chore(deps)(deps): bump the php-minor group across 1 directory with 17 updates by dependabot[bot] · Pull Request #362 · innocommerce/innoshop

dependabot · 2026-10-26T11:55:01Z

Bumps the php-minor group with 17 updates in the / directory:

Package	From	To
aws/aws-sdk-php	`3.394.6`	`3.402.0`
ezyang/htmlpurifier	`4.19.0`	`4.19.1`
intervention/image	`4.3.2`	`4.4.0`
laravel/framework	`13.30.1`	`13.38.0`
laravel/horizon	`5.48.3`	`5.50.1`
laravel/octane	`2.19.1`	`2.22.0`
laravel/reverb	`1.11.1`	`1.12.0`
predis/predis	`3.6.0`	`3.7.0`
rap2hpoutre/fast-excel	`5.16.0`	`5.17.0`
spatie/laravel-permission	`8.3.0`	`8.3.2`
srmklive/paypal	`3.1.1`	`3.2.0`
barryvdh/laravel-debugbar	`4.4.3`	`4.4.4`
larastan/larastan	`3.11.0`	`3.13.1`
laravel/pint	`1.30.5`	`1.32.1`
laravel/sail	`1.67.0`	`1.69.0`
phpstan/phpstan	`2.2.12`	`2.3.2`
spatie/laravel-ignition	`2.12.0`	`2.12.1`

Updates aws/aws-sdk-php from 3.394.6 to 3.402.0

Release notes

Sourced from aws/aws-sdk-php's releases.

Version 3.402.0

Aws\ - Updates the minimum required PHP version to 8.2, following the disclosure of CVE-2026-109618 and CVE-2026-109619.

Aws\IVSRealTime - Adds RevokeConnectionToken operation for Amazon IVS Real-Time Streaming.

Aws\Lambda - AWS Lambda durable functions now supports payloads up to 1 MB for checkpoints, callback completion, and error details.

Aws\KafkaConnect - Amazon MSK Connect now supports pausing and resuming connectors via the asynchronous PauseConnector and ResumeConnector APIs. Paused connectors keep their configuration and committed offsets and resume where they left off. Each call returns an operation ARN to track with DescribeConnectorOperation.

Aws\Glue - Add support for large worker types in AWS Glue

Aws\ElementalInference - Elemental Inference now supports feed scheduling, letting you apply feed configuration changes at a time you choose instead of building your own automation.

Aws\BedrockAgentCoreControl - Adds model-based routing and fallback to AgentCore Gateway rules. Rules can match the requested model, route to a specific model, and fall back across inference targets with an optional circuit breaker. Adds multi-dimensional rating scales for AgentCore Evaluations LLM-as-a-Judge evaluators.

Aws\NetworkManager - AWS Cloud WAN now provides managed one-to-one NAT directly on it's core network attachments, through integration with Regional Private NAT Gateway. Use UpdateAttachmentNatConfiguration to enable NAT and configure NAT rules, and ListAttachmentNatConfigurations to view them.

Aws\BedrockAgentCore - Adds the dimension name to evaluation results and batch evaluation summaries. For multi-dimensional LLM-as-a-Judge evaluators, each result and summary now identifies which dimension it corresponds to.

Aws\EC2 - AWS Transit Gateway now provides managed one-to-one NAT directly on its attachments, through integration with Regional Private NAT Gateway. Use ModifyTransitGatewayAttachmentNatConfiguration to enable NAT and configure NAT rules, and GetTransitGatewayAttachmentNatConfiguration to view them.

Aws\Connect - Adds support for customer queryable replication errors.

Aws\Continuum - Releasing Continuum for Code Vulnerabilities APIs for SDKs

Aws\OpenSearchServerless - Adds APIs to create, get, list, and cancel ingestion jobs, and to create, get, list, and delete ingestion streams, for ingesting data from Amazon S3 into OpenSearch Serverless collections.

Version 3.401.5

Aws\ - Removes the FinSpace and FinSpaceData clients, which are no longer in service.

Aws\MediaConvert - Adds AV1 CBR rate control and scene change detection. New sliding window peak bitrate setting for all codecs. DASH adaptation set grouping update. Option to disable the AV1 perceptual quality filter. Support for vertical (portrait) AV1 encoding.

Aws\DevOpsAgent - Adds support for Microsoft Teams as a notification service. Associations can now be created and updated with a Microsoft Teams team and channel configuration using the DevOps Agent API and SDKs.

Aws\RedshiftDataAPIService - Add Redshift QueryUUID field to DescribeStatement response

Aws\LexModelsV2 - Adds support for Assisted NLU - Dialog Manager mode allowing usage of LLMs as the default NLU system and dialog management

Aws\AutoScaling - EC2 Auto Scaling now supports account settings, letting you manage account-level configuration for Auto Scaling.

Aws\Connect - Added support for AWS-managed security profiles.

Aws\Polly - Added support for the new voices - Kenneth (en-US), Nate (en-US), Tina (de-DE), Carlos (es-US), Carolina (pt-BR), Leo (pt-BR), Curtis (en-AU), Kiara (en-IN), Arjun (en-IN) and Hyunduk (ko-KR). They are available as a Generative voices only.

Aws\HealthLake - Update the UpdateProfileWithAgent API to return a streaming response to provide more frequent updates on what the agent is doing.

Aws\Lightsail - This release adds support for metrics related to system-disk performance.

Aws\EC2 - Adds new response fields to DescribeInstanceStatus and Network Insights analysis results.

Aws\DataZone - Added custom designations support with new CRUD APIs. The designation field in project membership and policy grant APIs supports a new enum for custom designations. These APIs also support a new field for custom designation id.

Aws\NetworkFirewall - Adds support for Network Firewall Resolved IP validation.

Aws\SFN - Release minor updates to API model

Aws\QuickSight - Adds support for SharePoint and OneDrive two-legged OAuth certificate credentials and Google Workspace service account credentials when creating data sources

Version 3.401.4

Aws\ - Removes Tnb client, which is no longer in service.

Aws\MarketplaceCatalog - Adds ListEntities filter, sort, and summary support for the ExpressPrivateOfferConfiguration entity type, including filtering by ProductId.

Aws\ElastiCache - LiveMigration enables customers to migrate from self-hosted EC2 Redis and Valkey clusters to ElastiCache Serverless with near-zero downtime. Customers control the migration through three API-driven phases (prepare, start, complete) that handle traffic proxying, data replication, and cutover.

Aws\WorkspacesInstances - Documentation update release for AWS service

Aws\CleanRooms - This release allows customers and their partners to easily collaborate with data stored in Databricks, without having to move or share their underlying data among collaborators.

Aws\S3Files - S3 Files adds support for the "Misconfigured" file system status.

Aws\ECS - ECS Service Gateway makes it easier for developers to deploy ECS services without having to worry about complex ingress networking constructs.

Aws\Bedrock - Amazon Bedrock Guardrails now supports a configurable tier for the contextual grounding policy via a new tier option. Select the Standard tier for grounding that better supports conversations and reasoning, with expanded language coverage.

Aws\DynamoDB - Adds support for disassociating a replica from an Amazon DynamoDB multi-Region eventual consistency global table, so you can keep it as a single-Region table with its existing data. Also adds disassociation protection, on by default, to help prevent accidental disassociation.

Aws\CloudWatch - Amazon CloudWatch now supports two new anomaly detector settings. AdaptationSpeed (FAST, NORMAL, SLOW) controls how fast the model adapts to baseline changes, and OutlierFilteringStrength (MINIMAL, MODERATE, STRICT) controls how aggressively outliers are filtered.

Aws\RDS - Amazon RDS now supports On-Demand Capacity Reservations for DB instances.

Aws\CloudWatchOmni - Updating max value for maxResults in SearchPrincipals API

Version 3.401.3

Aws\EndpointV2 - EndpointDefinitionProvider now rejects service names and api versions that are not a single safe path segment, preventing path traversal through the version or service client options.

Aws\IoTWireless - Documentation update release for AWS service

Aws\WorkspacesInstances - ModifyVolume is a new public API for WorkSpaces Core Managed Instances. Customers can change the size, type, IOPS, or throughput of an existing managed volume online, with no stop required. Customers track progress by calling EC2 DescribeVolumesModifications directly.

... (truncated)

Commits

661f6a5 3.402.0 release
fa234f9 Update models for release
530dbc1 bump runtime floors, remove 8.1 (#3384)
4d30466 3.401.5 release
65bebb1 Update models for release
729f0e5 remove finspace and finspace-data (#3380)
b5941e2 3.401.4 release
68c9b38 Update models for release
11e950f remove Tnb (#3381)
7b8541e 3.401.3 release
Additional commits viewable in compare view

Updates ezyang/htmlpurifier from 4.19.0 to 4.19.1

Release notes

Sourced from ezyang/htmlpurifier's releases.

v4.19.1

4.19.1 (2026-09-15)

Bug Fixes

"Passing null to parameter" deprecation in Lexer.php when Core.NormalizeNewlines is false (#490) (67085e6)

gate chmod on mkdir success, best-effort only (a2de031)

Improve compatibility with PHP 8.5 (#484) (c93715e), closes #476 #483

Changelog

Sourced from ezyang/htmlpurifier's changelog.

4.19.1 (2026-09-15)

Bug Fixes

"Passing null to parameter" deprecation in Lexer.php when Core.NormalizeNewlines is false (#490) (67085e6)

gate chmod on mkdir success, best-effort only (a2de031)

Improve compatibility with PHP 8.5 (#484) (c93715e), closes #476 #483

Commits

5e05391 chore(release): 4.19.1 [skip ci]
67085e6 fix: "Passing null to parameter" deprecation in Lexer.php when `Core.Normaliz...
7641f75 Merge pull request #487 from fengtan/master
a2de031 fix: gate chmod on mkdir success, best-effort only
4907507 Ensure correct permissions on directory.
c93715e fix: Improve compatibility with PHP 8.5 (#484)
See full diff in compare view

Updates intervention/image from 4.3.2 to 4.4.0

Release notes

Sourced from intervention/image's releases.

4.4.0

What's Changed

Bugfix: Keep resolution unit in Imagick CropModifier by @NotAFlightRisk in Intervention/image#1551

Add support for decoding images directly from Psr7 stream or response instances by @olivervogel in Intervention/image#1552

Various minor improvements by @olivervogel

Full Changelog: Intervention/image@4.3.5...4.4.0

4.3.5

What's Changed

Fix resolution unit in Imagick ResolutionModifier by @NotAFlightRisk in Intervention/image#1548

Fix transparent seam in GD RotateModifier by @nlemoine in Intervention/image#1550

Add missing native types for PHP 8.3 by @guillaume-sainthillier in Intervention/image#1549

New Contributors

@NotAFlightRisk made their first contribution in Intervention/image#1548

Full Changelog: Intervention/image@4.3.4...4.3.5

4.3.4

What's Changed

Support strip option in PngEncoder by @lazerg in Intervention/image#1535

Fix transparent pixels in GD RotateModifier by @guillaume-sainthillier in Intervention/image#1536

Skip pixel operations when rotating by 0 degrees by @guillaume-sainthillier in Intervention/image#1542

Fill new GD canvases without flood fill by @guillaume-sainthillier in Intervention/image#1540

Cache Imagick media type per image format by @guillaume-sainthillier in Intervention/image#1538

Avoid sorting and filtering in hot lookups by @guillaume-sainthillier in Intervention/image#1541

Skip coalescing single frame Imagick images by @guillaume-sainthillier in Intervention/image#1539

Fix transparent color check of GD clone background by @guillaume-sainthillier in Intervention/image#1537

Fix Imagick driver's StripMetaModifier by @olivervogel in Intervention/image#1546

New Contributors

@guillaume-sainthillier made their first contribution in Intervention/image#1536

Full Changelog: Intervention/image@4.3.3...4.3.4

4.3.3

What's Changed

Adjust StripMetaModifier to keep possible UltraHdr gain map by @olivervogel in Intervention/image#1528

Fix reading unicode file paths by @olivervogel in Intervention/image#1530

Remove gray ICC profile when relabeling to sRGB by @davidhirtz in Intervention/image#1533

Add tested support for PHP 8.6 by @olivervogel in Intervention/image#1493

New Contributors

@davidhirtz made their first contribution in Intervention/image#1533

... (truncated)

Commits

ddf4d84 Add support for decoding images from Psr7 stream/response (#1552)
2665d50 Switch from calling accessor to property
686fe2c Fix typo
2ae9f2e Fix typo
57624bf Fix doc blocks
a5d5668 Fix exception message
b6baaac Fix doc blocks
1593185 Fix doc blocks
c5de754 Optimize exception message
51c6ff8 Make input type more precise
Additional commits viewable in compare view

Updates laravel/framework from 13.30.1 to 13.38.0

Release notes

Sourced from laravel/framework's releases.

v13.38.0

[13.x] Allow float values in Unique where rule by @sertxudev in laravel/framework#62059

[13.x] Remove dead until higher order collection proxy by @xurshudyan in laravel/framework#62057

[13.x] Fix ofMany() alias inside closures by @xurshudyan in laravel/framework#62051

[13.x] Fix existence and aggregate queries on self-referencing one-of-many relations by @xurshudyan in laravel/framework#62043

[13.x] Support CountCrashesAsExceptions on queued listeners, mailables and notifications by @Taldres in laravel/framework#62048

[13.x] Make health route compatible with route caching across machines by @percymamedy in laravel/framework#62049

[13.x] Restore the namespaced Cloud logging formatter by @xurshudyan in laravel/framework#62068

[13.x] Run the Memcached cache lock and tagged cache integration tests by @xurshudyan in laravel/framework#62069

[13.x] Fix mode() returning truncated values for floats by @xurshudyan in laravel/framework#62063

[13.x] Reset NotificationFailed flag before each channel send by @xurshudyan in laravel/framework#62074

[13.x] Respect child #[Connection] attribute over inherited $connection property by @xurshudyan in laravel/framework#62065

[13.x] Fix whereBetween and whereNotBetween with collection bounds by @xurshudyan in laravel/framework#62062

[13.x] Fix altering SQLite tables with a foreign key to a table name that needs quoting by @sumaiazaman in laravel/framework#62084

[13.x] Fix clone() on relations by @xurshudyan in laravel/framework#62081

[13.x] Release the unique lock when dispatching a scheduled job fails by @sumaiazaman in laravel/framework#62083

[13.x] Fix incorrect docblocks by @xurshudyan in laravel/framework#62097

[13.x] Fix PHPStan error when passing a closure to PendingBatch::allowFailures() by @xurshudyan in laravel/framework#62096

[13.x] Remove unused imports by @xurshudyan in laravel/framework#62087

[13.x] Free the previous chunk in lazy() and lazyById() by @xurshudyan in laravel/framework#62086

[13.x] Add PreventStaleDatabaseReads middleware by @jackbayliss in laravel/framework#62078

[13.x] Dispatch UniqueJobSkipped when a unique broadcast event is skipped by @jackbayliss in laravel/framework#62077

[13.x] Remove dead test files by @xurshudyan in laravel/framework#62101

[13.x] Fix TypeError in date comparison rules on non-date values by @GrahamCampbell in laravel/framework#62103

[13.x] Fix incorrect docblocks by @xurshudyan in laravel/framework#62100

[13.x] add usingWritePdo to Connection by @jackbayliss in laravel/framework#62099

v13.37.0

[13.x] Fix race condition with jobs using both onOneServer() and withoutOverlapping() by @tanerkay in laravel/framework#62007

[13.x] Respect faked Sleep in limiter block() timeout by @grzegorczykp in laravel/framework#62017

[13.x] Improve getForeignKeys performance on MariaDB/MySQL on servers with many databases by @RMJTromp in laravel/framework#62014

[13.x] Release the unique lock when pushing a job to the queue fails by @sumaiazaman in laravel/framework#62010

[13.x] Fix has() and withCount() on self-referencing one-of-many relations by @sumaiazaman in laravel/framework#62009

[13.x] Fix whereBelongsTo() and whereAttachedTo() collection types by @xurshudyan in laravel/framework#62002

[13.x] Add --queue option in queue:failed by @jackbayliss in laravel/framework#61971

[13.x] Add runtime to ScheduledTaskFailed by @jackbayliss in laravel/framework#61970

[13.x] Avoid creating extra model instances in Eloquent cursor() by @xurshudyan in laravel/framework#62001

[13.x] Fix N+1 queries when including nested JSON:API relationships by @xurshudyan in laravel/framework#62000

[13.x] Fix incrementOrCreate() on through relations by @xurshudyan in laravel/framework#61997

[13.x] Fix restore() failing on soft delete queries with joins by @xurshudyan in laravel/framework#61998

[13.x] Fix Eloquent Collection findOrFail() with a model instance by @xurshudyan in laravel/framework#61999

[13.x] Add generic return type to InvokableComponentVariable by @alies-dev in laravel/framework#62018

[13.x] Add detect_mime_type_using_path option to SFTP and FTP disks by @jackbayliss in laravel/framework#61972

[13.x] Allow queue:forget to accept multiple IDs by @jackbayliss in laravel/framework#61901

[13.x] Fix mergeWhen() in JSON:API resource attributes by @xurshudyan in laravel/framework#62023

[13.x] Qualify the default latest() and oldest() column on queries with joins by @xurshudyan in laravel/framework#62024

[13.x] Release unique queued listener locks in Queue::fake() by @mrjavadseydi in laravel/framework#62025

[13.x] Add JPEG XL (JXL) support to the Image API by @rjsamra in laravel/framework#62019

[13.x] Use the intermediate table alias in self-referencing HasOneThrough one-of-many existence queries by @xurshudyan in laravel/framework#62040

[13.x] Support selecting columns in withWhereHas() with a callback by @xurshudyan in laravel/framework#62039

... (truncated)

Changelog

Sourced from laravel/framework's changelog.

v13.38.0 - 2026-10-20

[13.x] Allow float values in Unique where rule by @sertxudev in laravel/framework#62059

[13.x] Remove dead until higher order collection proxy by @xurshudyan in laravel/framework#62057

[13.x] Fix ofMany() alias inside closures by @xurshudyan in laravel/framework#62051

[13.x] Fix existence and aggregate queries on self-referencing one-of-many relations by @xurshudyan in laravel/framework#62043

[13.x] Support CountCrashesAsExceptions on queued listeners, mailables and notifications by @Taldres in laravel/framework#62048

[13.x] Make health route compatible with route caching across machines by @percymamedy in laravel/framework#62049

[13.x] Restore the namespaced Cloud logging formatter by @xurshudyan in laravel/framework#62068

[13.x] Run the Memcached cache lock and tagged cache integration tests by @xurshudyan in laravel/framework#62069

[13.x] Fix mode() returning truncated values for floats by @xurshudyan in laravel/framework#62063

[13.x] Reset NotificationFailed flag before each channel send by @xurshudyan in laravel/framework#62074

[13.x] Respect child #[Connection] attribute over inherited $connection property by @xurshudyan in laravel/framework#62065

[13.x] Fix whereBetween and whereNotBetween with collection bounds by @xurshudyan in laravel/framework#62062

[13.x] Fix altering SQLite tables with a foreign key to a table name that needs quoting by @sumaiazaman in laravel/framework#62084

[13.x] Fix clone() on relations by @xurshudyan in laravel/framework#62081

[13.x] Release the unique lock when dispatching a scheduled job fails by @sumaiazaman in laravel/framework#62083

[13.x] Fix incorrect docblocks by @xurshudyan in laravel/framework#62097

[13.x] Fix PHPStan error when passing a closure to PendingBatch::allowFailures() by @xurshudyan in laravel/framework#62096

[13.x] Remove unused imports by @xurshudyan in laravel/framework#62087

[13.x] Free the previous chunk in lazy() and lazyById() by @xurshudyan in laravel/framework#62086

[13.x] Add PreventStaleDatabaseReads middleware by @jackbayliss in laravel/framework#62078

[13.x] Dispatch UniqueJobSkipped when a unique broadcast event is skipped by @jackbayliss in laravel/framework#62077

[13.x] Remove dead test files by @xurshudyan in laravel/framework#62101

[13.x] Fix TypeError in date comparison rules on non-date values by @GrahamCampbell in laravel/framework#62103

[13.x] Fix incorrect docblocks by @xurshudyan in laravel/framework#62100

[13.x] add usingWritePdo to Connection by @jackbayliss in laravel/framework#62099

v13.37.0 - 2026-10-16

[13.x] Fix race condition with jobs using both onOneServer() and withoutOverlapping() by @tanerkay in laravel/framework#62007

[13.x] Respect faked Sleep in limiter block() timeout by @grzegorczykp in laravel/framework#62017

[13.x] Improve getForeignKeys performance on MariaDB/MySQL on servers with many databases by @RMJTromp in laravel/framework#62014

[13.x] Release the unique lock when pushing a job to the queue fails by @sumaiazaman in laravel/framework#62010

[13.x] Fix has() and withCount() on self-referencing one-of-many relations by @sumaiazaman in laravel/framework#62009

[13.x] Fix whereBelongsTo() and whereAttachedTo() collection types by @xurshudyan in laravel/framework#62002

[13.x] Add --queue option in queue:failed by @jackbayliss in laravel/framework#61971

[13.x] Add runtime to ScheduledTaskFailed by @jackbayliss in laravel/framework#61970

[13.x] Avoid creating extra model instances in Eloquent cursor() by @xurshudyan in laravel/framework#62001

[13.x] Fix N+1 queries when including nested JSON:API relationships by @xurshudyan in laravel/framework#62000

[13.x] Fix incrementOrCreate() on through relations by @xurshudyan in laravel/framework#61997

[13.x] Fix restore() failing on soft delete queries with joins by @xurshudyan in laravel/framework#61998

[13.x] Fix Eloquent Collection findOrFail() with a model instance by @xurshudyan in laravel/framework#61999

[13.x] Add generic return type to InvokableComponentVariable by @alies-dev in laravel/framework#62018

[13.x] Add detect_mime_type_using_path option to SFTP and FTP disks by @jackbayliss in laravel/framework#61972

[13.x] Allow queue:forget to accept multiple IDs by @jackbayliss in laravel/framework#61901

[13.x] Fix mergeWhen() in JSON:API resource attributes by @xurshudyan in laravel/framework#62023

[13.x] Qualify the default latest() and oldest() column on queries with joins by @xurshudyan in laravel/framework#62024

[13.x] Release unique queued listener locks in Queue::fake() by @mrjavadseydi in laravel/framework#62025

[13.x] Add JPEG XL (JXL) support to the Image API by @rjsamra in laravel/framework#62019

... (truncated)

Commits

c42f9ab Update version to v13.38.0
e50ad77 Update facade docblocks
4b3f2d8 13.x-usingWritePdo (#62099)
3b2ebe0 Update facade docblocks
b0e1c0a [13.x] Fix incorrect docblocks (#62100)
89f37d3 Fix TypeError in date comparison rules on non-date values (#62103)
fa4b82c [13.x] Remove dead test files (#62101)
1b8b12d limit bytes
d794ce9 [13.x] Dispatch UniqueJobSkipped when a unique broadcast event is skipped (#6...
213b1e6 [13.x] Add PreventStaleDatabaseReads middleware (#62078)
Additional commits viewable in compare view

Updates laravel/horizon from 5.48.3 to 5.50.1

Release notes

Sourced from laravel/horizon's releases.

v5.50.1

Bump moment from 2.30.1 to 2.31.0 by @dependabot[bot] in laravel/horizon#1822

Bump axios from 1.18.0 to 1.20.0 by @dependabot[bot] in laravel/horizon#1823

Bump @vue/server-renderer and vue by @dependabot[bot] in laravel/horizon#1831

Bump source-map-js from 1.2.1 to 1.2.2 by @dependabot[bot] in laravel/horizon#1830

[5.x] Fix horizon:listen ignoring glob paths with chokidar 5 by @svidskiy in laravel/horizon#1832

Bump shivammathur/setup-php from 2.37.2 to 2.40.0 in the github-actions group by @dependabot[bot] in laravel/horizon#1833

v5.50.0

Add logarithmic auto-scaling strategy by @Gummibeer in laravel/horizon#1818

Fix "Delayed Until" showing the same time as "Pushed" for interval de… by @AdilAzhariOmsan in laravel/horizon#1819

v5.49.0

Escape CSP nonce attribute value by @iliaal in laravel/horizon#1811

Bump immutable and sass by @dependabot[bot] in laravel/horizon#1814

Fix Redis Cluster tests in the CI by @laravel-o11y in laravel/horizon#1817

Allow enabling json logs in workers by @laravel-o11y in laravel/horizon#1815

Changelog

Sourced from laravel/horizon's changelog.

v5.50.1 - 2026-10-13

Bump moment from 2.30.1 to 2.31.0 by @dependabot[bot] in laravel/horizon#1822

Bump axios from 1.18.0 to 1.20.0 by @dependabot[bot] in laravel/horizon#1823

Bump @vue/server-renderer and vue by @dependabot[bot] in laravel/horizon#1831

Bump source-map-js from 1.2.1 to 1.2.2 by @dependabot[bot] in laravel/horizon#1830

[5.x] Fix horizon:listen ignoring glob paths with chokidar 5 by @svidskiy in laravel/horizon#1832

Bump shivammathur/setup-php from 2.37.2 to 2.40.0 in the github-actions group by @dependabot[bot] in laravel/horizon#1833

v5.50.0 - 2026-09-15

Add logarithmic auto-scaling strategy by @Gummibeer in laravel/horizon#1818

Fix "Delayed Until" showing the same time as "Pushed" for interval de… by @AdilAzhariOmsan in laravel/horizon#1819

v5.49.0 - 2026-09-07

Escape CSP nonce attribute value by @iliaal in laravel/horizon#1811

Bump immutable and sass by @dependabot[bot] in laravel/horizon#1814

Fix Redis Cluster tests in the CI by @laravel-o11y in laravel/horizon#1817

Allow enabling json logs in workers by @laravel-o11y in laravel/horizon#1815

Commits

9d65cae Bump shivammathur/setup-php (#1833)
88a067b Fix chokidar version check for chokidar 5 (#1832)
dbb3529 Bump source-map-js from 1.2.1 to 1.2.2 (#1830)
59b426b Bump @vue/server-renderer and vue (#1831)
5d9f804 Bump axios from 1.18.0 to 1.20.0 (#1823)
19ae653 Bump moment from 2.30.1 to 2.31.0 (#1822)
26fef6f Update CHANGELOG
009177c Compile Assets
e1f9732 Fix "Delayed Until" showing the same time as "Pushed" for interval delays (#1...
757f526 Add logarithmic auto-scaling strategy (#1818)
Additional commits viewable in compare view

Updates laravel/octane from 2.19.1 to 2.22.0

Release notes

Sourced from laravel/octane's releases.

v2.22.0

Remove security policy in favor of the org-wide default by @pushpak1300 in laravel/octane#1172

[2.x] Support Mercure 1.0 and Laravel's Mercure broadcaster with FrankenPHP by @dunglas in laravel/octane#1171

v2.21.0

[2.x] Fix redaction of authorization query parameter in FrankenPHP access logs by @m0nclous in laravel/octane#1167

[2.x] Flush once() cache when preparing for the next operation by @cristiangirlea in laravel/octane#1169

Fix stopServer() when a signal arrives before the input is bound by @jasparsteenman in laravel/octane#1170

v2.20.0

Make RoadRunner worker command configurable and absolute-path safe by @wakqasahmed in laravel/octane#1162

Changelog

Sourced from laravel/octane's changelog.

v2.22.0 - 2026-10-14

Remove security policy in favor of the org-wide default by @pushpak1300 in laravel/octane#1172

[2.x] Support Mercure 1.0 and Laravel's Mercure broadcaster with FrankenPHP by @dunglas in laravel/octane#1171

v2.21.0 - 2026-10-05

[2.x] Fix redaction of authorization query parameter in FrankenPHP access logs by @m0nclous in laravel/octane#1167

[2.x] Flush once() cache when preparing for the next operation by @cristiangirlea in laravel/octane#1169

Fix stopServer() when a signal arrives before the input is bound by @jasparsteenman in laravel/octane#1170

v2.20.0 - 2026-08-23

Make RoadRunner worker command configurable and absolute-path safe by @wakqasahmed in laravel/octane#1162

Commits

c49ff45 [2.x] Support Mercure 1.0 and Laravel's Mercure broadcaster with FrankenPHP (...
86ab711 Merge pull request #1172 from laravel/security-policy-parity
1290c55 Remove security policy in favor of the org-wide default
bffa2fe Update CHANGELOG
ce75512 Fix stopServer() when a signal arrives before the input is bound (#1170)
4b6b7d9 Flush once() cache when preparing for the next operation (#1169)
fd3539c Fix redaction of authorization query parameter in FrankenPHP access logs (#1167)
de95937 Update CHANGELOG
df4c38d Make RoadRunner worker command path configurable and absolute-path safe (#1162)
4cdebfb Update CHANGELOG
See full diff in compare view

Updates laravel/reverb from 1.11.1 to 1.12.0

Release notes

Sourced from laravel/reverb's releases.

v1.12.0

Close the connection when the WebSocket handshake fails by @boutetnico in laravel/reverb#406

Mockery to Double Converter by @jasonmccreary in laravel/reverb#407Description has been truncated

…7 updates Bumps the php-minor group with 17 updates in the / directory: | Package | From | To | | --- | --- | --- | | [aws/aws-sdk-php](https://github.com/aws/aws-sdk-php) | `3.394.6` | `3.402.0` | | [ezyang/htmlpurifier](https://github.com/ezyang/htmlpurifier) | `4.19.0` | `4.19.1` | | [intervention/image](https://github.com/Intervention/image) | `4.3.2` | `4.4.0` | | [laravel/framework](https://github.com/laravel/framework) | `13.30.1` | `13.38.0` | | [laravel/horizon](https://github.com/laravel/horizon) | `5.48.3` | `5.50.1` | | [laravel/octane](https://github.com/laravel/octane) | `2.19.1` | `2.22.0` | | [laravel/reverb](https://github.com/laravel/reverb) | `1.11.1` | `1.12.0` | | [predis/predis](https://github.com/predis/predis) | `3.6.0` | `3.7.0` | | [rap2hpoutre/fast-excel](https://github.com/rap2hpoutre/fast-excel) | `5.16.0` | `5.17.0` | | [spatie/laravel-permission](https://github.com/spatie/laravel-permission) | `8.3.0` | `8.3.2` | | [srmklive/paypal](https://github.com/blendbyte/laravel-paypal) | `3.1.1` | `3.2.0` | | [barryvdh/laravel-debugbar](https://github.com/fruitcake/laravel-debugbar) | `4.4.3` | `4.4.4` | | [larastan/larastan](https://github.com/larastan/larastan) | `3.11.0` | `3.13.1` | | [laravel/pint](https://github.com/laravel/pint) | `1.30.5` | `1.32.1` | | [laravel/sail](https://github.com/laravel/sail) | `1.67.0` | `1.69.0` | | [phpstan/phpstan](https://github.com/phpstan/phpstan-phar-composer-source) | `2.2.12` | `2.3.2` | | [spatie/laravel-ignition](https://github.com/spatie/laravel-ignition) | `2.12.0` | `2.12.1` | Updates `aws/aws-sdk-php` from 3.394.6 to 3.402.0 - [Release notes](https://github.com/aws/aws-sdk-php/releases) - [Commits](aws/aws-sdk-php@3.394.6...3.402.0) Updates `ezyang/htmlpurifier` from 4.19.0 to 4.19.1 - [Release notes](https://github.com/ezyang/htmlpurifier/releases) - [Changelog](https://github.com/ezyang/htmlpurifier/blob/master/NEWS) - [Commits](ezyang/htmlpurifier@v4.19.0...v4.19.1) Updates `intervention/image` from 4.3.2 to 4.4.0 - [Release notes](https://github.com/Intervention/image/releases) - [Commits](Intervention/image@4.3.2...4.4.0) Updates `laravel/framework` from 13.30.1 to 13.38.0 - [Release notes](https://github.com/laravel/framework/releases) - [Changelog](https://github.com/laravel/framework/blob/13.x/CHANGELOG.md) - [Commits](laravel/framework@v13.30.1...v13.38.0) Updates `laravel/horizon` from 5.48.3 to 5.50.1 - [Release notes](https://github.com/laravel/horizon/releases) - [Changelog](https://github.com/laravel/horizon/blob/5.x/CHANGELOG.md) - [Commits](laravel/horizon@v5.48.3...v5.50.1) Updates `laravel/octane` from 2.19.1 to 2.22.0 - [Release notes](https://github.com/laravel/octane/releases) - [Changelog](https://github.com/laravel/octane/blob/2.x/CHANGELOG.md) - [Commits](laravel/octane@v2.19.1...v2.22.0) Updates `laravel/reverb` from 1.11.1 to 1.12.0 - [Release notes](https://github.com/laravel/reverb/releases) - [Changelog](https://github.com/laravel/reverb/blob/main/CHANGELOG.md) - [Commits](laravel/reverb@v1.11.1...v1.12.0) Updates `predis/predis` from 3.6.0 to 3.7.0 - [Release notes](https://github.com/predis/predis/releases) - [Changelog](https://github.com/predis/predis/blob/main/CHANGELOG.md) - [Commits](predis/predis@v3.6.0...v3.7.0) Updates `rap2hpoutre/fast-excel` from 5.16.0 to 5.17.0 - [Release notes](https://github.com/rap2hpoutre/fast-excel/releases) - [Changelog](https://github.com/rap2hpoutre/fast-excel/blob/master/CHANGELOG.md) - [Commits](rap2hpoutre/fast-excel@v5.16.0...v5.17.0) Updates `spatie/laravel-permission` from 8.3.0 to 8.3.2 - [Release notes](https://github.com/spatie/laravel-permission/releases) - [Changelog](https://github.com/spatie/laravel-permission/blob/main/CHANGELOG.md) - [Commits](spatie/laravel-permission@8.3.0...8.3.2) Updates `srmklive/paypal` from 3.1.1 to 3.2.0 - [Release notes](https://github.com/blendbyte/laravel-paypal/releases) - [Commits](blendbyte/laravel-paypal@3.1.1...3.2.0) Updates `barryvdh/laravel-debugbar` from 4.4.3 to 4.4.4 - [Release notes](https://github.com/fruitcake/laravel-debugbar/releases) - [Changelog](https://github.com/fruitcake/laravel-debugbar/blob/master/CHANGELOG.md) - [Commits](fruitcake/laravel-debugbar@v4.4.3...v4.4.4) Updates `larastan/larastan` from 3.11.0 to 3.13.1 - [Release notes](https://github.com/larastan/larastan/releases) - [Changelog](https://github.com/larastan/larastan/blob/3.x/RELEASE.md) - [Commits](larastan/larastan@v3.11.0...v3.13.1) Updates `laravel/pint` from 1.30.5 to 1.32.1 - [Release notes](https://github.com/laravel/pint/releases) - [Changelog](https://github.com/laravel/pint/blob/main/CHANGELOG.md) - [Commits](laravel/pint@v1.30.5...v1.32.1) Updates `laravel/sail` from 1.67.0 to 1.69.0 - [Release notes](https://github.com/laravel/sail/releases) - [Changelog](https://github.com/laravel/sail/blob/1.x/CHANGELOG.md) - [Commits](laravel/sail@v1.67.0...v1.69.0) Updates `phpstan/phpstan` from 2.2.12 to 2.3.2 - [Commits](https://github.com/phpstan/phpstan-phar-composer-source/commits) Updates `spatie/laravel-ignition` from 2.12.0 to 2.12.1 - [Release notes](https://github.com/spatie/laravel-ignition/releases) - [Changelog](https://github.com/spatie/laravel-ignition/blob/main/CHANGELOG.md) - [Commits](spatie/laravel-ignition@2.12.0...2.12.1) --- updated-dependencies: - dependency-name: aws/aws-sdk-php dependency-version: 3.402.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: php-minor - dependency-name: ezyang/htmlpurifier dependency-version: 4.19.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: php-minor - dependency-name: intervention/image dependency-version: 4.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: php-minor - dependency-name: laravel/framework dependency-version: 13.38.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: php-minor - dependency-name: laravel/horizon dependency-version: 5.50.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: php-minor - dependency-name: laravel/octane dependency-version: 2.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: php-minor - dependency-name: laravel/reverb dependency-version: 1.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: php-minor - dependency-name: predis/predis dependency-version: 3.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: php-minor - dependency-name: rap2hpoutre/fast-excel dependency-version: 5.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: php-minor - dependency-name: spatie/laravel-permission dependency-version: 8.3.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: php-minor - dependency-name: srmklive/paypal dependency-version: 3.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: php-minor - dependency-name: barryvdh/laravel-debugbar dependency-version: 4.4.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: php-minor - dependency-name: larastan/larastan dependency-version: 3.13.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: php-minor - dependency-name: laravel/pint dependency-version: 1.32.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: php-minor - dependency-name: laravel/sail dependency-version: 1.69.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: php-minor - dependency-name: phpstan/phpstan dependency-version: 2.3.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: php-minor - dependency-name: spatie/laravel-ignition dependency-version: 2.12.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: php-minor ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-11-02T11:54:52Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update Php code labels Oct 26, 2026

dependabot Bot closed this Nov 2, 2026

dependabot Bot deleted the dependabot/composer/php-minor-28547ece85 branch November 2, 2026 11:55

Navigation Menu

Repository navigation

chore(deps)(deps): bump the php-minor group across 1 directory with 17 updates - #362

chore(deps)(deps): bump the php-minor group across 1 directory with 17 updates#362
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/composer/php-minor-28547ece85

dependabot Bot commented on behalf of github Oct 26, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Nov 2, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Version 3.402.0

Version 3.401.5

Version 3.401.4

Version 3.401.3

v4.19.1

4.19.1 (2026-09-15)

Bug Fixes

4.19.1 (2026-09-15)

Bug Fixes

4.4.0

What's Changed

4.3.5

What's Changed

New Contributors

4.3.4

What's Changed

New Contributors

4.3.3

What's Changed

New Contributors

v13.38.0

v13.37.0

v13.38.0 - 2026-10-20

v13.37.0 - 2026-10-16

v5.50.1

v5.50.0

v5.49.0

v5.50.1 - 2026-10-13

v5.50.0 - 2026-09-15

v5.49.0 - 2026-09-07

v2.22.0

v2.21.0

v2.20.0

v2.22.0 - 2026-10-14

v2.21.0 - 2026-10-05

v2.20.0 - 2026-08-23

v1.12.0

Uh oh!

dependabot Bot commented on behalf of github Nov 2, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Oct 26, 2026 •

edited

Loading