Bump the minor-updates group across 1 directory with 17 updates by dependabot[bot] · Pull Request #1174 · solidtime-io/solidtime

dependabot · 2026-07-27T08:07:10Z

Bumps the minor-updates group with 15 updates in the / directory:

Package	From	To
dedoc/scramble	`0.12.36`	`0.13.35`
flowframe/laravel-trend	`0.4.0`	`0.5.0`
gotenberg/gotenberg-php	`2.21.0`	`2.24.0`
laravel/fortify	`1.37.2`	`1.37.3`
laravel/octane	`2.17.4`	`2.18.0`
league/flysystem-aws-s3-v3	`3.34.0`	`3.35.2`
owen-it/laravel-auditing	`14.0.3`	`14.0.6`
spatie/temporary-directory	`2.3.1`	`2.4.0`
tightenco/ziggy	`2.6.2`	`2.6.3`
fumeapp/modeltyper	`3.10.0`	`3.11.0`
larastan/larastan	`3.9.6`	`3.10.0`
laravel/pint	`1.29.1`	`1.29.3`
laravel/sail	`1.60.0`	`1.64.0`
laravel/telescope	`5.20.0`	`5.21.0`
nunomaduro/collision	`8.9.4`	`8.9.5`

Updates dedoc/scramble from 0.12.36 to 0.13.35

Release notes

Sourced from dedoc/scramble's releases.

v0.13.35

What's Changed

Resolve references types in self out type builder by @romalytvynenko in dedoc/scramble#1221

Full Changelog: dedoc/scramble@v0.13.34...v0.13.35

v0.13.34

What's Changed

Add IgnoreResponse attribute to exclude responses from docs by @romalytvynenko in dedoc/scramble#1210

Add #[Api] attribute for route-level API assignment by @romalytvynenko in dedoc/scramble#1211

Fix file min/max/size/between rules emitting minLength/maxLength by @romalytvynenko in dedoc/scramble#1212

Fix request body parameter order when merging nested rules by @romalytvynenko in dedoc/scramble#1213

Full Changelog: dedoc/scramble@v0.13.33...v0.13.34

v0.13.32

What's Changed

Improve JSON schema examples: add multiple @example support, avoid using example (deprecated, using examples instead) when serializing JSON schemas by @romalytvynenko in dedoc/scramble#1205

Improve Laravel 10.x compatibility for paginators

Full Changelog: dedoc/scramble@v0.13.31...v0.13.32

v0.13.31

What's Changed

Add support for Laravel's fluent File validation rule by @squiaios in dedoc/scramble#1185

Improve nullable enum rule and serialization support by @romalytvynenko in dedoc/scramble#1195

Prevent more PHP 8.5 deprecations by @romalytvynenko in dedoc/scramble#1196

Adds support for accepted rule by @cappuc in dedoc/scramble#1129

Add support for extending the Group attribute by @sanfair in dedoc/scramble#1201

Add nullsafe operator support by @romalytvynenko in dedoc/scramble#1203

Fix coalesce operator support on property fetch by @romalytvynenko in dedoc/scramble#1204

New Contributors

@squiaios made their first contribution in dedoc/scramble#1185

@sanfair made their first contribution in dedoc/scramble#1201

Full Changelog: dedoc/scramble@v0.13.30...v0.13.31

v0.13.30

What's Changed

Update paginator's toArray logic so the type is coming from the real method

Added except and only support (for models and Arr helpers) by @romalytvynenko in dedoc/scramble#1193

Fixed JSON API resources when consts are used for attributes and relations properties by @romalytvynenko in dedoc/scramble#1194

Add support for pagination from Scout query builder by @cappuc in dedoc/scramble#1190

Full Changelog: dedoc/scramble@v0.13.29...v0.13.30

... (truncated)

Commits

c072f73 resolve references in self out type builder (#1221)
af86ba2 fix parameters order (#1213)
e006f81 min/max/between/size rules in file context (#1212)
f364b4d Add #[Api] attribute for route-level API assignment (#1211)
867b73d added IgnoreResponse attribute (#1210)
2ef252b wip (#1208)
546a727 Merge branch 'main' of github.com:dedoc/documentor
fb7cae3 fix paginator definition compatibility with laravel 10
6809040 Improve JSON schema examples: add multiple @example support, avoid using `e...
efdac7e Fix styling
Additional commits viewable in compare view

Updates flowframe/laravel-trend from 0.4.0 to 0.5.0

Release notes

Sourced from flowframe/laravel-trend's releases.

v0.5.0

What's Changed

Laravel 13.x Compatibility by @laravel-shift in Flowframe/laravel-trend#96

Full Changelog: Flowframe/laravel-trend@v0.4.0...v0.5.0

Commits

1b968af Laravel 13.x Compatibility (#96)
See full diff in compare view

Updates gotenberg/gotenberg-php from 2.21.0 to 2.24.0

Release notes

Sourced from gotenberg/gotenberg-php's releases.

v2.24.0

Adds support for the PSR-7 package's 3.0 release. Thanks @mbabker!

v2.23.0

This release brings the client up-to-date with the latest Gotenberg version.

New class:

Gotenberg\FacturX

New methods:

$chromium->pdf->facturX

$libreoffice->facturX

$pdfengines->facturX

$pdfengines->injectFacturX

->allowPrinting (Chromium, LibreOffice, PDF Engines)

->allowCopying (Chromium, LibreOffice, PDF Engines)

->allowModifying (Chromium, LibreOffice, PDF Engines)

->allowAnnotating (Chromium, LibreOffice, PDF Engines)

->allowFillingForms (Chromium, LibreOffice, PDF Engines)

->allowAssembling (Chromium, LibreOffice, PDF Engines)

See https://github.com/gotenberg/gotenberg/releases/tag/v8.34.0 for more details.

v2.22.0

This release brings the client up-to-date with the latest Gotenberg version.

New method:

$chromium->screenshot->deviceScaleFactor

See https://github.com/gotenberg/gotenberg/releases/tag/v8.33.0 for more details.

Commits

2996e69 feat: add support for guzzlehttp/psr7 3.0 (#71)
50fc01d chore(deps): bump actions/checkout from 6 to 7
fb33203 feat(pdfengines): add Factur-X API and encryption permissions
2c27c89 chore(deps): bump codecov/codecov-action from 6 to 7
d2a6f10 feat(chromium): add deviceScaleFactor for screenshots
955f02d docs(README): switch logo URL [skip ci]
See full diff in compare view

Updates guzzlehttp/guzzle from 7.10.3 to 7.15.2

Release notes

Sourced from guzzlehttp/guzzle's releases.

7.15.2

Security

Reject non-printable-ASCII and percent-escaped URI hosts and Host headers (GHSA-v5mv-p594-2x33)

Reject request URI hosts that contain a URI authority delimiter (GHSA-v5mv-p594-2x33)

Reject numeric-looking URI hosts with trailing dots, read as IPv4 addresses (GHSA-v5mv-p594-2x33)

Treat numeric-in-any-base and percent-escaped cookie domains as exact-match-only (GHSA-f7vp-7xgx-4w4r)

Regenerate a derived Host header after client URI rewrites (GHSA-v5mv-p594-2x33)

Fixed

Preserve RequestException when the stream handler rejects a request before opening a stream

7.15.1

Security

Preserve host-only cookie scope and require explicit persistence markers (GHSA-wm3w-8rrp-j577)

Bound response cookie admission and generated Cookie headers (GHSA-f283-ghqc-fg79)

Exclude URI fragments from Referer headers generated for redirects (GHSA-h95v-h523-3mw8)

7.15.0

Added

Added Multiplexing::NONE support as a client, cURL multi handler, and conditional request option

Changed

Adjusted guzzlehttp/psr7 version constraint to ^2.13

Use locale-independent ASCII folding for all case normalization and comparison

Bound cURL upload reads to the declared Content-Length

Sanitize the cURL error text exposed through exception handler context

Fail closed when a named cURL multi connection cap cannot be applied

Reject the request-level CURLOPT_SHARE cURL option when named connection caps are configured

Strengthen old-libcurl SOCKS isolation for raw CURLOPT_PRE_PROXY and opaque share handles

Isolate HTTP proxy tunnels from opaque shared connection caches

Trigger runtime deprecations for previously deprecated functionality in 7.1.0

Deprecated

Deprecated Utils::jsonDecode() and Utils::jsonEncode() in favor of native JSON functions

Deprecated passing CURLMOPT_PIPELINING in the cURL multi handler options array

Deprecated passing CURLOPT_PROXYHEADER without cURL proxy header separation support

Fixed

Defer cURL requests created from multi callbacks until native execution unwinds

Fail synchronous waits from native cURL callbacks promptly instead of self-deadlocking

Guard cURL multi handle removal against progress callbacks re-entering the handler

Scope promise waits on the cURL multi handler to the awaited transfer

Strip Content-Length and Transfer-Encoding when redirects discard the request body

... (truncated)

Changelog

Sourced from guzzlehttp/guzzle's changelog.

7.15.2 - 2026-07-26

Security

Reject non-printable-ASCII and percent-escaped URI hosts and Host headers (GHSA-v5mv-p594-2x33)

Reject request URI hosts that contain a URI authority delimiter (GHSA-v5mv-p594-2x33)

Reject numeric-looking URI hosts with trailing dots, read as IPv4 addresses (GHSA-v5mv-p594-2x33)

Treat numeric-in-any-base and percent-escaped cookie domains as exact-match-only (GHSA-f7vp-7xgx-4w4r)

Regenerate a derived Host header after client URI rewrites (GHSA-v5mv-p594-2x33)

Fixed

Preserve RequestException when the stream handler rejects a request before opening a stream

7.15.1 - 2026-07-18

Security

Preserve host-only cookie scope and require explicit persistence markers (GHSA-wm3w-8rrp-j577)

Bound response cookie admission and generated Cookie headers (GHSA-f283-ghqc-fg79)

Exclude URI fragments from Referer headers generated for redirects (GHSA-h95v-h523-3mw8)

7.15.0 - 2026-07-17

Added

Added Multiplexing::NONE support as a client, cURL multi handler, and conditional request option

Changed

Adjusted guzzlehttp/psr7 version constraint to ^2.13

Use locale-independent ASCII folding for all case normalization and comparison

Bound cURL upload reads to the declared Content-Length

Sanitize the cURL error text exposed through exception handler context

Fail closed when a named cURL multi connection cap cannot be applied

Reject the request-level CURLOPT_SHARE cURL option when named connection caps are configured

Strengthen old-libcurl SOCKS isolation for raw CURLOPT_PRE_PROXY and opaque share handles

Isolate HTTP proxy tunnels from opaque shared connection caches

Trigger runtime deprecations for previously deprecated functionality in 7.1.0

Deprecated

Deprecated Utils::jsonDecode() and Utils::jsonEncode() in favor of native JSON functions

Deprecated passing CURLMOPT_PIPELINING in the cURL multi handler options array

Deprecated passing CURLOPT_PROXYHEADER without cURL proxy header separation support

Fixed

... (truncated)

Commits

7441019 Security fixes 7.15 (#3907)
61443df Release 7.15.1
7b68220 Security fixes 7.15 (#3901)
90bd104 Release 7.15.0
e8c879e Require guzzlehttp/psr7 ^2.13 (#3870)
0d578f5 Trigger runtime deprecations for legacy functions and methods (#3896)
d5fcd1e Deprecate JSON utility methods (#3889)
3281fe2 Go with "guzzlehttp/test-server": "^0.7" (#3890)
ba662c9 Remove stale framing from redirected requests (#3881)
dd32f84 Bound cURL uploads to declared lengths (#3882)
Additional commits viewable in compare view

Updates laravel/fortify from 1.37.2 to 1.37.3

Release notes

Sourced from laravel/fortify's releases.

v1.37.3

Add Dependabot cooldown of 5 days by @nunomaduro in laravel/fortify#679

Enable Dependabot auto-merge by @nunomaduro in laravel/fortify#680

Bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions group by @dependabot[bot] in laravel/fortify#681

Bump shivammathur/setup-php from 2.37.1 to 2.37.2 in the github-actions group by @dependabot[bot] in laravel/fortify#684

Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group by @dependabot[bot] in laravel/fortify#686

[1.x] Use literal status code in LockoutResponse to fix PHPStan analysis by @jklejczyk in laravel/fortify#688

[1.x] Respect lowercase_usernames config when resetting password by @jklejczyk in laravel/fortify#687

Changelog

Sourced from laravel/fortify's changelog.

v1.37.3 - 2026-06-29

Add Dependabot cooldown of 5 days by @nunomaduro in laravel/fortify#679

Enable Dependabot auto-merge by @nunomaduro in laravel/fortify#680

Bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions group by @dependabot[bot] in laravel/fortify#681

Bump shivammathur/setup-php from 2.37.1 to 2.37.2 in the github-actions group by @dependabot[bot] in laravel/fortify#684

Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group by @dependabot[bot] in laravel/fortify#686

[1.x] Use literal status code in LockoutResponse to fix PHPStan analysis by @jklejczyk in laravel/fortify#688

[1.x] Respect lowercase_usernames config when resetting password by @jklejczyk in laravel/fortify#687

Commits

66b9503 Respect lowercase_usernames config when resetting password (#687)
49de8fa Use literal status code in LockoutResponse to fix PHPStan analysis (#688)
c15bb43 Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group (#686)
015a33f Bump shivammathur/setup-php in the github-actions group (#684)
0f0d1c6 Bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions group (#681)
bcd918a Enable Dependabot auto-merge (#680)
4e3246a Add Dependabot cooldown of 5 days (#679)
b9298bd Update CHANGELOG
See full diff in compare view

Updates laravel/framework from 12.60.2 to 12.64.0

Release notes

Sourced from laravel/framework's releases.

v12.64.0

[12.x] Enum as queue overlap key by @finagin in laravel/framework#60722

[12.x] Add capitalize parameter to Stringable::initials() by @irabbi360 in laravel/framework#60741

v12.63.0

[12.x] Add new error messages for detecting lost connections by @mfn in laravel/framework#60472

[12.x] Ability to refresh cache locks by @bytestream in laravel/framework#58349

[12.x] Guard JsonSchema deserializer against unbounded $ref expansion by @pushpak1300 in laravel/framework#60524

[12.x] Fix Postgres whereDate/whereTime crash when column is Expression by @irabbi360 in laravel/framework#60540

[12.x] Pop managed queue jobs from the cloud-agent instead of SQS by @kieranbrown in laravel/framework#60660

[12.x] Terminate default style value with a semicolon in ComponentAttributeBag::merge() by @Amirhf1 in laravel/framework#60665

v12.62.0

[12.x] Add JSON Schema array deserializer by @pushpak1300 in laravel/framework#60387

[12.x] Skip pg_collation lookup in compileColumns() on PostgreSQL servers before 9.1 by @fissible in laravel/framework#60400

[12.x] Add multi-type union support to Illuminate JsonSchema by @pushpak1300 in laravel/framework#60462

v12.61.1

[12.x] Preserve empty HTTP attach contents by @GrahamCampbell in laravel/framework#60291

Fix @params typo in Fluent and MessageBag toPrettyJson() docblocks by @Amirhf1 in laravel/framework#60313

[12.x] Fix regex typo in Env::addVariableToEnvContents that prevented quotin… by @Amirhf1 in laravel/framework#60312

[12.x] Fix Number::trim() returning null for INF and NAN values by @Amirhf1 in laravel/framework#60322

[12.x] Fix FIFO queue name normalization in Cloud managed queues by @kieranbrown in laravel/framework#60316

[12.x] Fix Number::pairs() infinite loop when $by is zero or negative by @Amirhf1 in laravel/framework#60324

[12.x] Ensure path seperators aren't encoded in LocalFilesystemAdapter by @jackbayliss in laravel/framework#60350

[12.x] Ensure config is bound before trying to log deprecation notice by @crynobone in laravel/framework#60376

v12.61.0

[12.x] Accept Symfony's new control-characters exception message in mailer test by @kieranbrown in laravel/framework#60203

[12.x] Fix queue:failed command to show real class name by @clementmas in laravel/framework#60279

[12.x] Throw ManagedQueueNotFoundException when a managed queue is missing by @kieranbrown in laravel/framework#60276

Commits

727a8ea Update version to v12.64.0
4a92cd3 [12.x] Add capitalize parameter to Stringable::initials() (#60741)
5207516 [12.x] Enum as queue overlap key (#60722)
c2f2ba7 Update CHANGELOG
7adfddb Update version to v12.63.0
65d8ede [12.x] Fix ComponentAttributeBag style merging missing semicolon. Ensures tha...
d1cada4 [12.x] Pop managed queue jobs from the cloud-agent instead of SQS (#60660)
fe2afc0 [12.x] Fix Postgres whereDate/whereTime crash when column is Expression (#60540)
08971b6 Guard JsonSchema deserializer against unbounded $ref expansion (#60524)
f898f56 [12.x] Ability to refresh cache locks (#58349)
Additional commits viewable in compare view

Updates laravel/octane from 2.17.4 to 2.18.0

Release notes

Sourced from laravel/octane's releases.

v2.18.0

Bump shivammathur/setup-php from 2.37.1 to 2.37.2 in the github-actions group by @dependabot[bot] in laravel/octane#1145

Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group by @dependabot[bot] in laravel/octane#1146

Add state_file config option with env() override by @serpentblade in laravel/octane#1147

Update the existing OCTANE_SERVER value on install by @lazerg in laravel/octane#1148

fix: prevent malformed multipart request from crashing the frankenphp worker by @lazerg in laravel/octane#1152

Fix formatting in Caddyfile stub by @michaelr0 in laravel/octane#1153

v2.17.5

fix: prevent frankenphp-worker from spitting html into stdout by @Carnicero90 in laravel/octane#1127

Enhance Boost guidelines with comprehensive Octane AI context by @rupeshstha in laravel/octane#1122

GitHub Actions hardening by @nunomaduro in laravel/octane#1131

Bump actions/checkout from 4.3.1 to 6.0.3 in the github-actions group by @dependabot[bot] in laravel/octane#1132

[2.x] Fix Symfony 8.1 compatibility for Swoole by @crynobone in laravel/octane#1134

Pin pull requests and issues workflows to least-privilege reusable workflows by @nunomaduro in laravel/octane#1136

Pin pull requests and issues workflows to latest laravel/.github by @nunomaduro in laravel/octane#1137

Add Dependabot cooldown of 5 days by @nunomaduro in laravel/octane#1138

Enable Dependabot auto-merge by @nunomaduro in laravel/octane#1139

Changelog

Sourced from laravel/octane's changelog.

v2.18.0 - 2026-07-21

Bump shivammathur/setup-php from 2.37.1 to 2.37.2 in the github-actions group by @dependabot[bot] in laravel/octane#1145

Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group by @dependabot[bot] in laravel/octane#1146

Add state_file config option with env() override by @serpentblade in laravel/octane#1147

Update the existing OCTANE_SERVER value on install by @lazerg in laravel/octane#1148

fix: prevent malformed multipart request from crashing the frankenphp worker by @lazerg in laravel/octane#1152

Fix formatting in Caddyfile stub by @michaelr0 in laravel/octane#1153

v2.17.5 - 2026-06-04

fix: prevent frankenphp-worker from spitting html into stdout by @Carnicero90 in laravel/octane#1127

Enhance Boost guidelines with comprehensive Octane AI context by @rupeshstha in laravel/octane#1122

GitHub Actions hardening by @nunomaduro in laravel/octane#1131

Bump actions/checkout from 4.3.1 to 6.0.3 in the github-actions group by @dependabot[bot] in laravel/octane#1132

[2.x] Fix Symfony 8.1 compatibility for Swoole by @crynobone in laravel/octane#1134

Pin pull requests and issues workflows to least-privilege reusable workflows by @nunomaduro in laravel/octane#1136

Pin pull requests and issues workflows to latest laravel/.github by @nunomaduro in laravel/octane#1137

Add Dependabot cooldown of 5 days by @nunomaduro in laravel/octane#1138

Enable Dependabot auto-merge by @nunomaduro in laravel/octane#1139

Commits

404a2f9 Fix formatting in Caddyfile for frankenphp worker (#1153)
c57ee3c fix: prevent malformed multipart request from crashing the frankenphp worker ...
50e8a5d Update the existing OCTANE_SERVER value on install (#1148)
36a3b3f Add state_file config option with env() override (#1147)
4456fea Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group (#1146)
09b6eae Bump shivammathur/setup-php in the github-actions group (#1145)
6e71e6d Update CHANGELOG
058ae4d Enable Dependabot auto-merge (#1139)
2789524 Add Dependabot cooldown of 5 days (#1138)
218dfb0 Merge pull request #1137 from laravel/chore/pin-reusable-workflows-latest
Additional commits viewable in compare view

Updates league/flysystem-aws-s3-v3 from 3.34.0 to 3.35.2

Commits

8475ef9 fix: honor explicit ACL override in AwsS3V3 copy
3f93d3f Fixes #1903:Remove lock file
See full diff in compare view

Updates owen-it/laravel-auditing from 14.0.3 to 14.0.6

Release notes

Sourced from owen-it/laravel-auditing's releases.

v14.0.5

What's Changed

Refactor audit creation to use savepoint by @erikn69 in owen-it/laravel-auditing#1056

fix(test): rewrite test to properly validate functionality by @erikn69 in owen-it/laravel-auditing#1057

Also audit when model is already bootstrapped before auditing was enabled by @gisostallenberg in owen-it/laravel-auditing#1040

New Contributors

@gisostallenberg made their first contribution in owen-it/laravel-auditing#1040

Full Changelog: owen-it/laravel-auditing@v14.0.4...v14.0.5

v14.0.4

What's Changed

Refactor model property access using ReflectionClass by @erikn69 in owen-it/laravel-auditing#1055

Avoid stopping other update events when restoring by @erikn69 in owen-it/laravel-auditing#1054

Full Changelog: owen-it/laravel-auditing@v14.0.3...v14.0.4

Commits

31b73b7 Simplify handle method in ProcessDispatchAudit (#1059)
4fb70d2 Also audit when model is already bootstrapped before auditing was enabled (#1...
65b7cb3 fix(test): rewrite test to properly validate functionality (#1057)
fa5a22e Refactor audit creation to use savepoint (#1056)
4268b7a Avoid stopping other update events when restoring (#1054)
a712249 Refactor model property access using ReflectionClass (#1055)
See full diff in compare view

Updates spatie/temporary-directory from 2.3.1 to 2.4.0

Release notes

Sourced from spatie/temporary-directory's releases.

2.4.0

What's Changed

Bump dependabot/fetch-metadata from 2.4.0 to 2.5.0 by @dependabot[bot] in spatie/temporary-directory#99

Bump dependabot/fetch-metadata from 2.5.0 to 3.0.0 by @dependabot[bot] in spatie/temporary-directory#100

Bump dependabot/fetch-metadata from 3.0.0 to 3.1.0 by @dependabot[bot] in spatie/temporary-directory#101

Return static instead of self by @QuentinGab in spatie/temporary-directory#102

New Contributors

@QuentinGab made their first contribution in spatie/temporary-directory#102

Full Changelog: spatie/temporary-directory@2.3.1...2.4.0

Changelog

Sourced from spatie/temporary-directory's changelog.

2.4.0 - 2026-06-22

What's Changed

Bump dependabot/fetch-metadata from 2.4.0 to 2.5.0 by @dependabot[bot] in spatie/temporary-directory#99

Bump dependabot/fetch-metadata from 2.5.0 to 3.0.0 by @dependabot[bot] in spatie/temporary-directory#100

Bump dependabot/fetch-metadata from 3.0.0 to 3.1.0 by @dependabot[bot] in spatie/temporary-directory#101

Return static instead of self by @QuentinGab in spatie/temporary-directory#102

New Contributors

@QuentinGab made their first contribution in spatie/temporary-directory#102

Full Changelog: spatie/temporary-directory@2.3.1...2.4.0

Commits

32cbb96 return static instead of self (#102)
3344733 Harden Dependabot auto-merge actor check
afa0f5d Merge pull request #101 from spatie/dependabot/github_actions/dependabot/fetc...
7ca52bb Bump dependabot/fetch-metadata from 3.0.0 to 3.1.0
dc0f112 Bump dependabot/fetch-metadata from 2.5.0 to 3.0.0 (#100)
a799919 Merge pull request #99 from spatie/dependabot/github_actions/dependabot/fetch...
e8733fa Bump dependabot/fetch-metadata from 2.4.0 to 2.5.0
1d373ba Update CHANGELOG
See full diff in compare view

Updates tightenco/ziggy from 2.6.2 to 2.6.3

Release notes

Sourced from tightenco/ziggy's releases.

v2.6.3

What's Changed

Fix TypeError when optional params omitted from array (fixes #736) by @pataar in tighten/ziggy#878

Brand RouteUrl type to distinguish it from plain strings by @pataar in tighten/ziggy#877

Test on Laravel 13 by @bakerkretzmar in tighten/ziggy#874

Docs: Update PHP_CodeSniffer repository link by @rodrigoprimo in tighten/ziggy#881

Create the directory for a custom types path if it doesn't exist by @lazerg in tighten/ziggy#888

New Contributors

@rodrigoprimo made their first contribution in tighten/ziggy#881

@lazerg made their first contribution in tighten/ziggy#888

Full Changelog: tighten/ziggy@v2.6.2...v2.6.3

Changelog

Sourced from tightenco/ziggy's changelog.

[v2.6.3] - 2026-06-23

Fixed

Fix TypeError when optional params omitted from array (fixes #736) by @pataar in tighten/ziggy#878

Docs: Update PHP_CodeSniffer repository link by @rodrigoprimo in tighten/ziggy#881

Create the directory for a custom types path if it doesn't exist by @lazerg in tighten/ziggy#888

Changed

Brand RouteUrl type to distinguish it from plain strings by @pataar in tighten/ziggy#877

Test on Laravel 13 by @bakerkretzmar in tighten/ziggy#874

Commits

14c5744 v2.6.3
8020eb2 Use known missing directory in test instead of deleting existing ones
09fb094 Fix workflow link again
3260495 Merge pull request #888 from lazerg/fix/issue-883-custom-types-dir
f8dd171 Create the directory for a custom types path if it doesn't exist
055ea9f Merge pull request #881 from rodrigoprimo/docs/update-phpcs-repo-link
44c7475 Docs: Update PHP_CodeSniffer repository link
f913d3c Merge pull request #874 from tighten/laravel-13
b23a0cb Merge pull request #877 from pataar/improve/route-url-branded-type
93083d2 Merge branch '2.x' into improve/route-url-branded-type
Additional commits viewable in compare view

Updates fumeapp/modeltyper from 3.10.0 to 3.11.0

Release notes

Sourced from fumeapp/modeltyper's releases.

v3.11.0

What's Changed

fix composer stan issues from latest larastan update by @tcampbPPU in fumeapp/modeltyper#125

Honour optional flag in $laravelModel->interfaces to support optional relationships by @cjholowatyj in fumeapp/modeltyper#123

Follow up to #110: set-only mutators with enum casts by @lorenzodalaqua in fumeapp/modeltyper#124

New Contributors

@cjholowatyj made their first contribution in fumeapp/modeltyper#123

Full Changelog: fumeapp/modeltyper@v3.10.0...v3.11.0

Commits

fe803e4 Follow up to #110: set-only mutators with enum casts (#124)
58ca0f5 Honour optional flag in $laravelModel->interfaces to support optional relatio...
e5824e8 fix composer stan issues from latest larastan update (#125)
See full diff in compare view

Updates larastan/larastan from 3.9.6 to 3.10.0

Release notes

Sourced from

Bumps the minor-updates group with 15 updates in the / directory: | Package | From | To | | --- | --- | --- | | [dedoc/scramble](https://github.com/dedoc/scramble) | `0.12.36` | `0.13.35` | | [flowframe/laravel-trend](https://github.com/Flowframe/laravel-trend) | `0.4.0` | `0.5.0` | | [gotenberg/gotenberg-php](https://github.com/gotenberg/gotenberg-php) | `2.21.0` | `2.24.0` | | [laravel/fortify](https://github.com/laravel/fortify) | `1.37.2` | `1.37.3` | | [laravel/octane](https://github.com/laravel/octane) | `2.17.4` | `2.18.0` | | [league/flysystem-aws-s3-v3](https://github.com/thephpleague/flysystem-aws-s3-v3) | `3.34.0` | `3.35.2` | | [owen-it/laravel-auditing](https://github.com/owen-it/laravel-auditing) | `14.0.3` | `14.0.6` | | [spatie/temporary-directory](https://github.com/spatie/temporary-directory) | `2.3.1` | `2.4.0` | | [tightenco/ziggy](https://github.com/tighten/ziggy) | `2.6.2` | `2.6.3` | | [fumeapp/modeltyper](https://github.com/fumeapp/modeltyper) | `3.10.0` | `3.11.0` | | [larastan/larastan](https://github.com/larastan/larastan) | `3.9.6` | `3.10.0` | | [laravel/pint](https://github.com/laravel/pint) | `1.29.1` | `1.29.3` | | [laravel/sail](https://github.com/laravel/sail) | `1.60.0` | `1.64.0` | | [laravel/telescope](https://github.com/laravel/telescope) | `5.20.0` | `5.21.0` | | [nunomaduro/collision](https://github.com/nunomaduro/collision) | `8.9.4` | `8.9.5` | Updates `dedoc/scramble` from 0.12.36 to 0.13.35 - [Release notes](https://github.com/dedoc/scramble/releases) - [Commits](dedoc/scramble@v0.12.36...v0.13.35) Updates `flowframe/laravel-trend` from 0.4.0 to 0.5.0 - [Release notes](https://github.com/Flowframe/laravel-trend/releases) - [Changelog](https://github.com/Flowframe/laravel-trend/blob/master/CHANGELOG.md) - [Commits](Flowframe/laravel-trend@v0.4.0...v0.5.0) Updates `gotenberg/gotenberg-php` from 2.21.0 to 2.24.0 - [Release notes](https://github.com/gotenberg/gotenberg-php/releases) - [Commits](gotenberg/gotenberg-php@v2.21.0...v2.24.0) Updates `guzzlehttp/guzzle` from 7.10.3 to 7.15.2 - [Release notes](https://github.com/guzzle/guzzle/releases) - [Changelog](https://github.com/guzzle/guzzle/blob/7.15.2/CHANGELOG.md) - [Commits](guzzle/guzzle@7.10.3...7.15.2) Updates `laravel/fortify` from 1.37.2 to 1.37.3 - [Release notes](https://github.com/laravel/fortify/releases) - [Changelog](https://github.com/laravel/fortify/blob/1.x/CHANGELOG.md) - [Commits](laravel/fortify@v1.37.2...v1.37.3) Updates `laravel/framework` from 12.60.2 to 12.64.0 - [Release notes](https://github.com/laravel/framework/releases) - [Changelog](https://github.com/laravel/framework/blob/13.x/CHANGELOG.md) - [Commits](laravel/framework@v12.60.2...v12.64.0) Updates `laravel/octane` from 2.17.4 to 2.18.0 - [Release notes](https://github.com/laravel/octane/releases) - [Changelog](https://github.com/laravel/octane/blob/2.x/CHANGELOG.md) - [Commits](laravel/octane@v2.17.4...v2.18.0) Updates `league/flysystem-aws-s3-v3` from 3.34.0 to 3.35.2 - [Commits](thephpleague/flysystem-aws-s3-v3@3.34.0...3.35.2) Updates `owen-it/laravel-auditing` from 14.0.3 to 14.0.6 - [Release notes](https://github.com/owen-it/laravel-auditing/releases) - [Changelog](https://github.com/owen-it/laravel-auditing/blob/master/CHANGELOG.md) - [Commits](owen-it/laravel-auditing@v14.0.3...v14.0.6) Updates `spatie/temporary-directory` from 2.3.1 to 2.4.0 - [Release notes](https://github.com/spatie/temporary-directory/releases) - [Changelog](https://github.com/spatie/temporary-directory/blob/main/CHANGELOG.md) - [Commits](spatie/temporary-directory@2.3.1...2.4.0) Updates `tightenco/ziggy` from 2.6.2 to 2.6.3 - [Release notes](https://github.com/tighten/ziggy/releases) - [Changelog](https://github.com/tighten/ziggy/blob/2.x/CHANGELOG.md) - [Commits](tighten/ziggy@v2.6.2...v2.6.3) Updates `fumeapp/modeltyper` from 3.10.0 to 3.11.0 - [Release notes](https://github.com/fumeapp/modeltyper/releases) - [Commits](fumeapp/modeltyper@v3.10.0...v3.11.0) Updates `larastan/larastan` from 3.9.6 to 3.10.0 - [Release notes](https://github.com/larastan/larastan/releases) - [Changelog](https://github.com/larastan/larastan/blob/3.x/RELEASE.md) - [Commits](larastan/larastan@v3.9.6...v3.10.0) Updates `laravel/pint` from 1.29.1 to 1.29.3 - [Release notes](https://github.com/laravel/pint/releases) - [Changelog](https://github.com/laravel/pint/blob/main/CHANGELOG.md) - [Commits](laravel/pint@v1.29.1...v1.29.3) Updates `laravel/sail` from 1.60.0 to 1.64.0 - [Release notes](https://github.com/laravel/sail/releases) - [Changelog](https://github.com/laravel/sail/blob/1.x/CHANGELOG.md) - [Commits](laravel/sail@v1.60.0...v1.64.0) Updates `laravel/telescope` from 5.20.0 to 5.21.0 - [Release notes](https://github.com/laravel/telescope/releases) - [Changelog](https://github.com/laravel/telescope/blob/5.x/CHANGELOG.md) - [Commits](laravel/telescope@v5.20.0...v5.21.0) Updates `nunomaduro/collision` from 8.9.4 to 8.9.5 - [Commits](nunomaduro/collision@v8.9.4...v8.9.5) --- updated-dependencies: - dependency-name: dedoc/scramble dependency-version: 0.13.35 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-updates - dependency-name: flowframe/laravel-trend dependency-version: 0.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-updates - dependency-name: gotenberg/gotenberg-php dependency-version: 2.24.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-updates - dependency-name: guzzlehttp/guzzle dependency-version: 7.15.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-updates - dependency-name: laravel/fortify dependency-version: 1.37.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-updates - dependency-name: laravel/framework dependency-version: 12.64.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-updates - dependency-name: laravel/octane dependency-version: 2.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-updates - dependency-name: league/flysystem-aws-s3-v3 dependency-version: 3.35.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-updates - dependency-name: owen-it/laravel-auditing dependency-version: 14.0.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-updates - dependency-name: spatie/temporary-directory dependency-version: 2.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-updates - dependency-name: tightenco/ziggy dependency-version: 2.6.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-updates - dependency-name: fumeapp/modeltyper dependency-version: 3.11.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-updates - dependency-name: larastan/larastan dependency-version: 3.10.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-updates - dependency-name: laravel/pint dependency-version: 1.29.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-updates - dependency-name: laravel/sail dependency-version: 1.64.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-updates - dependency-name: laravel/telescope dependency-version: 5.21.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-updates - dependency-name: nunomaduro/collision dependency-version: 8.9.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-updates ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update Php code labels Jul 27, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

Bump the minor-updates group across 1 directory with 17 updates - #1174

Bump the minor-updates group across 1 directory with 17 updates#1174
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/composer/main/minor-updates-e23fb1c0d8

dependabot Bot commented on behalf of github Jul 27, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 27, 2026

v0.13.35

What's Changed

v0.13.34

What's Changed

v0.13.32

What's Changed

v0.13.31

What's Changed

New Contributors

v0.13.30

What's Changed

v0.5.0

What's Changed

v2.24.0

v2.23.0

v2.22.0

7.15.2

Security

Fixed

7.15.1

Security

7.15.0

Added

Changed

Deprecated

Fixed

7.15.2 - 2026-07-26

Security

Fixed

7.15.1 - 2026-07-18

Security

7.15.0 - 2026-07-17

Added

Changed

Deprecated

Fixed

v1.37.3

v1.37.3 - 2026-06-29

v12.64.0

v12.63.0

v12.62.0

v12.61.1

v12.61.0

v2.18.0

v2.17.5

v2.18.0 - 2026-07-21

v2.17.5 - 2026-06-04

v14.0.5

What's Changed

New Contributors

v14.0.4

What's Changed

2.4.0

What's Changed

New Contributors

2.4.0 - 2026-06-22

What's Changed

New Contributors

v2.6.3

What's Changed

New Contributors

[v2.6.3] - 2026-06-23

v3.11.0

What's Changed

New Contributors

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants