• Pin GitHub Actions to commit SHAs and add Dependabot config by @joetannenbaum in #598
• Bump shivammathur/setup-php from 2.37.0 to 2.37.1 in the github-actions group by @dependabot[bot] in #602
• Pin pull requests and issues workflows to latest laravel/.github by @nunomaduro in #605
• Add Dependabot cooldown of 5 days by @nunomaduro in #606
• Enable Dependabot auto-merge by @nunomaduro in #610
• Bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions group by @dependabot[bot] in #611
• Bump shivammathur/setup-php from 2.37.1 to 2.37.2 in the github-actions group by @dependabot[bot] in #612
• Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group by @dependabot[bot] in #613