From 782086a19af0fb4884813959659d0910d91eafa5 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Felipe=20Say=C3=A3o=20Lobato=20Abreu?=
 <github@mentordosnerds.com>
Date: Mon, 11 May 2026 22:42:36 -0300
Subject: [PATCH 1/3] fix: relax composer fallback install lockfile requirement

---
 .github/actions/php/setup-composer/action.yml   |  2 +-
 CHANGELOG.md                                    |  1 +
 tests/GitHubActions/SetupComposerActionTest.php | 13 +++++++++++++
 3 files changed, 15 insertions(+), 1 deletion(-)

diff --git a/.github/actions/php/setup-composer/action.yml b/.github/actions/php/setup-composer/action.yml
index 5a9fe5ff3b..a84857a77b 100644
--- a/.github/actions/php/setup-composer/action.yml
+++ b/.github/actions/php/setup-composer/action.yml
@@ -106,7 +106,7 @@ runs:
       with:
         working-directory: ${{ inputs.dev-tools-source-directory }}
         composer-options: --prefer-dist --no-plugins --no-scripts
-        require-lock-file: 'true'
+        require-lock-file: 'false'
         custom-cache-suffix: dev-tools-runtime
 
     - name: Expose DevTools runtime
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 9c88d991f4..f6a247955a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -12,6 +12,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Fixed
 
 - Show DevTools version metadata in CLI application output so `list` and `--version` expose the installed package version from `Application` metadata (#339).
+- Relax workflow fallback Composer install so `.dev-tools-actions` bootstrap does not require `composer.lock` when provisioning DevTools runtime in shared GitHub Actions contexts (#342).
 
 ## [1.25.3] - 2026-05-11
 
diff --git a/tests/GitHubActions/SetupComposerActionTest.php b/tests/GitHubActions/SetupComposerActionTest.php
index 8aea5ebbcb..98c3a77ba7 100644
--- a/tests/GitHubActions/SetupComposerActionTest.php
+++ b/tests/GitHubActions/SetupComposerActionTest.php
@@ -103,6 +103,19 @@ public function detectRuntimeWillPreferTheConsumerLocalInstallation(): void
         self::assertSame($resolvedWorkspace . '/vendor/autoload.php', $outputs['autoload']);
     }
 
+    /**
+     * @return void
+     */
+    #[Test]
+    public function fallbackInstallShouldNotRequireComposerLockFile(): void
+    {
+        $actionFile = self::ACTION_PATH . '/action.yml';
+        $actionContents = file_get_contents($actionFile);
+
+        self::assertStringContainsString("require-lock-file: 'false'", $actionContents);
+        self::assertStringNotContainsString("require-lock-file: 'true'", $actionContents);
+    }
+
     /**
      * @return void
      */

From c09d5ba1393915ddfa94f27dcfe2614df20f05dd Mon Sep 17 00:00:00 2001
From: github-actions <41898282+github-actions[bot]@users.noreply.github.com>
Date: Tue, 12 May 2026 01:46:17 +0000
Subject: [PATCH 2/3] Update wiki submodule pointer for PR #343

---
 .github/wiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/wiki b/.github/wiki
index 07f4fb20ee..e256370c4c 160000
--- a/.github/wiki
+++ b/.github/wiki
@@ -1 +1 @@
-Subproject commit 07f4fb20ee4a1835576c7ae581193c206b27f19a
+Subproject commit e256370c4cecea70b19704d5373ab18d324de3cf

From 6939ef7ee17eb28117fd5742dcb801cddea20033 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Felipe=20Say=C3=A3o=20Lobato=20Abreu?=
 <github@mentordosnerds.com>
Date: Mon, 11 May 2026 22:48:07 -0300
Subject: [PATCH 3/3] chore: fix changelog placement for issue 342 entry

---
 CHANGELOG.md | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index f6a247955a..1b5b5aa867 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,12 +7,15 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Fixed
+
+- Relax workflow fallback Composer install so .dev-tools-actions bootstrap does not require composer.lock when provisioning DevTools runtime in shared GitHub Actions contexts (#342).
+
 ## [1.25.4] - 2026-05-11
 
 ### Fixed
 
 - Show DevTools version metadata in CLI application output so `list` and `--version` expose the installed package version from `Application` metadata (#339).
-- Relax workflow fallback Composer install so `.dev-tools-actions` bootstrap does not require `composer.lock` when provisioning DevTools runtime in shared GitHub Actions contexts (#342).
 
 ## [1.25.3] - 2026-05-11