github-actions: bump the minor-patch-dependencies group with 2 updates

[dependabot]

Bumps the minor-patch-dependencies group with 2 updates: shivammathur/setup-php and dessant/reaction-comments.

Updates shivammathur/setup-php from 2.26.0 to 2.27.1

Release notes

Sourced from shivammathur/setup-php's releases.

2.27.1

Changelog

• Fixed updating PHP dependencies after formulae in homebrew/core tap have been sharded into directories with prefixes. (#780)

• Update actions/setup-node from v3 to v4 in the node workflow.

• Update Node.js dependencies.

For the complete list of changes, please refer to the Full Changelog

2.27.0

Changelog

• Tools box and php-scoper can now be installed easily using the tools input. (#776)

- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.2'
    tools: box, php-scoper

• Added support for macOS 14.x Sonoma and dropped support for macOS 11.x Big Sur following a three-year support cycle that Apple follows for macOS.

• We now set keepAlive in https agent to false in fetch.ts. After Node 19 it is set to true by default. This prevented the node process from exiting until timeout after the action run was completed. (#773, #777) - Ref

• Fixed support for couchbase extension for PHP 7.4.

- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version: '7.4'
    extensions: couchbase

• Fixed a warning when find was run without checking if the path exists on macOS.

• Fixed checking for existing PHP installations on macOS on self-hosted environments.

• Fixed adding tools in case /usr/local/bin directory was missing on self-hosted environments.

• Bumped Node.js dependencies.

... (truncated)

Commits

• a36e1e5 Bump version to 2.27.1
• 04ff9b0 Add HOMEBREW_NO_INSTALL_FROM_API=1 to darwin.sh
• 65fad67 Fix updating homebrew dependencies after sharding in core tap
• 6668249 Merge pull request #778 from shivammathur/dependabot/github_actions/develop/a...
• 81c255f Bump actions/setup-node from 3 to 4
• 81cd5ae Bump version to 2.27.0
• 29a9813 Add required extensions for box
• f60e7de Add PHP 8.4 to the php workflow
• b5efb21 Add tests for box and php-scoper
• 26e6a92 Merge pull request #776 from theofidry/patch-1
• Additional commits viewable in compare view

Updates dessant/reaction-comments from 3 to 4

Release notes

Sourced from dessant/reaction-comments's releases.

v4.0.0

Learn more about this release from the changelog.

Changelog

Sourced from dessant/reaction-comments's changelog.

3.0.0 (2022-12-04)

⚠ BREAKING CHANGES

• the action now requires Node.js 16

Bug Fixes

• update dependencies (69813be)
• update docs (9c2ad50)

2.2.0 (2021-10-02)

Features

• add option for logging output parameters (0e746c9)

Bug Fixes

• remove broken link in default message (a28549d)

2.1.2 (2021-07-10)

Bug Fixes

• add required permission (c83ec47)

2.1.1 (2021-07-09)

Bug Fixes

• update GitHub API calls (30b1031)

2.1.0 (2021-07-09)

Features

• make github-token optional and document the use of personal access tokens (adb3aa7)

Bug Fixes

• declare required permissions (8524539)

... (truncated)

Commits

• e86d247 chore(release): 4.0.0
• 6a70349 chore: update package
• 5aa5894 chore: update workflow
• 5d1f110 chore: update docs
• 5c35d10 fix: retry and throttle GitHub API requests
• c40827f chore: migrate package to ESM
• a12ad49 fix: update dependencies
• d5c6c2b chore: rename default branch
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues found.

Scanned Manifest Files

.github/workflows/continuous-integration.yml

• shivammathur/setup-php@2.27.1
• shivammathur/setup-php@2.26.0

.github/workflows/reactions.yml

• dessant/reaction-comments@4
• dessant/reaction-comments@3

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Comparison is base (45944c6) 83.83% compared to head (b50f6ed) 83.83%.

Additional details and impacted files

@@            Coverage Diff            @@
##             master       #2   +/-   ##
=========================================
  Coverage     83.83%   83.83%           
  Complexity       29       29           
=========================================
  Files             4        4           
  Lines            99       99           
=========================================
  Hits             83       83           
  Misses           16       16           

Flag	Coverage Δ
php-8.1	83.83% <ø> (ø)
phpunit	83.83% <ø> (ø)
ubuntu-20.04	83.83% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.