• Pin GitHub Actions to commit SHAs and add Dependabot config by @joetannenbaum in #772
• Bump shivammathur/setup-php from 2.37.0 to 2.37.1 in the github-actions group by @dependabot[bot] in #773
• Add Dependabot cooldown of 5 days by @nunomaduro in #774
• Enable Dependabot auto-merge by @nunomaduro in #775
• [5.x] Add ability to easily fake Socialite users by @stevebauman in #776
• Bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions group by @dependabot[bot] in #777