chore(deps)(deps): bump the php-minor group across 1 directory with 19 updates by dependabot[bot] · Pull Request #388 · innocommerce/innoshop

dependabot · 2026-11-09T11:55:32Z

Bumps the php-minor group with 19 updates in the / directory:

Package	From	To
aws/aws-sdk-php	`3.394.6`	`3.403.1`
ezyang/htmlpurifier	`4.19.0`	`4.19.1`
intervention/image	`4.3.2`	`4.4.1`
laravel/framework	`13.30.1`	`13.40.0`
laravel/horizon	`5.48.3`	`5.50.1`
laravel/octane	`2.19.1`	`2.23.0`
laravel/reverb	`1.11.1`	`1.12.0`
nelexa/zip	`4.0.2`	`4.1.0`
overtrue/easy-sms	`3.2.1`	`3.5.0`
predis/predis	`3.6.0`	`3.7.1`
rap2hpoutre/fast-excel	`5.16.0`	`5.18.0`
spatie/laravel-permission	`8.3.0`	`8.5.0`
srmklive/paypal	`3.1.1`	`3.2.0`
barryvdh/laravel-debugbar	`4.4.3`	`4.4.5`
larastan/larastan	`3.11.0`	`3.14.0`
laravel/pint	`1.30.5`	`1.32.1`
laravel/sail	`1.67.0`	`1.69.0`
phpstan/phpstan	`2.2.12`	`2.3.5`
spatie/laravel-ignition	`2.12.0`	`2.13.0`

Updates aws/aws-sdk-php from 3.394.6 to 3.403.1

Release notes

Sourced from aws/aws-sdk-php's releases.

Version 3.403.1

Aws\SSM - AWS Systems Manager now provides two new APIs - RegisterDefaultHostManagementConfiguration and DeregisterDefaultHostManagementConfiguration - along with a new DefaultHostManagementConfiguration CloudFormation resource type.

Aws\Glue - Adds support for user-defined functions governed by AWS Lake Formation.

Aws\EKSAuth - Added workloadIdentityProviderArn to the AssumeRoleForPodIdentity API response.

Aws\Lightsail - Marking fields as sensitive in GetInstanceAccessDetails, CreateKeyPair, DownloadDefaultKeyPair, CreateBucketAccessKey, CreateContainerServiceRegistryLogin, and GetRelationalDatabase responses.

Aws\Connect - Rules in Amazon Connect now support ending email contacts associated to a case based on case events.

Aws\Athena - Added support for Athena System Tables which writes Athena usage data to AWS S3 managed tables in Apache Iceberg format. Adds CreateSystemTableConfiguration, UpdateSystemTableConfiguration, DeleteSystemTableConfiguration, GetSystemTableConfiguration, and ListSystemTableStatuses.

Aws\DataZone - Adds support for updating OAuth 2.0 connection settings with UpdateConnection.

Aws\RAM - Adds support for using managed permission template parameters, discovering shared customer-managed permissions, and managing customer-managed permission deprecation.

Aws\AutoScaling - Amazon EC2 Auto Scaling now lets you exclude managed resources from describe API responses using the new optional IncludeManagedResources parameter. Set this parameter to false to exclude managed resources from the response. By default, managed resources are included.

Aws\ConnectCases - Amazon Connect Cases adds two Bulk Case Actions operations. BatchCreateRelatedItem adds a Comment-type related item to up to 100 cases per request, BatchUpdateCase updates fields (title, status, customer ID, custom) on up to 100 cases. Same domain, per-case success and failure results returned.

Aws\BedrockAgent - Add support for configuring searchability for metadata fields via UpdateKnowledgeBase request for Managed Knowledge Base. Once a field is marked as searchable it can be queried via query text and is factored into Managed Knowledge Base's ranking algorithm.

Aws\MediaConvert - Smart subtitling uses AWS Elemental Inference to generate captions from your content's audio, in embedded, burn-in, DVB-Sub, IMSC, SMI, SRT, teletext, TTML, or WebVTT outputs. Also fixes HEVC passthrough writing an incomplete codecs string to DASH and HLS manifests.

Version 3.403.0

Aws\AgentRegistryControl - Adds support for OAuth2 Authorization Server Metadata (RFC 8414) discovery URLs in custom JWT authorizer.

Aws\QConnect - Adds support for real-time agent assistance and self-service with Amazon Connect Global Resiliency, including cross-Region replication of supported AI agent resources and configurations.

Aws\AccountAccessRuntime - Adds SDK support for Account Access user portal operations, enabling users to list out and get credentials for role assignments configured in AWS IAM Account Access Manager.

Aws\Glue - AWS Glue Spark ETL jobs can now auto-upgrade to the latest version. Set GlueVersion to Auto, then track progress with the AutoVersionStatus field in GetJob. Use StartJobUpgradeAnalysis to approve or decline an upgrade, GetJobUpgradeAnalysis to view details, and StopJobUpgradeAnalysis to stop it.

Aws\Route53Domains - Route 53 Domains now supports restoring domains. This release adds the RestoreDomain API to self-serve domain restoration.

Aws\DataSync - Adds support for federated identity on Azure Blob Storage and object storage locations, enabling DataSync to authenticate to Azure and Google Cloud Storage using Workload Identity Federation (WIF) over OpenID Connect (OIDC) instead of stored long-lived credentials.

Aws\CloudWatchLogs - Adds account-level retention policies with dry run preview and the Essentials log group class to Amazon CloudWatch Logs

Aws\SecurityAgent - Adds support for IAM Identity Center groups as Agent Space members. CreateMembership, DeleteMembership, and ListMemberships now accept the GROUP member type. ListMemberships can filter by USER, GROUP, or ALL, and returns group display name and description.

Aws\BedrockAgentRuntime - Amazon Bedrock Managed Knowledge Base now supports an optional mediaId parameter in GetDocumentContent that you can use to retrieve images embedded in source documents.

Aws\LambdaMicrovms - AWS Lambda MicroVMs now support the x86-64 CPU architecture, which you can select in addition to ARM64 (Graviton) when launching a MicroVM.

Aws\QuickSight - Amazon QuickSight adds APIs to view account service role settings and switch to or replace a customer-managed IAM role.

Aws\AppIntegrationsService - This release adds a LastModifiedRegion field to GetApplication and ListApplications so customers can see which Region an application was last modified in.

Aws\WAFV2 - AWS WAF customers who monetize AI traffic on Web ACLs can now configure payments through connected accounts (Stripe).

Aws\SageMaker - Fixed the ImageDeleted and ImageVersionDeleted waiters to succeed on the ResourceNotFound error returned by DescribeImage and DescribeImageVersion

Aws\BedrockAgentCoreControl - Adds support for OAuth2 Authorization Server Metadata (RFC 8414) discovery URLs in custom JWT authorizer and OAuth2 credential provider configurations.

Version 3.402.6

Aws\Lambda - Stops applying the default Curl options to streamed commands such as InvokeWithResponseStream, which are served by a stream handler that rejects them.

Aws\Connect - Adds support for retrieving associated cases in contact responses. The Contact object now includes a Cases field containing case IDs and reference numbers linked to the contact.

Aws\mgn - This release adds Migration Planning artifacts as a source environment for network migration definitions, and an optional clientToken on CreateNetworkMigrationDefinition so that retried requests don't create duplicate definitions.

Aws\EMR - Added StepAdditionalInfo on DescribeStep and ListSteps to surface YARN application IDs for steps.

Aws\RDS - Adding support for copying and tagging option groups with cross-Region DB snapshot copies, in the same account or across accounts.

Aws\ECS - Amazon ECS Managed Instances now supports the json-file log driver in task definitions. Daemon task definition volumes also support logDriverVolumeConfiguration, letting managed daemons read those logs.

Aws\WorkSpaces - Add Ubuntu 24.04, Ubuntu 26.04, RHEL 9, RHEL10, Rocky 9 and Rocky 10 to OperatingSystemName and documentation update for WorkspaceProperties Protocols.

Aws\DynamoDB - Adds StartBulkPutItems, DescribeBulkOperation, ListBulkOperations, and CancelBulkOperation for asynchronously loading Amazon S3 datasets into existing DynamoDB tables.

Aws\Polly - Amazon Polly now supports tagging lexicons. Use the new TagResource, UntagResource and ListTagsForResource APIs, or add tags when creating a lexicon with PutLexicon, to organize lexicons and control access with tag-based (ABAC) IAM policies.

Aws\SecurityHub - Release Software APIs- GetSoftwareV2, GetSoftwareStatisticsV2 and GetSoftwareResourcesV2 to list software packages with aggregated resource count, get aggregated software statistics, and find the resources that contain a specific software package.

Aws\MWAAServerless - Adding support to Environment Variables in MWAA Serverless

Aws\S3Tables - Amazon S3 Tables now supports migrating AWS Glue Data Catalog tables into S3 Table buckets. This release adds the StartTableMigration, SyncTableMigration, UpdateTableMigration, CompleteTableMigration, GetTableMigration, and ListTableMigrations APIs.

Aws\TaxSettings - Adds Colombia additional information (responsibility codes, taxpayer type code, and RUT issue date) and a rejection reason (statusReason) to tax registration responses, and adds Argentina and Uruguay tax registration types.

Aws\ConnectContactLens - Rules TBAC GA (Contact Lens V1) - Adds an optional ListFilter (CategoriesAttributeFilter with OrConditions, AndCondition and TagCondition) to ListRealtimeContactAnalysisSegments. This filters matched categories by rule tags. It also adds an optional RuleId to CategoryDetails in the response.

Aws\IoTSiteWise - Adds support for an optional jobName on CreateDatasetExportJob. The jobName is returned by DescribeDatasetExportJob and ListDatasetExportJobs, making dataset export jobs easier to identify and track. If jobName is omitted, a default name is generated automatically.

Aws\ElasticBeanstalk - Adds DefaultAmiList to DescribePlatformVersion to return the default AMI for each processor architecture that a platform version supports.

Aws\EC2 - Add the Unsupported SupportabilityScore to GetCapacityManagerSupportabilityScores.

Aws\MarketplaceDiscovery - GetListing and SearchListings APIs now return G2 and PeerSpot review sources in review summaries.

... (truncated)

Commits

608a2c7 3.403.1 release
1fe5687 Update models for release
e4a3b26 restrict pr build workflow to master branch (#3403)
effd010 3.403.0 release
5f23c98 Update models for release
237d6b5 3.402.6 release
a0e988b Update models for release
6600943 Revert "feat(retries): make standard the default retry mode" (#3400)
22e9350 Make standard the default retry mode
74cf821 bugfix: skip default Curl options for streamed Lambda commands (#3346)
Additional commits viewable in compare view

Updates ezyang/htmlpurifier from 4.19.0 to 4.19.1

Release notes

Sourced from ezyang/htmlpurifier's releases.

v4.19.1

4.19.1 (2026-09-15)

Bug Fixes

"Passing null to parameter" deprecation in Lexer.php when Core.NormalizeNewlines is false (#490) (67085e6)

gate chmod on mkdir success, best-effort only (a2de031)

Improve compatibility with PHP 8.5 (#484) (c93715e), closes #476 #483

Changelog

Sourced from ezyang/htmlpurifier's changelog.

4.19.1 (2026-09-15)

Bug Fixes

"Passing null to parameter" deprecation in Lexer.php when Core.NormalizeNewlines is false (#490) (67085e6)

gate chmod on mkdir success, best-effort only (a2de031)

Improve compatibility with PHP 8.5 (#484) (c93715e), closes #476 #483

Commits

5e05391 chore(release): 4.19.1 [skip ci]
67085e6 fix: "Passing null to parameter" deprecation in Lexer.php when `Core.Normaliz...
7641f75 Merge pull request #487 from fengtan/master
a2de031 fix: gate chmod on mkdir success, best-effort only
4907507 Ensure correct permissions on directory.
c93715e fix: Improve compatibility with PHP 8.5 (#484)
See full diff in compare view

Updates intervention/image from 4.3.2 to 4.4.1

Release notes

Sourced from intervention/image's releases.

4.4.1

What's Changed

Bugfix: Return finfo media type in GD mediaTypeByBinary() by @lazerg in Intervention/image#1557

Full Changelog: Intervention/image@4.4.0...4.4.1

4.4.0

What's Changed

Bugfix: Keep resolution unit in Imagick CropModifier by @NotAFlightRisk in Intervention/image#1551

Add support for decoding images directly from Psr7 stream or response instances by @olivervogel in Intervention/image#1552

Various minor improvements by @olivervogel

Full Changelog: Intervention/image@4.3.5...4.4.0

4.3.5

What's Changed

Fix resolution unit in Imagick ResolutionModifier by @NotAFlightRisk in Intervention/image#1548

Fix transparent seam in GD RotateModifier by @nlemoine in Intervention/image#1550

Add missing native types for PHP 8.3 by @guillaume-sainthillier in Intervention/image#1549

New Contributors

@NotAFlightRisk made their first contribution in Intervention/image#1548

Full Changelog: Intervention/image@4.3.4...4.3.5

4.3.4

What's Changed

Support strip option in PngEncoder by @lazerg in Intervention/image#1535

Fix transparent pixels in GD RotateModifier by @guillaume-sainthillier in Intervention/image#1536

Skip pixel operations when rotating by 0 degrees by @guillaume-sainthillier in Intervention/image#1542

Fill new GD canvases without flood fill by @guillaume-sainthillier in Intervention/image#1540

Cache Imagick media type per image format by @guillaume-sainthillier in Intervention/image#1538

Avoid sorting and filtering in hot lookups by @guillaume-sainthillier in Intervention/image#1541

Skip coalescing single frame Imagick images by @guillaume-sainthillier in Intervention/image#1539

Fix transparent color check of GD clone background by @guillaume-sainthillier in Intervention/image#1537

Fix Imagick driver's StripMetaModifier by @olivervogel in Intervention/image#1546

New Contributors

@guillaume-sainthillier made their first contribution in Intervention/image#1536

Full Changelog: Intervention/image@4.3.3...4.3.4

4.3.3

What's Changed

... (truncated)

Commits

3a47838 Return finfo media type in GD mediaTypeByBinary() (#1557)
b671d02 Edit comment
46adde1 Refactor for better readability
d6390f2 Lower verbosity
f327c95 Improve exception messages
ddf4d84 Add support for decoding images from Psr7 stream/response (#1552)
2665d50 Switch from calling accessor to property
686fe2c Fix typo
2ae9f2e Fix typo
57624bf Fix doc blocks
Additional commits viewable in compare view

Updates laravel/framework from 13.30.1 to 13.40.0

Release notes

Sourced from laravel/framework's releases.

v13.40.0

[13.x] Fix Paginator::links() return type by @dhrupo in laravel/framework#62226

[13.x] Fix updating JSON paths with arrays and collections on MySQL and MariaDB by @xurshudyan in laravel/framework#62225

[13.x] Use the write connection in BelongsToMany createOrFirst lookup by @xurshudyan in laravel/framework#62223

[13.x] Drop check constraints when dropping columns on SQL Server by @xurshudyan in laravel/framework#62222

[13.x] Centralize + improve tests for InteractsWithData by @inxilpro in laravel/framework#62217

[13.x] Fix Redis tagged cache flush blocking Redis when flushing many tags by @MohannadElemary in laravel/framework#62215

[13.x] Qualify dropped and renamed indexes with the table schema on PostgreSQL by @xurshudyan in laravel/framework#62213

[13.x] Reconnect after losing the connection during a transaction by @xurshudyan in laravel/framework#62211

[13.x] Add missing PostgreSQL full text languages by @xurshudyan in laravel/framework#62210

[13.x] Add Queue::whenJobRunsLongerThan by @jackbayliss in laravel/framework#62141

[13.x] Fix named arguments in Cookie::queue() by @xurshudyan in laravel/framework#62246

[13.x] Fix ImageFile::default() returning a plain File rule by @Marzaan in laravel/framework#62244

[13.x] Fix pagination contracts render() return type by @dhrupo in laravel/framework#62242

[13.x] Fix SQL Server ignoring orderBy on update and delete with limit by @xurshudyan in laravel/framework#62239

[13.x] Preserve error_get_last() for suppressed errors by @xurshudyan in laravel/framework#62228

Prepare reusable development environments for Amp orbs by @DGarbs51 in laravel/framework#62231

Allow $middleware->replace() to accept an array of replacements by @ziadoz in laravel/framework#62230

[13.x] Show released jobs as released in queue:work output by @jackbayliss in laravel/framework#62180

Add $middleware->insertBefore() and $middleware->insertAfter() helper methods by @ziadoz in laravel/framework#62261

[13.x] Reconnect the Cloud log socket after a failed write by @jamesdangercarpenter in laravel/framework#62258

[13.x] Dispatch ScheduledTaskSkipped when a task already ran on another server by @jackbayliss in laravel/framework#62256

[13.x] Fix forceIndex() generating invalid SQL on SQLite for PRIMARY and multiple indexes by @tharlei in laravel/framework#62255

[13.x] Add Schedule::whenTaskRunsLongerThan by @jackbayliss in laravel/framework#62233

[13.x] Roll back to savepoint on concurrency errors in nested transactions by @xurshudyan in laravel/framework#62248

[13.x] Fix toResourceCollection() on filtered collections by @xurshudyan in laravel/framework#62266

Fix lazily loaded images not being freed until garbage collection by @tamc in laravel/framework#62265

Bump stefanzweifel/git-auto-commit-action from 7.2.0 to 7.2.1 in the github-actions group by @dependabot[bot] in laravel/framework#62288

KeyGenerateCommand: improve help message about '--show' by @valerio-bozzolan in laravel/framework#62286

[13.x] Record failed batch jobs when the model is missing by @xurshudyan in laravel/framework#62280

[13.x] Fix broadcasting to multiple encrypted Pusher channels by @xurshudyan in laravel/framework#62279

[13.x] Fix Str::remove() rejecting a Traversable subject by @Amirhf1 in laravel/framework#62278

[13.x] Fix Str::substrCount() treating offset and length as bytes by @Amirhf1 in laravel/framework#62277

[13.x] Fix withExists() and loadExists() on SQL Server by @xurshudyan in laravel/framework#62273

[13.x] Fix cursorPaginate() columns on union queries with multiple orders by @xurshudyan in laravel/framework#62272

[13.x] Fix @param types wider than the native parameter type by @dhrupo in laravel/framework#62271

[13.x] Detect QueryList.TerminateAll() as lost connection by @jackbayliss in laravel/framework#62270

[13.x] Add a strict flag to InteractsWithData by @inxilpro in laravel/framework#62254

[13.x] database fundamentals to know if a read connection has catched up to a write connection by @tpetry in laravel/framework#62198

[13.x] Fix CommandSignatureTest by @jackbayliss in laravel/framework#62295

[13.x] Fix JSON:API resource collections wrapping plain objects by @lazerg in laravel/framework#62299

[13.x] Fix: Authenticate the Concurrency Process Result Envelope to Prevent Task Output Injection by @Arr0way in laravel/framework#62297

v13.39.0

[13.x] Rebuild the phpredis client when a broken pipe surfaces as a warning by @aleedhillon in laravel/framework#62111

[13.x] Resolve view namespace hints like view locations by @fgilio in laravel/framework#62005

[13.x] feat(database): allow disabling primary key via #[Table(key: false)] by @calebdw in laravel/framework#62113

[13.x] add duration to JobAttempted event by @jackbayliss in laravel/framework#62118

[13.x] Write config, route and event cache files atomically by @xurshudyan in laravel/framework#62117

[13.x] Fix database cache lock aborting the transaction on PostgreSQL by @xurshudyan in laravel/framework#62114

... (truncated)

Changelog

Sourced from laravel/framework's changelog.

v13.40.0 - 2026-11-03

[13.x] Fix Paginator::links() return type by @dhrupo in laravel/framework#62226

[13.x] Fix updating JSON paths with arrays and collections on MySQL and MariaDB by @xurshudyan in laravel/framework#62225

[13.x] Use the write connection in BelongsToMany createOrFirst lookup by @xurshudyan in laravel/framework#62223

[13.x] Drop check constraints when dropping columns on SQL Server by @xurshudyan in laravel/framework#62222

[13.x] Centralize + improve tests for InteractsWithData by @inxilpro in laravel/framework#62217

[13.x] Fix Redis tagged cache flush blocking Redis when flushing many tags by @MohannadElemary in laravel/framework#62215

[13.x] Qualify dropped and renamed indexes with the table schema on PostgreSQL by @xurshudyan in laravel/framework#62213

[13.x] Reconnect after losing the connection during a transaction by @xurshudyan in laravel/framework#62211

[13.x] Add missing PostgreSQL full text languages by @xurshudyan in laravel/framework#62210

[13.x] Add Queue::whenJobRunsLongerThan by @jackbayliss in laravel/framework#62141

[13.x] Fix named arguments in Cookie::queue() by @xurshudyan in laravel/framework#62246

[13.x] Fix ImageFile::default() returning a plain File rule by @Marzaan in laravel/framework#62244

[13.x] Fix pagination contracts render() return type by @dhrupo in laravel/framework#62242

[13.x] Fix SQL Server ignoring orderBy on update and delete with limit by @xurshudyan in laravel/framework#62239

[13.x] Preserve error_get_last() for suppressed errors by @xurshudyan in laravel/framework#62228

Prepare reusable development environments for Amp orbs by @DGarbs51 in laravel/framework#62231

Allow $middleware->replace() to accept an array of replacements by @ziadoz in laravel/framework#62230

[13.x] Show released jobs as released in queue:work output by @jackbayliss in laravel/framework#62180

Add $middleware->insertBefore() and $middleware->insertAfter() helper methods by @ziadoz in laravel/framework#62261

[13.x] Reconnect the Cloud log socket after a failed write by @jamesdangercarpenter in laravel/framework#62258

[13.x] Dispatch ScheduledTaskSkipped when a task already ran on another server by @jackbayliss in laravel/framework#62256

[13.x] Fix forceIndex() generating invalid SQL on SQLite for PRIMARY and multiple indexes by @tharlei in laravel/framework#62255

[13.x] Add Schedule::whenTaskRunsLongerThan by @jackbayliss in laravel/framework#62233

[13.x] Roll back to savepoint on concurrency errors in nested transactions by @xurshudyan in laravel/framework#62248

[13.x] Fix toResourceCollection() on filtered collections by @xurshudyan in laravel/framework#62266

Fix lazily loaded images not being freed until garbage collection by @tamc in laravel/framework#62265

Bump stefanzweifel/git-auto-commit-action from 7.2.0 to 7.2.1 in the github-actions group by @dependabot[bot] in laravel/framework#62288

KeyGenerateCommand: improve help message about '--show' by @valerio-bozzolan in laravel/framework#62286

[13.x] Record failed batch jobs when the model is missing by @xurshudyan in laravel/framework#62280

[13.x] Fix broadcasting to multiple encrypted Pusher channels by @xurshudyan in laravel/framework#62279

[13.x] Fix Str::remove() rejecting a Traversable subject by @Amirhf1 in laravel/framework#62278

[13.x] Fix Str::substrCount() treating offset and length as bytes by @Amirhf1 in laravel/framework#62277

[13.x] Fix withExists() and loadExists() on SQL Server by @xurshudyan in laravel/framework#62273

[13.x] Fix cursorPaginate() columns on union queries with multiple orders by @xurshudyan in laravel/framework#62272

[13.x] Fix @param types wider than the native parameter type by @dhrupo in laravel/framework#62271

[13.x] Detect QueryList.TerminateAll() as lost connection by @jackbayliss in laravel/framework#62270

[13.x] Add a strict flag to InteractsWithData by @inxilpro in laravel/framework#62254

[13.x] database fundamentals to know if a read connection has catched up to a write connection by @tpetry in laravel/framework#62198

[13.x] Fix CommandSignatureTest by @jackbayliss in laravel/framework#62295

[13.x] Fix JSON:API resource collections wrapping plain objects by @lazerg in laravel/framework#62299

[13.x] Fix: Authenticate the Concurrency Process Result Envelope to Prevent Task Output Injection by @Arr0way in laravel/framework#62297

v13.39.0 - 2026-10-27

[13.x] Rebuild the phpredis client when a broken pipe surfaces as a warning by @aleedhillon in laravel/framework#62111

[13.x] Resolve view namespace hints like view locations by @fgilio in laravel/framework#62005

[13.x] feat(database): allow disabling primary key via #[Table(key: false)] by @calebdw in laravel/framework#62113

[13.x] add duration to JobAttempted event by @jackbayliss in laravel/framework#62118

... (truncated)

Commits

1449bf2 Update version to v13.40.0
c37133b [13.x] Fix: Authenticate the Concurrency Process Result Envelope to Prevent T...
1571da1 Fix JSON:API resource collections wrapping plain objects (#62299)
aa6dcc6 Update command_signatures.php (#62295)
b20bf7f Update facade docblocks
86d3106 [13.x] database fundamentals to know if a read connection has catched up to a...
c40be6a Update facade docblocks
9a484bf [13.x] Add a strict flag to InteractsWithData (#62254)
3f50fa3 add QueryList.TerminateAll to lost connection detector (#62270)
ce1e6fa Fix @param types wider than the native parameter type (#62271)
Additional commits viewable in compare view

Updates laravel/horizon from 5.48.3 to 5.50.1

Release notes

Sourced from laravel/horizon's releases.

v5.50.1

Bump moment from 2.30.1 to 2.31.0 by @dependabot[bot] in laravel/horizon#1822

Bump axios from 1.18.0 to 1.20.0 by @dependabot[bot] in laravel/horizon#1823

Bump @vue/server-renderer and vue by @dependabot[bot] in laravel/horizon#1831

Bump source-map-js from 1.2.1 to 1.2.2 by @dependabot[bot] in laravel/horizon#1830

[5.x] Fix horizon:listen ignoring glob paths with chokidar 5 by @svidskiy in laravel/horizon#1832

Bump shivammathur/setup-php from 2.37.2 to 2.40.0 in the github-actions group by @dependabot[bot] in laravel/horizon#1833

v5.50.0

Add logarithmic auto-scaling strategy by @Gummibeer in laravel/horizon#1818

Fix "Delayed Until" showing the same time as "Pushed" for interval de… by @AdilAzhariOmsan in laravel/horizon#1819

v5.49.0

Escape CSP nonce attribute value by @iliaal in laravel/horizon#1811

Bump immutable and sass by @dependabot[bot] in laravel/horizon#1814

Fix Redis Cluster tests in the CI by @laravel-o11y in laravel/horizon#1817

Allow enabling json logs in workers by @laravel-o11y in laravel/horizon#1815

Changelog

Sourced from laravel/horizon's changelog.

v5.50.1 - 2026-10-13

Bump moment from 2.30.1 to 2.31.0 by @dependabot[bot] in laravel/horizon#1822

Bump axios from 1.18.0 to 1.20.0 by @dependabot[bot] in laravel/horizon#1823

Bump @vue/server-renderer and vue by @dependabot[bot] in laravel/horizon#1831

Bump source-map-js from 1.2.1 to 1.2.2 by @dependabot[bot] in laravel/horizon#1830

[5.x] Fix horizon:listen ignoring glob paths with chokidar 5 by @svidskiy in laravel/horizon#1832

Bump shivammathur/setup-php from 2.37.2 to 2.40.0 in the github-actions group by @dependabot[bot] in laravel/horizon#1833

v5.50.0 - 2026-09-15

Add logarithmic auto-scaling strategy by @Gummibeer in laravel/horizon#1818

Fix "Delayed Until" showing the same time as "Pushed" for interval de… by @AdilAzhariOmsan in laravel/horizon#1819

v5.49.0 - 2026-09-07

Escape CSP nonce attribute value by @iliaal in laravel/horizon#1811

Bump immutable and sass by @dependabot[bot] in laravel/horizon#1814

Fix Redis Cluster tests in the CI by @laravel-o11y in laravel/horizon#1817

Allow enabling json logs in workers by @laravel-o11y in laravel/horizon#1815

Commits

9d65cae Bump shivammathur/setup-php (#1833)
88a067b Fix chokidar version check for chokidar 5 (#1832)
dbb3529 Bump source-map-js from 1.2.1 to 1.2.2 (#1830)
59b426b Bump @vue/server-renderer and vue (#1831)
5d9f804 Bump axios from 1.18.0 to 1.20.0 (#1823)
19ae653 Bump moment from 2.30.1 to 2.31.0 (#1822)
26fef6f Update CHANGELOG
009177c Compile Assets
e1f9732 Fix "Delayed Until" showing the same time as "Pushed" for interval delays (#1...
757f526 Add logarithmic auto-scaling strategy (#1818)
Additional commits viewable in compare view

Updates laravel/octane from 2.19.1 to 2.23.0

Release notes

Sourced from laravel/octane's releases.

v2.23.0

Bump shivammathur/setup-php from 2.37.2 to 2.40.0 in the github-actions group by @dependabot[bot] in laravel/octane#1173

[2.x] Bind all default listeners as singletons by @pushpak1300 in laravel/octane#1174

fix: Conflict on spiral/roadrunner blocks RoadRunner 3.0.0 by @eldario in laravel/octane#1175

[2.x] Don't replace FrankenPHP binaries outside the project root by @sabira-khan in laravel/octane#1177

[2.x] Require FrankenPHP 1.13.2 by @sabira-khan in laravel/octane#1176

[2.x] Accept RoadRunner 3.x binaries in the version check by @juanklagos in laravel/octane#1178

[2.x] Stream generator responses on FrankenPHP, Swoole, and RoadRunner by @pascalbaljet in laravel/octane#1182

[2.x] Harden generator stream responses by @pascalbaljet in laravel/octane#1183

v2.22.0

Remove security policy in favor of the org-wide default by @pushpak1300 in laravel/octane#1172

[2.x] Support Mercure 1.0 and Laravel's Mercure broadcaster with FrankenPHP by @dunglas in laravel/octane#1171

v2.21.0

[2.x] Fix redaction of authorization query parameter in FrankenPHP access logs by @m0nclous in laravel/octane#1167

[2.x] Flush once() cache when preparing for the next operation by @cristiangirlea in laravel/octane#1169

Fix stopServer() when a signal arrives before the input is bound by @jasparsteenman in laravel/octane#1170

v2.20.0

Make RoadRunner worker command configurable and absolute-path safe by @wakqasahmed in laravel/octane#1162

Changelog

Sourced from laravel/octane's changelog.

v2.23.0 - 2026-10-30

Bump shivammathur/setup-php from 2.37.2 to 2.40.0 in the github-actions group by @dependabot[bot] in laravel/octane#1173

[2.x] Bind all default listeners as singletons by @pushpak1300 in laravel/octane#1174

fix: Conflict on spiral/roadrunner blocks RoadRunner 3.0.0 by @eldario in laravel/octane#1175

[2.x] Don't replace FrankenPHP binaries outside the project root by @sabira-khan in laravel/octane#1177

[2.x] Require FrankenPHP 1.13.2 by @sabira-khan in laravel/octane#1176

[2.x] Accept RoadRunner 3.x binaries in the version check by @juanklagos in laravel/octane#1178

[2.x] Stream generator responses on FrankenPHP, Swoole, and RoadRunner by @pascalbaljet... Description has been truncated

…9 updates Bumps the php-minor group with 19 updates in the / directory: | Package | From | To | | --- | --- | --- | | [aws/aws-sdk-php](https://github.com/aws/aws-sdk-php) | `3.394.6` | `3.403.1` | | [ezyang/htmlpurifier](https://github.com/ezyang/htmlpurifier) | `4.19.0` | `4.19.1` | | [intervention/image](https://github.com/Intervention/image) | `4.3.2` | `4.4.1` | | [laravel/framework](https://github.com/laravel/framework) | `13.30.1` | `13.40.0` | | [laravel/horizon](https://github.com/laravel/horizon) | `5.48.3` | `5.50.1` | | [laravel/octane](https://github.com/laravel/octane) | `2.19.1` | `2.23.0` | | [laravel/reverb](https://github.com/laravel/reverb) | `1.11.1` | `1.12.0` | | [nelexa/zip](https://github.com/Ne-Lexa/php-zip) | `4.0.2` | `4.1.0` | | [overtrue/easy-sms](https://github.com/overtrue/easy-sms) | `3.2.1` | `3.5.0` | | [predis/predis](https://github.com/predis/predis) | `3.6.0` | `3.7.1` | | [rap2hpoutre/fast-excel](https://github.com/rap2hpoutre/fast-excel) | `5.16.0` | `5.18.0` | | [spatie/laravel-permission](https://github.com/spatie/laravel-permission) | `8.3.0` | `8.5.0` | | [srmklive/paypal](https://github.com/blendbyte/laravel-paypal) | `3.1.1` | `3.2.0` | | [barryvdh/laravel-debugbar](https://github.com/fruitcake/laravel-debugbar) | `4.4.3` | `4.4.5` | | [larastan/larastan](https://github.com/larastan/larastan) | `3.11.0` | `3.14.0` | | [laravel/pint](https://github.com/laravel/pint) | `1.30.5` | `1.32.1` | | [laravel/sail](https://github.com/laravel/sail) | `1.67.0` | `1.69.0` | | [phpstan/phpstan](https://github.com/phpstan/phpstan-phar-composer-source) | `2.2.12` | `2.3.5` | | [spatie/laravel-ignition](https://github.com/spatie/laravel-ignition) | `2.12.0` | `2.13.0` | Updates `aws/aws-sdk-php` from 3.394.6 to 3.403.1 - [Release notes](https://github.com/aws/aws-sdk-php/releases) - [Commits](aws/aws-sdk-php@3.394.6...3.403.1) Updates `ezyang/htmlpurifier` from 4.19.0 to 4.19.1 - [Release notes](https://github.com/ezyang/htmlpurifier/releases) - [Changelog](https://github.com/ezyang/htmlpurifier/blob/master/NEWS) - [Commits](ezyang/htmlpurifier@v4.19.0...v4.19.1) Updates `intervention/image` from 4.3.2 to 4.4.1 - [Release notes](https://github.com/Intervention/image/releases) - [Commits](Intervention/image@4.3.2...4.4.1) Updates `laravel/framework` from 13.30.1 to 13.40.0 - [Release notes](https://github.com/laravel/framework/releases) - [Changelog](https://github.com/laravel/framework/blob/13.x/CHANGELOG.md) - [Commits](laravel/framework@v13.30.1...v13.40.0) Updates `laravel/horizon` from 5.48.3 to 5.50.1 - [Release notes](https://github.com/laravel/horizon/releases) - [Changelog](https://github.com/laravel/horizon/blob/5.x/CHANGELOG.md) - [Commits](laravel/horizon@v5.48.3...v5.50.1) Updates `laravel/octane` from 2.19.1 to 2.23.0 - [Release notes](https://github.com/laravel/octane/releases) - [Changelog](https://github.com/laravel/octane/blob/2.x/CHANGELOG.md) - [Commits](laravel/octane@v2.19.1...v2.23.0) Updates `laravel/reverb` from 1.11.1 to 1.12.0 - [Release notes](https://github.com/laravel/reverb/releases) - [Changelog](https://github.com/laravel/reverb/blob/main/CHANGELOG.md) - [Commits](laravel/reverb@v1.11.1...v1.12.0) Updates `nelexa/zip` from 4.0.2 to 4.1.0 - [Release notes](https://github.com/Ne-Lexa/php-zip/releases) - [Commits](Ne-Lexa/php-zip@4.0.2...4.1.0) Updates `overtrue/easy-sms` from 3.2.1 to 3.5.0 - [Release notes](https://github.com/overtrue/easy-sms/releases) - [Commits](overtrue/easy-sms@3.2.1...3.5.0) Updates `predis/predis` from 3.6.0 to 3.7.1 - [Release notes](https://github.com/predis/predis/releases) - [Changelog](https://github.com/predis/predis/blob/main/CHANGELOG.md) - [Commits](predis/predis@v3.6.0...v3.7.1) Updates `rap2hpoutre/fast-excel` from 5.16.0 to 5.18.0 - [Release notes](https://github.com/rap2hpoutre/fast-excel/releases) - [Changelog](https://github.com/rap2hpoutre/fast-excel/blob/master/CHANGELOG.md) - [Commits](rap2hpoutre/fast-excel@v5.16.0...v5.18.0) Updates `spatie/laravel-permission` from 8.3.0 to 8.5.0 - [Release notes](https://github.com/spatie/laravel-permission/releases) - [Changelog](https://github.com/spatie/laravel-permission/blob/main/CHANGELOG.md) - [Commits](spatie/laravel-permission@8.3.0...8.5.0) Updates `srmklive/paypal` from 3.1.1 to 3.2.0 - [Release notes](https://github.com/blendbyte/laravel-paypal/releases) - [Commits](blendbyte/laravel-paypal@3.1.1...3.2.0) Updates `barryvdh/laravel-debugbar` from 4.4.3 to 4.4.5 - [Release notes](https://github.com/fruitcake/laravel-debugbar/releases) - [Changelog](https://github.com/fruitcake/laravel-debugbar/blob/master/CHANGELOG.md) - [Commits](fruitcake/laravel-debugbar@v4.4.3...v4.4.5) Updates `larastan/larastan` from 3.11.0 to 3.14.0 - [Release notes](https://github.com/larastan/larastan/releases) - [Changelog](https://github.com/larastan/larastan/blob/3.x/RELEASE.md) - [Commits](larastan/larastan@v3.11.0...v3.14.0) Updates `laravel/pint` from 1.30.5 to 1.32.1 - [Release notes](https://github.com/laravel/pint/releases) - [Changelog](https://github.com/laravel/pint/blob/main/CHANGELOG.md) - [Commits](laravel/pint@v1.30.5...v1.32.1) Updates `laravel/sail` from 1.67.0 to 1.69.0 - [Release notes](https://github.com/laravel/sail/releases) - [Changelog](https://github.com/laravel/sail/blob/1.x/CHANGELOG.md) - [Commits](laravel/sail@v1.67.0...v1.69.0) Updates `phpstan/phpstan` from 2.2.12 to 2.3.5 - [Commits](https://github.com/phpstan/phpstan-phar-composer-source/commits) Updates `spatie/laravel-ignition` from 2.12.0 to 2.13.0 - [Release notes](https://github.com/spatie/laravel-ignition/releases) - [Changelog](https://github.com/spatie/laravel-ignition/blob/main/CHANGELOG.md) - [Commits](spatie/laravel-ignition@2.12.0...2.13.0) --- updated-dependencies: - dependency-name: aws/aws-sdk-php dependency-version: 3.403.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: php-minor - dependency-name: barryvdh/laravel-debugbar dependency-version: 4.4.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: php-minor - dependency-name: ezyang/htmlpurifier dependency-version: 4.19.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: php-minor - dependency-name: intervention/image dependency-version: 4.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: php-minor - dependency-name: larastan/larastan dependency-version: 3.14.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: php-minor - dependency-name: laravel/framework dependency-version: 13.40.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: php-minor - dependency-name: laravel/horizon dependency-version: 5.50.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: php-minor - dependency-name: laravel/octane dependency-version: 2.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: php-minor - dependency-name: laravel/pint dependency-version: 1.32.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: php-minor - dependency-name: laravel/reverb dependency-version: 1.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: php-minor - dependency-name: laravel/sail dependency-version: 1.69.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: php-minor - dependency-name: nelexa/zip dependency-version: 4.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: php-minor - dependency-name: overtrue/easy-sms dependency-version: 3.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: php-minor - dependency-name: phpstan/phpstan dependency-version: 2.3.5 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: php-minor - dependency-name: predis/predis dependency-version: 3.7.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: php-minor - dependency-name: rap2hpoutre/fast-excel dependency-version: 5.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: php-minor - dependency-name: spatie/laravel-ignition dependency-version: 2.12.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: php-minor - dependency-name: spatie/laravel-permission dependency-version: 8.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: php-minor - dependency-name: srmklive/paypal dependency-version: 3.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: php-minor ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update Php code labels Nov 9, 2026

dependabot Bot force-pushed the dependabot/composer/php-minor-02df6e0b70 branch from a1ba3fa to 66ee607 Compare November 10, 2026 08:43

Navigation Menu

Repository navigation

chore(deps)(deps): bump the php-minor group across 1 directory with 19 updates - #388

chore(deps)(deps): bump the php-minor group across 1 directory with 19 updates#388
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/composer/php-minor-02df6e0b70

dependabot Bot commented on behalf of github Nov 9, 2026 •

edited

Loading

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Nov 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Version 3.403.1

Version 3.403.0

Version 3.402.6

v4.19.1

4.19.1 (2026-09-15)

Bug Fixes

4.19.1 (2026-09-15)

Bug Fixes

4.4.1

What's Changed

4.4.0

What's Changed

4.3.5

What's Changed

New Contributors

4.3.4

What's Changed

New Contributors

4.3.3

What's Changed

v13.40.0

v13.39.0

v13.40.0 - 2026-11-03

v13.39.0 - 2026-10-27

v5.50.1

v5.50.0

v5.49.0

v5.50.1 - 2026-10-13

v5.50.0 - 2026-09-15

v5.49.0 - 2026-09-07

v2.23.0

v2.22.0

v2.21.0

v2.20.0

v2.23.0 - 2026-10-30

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Nov 9, 2026 •

edited

Loading