• Pin GitHub Actions to commit SHAs and add Dependabot config by @joetannenbaum in #985
• Bump shivammathur/setup-php from 2.37.0 to 2.37.1 in the github-actions group by @dependabot[bot] in #989
• Add Dependabot cooldown of 5 days by @nunomaduro in #991
• Enable Dependabot auto-merge by @nunomaduro in #995
• Add opt-in unique indexing jobs to prevent Scout reindexing already queued models by @stevebauman in #996
• Bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions group by @dependabot[bot] in #997