer-install#264</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/ramsey/composer-install/compare/3.1.0...3.1.1">https://github.com/ramsey/composer-install/compare/3.1.0...3.1.1</a></p>
<h2>3.1.0</h2>
<h2>What's Changed</h2>
<ul>
<li>✨ Add new composer-filename option by <a href="https://github.com/badasukerubin"><code>@badasukerubin</code></a> in <a href="https://redirect.github.com/ramsey/composer-install/pull/261">ramsey/composer-install#261</a></li>
<li>Add instructions on how to use the automatic GHA token by <a href="https://github.com/Jean85"><code>@Jean85</code></a> in <a href="https://redirect.github.com/ramsey/composer-install/pull/263">ramsey/composer-install#263</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/badasukerubin"><code>@badasukerubin</code></a> made their first contribution in <a href="https://redirect.github.com/ramsey/composer-install/pull/261">ramsey/composer-install#261</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/ramsey/composer-install/compare/3.0.1...3.1.0">https://github.com/ramsey/composer-install/compare/3.0.1...3.1.0</a></p>
<h2>3.0.1</h2>
<h2>What's Changed</h2>
<ul>
<li>fix: Improve composer.lock behavior with ignore-cache by <a href="https://github.com/flagbrad"><code>@flagbrad</code></a> in <a href="https://redirect.github.com/ramsey/composer-install/pull/260">ramsey/composer-install#260</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/flagbrad"><code>@flagbrad</code></a> made their first contribution in <a href="https://redirect.github.com/ramsey/composer-install/pull/260">ramsey/composer-install#260</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/ramsey/composer-install/compare/3.0.0...3.0.1">https://github.com/ramsey/composer-install/compare/3.0.0...3.0.1</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/ramsey/composer-install/commit/2b6adcf6fa51986b4a64e960e812c1bf5a38f237"><code>2b6adcf</code></a> docs: update README examples to use 4.0.0 pinned hash</li>
<li><a href="https://github.com/ramsey/composer-install/commit/65e4f84970763564f46a70b8a54b90d033b3bdda"><code>65e4f84</code></a> docs: update badges for v4 branch</li>
<li><a href="https://github.com/ramsey/composer-install/commit/853e7d765843398a14af3a9f6556e0f5914dafdf"><code>853e7d7</code></a> chore: Bump actions/cache from 4.2.4 to 5.0.3 (<a href="https://redirect.github.com/ramsey/composer-install/issues/278">#278</a>)</li>
<li>See full diff in <a href="https://github.com/ramsey/composer-install/compare/v3...v4">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.
Please fix the above issues or remove invalid values from dependabot.yml.
### Labels
The following labels could not be found: `dependencies`. Please create it before Dependabot can add it to a pull request.
Please fix the above issues or remove invalid values from `dependabot.yml`.
You are not authorized to merge this pull request.
This pull request can be merged automatically.
View command line instructions
Checkout
From your project repository, check out a new branch and test the changes.
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Bumps ramsey/composer-install from 3 to 4.
Release notes
Sourced from ramsey/composer-install's releases.
Commits
2b6adcfdocs: update README examples to use 4.0.0 pinned hash65e4f84docs: update badges for v4 branch853e7d7chore: Bump actions/cache from 4.2.4 to 5.0.3 (#278)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)Labels
The following labels could not be found:
dependencies. Please create it before Dependabot can add it to a pull request.Please fix the above issues or remove invalid values from
dependabot.yml.View command line instructions
Checkout
From your project repository, check out a new branch and test the changes.