• Pin GitHub Actions to commit SHAs and add Dependabot config by @joetannenbaum in #507
• Support use_upsert_alias to prevent ingest failure by @JonPurvis in #511
• Bump shivammathur/setup-php from 2.37.0 to 2.37.1 in the github-actions group across 1 directory by @dependabot[bot] in #509
• GitHub Actions hardening by @nunomaduro in #512
• Bump rollup from 3.29.5 to 3.30.0 by @dependabot[bot] in #517
• Bump postcss from 8.4.33 to 8.5.15 by @dependabot[bot] in #516
• Bump picomatch from 2.3.1 to 2.3.2 by @dependabot[bot] in #514
• Bump glob from 10.3.10 to 10.5.0 by @dependabot[bot] in #515
• Bump minimatch from 9.0.3 to 9.0.9 by @dependabot[bot] in #513