• Add Dependabot cooldown of 5 days by @nunomaduro in #679
• Enable Dependabot auto-merge by @nunomaduro in #680
• Bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions group by @dependabot[bot] in #681
• Bump shivammathur/setup-php from 2.37.1 to 2.37.2 in the github-actions group by @dependabot[bot] in #684
• Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group by @dependabot[bot] in #686
• [1.x] Use literal status code in LockoutResponse to fix PHPStan analysis by @jklejczyk in #688
• [1.x] Respect lowercase_usernames config when resetting password by @jklejczyk in #687