• GitHub Actions hardening by @nunomaduro in #1848
• Bump actions/checkout from 4.3.1 to 6.0.3 in the github-actions group by @dependabot[bot] in #1849
• Pin pull requests and issues workflows to least-privilege reusable workflows by @nunomaduro in #1851
• Pin pull requests and issues workflows to latest laravel/.github by @nunomaduro in #1852
• Add Dependabot cooldown of 5 days by @nunomaduro in #1853
• Enable Dependabot auto-merge by @nunomaduro in #1854
• Bump shivammathur/setup-php from 2.37.1 to 2.37.2 in the github-actions group by @dependabot[bot] in #1856
• Fix trial_ends_at not being cleared when trial_end is null in webhook payload by @lazerg in #1858
• Clear on-session checkout flag after the initial payment by @clarkewing in #1857