chore: update packages, GHA versions, add Dependabot

[128na]

Summary

• composer patch/minor パッケージを一括更新
• GitHub Actions を最新メジャーバージョンに更新
• Dependabot を追加 (GitHub Actions のみ、毎週日曜)

パッケージ更新

Package	Before	After
laravel/framework	12.56.0	12.61.0
livewire/livewire	4.2.4	4.3.1
phpunit/phpunit	12.5.17	12.5.28
rector/rector	2.4.1	2.4.5
larastan/larastan	3.9.3	3.10.0
symfony/*	7.4.8	7.4.13

GitHub Actions 更新

Action	Before	After
actions/checkout	@v4	@v6
actions/upload-artifact	@v4	@v7
stefanzweifel/git-auto-commit-action	@v5	@v7
ramsey/composer-install	@V3	@v4

Dependabot

• GitHub Actions のみ追跡 (composer は auto-package-update.yml で対応済みのため重複回避)

スキップしたメジャー更新

• laravel/framework 12→13: breaking changes 要調査

Test plan

• CI (phpstan + phpunit) が通ること

🤖 Generated with Claude Code

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

[gemini-code-assist]

Code Review

This pull request updates the ramsey/composer-install GitHub Action from version 3 to 4, adds a Dependabot configuration file to check for GitHub Actions updates on a weekly basis, and bumps the livewire/livewire package from version 4.3.0 to 4.3.1 in composer.lock. I have no feedback to provide as there are no review comments to assess.

Important

The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.