chore(deps): Bump the minor-and-patch group across 1 directory with 31 updates by dependabot[bot] · Pull Request #1192 · FinAegis/core-banking-prototype-laravel

dependabot · 2026-08-10T21:48:19Z

Bumps the minor-and-patch group with 26 updates in the / directory:

Package	From	To
aws/aws-sdk-php	`3.384.7`	`3.391.1`
darkaonline/l5-swagger	`11.0.1`	`11.1.0`
durable-workflow/waterline	`1.0.16`	`1.0.17`
laravel/horizon	`5.47.2`	`5.48.2`
laravel/pennant	`1.23.0`	`1.24.0`
laravel/pulse	`1.7.4`	`1.8.0`
laravel/sanctum	`4.3.2`	`4.3.3`
laravel/scout	`11.2.0`	`11.5.0`
laravel/socialite	`5.27.0`	`5.29.0`
laravel/telescope	`5.20.0`	`5.22.0`
nuwave/lighthouse	`6.67.0`	`6.69.2`
open-telemetry/api	`1.9.0`	`1.10.0`
open-telemetry/sdk	`1.14.0`	`1.15.0`
pusher/pusher-php-server	`7.2.8`	`7.3.0`
resend/resend-php	`1.3.0`	`1.7.0`
spatie/laravel-backup	`10.3.0`	`10.3.1`
spatie/laravel-permission	`8.0.0`	`8.3.0`
stancl/tenancy	`3.10.0`	`3.10.1`
symfony/http-client	`7.4.13`	`7.4.16`
behat/behat	`3.31.0`	`3.32.0`
friendsofphp/php-cs-fixer	`3.95.5`	`3.95.18`
laravel/pint	`1.29.1`	`1.30.4`
laravel/sail	`1.62.0`	`1.65.0`
nunomaduro/collision	`8.9.4`	`8.9.5`
phpstan/phpstan	`2.2.2`	`2.2.8`
squizlabs/php_codesniffer	`4.0.1`	`4.0.4`

Updates aws/aws-sdk-php from 3.384.7 to 3.391.1

Release notes

Sourced from aws/aws-sdk-php's releases.

Version 3.391.1

Aws\Retries - Updated the opt-in retry path (AWS_NEW_RETRIES_2026) to emit SEP-compliant retry headers, honor AWS_MAX_ATTEMPTS and shared-config max_attempts, and align long-polling retry behavior with the new retry spec.

Aws\Connect - Supports updating the task template associated with in-progress task contacts using the new UpdateContactTaskTemplate API. This enables supervisors and developers to dynamically reassign task templates without creating a new task.

Aws\MediaTailor - Added support for inserting ads via the VAST Ad Buffet standard. You can now configure MediaTailor to insert ads in sequence order using the AdSequencingMode setting in your playback configuration. Standalone ads are used as fallbacks when a sequenced ad is unavailable.

Aws\EC2 - This release adds support for BGP route protection in Amazon VPC IP Address Manager (IPAM), including route discovery, RPKI route protection findings, and delegated RPKI (Internet Registry Associations, routing policy registrations, and ROA management) for BYOIP prefixes.

Aws\SageMaker - Amazon SageMaker adds maintenance lifecycle statuses for Notebook Instances

Aws\MediaPackageV2 - StreamNameOutputMode - a new optional field on MediaPackageV2 OriginEndpoints that lets customers choose whether egress manifests use numeric stream indices (default) or encoder-assigned stream names from the input

Aws\SecurityAgent - Added enableEmailMfa input field on Actor to enable email-based MFA during penetration tests. When enabled, a server-generated mfaForwardingAddress is returned. Set up a forwarding rule in your email provider to forward MFA emails to this address so the agent can complete email-based MFA login flows

Aws\HealthLake - Adds provenanceEnabled to StartFHIRImportJob

Aws\Amplify - Increased the maximum allowed length of the oauthToken parameter in the CreateApp and UpdateApp APIs to support longer OAuth tokens issued by third-party Git providers.

Version 3.391.0

Aws\S3 - AWS Backup now lets you create read-only access points for Amazon S3 recovery points, enabling you to access backup data using S3 APIs without initiating a restore.

Aws\MarketplaceDiscovery - GetOfferTerms now returns netPaymentTerm in offerTerms, specifying payment due period after invoice date. The paymentDuePeriod field uses ISO 8601 duration format (e.g., "P30D" for net 30 days). This is a backward-compatible addition. See API documentation for full structure and examples.

Aws\EC2 - Adds a new optional IncludeLocalZones parameter to the Spot Placement Score API that defaults to false. When set to true, the Spot Placement Score API will consider the relevant Local Zones with Spot capacity when computing the Spot Placement Score.

Aws\AutoScaling - EC2 Auto Scaling now supports being managed by other AWS services via the operator field.

Aws\BedrockAgentCore - Add support for capacity provider sessions in Amazon Bedrock AgentCore. Customers can now delete an active session running on a runtime instance launched through their capacity provider.

Aws\Kafka - MSK Clusters can now deliver authorizer logs alongside broker logs to the destinations defined by you

Aws\AgentRegistry - Agent Registry's Public Preview release

Aws\MarketplaceAgreement - GetAgreementTerms now returns a new term variant in AcceptedTerm, netPaymentTerm, with a paymentDuePeriod field (example "P30D").

Aws\MediaTailor - AWS Elemental MediaTailor now supports concurrent function execution. The new Concurrent Executor function type runs multiple independent child functions in parallel within a single lifecycle hook, reducing pipeline latency to the duration of the slowest call instead of the sum of all calls.

Aws\Backup - AWS Backup now lets you create read-only access points for Amazon S3 recovery points, enabling you to access backup data using S3 APIs without initiating a restore.

Aws\AgentRegistryControl - Agent Registry's Public Preview release

Aws\SageMaker - Releases new Model Customization SequenceLength parameter for Training and g7 instance types for Training and Processing.

Aws\DeviceFarm - Adds support for service generated insights across runs, jobs, and tests.

Aws\BedrockAgentCoreControl - Add support for Gateway rate limits and Runtime instances in Amazon Bedrock AgentCore. Customers can now configure rate limits scoped to control request rates, token consumption rates, and active connection rates. Customers can now create capacity providers to launch runtimes on their EC2 instances.

Aws\SecurityHub - Security Hub is adding a new public API, ListFreeTrialStatusesV2 to describe the free trial statuses of the Security Hub service and its opt-in features.

Aws\GameLift - Adds support for C8a, C8i, C9g, M8a, M8i, and M9g EC2 instance type families for managed EC2 and container fleets. Also adds explicit anchors on most string regexes.

Aws\SocialMessaging - Add support for WhatsApp Conversions APIs.

Aws\CloudWatchLogs - This release adds index category support to the CloudWatch Logs DescribeFieldIndexes API. Customers can filter and identify DEFAULT, CUSTOM, AUTO, and INACTIVE field indexes.

Version 3.390.5

Aws\ECS - New enum values added for Agent Connectivity issues

Aws\ACMPCA - Private Certificate Authority service now supports RSASSA-PSS signing algorithm.

Aws\Glue - Added the PutDataCatalogExportConfiguration to export Glue Data Catalog metadata to systems tables stored in S3 Tables.

Aws\BedrockAgentCoreControl - Adding support for fine-grained access control for AgentCore Memory through managed AgentCore Gateway HTTP Connectors.

Aws\Deadline - AWS Deadline Cloud now reports persistent volume costs alongside compute and license costs. Customers can view per-fleet storage costs in Usage Explorer by selecting the Usage Type grouping, helping them better understand the costs of their infrastructure.

Version 3.390.4

Aws\DynamoDB - Vector indexes are a type of index in Amazon DynamoDB that enable similarity search on vector embedding stored in your table items. Vector indexes use approximate nearest neighbor search to find items whose vectors are most similar to a query vector that you provide.

Aws\Organizations - Improved accuracy of CloudTrail event documentation for AWS Organizations membership operations.

Aws\SSOAdmin - AWS IAM Identity Center now lets you create organization-level instances without enabling multi-account permissions. You can enable multi-account permissions during instance creation or later via console or API, which then provisions the necessary service-linked roles.

Aws\Inspector2 - Adding Azure SBOM export capability.

Aws\EC2 - Amazon EC2 now supports Application Status Checks, a new status check that monitors your application's health through configurable HTTP(S) paths and ports, so you can detect and automatically respond to application-level impairments.

Aws\Connect - Amazon Connect Customer now supports up to 50 attachments per email, increased from the previous limit of 10. The individual maximum attachment size limit of 20 MB and the total email size limit of 25 MB still hold true.

Aws\WorkSpaces - Added ClientExperiencePolicy to ClientProperties object for ModifyClientProperties and DescribeClientProperties APIs.

Aws\PartnerCentralSelling - Partners can now create leads with only 5 required fields and free-text values for all other fields, reducing import friction. Engagement invitations now include enrichment data (propensity scores, lead readiness) directly in the response.

Aws\DSQL - UpdateCluster now checks the RemovePeerCluster permission on the specific cluster being removed, not a wildcard and docs now clarify how to set kmsEncryptionKey so the cluster uses the AWS-owned key.

Aws\IAM - Updating endpoint generation logic

... (truncated)

Commits

90920ce 3.391.1 release
4051cdf Update models for release
a119dbe bugfix: retry behavior (#3334)
7dbeb86 3.391.0 release
89fe769 Update models for release
c56ba4a 3.390.5 release
9a205dd Update models for release
51115bd 3.390.4 release
f0d52a3 Update models for release
8026ec3 3.390.3 release
Additional commits viewable in compare view

Updates darkaonline/l5-swagger from 11.0.1 to 11.1.0

Release notes

Sourced from darkaonline/l5-swagger's releases.

11.1.0

What's Changed

Add new scan option generator_factory by @DerManoMann in DarkaOnLine/L5-Swagger#668

Support positioning custom processors relative to any existing processor by @DerManoMann in DarkaOnLine/L5-Swagger#670

New Contributors

@DerManoMann made their first contribution in DarkaOnLine/L5-Swagger#668

Full Changelog: DarkaOnLine/L5-Swagger@11.0.1...11.1.0

Commits

110b594 Improve tests
8a27072 Support positioning custom processors relative to any existing processor (#670)
bfc780b Add new scan option generator_factory (#668)
See full diff in compare view

Updates durable-workflow/waterline from 1.0.16 to 1.0.17

Release notes

Sourced from durable-workflow/waterline's releases.

1.0.17

durable-workflow/waterline 1.0.17

Release artifact for Durable Workflow. Source commit: 0980f3955ec47668c2ece6e292b7d0c5da31711b

Commits

0980f39 [defect] WaterlineApplicationServiceProvider is not registered, causing /wate...
ce41d2f Pause Screenshots scheduled run during sample-app L13/DW2 upgrade
cd6ba9c Sync theme-swap CSS URL fix from v2 to master
7e29792 Sync browser-diag path fix from v2
391f79a Sync browser-level CSS diagnostic from v2
c340908 Sync CSS response diagnostics from v2 to master
ce59a08 Sync APP_URL + link diagnostic from v2 to master
0de3860 Sync screenshots CI asset checks from v2 to master
4e64f2f Sync APP_KEY fix from v2 to master
756f9bb Sync screenshots CI composer resolution fix from v2 to master
Additional commits viewable in compare view

Updates durable-workflow/workflow from 1.0.76 to 1.0.79

Release notes

Sourced from durable-workflow/workflow's releases.

1.0.79

What's Changed

Speed up Psalm analysis of activity and workflow jobs by @rmcdaniel in durable-workflow/workflow#402

Full Changelog: durable-workflow/workflow@1.0.78...1.0.79

1.0.78

What's Changed

Fix route:cache failing on signal webhook routes (Serialization of 'ReflectionMethod' is not allowed) by @jakobkollerup in durable-workflow/workflow#398

New Contributors

@jakobkollerup made their first contribution in durable-workflow/workflow#398

Full Changelog: durable-workflow/workflow@1.0.77...1.0.78

1.0.77

What's Changed

Fix getVersion() shifting replay on pre-existing workflow history by @rmcdaniel in durable-workflow/workflow#396

Full Changelog: durable-workflow/workflow@1.0.76...1.0.77

Commits

4959d4c Reduce Psalm Queueable reanalysis (#402)
d502e26 Fix route:cache failing on signal webhook routes (#398)
530c376 Update README shields for package name change (#397)
c3f5312 Fix getVersion() shifting replay on pre-existing workflow history (#396)
ea877f6 Update sponsors in README (#392)
0342b01 Add 'Translate a Book' sponsor link to README (#385)
See full diff in compare view

Updates laravel/framework from 12.62.0 to 12.65.0

Release notes

Sourced from laravel/framework's releases.

v12.65.0

[12.x] Prevent fatal errors when logging deprecations fails by @GrahamCampbell in laravel/framework#60907

[12.x] Fix Factory::insert() with a count of zero by @alies-dev in laravel/framework#60911

[12.x] Fix schedule:list timezone conversion for range, step, and wildcard cron expressions by @xiCO2k in laravel/framework#60913

[12.x] Fix getMigrationBatches return type annotation by @wouterj in laravel/framework#60973

v12.64.0

[12.x] Enum as queue overlap key by @finagin in laravel/framework#60722

[12.x] Add capitalize parameter to Stringable::initials() by @irabbi360 in laravel/framework#60741

v12.63.0

[12.x] Add new error messages for detecting lost connections by @mfn in laravel/framework#60472

[12.x] Ability to refresh cache locks by @bytestream in laravel/framework#58349

[12.x] Guard JsonSchema deserializer against unbounded $ref expansion by @pushpak1300 in laravel/framework#60524

[12.x] Fix Postgres whereDate/whereTime crash when column is Expression by @irabbi360 in laravel/framework#60540

[12.x] Pop managed queue jobs from the cloud-agent instead of SQS by @kieranbrown in laravel/framework#60660

[12.x] Terminate default style value with a semicolon in ComponentAttributeBag::merge() by @Amirhf1 in laravel/framework#60665

Commits

99a8fb3 Update version to v12.65.0
5839f3b fix url verification logic
01fd8c8 [12.x] Fix getMigrationBatches return type annotation (#60973)
40e7c23 wip (#60913)
16a974d Fix Factory::insert() with a count of zero (#60911)
78d12bd [12.x] Prevent fatal errors when logging deprecations fails (#60907)
0088258 Update CHANGELOG
727a8ea Update version to v12.64.0
4a92cd3 [12.x] Add capitalize parameter to Stringable::initials() (#60741)
5207516 [12.x] Enum as queue overlap key (#60722)
Additional commits viewable in compare view

Updates laravel/horizon from 5.47.2 to 5.48.2

Release notes

Sourced from laravel/horizon's releases.

v5.48.2

Bump axios from 1.16.0 to 1.18.0 by @dependabot[bot] in laravel/horizon#1796

[5.x] Fix Laravel\Horizon\RedisQueue::later() usage on Laravel 12.10 and lower. by @crynobone in laravel/horizon#1798

[5.x] Fix horizon:clear-metrics clearing nothing on phpredis 6.1+ by @ademola-emmanuel in laravel/horizon#1801

Bump actions/checkout from 7.0.0 to 7.0.1 in the github-actions group by @dependabot[bot] in laravel/horizon#1805

Bump postcss from 8.5.13 to 8.5.23 by @dependabot[bot] in laravel/horizon#1803

v5.48.1

Full Changelog: laravel/horizon@v5.48.0...v5.48.1

v5.48.0

Add Dependabot cooldown of 5 days by @nunomaduro in laravel/horizon#1780

Enable Dependabot auto-merge by @nunomaduro in laravel/horizon#1781

Bump shivammathur/setup-php from 2.37.1 to 2.37.2 in the github-actions group by @dependabot[bot] in laravel/horizon#1784

Add registerDevCommands helper by @joetannenbaum in laravel/horizon#1786

Bump form-data from 4.0.5 to 4.0.6 by @dependabot[bot] in laravel/horizon#1787

Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group by @dependabot[bot] in laravel/horizon#1788

Auto register dev commands by @joetannenbaum in laravel/horizon#1789

Fix dashboard "Max Runtime"/"Max Throughput" picking arbitrary queue by @laravel-o11y in laravel/horizon#1791

Add option to set a CSP nonce for use with style and script tags by @sgilberg in laravel/horizon#1792

Adjust CSP test for Laravel <=10 support by @sgilberg in laravel/horizon#1794

Changelog

Sourced from laravel/horizon's changelog.

v5.48.2 - 2026-07-27

Bump axios from 1.16.0 to 1.18.0 by @dependabot[bot] in laravel/horizon#1796

[5.x] Fix Laravel\Horizon\RedisQueue::later() usage on Laravel 12.10 and lower. by @crynobone in laravel/horizon#1798

[5.x] Fix horizon:clear-metrics clearing nothing on phpredis 6.1+ by @ademola-emmanuel in laravel/horizon#1801

Bump actions/checkout from 7.0.0 to 7.0.1 in the github-actions group by @dependabot[bot] in laravel/horizon#1805

Bump postcss from 8.5.13 to 8.5.23 by @dependabot[bot] in laravel/horizon#1803

v5.48.1 - 2026-07-20

Full Changelog: laravel/horizon@v5.48.0...v5.48.1

v5.48.0 - 2026-07-17

Add Dependabot cooldown of 5 days by @nunomaduro in laravel/horizon#1780

Enable Dependabot auto-merge by @nunomaduro in laravel/horizon#1781

Bump shivammathur/setup-php from 2.37.1 to 2.37.2 in the github-actions group by @dependabot[bot] in laravel/horizon#1784

Add registerDevCommands helper by @joetannenbaum in laravel/horizon#1786

Bump form-data from 4.0.5 to 4.0.6 by @dependabot[bot] in laravel/horizon#1787

Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group by @dependabot[bot] in laravel/horizon#1788

Auto register dev commands by @joetannenbaum in laravel/horizon#1789

Fix dashboard "Max Runtime"/"Max Throughput" picking arbitrary queue by @laravel-o11y in laravel/horizon#1791

Add option to set a CSP nonce for use with style and script tags by @sgilberg in laravel/horizon#1792

Adjust CSP test for Laravel <=10 support by @sgilberg in laravel/horizon#1794

Commits

2ebe3cb Bump postcss from 8.5.13 to 8.5.23 (#1803)
6a1b8f5 Bump actions/checkout from 7.0.0 to 7.0.1 in the github-actions group (#1805)
4f57937 [5.x] Fix horizon:clear-metrics clearing nothing on phpredis 6.1+ (#1801)
e1d4f63 [5.x] Fix Laravel\Horizon\RedisQueue::later() usage on Laravel 12.10 (#1798)
60e9d13 Bump axios from 1.16.0 to 1.18.0 (#1796)
8a24448 Update CHANGELOG
7953b21 disable queue
aa32708 Update CHANGELOG
e4951dc Adjust CSP test for Laravel <=10 support (#1794)
b9d256c Add option to set a CSP nonce for use with style and script tags (#1792)
Additional commits viewable in compare view

Updates laravel/pennant from 1.23.0 to 1.24.0

Release notes

Sourced from laravel/pennant's releases.

v1.24.0

Pin GitHub Actions to commit SHAs and add Dependabot config by @joetannenbaum in laravel/pennant#169

Bump shivammathur/setup-php from 2.37.0 to 2.37.1 in the github-actions group by @dependabot[bot] in laravel/pennant#170

GitHub Actions hardening by @nunomaduro in laravel/pennant#171

Add Dependabot cooldown of 5 days by @nunomaduro in laravel/pennant#172

Enable Dependabot auto-merge by @nunomaduro in laravel/pennant#173

Bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions group by @dependabot[bot] in laravel/pennant#174

Bump shivammathur/setup-php from 2.37.1 to 2.37.2 in the github-actions group by @dependabot[bot] in laravel/pennant#175

Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group by @dependabot[bot] in laravel/pennant#176

[1.x] Feat: PHP Enums by @devajmeireles in laravel/pennant#177

Changelog

Sourced from laravel/pennant's changelog.

v1.24.0 - 2026-06-28

Pin GitHub Actions to commit SHAs and add Dependabot config by @joetannenbaum in laravel/pennant#169

Bump shivammathur/setup-php from 2.37.0 to 2.37.1 in the github-actions group by @dependabot[bot] in laravel/pennant#170

GitHub Actions hardening by @nunomaduro in laravel/pennant#171

Add Dependabot cooldown of 5 days by @nunomaduro in laravel/pennant#172

Enable Dependabot auto-merge by @nunomaduro in laravel/pennant#173

Bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions group by @dependabot[bot] in laravel/pennant#174

Bump shivammathur/setup-php from 2.37.1 to 2.37.2 in the github-actions group by @dependabot[bot] in laravel/pennant#175

Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group by @dependabot[bot] in laravel/pennant#176

[1.x] Feat: PHP Enums by @devajmeireles in laravel/pennant#177

Commits

b99fbc8 Update facade docblocks
d68fc46 [1.x] Feat: PHP Enums (#177)
83f7664 Update facade docblocks
bb99129 Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group (#176)
58bc85d Bump shivammathur/setup-php in the github-actions group (#175)
ceac8ad Bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions group (#174)
328d854 Update facade docblocks
d8d4f19 Enable Dependabot auto-merge (#173)
4380cc2 Fix code styling
7b4b3d2 Add Dependabot cooldown of 5 days (#172)
Additional commits viewable in compare view

Updates laravel/pulse from 1.7.4 to 1.8.0

Release notes

Sourced from laravel/pulse's releases.

v1.8.0

Add Dependabot cooldown of 5 days by @nunomaduro in laravel/pulse#519

Enable Dependabot auto-merge by @nunomaduro in laravel/pulse#521

Bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions group by @dependabot[bot] in laravel/pulse#522

Bump shivammathur/setup-php from 2.37.1 to 2.37.2 in the github-actions group by @dependabot[bot] in laravel/pulse#524

Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group by @dependabot[bot] in laravel/pulse#525

Bump stefanzweifel/git-auto-commit-action from 7.1.0 to 7.2.0 in the github-actions group by @dependabot[bot] in laravel/pulse#527

[1.x] Test Improvements by @crynobone in laravel/pulse#531

Bump actions/checkout from 7.0.0 to 7.0.1 in the github-actions group by @dependabot[bot] in laravel/pulse#534

Bump brace-expansion and sucrase by @dependabot[bot] in laravel/pulse#532

Bump postcss from 8.5.15 to 8.5.23 by @dependabot[bot] in laravel/pulse#533

[1.x] Use PHPStan 2 by @crynobone in laravel/pulse#530

[1.x] Remove userinfo credential from slow outgoing requests by @crynobone in laravel/pulse#529

Changelog

Sourced from laravel/pulse's changelog.

v1.8.0 - 2026-07-29

Add Dependabot cooldown of 5 days by @nunomaduro in laravel/pulse#519

Enable Dependabot auto-merge by @nunomaduro in laravel/pulse#521

Bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions group by @dependabot[bot] in laravel/pulse#522

Bump shivammathur/setup-php from 2.37.1 to 2.37.2 in the github-actions group by @dependabot[bot] in laravel/pulse#524

Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group by @dependabot[bot] in laravel/pulse#525

Bump stefanzweifel/git-auto-commit-action from 7.1.0 to 7.2.0 in the github-actions group by @dependabot[bot] in laravel/pulse#527

[1.x] Test Improvements by @crynobone in laravel/pulse#531

Bump actions/checkout from 7.0.0 to 7.0.1 in the github-actions group by @dependabot[bot] in laravel/pulse#534

Bump brace-expansion and sucrase by @dependabot[bot] in laravel/pulse#532

Bump postcss from 8.5.15 to 8.5.23 by @dependabot[bot] in laravel/pulse#533

[1.x] Use PHPStan 2 by @crynobone in laravel/pulse#530

[1.x] Remove userinfo credential from slow outgoing requests by @crynobone in laravel/pulse#529

Commits

4425bf1 [1.x] Remove userinfo credential from slow outgoing requests (#529)
80ed018 [1.x] Use PHPStan 2 (#530)
bc4e7bc Bump postcss from 8.5.15 to 8.5.23 (#533)
8038009 Bump brace-expansion and sucrase (#532)
464a540 Bump actions/checkout from 7.0.0 to 7.0.1 in the github-actions group (#534)
0d7ae4c [1.x] Test Improvements (#531)
425b3e8 Bump stefanzweifel/git-auto-commit-action in the github-actions group (#527)
db2b0e2 Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group (#525)
7178df1 Bump shivammathur/setup-php in the github-actions group (#524)
f005539 Bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions group (#522)
Additional commits viewable in compare view

Updates laravel/sanctum from 4.3.2 to 4.3.3

Release notes

Sourced from laravel/sanctum's releases.

v4.3.3

Pin GitHub Actions to commit SHAs and add Dependabot config by @joetannenbaum in laravel/sanctum#598

Bump shivammathur/setup-php from 2.37.0 to 2.37.1 in the github-actions group by @dependabot[bot] in laravel/sanctum#602

Pin pull requests and issues workflows to latest laravel/.github by @nunomaduro in laravel/sanctum#605

Add Dependabot cooldown of 5 days by @nunomaduro in laravel/sanctum#606

Enable Dependabot auto-merge by @nunomaduro in laravel/sanctum#610

Bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions group by @dependabot[bot] in laravel/sanctum#611

Bump shivammathur/setup-php from 2.37.1 to 2.37.2 in the github-actions group by @dependabot[bot] in laravel/sanctum#612

Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group by @dependabot[bot] in laravel/sanctum#613

Changelog

Sourced from laravel/sanctum's changelog.

v4.3.3 - 2026-06-23

Pin GitHub Actions to commit SHAs and add Dependabot config by @joetannenbaum in laravel/sanctum#598

Bump shivammathur/setup-php from 2.37.0 to 2.37.1 in the github-actions group by @dependabot[bot] in laravel/sanctum#602

Pin pull requests and issues workflows to latest laravel/.github by @nunomaduro in laravel/sanctum#605

Add Dependabot cooldown of 5 days by @nunomaduro in laravel/sanctum#606

Enable Dependabot auto-merge by @nunomaduro in laravel/sanctum#610

Bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions group by @dependabot[bot] in laravel/sanctum#611

Bump shivammathur/setup-php from 2.37.1 to 2.37.2 in the github-actions group by @dependabot[bot] in laravel/sanctum#612

Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group by @dependabot[bot] in laravel/sanctum#613

Commits

fee27a5 Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group (#613)
56d3244 use strict comparison
d8685e5 Bump shivammathur/setup-php in the github-actions group (#612)
6379253 Bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions group (#611)
8dd31a2 Enable Dependabot auto-merge (#610)
334353d Update dependabot.yml
634348c Add Dependabot cooldown of 5 days (#606)
bfe1fb1 Merge pull request #605 from laravel/chore/pin-reusable-workflows-latest
e1cda0e Pin pull requests and issues workflows to latest laravel/.github
596ee55 Bump shivammathur/setup-php in the github-actions group (#602)
Additional commits viewable in compare view

Updates laravel/scout from 11.2.0 to 11.5.0

Release notes

Sourced from laravel/scout's releases.

v11.5.0

Fix boolean and inequality Algolia filters by @edwei06 in laravel/scout#1005

Bump actions/checkout from 7.0.0 to 7.0.1 in the github-actions group by @dependabot[bot] in laravel/scout#1006

v11.4.0

Bump shivammathur/setup-php from 2.37.1 to 2.37.2 in the github-actions group by @dependabot[bot] in laravel/scout#999

Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group by @dependabot[bot] in laravel/scout#1000

Mark Scout jobs as failed on timeout by default by @Bramvzw in laravel/scout#1002

[11.x] Add ability to adjust scout:queue-import order via --order=desc option by @stevebauman in laravel/scout#1003

v11.3.0

Pin GitHub Actions to commit SHAs and add Dependabot config by @joetannenbaum in laravel/scout#985

Bump shivammathur/setup-php from 2.37.0 to 2.37.1 in the github-actions group by @dependabot[bot] in laravel/scout#989

Add Dependabot cooldown of 5 days by @nunomaduro in laravel/scout#991

Enable Dependabot auto-merge by @nunomaduro in laravel/scout#995

Add opt-in unique indexing jobs to prevent Scout reindexing already queued models by @stevebauman in laravel/scout#996

Bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions group by @dependabot[bot] in laravel/scout#997

Changelog

Sourced from laravel/scout's changelog.

v11.5.0 - 2026-08-04

Fix boolean and inequality Algolia filters by @edwei06 in laravel/scout#1005

Bump actions/checkout from 7.0.0 to 7.0.1 in the github-actions group by @dependabot[bot] in laravel/scout#1006

v11.4.0 - 2026-07-21

Bump shivammathur/setup-php from 2.37.1 to 2.37.2 in the github-actions group by @dependabot[bot] in laravel/scout#999

Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group by @dependabot[bot] in laravel/scout#1000

Mark Scout jobs as failed on timeout by default by @Bramvzw in laravel/scout#1002

[11.x] Add ability to adjust scout:queue-import order via --order=desc option by @stevebauman in laravel/scout#1003

v11.3.0 - 2026-06-16

Pin GitHub Actions to commit SHAs and add Dependabot config by @joetannenbaumDescription has been truncated

…1 updates Bumps the minor-and-patch group with 26 updates in the / directory: | Package | From | To | | --- | --- | --- | | [aws/aws-sdk-php](https://github.com/aws/aws-sdk-php) | `3.384.7` | `3.391.1` | | [darkaonline/l5-swagger](https://github.com/DarkaOnLine/L5-Swagger) | `11.0.1` | `11.1.0` | | [durable-workflow/waterline](https://github.com/durable-workflow/waterline) | `1.0.16` | `1.0.17` | | [laravel/horizon](https://github.com/laravel/horizon) | `5.47.2` | `5.48.2` | | [laravel/pennant](https://github.com/laravel/pennant) | `1.23.0` | `1.24.0` | | [laravel/pulse](https://github.com/laravel/pulse) | `1.7.4` | `1.8.0` | | [laravel/sanctum](https://github.com/laravel/sanctum) | `4.3.2` | `4.3.3` | | [laravel/scout](https://github.com/laravel/scout) | `11.2.0` | `11.5.0` | | [laravel/socialite](https://github.com/laravel/socialite) | `5.27.0` | `5.29.0` | | [laravel/telescope](https://github.com/laravel/telescope) | `5.20.0` | `5.22.0` | | [nuwave/lighthouse](https://github.com/nuwave/lighthouse) | `6.67.0` | `6.69.2` | | [open-telemetry/api](https://github.com/opentelemetry-php/api) | `1.9.0` | `1.10.0` | | [open-telemetry/sdk](https://github.com/opentelemetry-php/sdk) | `1.14.0` | `1.15.0` | | [pusher/pusher-php-server](https://github.com/pusher/pusher-http-php) | `7.2.8` | `7.3.0` | | [resend/resend-php](https://github.com/resend/resend-php) | `1.3.0` | `1.7.0` | | [spatie/laravel-backup](https://github.com/spatie/laravel-backup) | `10.3.0` | `10.3.1` | | [spatie/laravel-permission](https://github.com/spatie/laravel-permission) | `8.0.0` | `8.3.0` | | [stancl/tenancy](https://github.com/archtechx/tenancy) | `3.10.0` | `3.10.1` | | [symfony/http-client](https://github.com/symfony/http-client) | `7.4.13` | `7.4.16` | | [behat/behat](https://github.com/Behat/Behat) | `3.31.0` | `3.32.0` | | [friendsofphp/php-cs-fixer](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer) | `3.95.5` | `3.95.18` | | [laravel/pint](https://github.com/laravel/pint) | `1.29.1` | `1.30.4` | | [laravel/sail](https://github.com/laravel/sail) | `1.62.0` | `1.65.0` | | [nunomaduro/collision](https://github.com/nunomaduro/collision) | `8.9.4` | `8.9.5` | | [phpstan/phpstan](https://github.com/phpstan/phpstan-phar-composer-source) | `2.2.2` | `2.2.8` | | [squizlabs/php_codesniffer](https://github.com/PHPCSStandards/PHP_CodeSniffer) | `4.0.1` | `4.0.4` | Updates `aws/aws-sdk-php` from 3.384.7 to 3.391.1 - [Release notes](https://github.com/aws/aws-sdk-php/releases) - [Commits](aws/aws-sdk-php@3.384.7...3.391.1) Updates `darkaonline/l5-swagger` from 11.0.1 to 11.1.0 - [Release notes](https://github.com/DarkaOnLine/L5-Swagger/releases) - [Commits](DarkaOnLine/L5-Swagger@11.0.1...11.1.0) Updates `durable-workflow/waterline` from 1.0.16 to 1.0.17 - [Release notes](https://github.com/durable-workflow/waterline/releases) - [Changelog](https://github.com/durable-workflow/waterline/blob/v2/CHANGELOG.md) - [Commits](durable-workflow/waterline@1.0.16...1.0.17) Updates `durable-workflow/workflow` from 1.0.76 to 1.0.79 - [Release notes](https://github.com/durable-workflow/workflow/releases) - [Changelog](https://github.com/durable-workflow/workflow/blob/v2/CHANGELOG.md) - [Commits](durable-workflow/workflow@1.0.76...1.0.79) Updates `laravel/framework` from 12.62.0 to 12.65.0 - [Release notes](https://github.com/laravel/framework/releases) - [Changelog](https://github.com/laravel/framework/blob/13.x/CHANGELOG.md) - [Commits](laravel/framework@v12.62.0...v12.65.0) Updates `laravel/horizon` from 5.47.2 to 5.48.2 - [Release notes](https://github.com/laravel/horizon/releases) - [Changelog](https://github.com/laravel/horizon/blob/5.x/CHANGELOG.md) - [Commits](laravel/horizon@v5.47.2...v5.48.2) Updates `laravel/pennant` from 1.23.0 to 1.24.0 - [Release notes](https://github.com/laravel/pennant/releases) - [Changelog](https://github.com/laravel/pennant/blob/1.x/CHANGELOG.md) - [Commits](laravel/pennant@v1.23.0...v1.24.0) Updates `laravel/pulse` from 1.7.4 to 1.8.0 - [Release notes](https://github.com/laravel/pulse/releases) - [Changelog](https://github.com/laravel/pulse/blob/1.x/CHANGELOG.md) - [Commits](laravel/pulse@v1.7.4...v1.8.0) Updates `laravel/sanctum` from 4.3.2 to 4.3.3 - [Release notes](https://github.com/laravel/sanctum/releases) - [Changelog](https://github.com/laravel/sanctum/blob/4.x/CHANGELOG.md) - [Commits](laravel/sanctum@v4.3.2...v4.3.3) Updates `laravel/scout` from 11.2.0 to 11.5.0 - [Release notes](https://github.com/laravel/scout/releases) - [Changelog](https://github.com/laravel/scout/blob/11.x/CHANGELOG.md) - [Commits](laravel/scout@v11.2.0...v11.5.0) Updates `laravel/socialite` from 5.27.0 to 5.29.0 - [Release notes](https://github.com/laravel/socialite/releases) - [Changelog](https://github.com/laravel/socialite/blob/5.x/CHANGELOG.md) - [Commits](laravel/socialite@v5.27.0...v5.29.0) Updates `laravel/telescope` from 5.20.0 to 5.22.0 - [Release notes](https://github.com/laravel/telescope/releases) - [Changelog](https://github.com/laravel/telescope/blob/5.x/CHANGELOG.md) - [Commits](laravel/telescope@v5.20.0...v5.22.0) Updates `league/commonmark` from 2.8.2 to 2.9.1 - [Release notes](https://github.com/thephpleague/commonmark/releases) - [Changelog](https://github.com/thephpleague/commonmark/blob/2.9/CHANGELOG.md) - [Commits](thephpleague/commonmark@2.8.2...2.9.1) Updates `livewire/livewire` from 3.8.1 to 3.8.4 - [Release notes](https://github.com/livewire/livewire/releases) - [Commits](livewire/livewire@v3.8.1...v3.8.4) Updates `nesbot/carbon` from 3.11.4 to 3.13.2 - [Release notes](https://github.com/CarbonPHP/carbon/releases) - [Commits](CarbonPHP/carbon@3.11.4...3.13.2) Updates `nuwave/lighthouse` from 6.67.0 to 6.69.2 - [Release notes](https://github.com/nuwave/lighthouse/releases) - [Changelog](https://github.com/nuwave/lighthouse/blob/master/CHANGELOG.md) - [Commits](nuwave/lighthouse@v6.67.0...v6.69.2) Updates `open-telemetry/api` from 1.9.0 to 1.10.0 - [Release notes](https://github.com/opentelemetry-php/api/releases) - [Commits](opentelemetry-php/api@1.9.0...1.10.0) Updates `open-telemetry/sdk` from 1.14.0 to 1.15.0 - [Release notes](https://github.com/opentelemetry-php/sdk/releases) - [Commits](opentelemetry-php/sdk@1.14.0...1.15.0) Updates `pusher/pusher-php-server` from 7.2.8 to 7.3.0 - [Release notes](https://github.com/pusher/pusher-http-php/releases) - [Changelog](https://github.com/pusher/pusher-http-php/blob/master/CHANGELOG.md) - [Commits](pusher/pusher-http-php@7.2.8...7.3.0) Updates `resend/resend-php` from 1.3.0 to 1.7.0 - [Release notes](https://github.com/resend/resend-php/releases) - [Commits](resend/resend-php@v1.3.0...v1.7.0) Updates `spatie/laravel-backup` from 10.3.0 to 10.3.1 - [Release notes](https://github.com/spatie/laravel-backup/releases) - [Changelog](https://github.com/spatie/laravel-backup/blob/main/CHANGELOG.md) - [Commits](spatie/laravel-backup@10.3.0...10.3.1) Updates `spatie/laravel-permission` from 8.0.0 to 8.3.0 - [Release notes](https://github.com/spatie/laravel-permission/releases) - [Changelog](https://github.com/spatie/laravel-permission/blob/main/CHANGELOG.md) - [Commits](spatie/laravel-permission@8.0.0...8.3.0) Updates `stancl/tenancy` from 3.10.0 to 3.10.1 - [Release notes](https://github.com/archtechx/tenancy/releases) - [Commits](archtechx/tenancy@v3.10.0...v3.10.1) Updates `symfony/http-client` from 7.4.13 to 7.4.16 - [Release notes](https://github.com/symfony/http-client/releases) - [Changelog](https://github.com/symfony/http-client/blob/8.2/CHANGELOG.md) - [Commits](symfony/http-client@v7.4.13...v7.4.16) Updates `behat/behat` from 3.31.0 to 3.32.0 - [Release notes](https://github.com/Behat/Behat/releases) - [Changelog](https://github.com/Behat/Behat/blob/3.x/CHANGELOG.md) - [Commits](Behat/Behat@v3.31.0...v3.32.0) Updates `friendsofphp/php-cs-fixer` from 3.95.5 to 3.95.18 - [Release notes](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/releases) - [Changelog](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/blob/master/CHANGELOG.md) - [Commits](PHP-CS-Fixer/PHP-CS-Fixer@v3.95.5...v3.95.18) Updates `laravel/pint` from 1.29.1 to 1.30.4 - [Release notes](https://github.com/laravel/pint/releases) - [Changelog](https://github.com/laravel/pint/blob/main/CHANGELOG.md) - [Commits](laravel/pint@v1.29.1...v1.30.4) Updates `laravel/sail` from 1.62.0 to 1.65.0 - [Release notes](https://github.com/laravel/sail/releases) - [Changelog](https://github.com/laravel/sail/blob/1.x/CHANGELOG.md) - [Commits](laravel/sail@v1.62.0...v1.65.0) Updates `nunomaduro/collision` from 8.9.4 to 8.9.5 - [Commits](nunomaduro/collision@v8.9.4...v8.9.5) Updates `phpstan/phpstan` from 2.2.2 to 2.2.8 - [Commits](https://github.com/phpstan/phpstan-phar-composer-source/commits) Updates `squizlabs/php_codesniffer` from 4.0.1 to 4.0.4 - [Release notes](https://github.com/PHPCSStandards/PHP_CodeSniffer/releases) - [Changelog](https://github.com/PHPCSStandards/PHP_CodeSniffer/blob/4.x/CHANGELOG-4.x.md) - [Commits](PHPCSStandards/PHP_CodeSniffer@4.0.1...4.0.4) --- updated-dependencies: - dependency-name: aws/aws-sdk-php dependency-version: 3.391.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: darkaonline/l5-swagger dependency-version: 11.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: durable-workflow/waterline dependency-version: 1.0.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: durable-workflow/workflow dependency-version: 1.0.79 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: laravel/framework dependency-version: 12.65.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: laravel/horizon dependency-version: 5.48.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: laravel/pennant dependency-version: 1.24.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: laravel/pulse dependency-version: 1.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: laravel/sanctum dependency-version: 4.3.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: laravel/scout dependency-version: 11.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: laravel/socialite dependency-version: 5.29.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: laravel/telescope dependency-version: 5.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: league/commonmark dependency-version: 2.9.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: livewire/livewire dependency-version: 3.8.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: nesbot/carbon dependency-version: 3.13.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: nuwave/lighthouse dependency-version: 6.69.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: open-telemetry/api dependency-version: 1.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: open-telemetry/sdk dependency-version: 1.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: pusher/pusher-php-server dependency-version: 7.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: resend/resend-php dependency-version: 1.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: spatie/laravel-backup dependency-version: 10.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: spatie/laravel-permission dependency-version: 8.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: stancl/tenancy dependency-version: 3.10.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: symfony/http-client dependency-version: 7.4.16 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: behat/behat dependency-version: 3.32.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: friendsofphp/php-cs-fixer dependency-version: 3.95.18 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: laravel/pint dependency-version: 1.30.4 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: laravel/sail dependency-version: 1.65.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: nunomaduro/collision dependency-version: 8.9.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: phpstan/phpstan dependency-version: 2.2.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: squizlabs/php_codesniffer dependency-version: 4.0.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-08-10T21:48:20Z

Labels

The following labels could not be found: composer. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 10, 2026

dependabot Bot requested a review from YOzaz as a code owner August 10, 2026 21:48

dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 10, 2026

Navigation Menu

Uh oh!

Uh oh!

chore(deps): Bump the minor-and-patch group across 1 directory with 31 updates - #1192

chore(deps): Bump the minor-and-patch group across 1 directory with 31 updates#1192
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/composer/minor-and-patch-029960a102

dependabot Bot commented on behalf of github Aug 10, 2026

Uh oh!

dependabot Bot commented on behalf of github Aug 10, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 10, 2026

Version 3.391.1

Version 3.391.0

Version 3.390.5

Version 3.390.4

11.1.0

What's Changed

New Contributors

1.0.17

1.0.79

What's Changed

1.0.78

What's Changed

New Contributors

1.0.77

What's Changed

v12.65.0

v12.64.0

v12.63.0

v5.48.2

v5.48.1

v5.48.0

v5.48.2 - 2026-07-27

v5.48.1 - 2026-07-20

v5.48.0 - 2026-07-17

v1.24.0

v1.24.0 - 2026-06-28

v1.8.0

v1.8.0 - 2026-07-29

v4.3.3

v4.3.3 - 2026-06-23

v11.5.0

v11.4.0

v11.3.0

v11.5.0 - 2026-08-04

v11.4.0 - 2026-07-21

v11.3.0 - 2026-06-16

Uh oh!

dependabot Bot commented on behalf of github Aug 10, 2026

Labels

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants