Update github-actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
TypedDevs/bashunit	action	minor	0.39.1 → 0.40.0
astral-sh/setup-uv	action	minor	v8.2.0 → v8.3.2
cbrgm/mastodon-github-action	action	patch	v2.2.1 → v2.2.2
github/codeql-action	action	minor	v4.36.2 → v4.37.0
shivammathur/setup-php	action	patch	v2.37.1 → 2.37.2
step-security/harden-runner	action	minor	v2.19.4 → v2.20.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

TypedDevs/bashunit (TypedDevs/bashunit)

v0.40.0

Compare Source

Added

• --test-timeout <seconds> flag and BASHUNIT_TEST_TIMEOUT env var to abort a test that runs longer than N seconds, mark it failed and continue. Disabled by default; no external timeout needed, works on Bash 3.2+ (#​721)

Fixed

• A non-zero test exit no longer leaks into later tests in the same file (per-test exit code is now reset)
• Coverage now counts backslash line-continuation lines as covered (#​722)
• Spying/mocking the printf builtin no longer breaks coverage collection: the buffer is flushed with builtin printf (#​724)

Changed

• URLs now point to the new primary domain bashunit.com (old bashunit.typeddevs.com redirects)
• Docs site deploys to GitHub Pages on the bashunit.com custom domain (deploy-gh-pages.yml)

Removed

• Weekly-downloads chart on the docs homepage (non-portable data source)

astral-sh/setup-uv (astral-sh/setup-uv)

v8.3.2

Compare Source

v8.3.1

Compare Source

v8.3.0

Compare Source

cbrgm/mastodon-github-action (cbrgm/mastodon-github-action)

v2.2.2

Compare Source

What's Changed

• patch(deps): update patch versions to v1.26.4 by @​renovate[bot] in #​228
• chore(deps): update docker digests to v3.24 by @​renovate[bot] in #​229
• ci(tools): update build tools to v1.9.0 by @​renovate[bot] in #​230
• ci(tools): update build tools to v7 by @​renovate[bot] in #​231
• ci(tools): update build tools by @​renovate[bot] in #​232

Full Changelog: cbrgm/mastodon-github-action@v2...v2.2.2

github/codeql-action (github/codeql-action)

v4.37.0

Compare Source

• Update default CodeQL bundle version to 2.26.0. #​3995
• In addition to the existing input format, the config-file input for the codeql-action/init step will soon support a new [owner/]repo[@​ref][:path] format. All components except the repository name are optional. If omitted, owner defaults to the same owner as the repository the analysis is running for, ref to main, and path to .github/codeql-action.yaml. Support for this format ships in this version of the CodeQL Action, but will only be enabled over the coming weeks. #​3973

v4.36.3

Compare Source

No user facing changes.

shivammathur/setup-php (shivammathur/setup-php)

v2.37.2

Compare Source

Changelog

• Fixed macOS setup by marking shivammathur/php and shivammathur/extensions as trusted taps.

• Switched to Visual Studio 18 (vs18) builds for PHP 8.6 on Windows.

• Improved looking up environment variables.

• Tightened security in internal GitHub action workflows.

• Updated Node.js dependencies.

For the complete list of changes, please refer to the Full Changelog

Follow for updates

step-security/harden-runner (step-security/harden-runner)

v2.20.0

Compare Source

What's Changed

• Support for block policy for MacOS and Windows GitHub-hosted runners
• Support for Bitrise MacOS GitHub Actions runners
• HTTPS monitoring support for Bun for Linux runners (enterprise tier)

Full Changelog: step-security/harden-runner@v2.19.4...v2.20.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.