chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
actions/cache	action	patch	v5.0.3 → v5.0.4
actions/setup-node	action	minor	v6.2.0 → v6.3.0
oven-sh/setup-bun	action	minor	v2.1.2 → v2.2.0
shivammathur/setup-php	action	minor	2.36.0 → 2.37.0
tar	devDependencies	patch	^7.5.11 → ^7.5.13

---

Release Notes

actions/cache (actions/cache)

v5.0.4

Compare Source

actions/setup-node (actions/setup-node)

v6.3.0

Compare Source

What's Changed

Enhancements:

• Support parsing devEngines field by @​susnux in #​1283

When using node-version-file: package.json, setup-node now prefers devEngines.runtime over engines.node.

Dependency updates:

• Fix npm audit issues by @​gowridurgad in #​1491
• Replace uuid with crypto.randomUUID() by @​trivikr in #​1378
• Upgrade minimatch from 3.1.2 to 3.1.5 by @​dependabot in #​1498

Bug fixes:

• Remove hardcoded bearer for mirror-url @​marco-ippolito in #​1467
• Scope test lockfiles by package manager and update cache tests by @​gowridurgad in #​1495

New Contributors

• @​susnux made their first contribution in #​1283

Full Changelog: actions/setup-node@v6...v6.3.0

oven-sh/setup-bun (oven-sh/setup-bun)

v2.2.0

Compare Source

oven-sh/setup-bun is the github action for setting up Bun.

What's Changed

• build: update action runtime to Node.js 24 by @​adam0white in #​176
• ci: use actions/checkout@v6.0.2 in the test workflow by @​tcely in #​173
• ci: update actions for the autofix.ci workflow by @​tcely in #​174
• ci: update actions for the Release new action version workflow by @​tcely in #​175
• release: v2.2.0 by @​xhyrom in #​177

New Contributors

• @​adam0white made their first contribution in #​176
• @​tcely made their first contribution in #​173

Full Changelog: oven-sh/setup-bun@v2...v2.2.0

v2.1.3

Compare Source

oven-sh/setup-bun is the github action for setting up Bun.

What's Changed

• perf: avoid unnecessary api calls by @​xhyrom in #​161
• feat: add bun- prefix to cache keys by @​maschwenk in #​160
• fix: use native Windows ARM64 binary for Bun >= 1.3.10 by @​oddrationale in #​165
• feat: add AVX2 support detection for x64 Linux systems by @​GoForceX in #​167
• fix: validate cached binary version matches requested version (#​146) by @​wyMinLwin in #​169
• release: v2.1.3 by @​xhyrom in #​170

New Contributors

• @​oddrationale made their first contribution in #​165
• @​GoForceX made their first contribution in #​167
• @​wyMinLwin made their first contribution in #​169

Full Changelog: oven-sh/setup-bun@v2...v2.1.3

shivammathur/setup-php (shivammathur/setup-php)

v2.37.0

Compare Source

Changelog

• Updated the action to use Node.js 24. (#​1049)

• Added support for master in the php-version input. It should now set up a nightly build from the master branch of php-src.

• Added support to install ioncube and zephir_parser extensions on PHP 8.5.

• Expanded support for installing extensions using Homebrew on macOS from the shivammathur/homebrew-extensions tap. This includes pdo_firebird, sqlsrv, pdo_sqlsrv, pecl_http, swow, xhprof, and several other supported extensions.

• Improved switching PHP versions on Linux. Missing alternatives should now be registered automatically before switching versions. #​1067

• Improved support for Homebrew on macOS. It should now retry stuck brew commands with an inactivity watchdog.

• Improved support for adding tools. It should now correctly use the latest release download URL when a version is not specified. (#​1064)

• Improved tool setup and caching on self-hosted runners.

• Improved support for sqlsrv and pdo_sqlsrv on PHP 8.1 and 8.2.

• Fixed installing pecl_http on Windows. Switched to downloads.php.net for fixing ICU version post install.

• Fixed cached couchbase installs on macOS using the shivammathur/cache-extensions action.

• Replaced @actions/core with local functions to reduce bundle size.

• Refactored to use ES2024+ features for Node 24.

• Updated actions used in examples to their latest versions.

• Updated Node.js dependencies.

Thanks @​theluckystrike for the contribution 🎉

Thanks @​code-kudu, @​ssddanbrown, @​RoundingWell, and @​ntzrbtr for the sponsorship ❤️

For the complete list of changes, please refer to the Full Changelog

Follow for updates

isaacs/node-tar (tar)

v7.5.13

Compare Source

v7.5.12

Compare Source

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.