• Pin GitHub Actions to commit SHAs and add Dependabot config by @joetannenbaum in #870
• Bump shivammathur/setup-php from 2.37.0 to 2.37.1 in the github-actions group by @dependabot[bot] in #872
• Manually install corepack to support Node 25+ by @A-Loot in #871