chore(deps): bump the php-minor-and-patch group with 7 updates by dependabot[bot] · Pull Request #65 · PhantomPixelDev/modulo-cms

dependabot · 2026-11-01T20:12:10Z

Bumps the php-minor-and-patch group with 7 updates:

Package	From	To
inertiajs/inertia-laravel	`3.5.1`	`3.5.2`
laravel/framework	`13.35.0`	`13.39.0`
spatie/laravel-medialibrary	`11.23.9`	`11.23.11`
spatie/laravel-permission	`8.3.0`	`8.3.2`
tightenco/ziggy	`2.6.4`	`2.6.5`
larastan/larastan	`3.13.0`	`3.13.2`
pestphp/pest	`5.3.1`	`5.3.4`

Updates inertiajs/inertia-laravel from 3.5.1 to 3.5.2

Release notes

Sourced from inertiajs/inertia-laravel's releases.

v3.5.2

What's Changed

Bump shivammathur/setup-php from 2.37.2 to 2.40.0 in the github-actions group by @dependabot[bot] in inertiajs/inertia-laravel#921

[3.x] Append Vary header instead of setting it by @thannaske in inertiajs/inertia-laravel#920

[3.x] Reset the cached SSR response when the page changes by @lazerg in inertiajs/inertia-laravel#924

[3.x] Don't treat streamed or "0" responses as empty for Inertia requests by @mdalikadar in inertiajs/inertia-laravel#919

New Contributors

@thannaske made their first contribution in inertiajs/inertia-laravel#920

Full Changelog: inertiajs/inertia-laravel@v3.5.1...v3.5.2

Changelog

Sourced from inertiajs/inertia-laravel's changelog.

v3.5.2 - 2026-10-21

What's Changed

Bump shivammathur/setup-php from 2.37.2 to 2.40.0 in the github-actions group by @dependabot[bot] in inertiajs/inertia-laravel#921

[3.x] Append Vary header instead of setting it by @thannaske in inertiajs/inertia-laravel#920

[3.x] Reset the cached SSR response when the page changes by @lazerg in inertiajs/inertia-laravel#924

[3.x] Don't treat streamed or "0" responses as empty for Inertia requests by @mdalikadar in inertiajs/inertia-laravel#919

New Contributors

@thannaske made their first contribution in inertiajs/inertia-laravel#920

Full Changelog: inertiajs/inertia-laravel@v3.5.1...v3.5.2

Commits

4e91cf4 [3.x] Don't treat streamed or "0" responses as empty for Inertia requests (#919)
6431f9a [3.x] Reset the cached SSR response when the page changes (#924)
d25c67c [3.x] Append Vary header instead of setting it (#920)
8355911 Update SECURITY.md
3158d13 Update SECURITY.md
7a53e1a Bump shivammathur/setup-php (#921)
4da52b7 Update CHANGELOG
See full diff in compare view

Updates laravel/framework from 13.35.0 to 13.39.0

Release notes

Sourced from laravel/framework's releases.

v13.39.0

[13.x] Rebuild the phpredis client when a broken pipe surfaces as a warning by @aleedhillon in laravel/framework#62111

[13.x] Resolve view namespace hints like view locations by @fgilio in laravel/framework#62005

[13.x] feat(database): allow disabling primary key via #[Table(key: false)] by @calebdw in laravel/framework#62113

[13.x] add duration to JobAttempted event by @jackbayliss in laravel/framework#62118

[13.x] Write config, route and event cache files atomically by @xurshudyan in laravel/framework#62117

[13.x] Fix database cache lock aborting the transaction on PostgreSQL by @xurshudyan in laravel/framework#62114

Fix assertSeeText('0') silently passes for zero as string by @crynobone in laravel/framework#62126

[13.x] Fix incorrect docblocks by @xurshudyan in laravel/framework#62125

[13.x] Don't let a job with a deleted model stop queue:retry by @xurshudyan in laravel/framework#62124

[13.x] Fix the previous route leaking into 404 requests under Octane by @xurshudyan in laravel/framework#62123

[13.x] Fix cache:prune-stale-tags with the phpredis SCAN_PREFIX option by @xurshudyan in laravel/framework#62122

[13.x] Fix Http::batch() treating retry() and throw() failures as successes by @mkantautas in laravel/framework#62120

[13.x] Create SessionGarbageCollectCommand by @browner12 in laravel/framework#62104

Bump vite from 8.0.16 to 8.3.5 in /src/Illuminate/Foundation/resources/exceptions/renderer by @dependabot[bot] in laravel/framework#62132

[13.x] Add withoutDispatchingAfterResponses to BusFake by @xurshudyan in laravel/framework#62130

[13.x] Fix pagination counts for grouped union queries by @mkantautas in laravel/framework#62131

[13.x] Fix simple paginator ignoring page name by @xurshudyan in laravel/framework#62128

[13.x] Qualify pivot columns in wherePivot closures by @xurshudyan in laravel/framework#62137

[13.x] Add forceCreate and forceCreateQuietly to BelongsToMany by @xurshudyan in laravel/framework#62136

Apply fixes from StyleCI by @taylorotwell in laravel/framework#62140

[13.x] remember token is nullable by @browner12 in laravel/framework#62105

[13.x] Fix dimensions of JXL images by @xurshudyan in laravel/framework#62151

[13.x] Fix latest() and oldest() with a join from a subquery by @xurshudyan in laravel/framework#62149

[13.x] Register the session:garbage-collect command by @xurshudyan in laravel/framework#62150

[13.x] Ensure _error_bag input is a string in Handler::invalid() by @manavu in laravel/framework#62147

[13.x] Cloud exceptions follow-ups by @timacdonald in laravel/framework#62142

[13.x] Don't fail database queue jobs on concurrency errors while reserving by @xurshudyan in laravel/framework#62145

[13.x] Fix N+1 queries on JSON:API resource collection includes by @xurshudyan in laravel/framework#62152

[13.x] Fix once() returning a cached value for a different object by @xurshudyan in laravel/framework#62121

[13.x] Fix Rule::anyOf() passing associative arrays against plain rule lists by @xurshudyan in laravel/framework#62171

[13.x] Fix withoutMiddleware() not excluding middleware with parameters by @xurshudyan in laravel/framework#62166

[13.x] Block phar:// stream wrapper in Filesystem::exists() and isFile() by @AsahiSoftWareEngineer in laravel/framework#62164

[13.x] Embed images once in markdown notifications by @xurshudyan in laravel/framework#62163

[13.x] Fake html() and plain() on MailFake by @xurshudyan in laravel/framework#62162

[12.x] Test SessionGuard::user() with recaller cookie that has an empty remember token by @crynobone with @Copilot in laravel/framework#62156

[13.x] Fix restoreOrCreate() and createOrRestore() on relations by @xurshudyan in laravel/framework#62146

[13.x] ensure sync queue passes duration too by @jackbayliss in laravel/framework#62155

Bump RedCrafter07/release-notes-action from 1.0.1 to 1.0.2 in the github-actions group by @dependabot[bot] in laravel/framework#62196

[13.x] Roll back all transaction levels after each test in RefreshDatabase by @xurshudyan in laravel/framework#62194

[13.x] Fix Request::route() return type when no route is resolved by @yoannblot in laravel/framework#62191

[13.x] Convert the down --retry datetime to GMT by @xurshudyan in laravel/framework#62190

[13.x] Cloud exceptions improvements by @timacdonald in laravel/framework#62189

[13.x] Fix illuminate/bus fatal error without illuminate/queue by @xurshudyan in laravel/framework#62182

[13.x] Add size methods to the array rule builder by @riesjart in laravel/framework#62179

[13.x] Fix distinct:ignore_case throwing on values that are not valid UTF-8 by @sumaiazaman in laravel/framework#62178

[13.x] Use the CI MySQL port in ApiAuthenticationWithEloquentTest by @xurshudyan in laravel/framework#62176

[13.x] Throw on unencodable JSON path values by @xurshudyan in laravel/framework#62175

[13.x] Allow reading files from the running phar by @xurshudyan in laravel/framework#62174

[13.x] Fail schedule:interrupt when interruption polling is disabled by @jackbayliss in laravel/framework#62183

... (truncated)

Changelog

Sourced from laravel/framework's changelog.

v13.39.0 - 2026-10-27

[13.x] Rebuild the phpredis client when a broken pipe surfaces as a warning by @aleedhillon in laravel/framework#62111

[13.x] Resolve view namespace hints like view locations by @fgilio in laravel/framework#62005

[13.x] feat(database): allow disabling primary key via #[Table(key: false)] by @calebdw in laravel/framework#62113

[13.x] add duration to JobAttempted event by @jackbayliss in laravel/framework#62118

[13.x] Write config, route and event cache files atomically by @xurshudyan in laravel/framework#62117

[13.x] Fix database cache lock aborting the transaction on PostgreSQL by @xurshudyan in laravel/framework#62114

Fix assertSeeText('0') silently passes for zero as string by @crynobone in laravel/framework#62126

[13.x] Fix incorrect docblocks by @xurshudyan in laravel/framework#62125

[13.x] Don't let a job with a deleted model stop queue:retry by @xurshudyan in laravel/framework#62124

[13.x] Fix the previous route leaking into 404 requests under Octane by @xurshudyan in laravel/framework#62123

[13.x] Fix cache:prune-stale-tags with the phpredis SCAN_PREFIX option by @xurshudyan in laravel/framework#62122

[13.x] Fix Http::batch() treating retry() and throw() failures as successes by @mkantautas in laravel/framework#62120

[13.x] Create SessionGarbageCollectCommand by @browner12 in laravel/framework#62104

Bump vite from 8.0.16 to 8.3.5 in /src/Illuminate/Foundation/resources/exceptions/renderer by @dependabot[bot] in laravel/framework#62132

[13.x] Add withoutDispatchingAfterResponses to BusFake by @xurshudyan in laravel/framework#62130

[13.x] Fix pagination counts for grouped union queries by @mkantautas in laravel/framework#62131

[13.x] Fix simple paginator ignoring page name by @xurshudyan in laravel/framework#62128

[13.x] Qualify pivot columns in wherePivot closures by @xurshudyan in laravel/framework#62137

[13.x] Add forceCreate and forceCreateQuietly to BelongsToMany by @xurshudyan in laravel/framework#62136

Apply fixes from StyleCI by @taylorotwell in laravel/framework#62140

[13.x] remember token is nullable by @browner12 in laravel/framework#62105

[13.x] Fix dimensions of JXL images by @xurshudyan in laravel/framework#62151

[13.x] Fix latest() and oldest() with a join from a subquery by @xurshudyan in laravel/framework#62149

[13.x] Register the session:garbage-collect command by @xurshudyan in laravel/framework#62150

[13.x] Ensure _error_bag input is a string in Handler::invalid() by @manavu in laravel/framework#62147

[13.x] Cloud exceptions follow-ups by @timacdonald in laravel/framework#62142

[13.x] Don't fail database queue jobs on concurrency errors while reserving by @xurshudyan in laravel/framework#62145

[13.x] Fix N+1 queries on JSON:API resource collection includes by @xurshudyan in laravel/framework#62152

[13.x] Fix once() returning a cached value for a different object by @xurshudyan in laravel/framework#62121

[13.x] Fix Rule::anyOf() passing associative arrays against plain rule lists by @xurshudyan in laravel/framework#62171

[13.x] Fix withoutMiddleware() not excluding middleware with parameters by @xurshudyan in laravel/framework#62166

[13.x] Block phar:// stream wrapper in Filesystem::exists() and isFile() by @AsahiSoftWareEngineer in laravel/framework#62164

[13.x] Embed images once in markdown notifications by @xurshudyan in laravel/framework#62163

[13.x] Fake html() and plain() on MailFake by @xurshudyan in laravel/framework#62162

[12.x] Test SessionGuard::user() with recaller cookie that has an empty remember token by @crynobone with @Copilot in laravel/framework#62156

[13.x] Fix restoreOrCreate() and createOrRestore() on relations by @xurshudyan in laravel/framework#62146

[13.x] ensure sync queue passes duration too by @jackbayliss in laravel/framework#62155

Bump RedCrafter07/release-notes-action from 1.0.1 to 1.0.2 in the github-actions group by @dependabot[bot] in laravel/framework#62196

[13.x] Roll back all transaction levels after each test in RefreshDatabase by @xurshudyan in laravel/framework#62194

[13.x] Fix Request::route() return type when no route is resolved by @yoannblot in laravel/framework#62191

[13.x] Convert the down --retry datetime to GMT by @xurshudyan in laravel/framework#62190

[13.x] Cloud exceptions improvements by @timacdonald in laravel/framework#62189

[13.x] Fix illuminate/bus fatal error without illuminate/queue by @xurshudyan in laravel/framework#62182

[13.x] Add size methods to the array rule builder by @riesjart in laravel/framework#62179

[13.x] Fix distinct:ignore_case throwing on values that are not valid UTF-8 by @sumaiazaman in laravel/framework#62178

[13.x] Use the CI MySQL port in ApiAuthenticationWithEloquentTest by @xurshudyan in laravel/framework#62176

[13.x] Throw on unencodable JSON path values by @xurshudyan in laravel/framework#62175

[13.x] Allow reading files from the running phar by @xurshudyan in laravel/framework#62174

... (truncated)

Commits

d52c3b3 Update version to v13.39.0
41840cf Fix install:broadcasting with app.jsx and app.js (#62202)
f10b9a1 Fix process fake shorthands when starting processes (#62200)
e093e46 [13.x] Add WithoutMigrationEvents attribute (#62201)
c4a246e Add restoreOrCreate and createOrRestore to through relations (#62204)
07279a6 [13.x] Throw on unencodable JSON in object casts (#62203)
723b151 Disable incrementing for models without a primary key (#62205)
377f5ce [13.x] Roll back transactions manager when commit fails (#62206)
2ff984f Cast failed job ids to strings (#62208)
f3adacd Ensure schedule:interrupt errors if its not interruptible (#62183)
Additional commits viewable in compare view

Updates spatie/laravel-medialibrary from 11.23.9 to 11.23.11

Release notes

Sourced from spatie/laravel-medialibrary's releases.

11.23.11

What's Changed

Fix addMediaFromDisk() losing the source file when a same-disk copy returns false. Failed copies now throw DiskCannotBeAccessed, remove the failed media record, and retain the source file. By @kinsflow in spatie/laravel-medialibrary#3969.

Verify failed and successful same-disk copies against real local storage, including source bytes, stored files, existing media, and preservingOriginal() behavior.

Repair ImageMagick policy discovery on newer CI runners and allow slow package downloads to finish without reducing the PHP 8.2–8.5 / Laravel 12–13 test matrix.

PHP and Laravel requirements are unchanged. The separate, pre-existing orphan-record issue with filesystem throw=true is not changed by this release; that mode already preserves the source file.

Full Changelog: spatie/laravel-medialibrary@11.23.10...11.23.11

11.23.10

What’s Changed

Clean up temporary directories when conversions or responsive-image generation fail or return early, while preserving the original media files and propagating exceptions. Fixes #3966 via #3968 by @littfed.

Strengthen regression coverage for empty/missing files, copy and conversion failures, and responsive-image placeholder failures.

Update test tooling to the latest compatible Pest majors and PHP 8.2–8.5 / Laravel 12–13 coverage. Add PHPStan and read-only Pint checks to fork pull requests.

Requirements

PHP 8.2+ remains supported. End-of-life Laravel 10 and 11 are no longer supported; Laravel 12+ is now required.

Full Changelog: spatie/laravel-medialibrary@11.23.9...11.23.10

Changelog

Sourced from spatie/laravel-medialibrary's changelog.

11.23.11 - 2026-10-26

What's Changed

Fix addMediaFromDisk() losing the source file when a same-disk copy returns false. Failed copies now throw DiskCannotBeAccessed, remove the failed media record, and retain the source file. By @kinsflow in spatie/laravel-medialibrary#3969.

Verify failed and successful same-disk copies against real local storage, including source bytes, stored files, existing media, and preservingOriginal() behavior.

Repair ImageMagick policy discovery on newer CI runners and allow slow package downloads to finish without reducing the PHP 8.2–8.5 / Laravel 12–13 test matrix.

PHP and Laravel requirements are unchanged. The separate, pre-existing orphan-record issue with filesystem throw=true is not changed by this release; that mode already preserves the source file.

Full Changelog: spatie/laravel-medialibrary@11.23.10...11.23.11

11.23.10 - 2026-10-19

What’s Changed

Clean up temporary directories when conversions or responsive-image generation fail or return early, while preserving the original media files and propagating exceptions. Fixes #3966 via #3968 by @littfed.

Strengthen regression coverage for empty/missing files, copy and conversion failures, and responsive-image placeholder failures.

Update test tooling to the latest compatible Pest majors and PHP 8.2–8.5 / Laravel 12–13 coverage. Add PHPStan and read-only Pint checks to fork pull requests.

Requirements

PHP 8.2+ remains supported. End-of-life Laravel 10 and 11 are no longer supported; Laravel 12+ is now required.

Full Changelog: spatie/laravel-medialibrary@11.23.9...11.23.10

Commits

7893a70 Allow CI package downloads to finish on slower runners
204c219 Repair ImageMagick CI setup and exercise real copy failures
5746118 Throw when copying a file on the same disk fails
af6ff56 Update CHANGELOG
e32803a Ensure temporary directories are cleaned up when conversions fail or return e...
1f73cad Update CHANGELOG
See full diff in compare view

Updates spatie/laravel-permission from 8.3.0 to 8.3.2

Release notes

Sourced from spatie/laravel-permission's releases.

8.3.2

Performance

Speed up repeated cached permission lookups by name and ID without changing lookup semantics (#2969).

Preserve loose comparisons, guard isolation, first-match ordering, shared model identity, and mutations of returned models. Custom models and keyed collections continue to use the original filter.

Keep lookup indexes tied to cache invalidation, including saved changes, deletion, explicit resets, and cache/tenant reinitialization.

Verification

Add regression coverage for numeric comparisons, custom accessors and keys, collection ordering, runtime casts, invalidation, strict missing-attribute handling, and release of cached model references.

Add an opt-in benchmark covering warm hits/misses, hydration, and retained memory. Indexing trades some hydration work and memory for faster repeated lookups; performance depends on the workload and is not unconditionally O(1).

No breaking changes. Public APIs, persistent cache format, and PHP/Laravel support are unchanged.

Full Changelog: spatie/laravel-permission@8.3.1...8.3.2

8.3.1

Fixes

Respect the explicit guard when hasRole() and hasAllRoles() receive a role model, including model-array checks. Fixes #2977 via #2978.

Refresh the cache manager when reinitializing permission caches, preventing stale stores after tenant or cache configuration switches (#2973).

Exclude pint.json from distribution archives (#2972).

Maintenance

Update test tooling to Pest 5.3.3, with Pest 4.7.8 for compatible PHP 8.3 and Laravel 12 stacks.

Test PHP 8.3–8.6 and Laravel 12/13 with appropriate lowest and highest dependencies (#2975, #2976, #2978).

No breaking changes. PHP and Laravel support are unchanged.

Full Changelog: spatie/laravel-permission@8.3.0...8.3.1

Changelog

Sourced from spatie/laravel-permission's changelog.

8.3.2 - 2026-10-19

Performance

Speed up repeated cached permission lookups by name and ID without changing lookup semantics (#2969).

Preserve loose comparisons, guard isolation, first-match ordering, shared model identity, and mutations of returned models. Custom models and keyed collections continue to use the original filter.

Keep lookup indexes tied to cache invalidation, including saved changes, deletion, explicit resets, and cache/tenant reinitialization.

Verification

Add regression coverage for numeric comparisons, custom accessors and keys, collection ordering, runtime casts, invalidation, strict missing-attribute handling, and release of cached model references.

Add an opt-in benchmark covering warm hits/misses, hydration, and retained memory. Indexing trades some hydration work and memory for faster repeated lookups; performance depends on the workload and is not unconditionally O(1).

No breaking changes. Public APIs, persistent cache format, and PHP/Laravel support are unchanged.

Full Changelog: spatie/laravel-permission@8.3.1...8.3.2

8.3.1 - 2026-10-19

Fixes

Respect the explicit guard when hasRole() and hasAllRoles() receive a role model, including model-array checks. Fixes #2977 via #2978.

Refresh the cache manager when reinitializing permission caches, preventing stale stores after tenant or cache configuration switches (#2973).

Exclude pint.json from distribution archives (#2972).

Maintenance

Update test tooling to Pest 5.3.3, with Pest 4.7.8 for compatible PHP 8.3 and Laravel 12 stacks.

Test PHP 8.3–8.6 and Laravel 12/13 with appropriate lowest and highest dependencies (#2975, #2976, #2978).

No breaking changes. PHP and Laravel support are unchanged.

Full Changelog: spatie/laravel-permission@8.3.0...8.3.1

Commits

e4e906f Merge pull request #2969: optimize cached permission lookups safely
c74c94e Preserve permission lookup semantics while indexing cached models
17c93a2 Merge remote-tracking branch 'origin/main' into perf/index-permission-lookups
e868d6a Update CHANGELOG
1ab5d33 Merge pull request #2978 from sean0407/codex/spatie-2977-role-guard-20261019
1a43000 Strengthen role guard checks and update Pest tooling
b5570d5 fix: respect guard when checking role models
182889d Test on PHP 8.6 (#2975)
da7bb6c Merge pull request #2976 from jnoordsij/consistent-composer-ci
2d162c9 Use Pest 4 with the Laravel 12 Testbench stack
Additional commits viewable in compare view

Updates tightenco/ziggy from 2.6.4 to 2.6.5

Release notes

Sourced from tightenco/ziggy's releases.

v2.6.5

What's Changed

Microbundle to tsdown migration by @abetwothree in tighten/ziggy#886

Resolve route key names from inherited attributes by @bakerkretzmar in tighten/ziggy#897

New Contributors

@abetwothree made their first contribution in tighten/ziggy#886

Full Changelog: tighten/ziggy@v2.6.4...v2.6.5

Changelog

Sourced from tightenco/ziggy's changelog.

[v2.6.5] - 2026-10-10

Fixed

Resolve route key names from inherited attributes by @bakerkretzmar in tighten/ziggy#897

Changed

Microbundle to tsdown migration by @abetwothree in tighten/ziggy#886

Commits

d250c15 v2.6.5
24cf118 Merge pull request #897 from tighten/fix-model-routing-traits
16acdbe Resolve route key names from attributes on traits and parent classes
620098c Merge pull request #886 from abetwothree/microbundle-to-tsdown-migration
1464e58 Merge branch '2.x' into microbundle-to-tsdown-migration
463ea17 Lower syntax to ES2015 to maintain compatibility with old bundle
0946b01 Remove unneeded exports.import
9c97f66 Restore index.esm.js in npm build
24da597 Regenerate lockfile
170ce74 Wip
Additional commits viewable in compare view

Updates larastan/larastan from 3.13.0 to 3.13.2

Release notes

Sourced from larastan/larastan's releases.

3.13.2

What's Changed

Added

Read CREATE TABLE statements passed as string literals to DB::statement() and DB::unprepared() in migrations, using the same SQL parsers as schema dumps, by @tiagoabsantos in #2564. Read more about it here.

Infer Arr::map() callback parameter types and the mapped array type by @Gabrieljr42 in #2587.

Fixed

Check model properties in fill() and forceFill() by @uchimaki-vensley in #2618.

Check model properties in withAttributes() by @uchimaki-vensley in #2599.

Check model properties in forceCreateMany() and forceCreateManyQuietly() by @uchimaki-vensley in #2600.

Apply model casts to date columns such as created_at instead of always reading them as dates by @canvural in 453bff0.

Resolve the enum type of AsEnumCollection and AsEnumArrayObject casts by @lazerg in #2590.

Return int|false from model increment() and decrement(), since an updating listener can cancel the update, by @canvural in 0293dbc.

Resolve factory() from the HasFactory generic, including models that set their factory with the $factory property or #[UseFactory], by @mkantautas in #2615 and @canvural in 6dfe581.

Keep the model template type in forwarded static calls on a class-string<T>, such as $class::findOrFail($id), by @mkantautas in #2616.

Read #[CollectedBy] from parent models on Laravel 13.4 and newer by @APX403 in #2586. Read more about it here.

Keep the relation type after calling when() and unless() on a relation by @APX403 in #2603.

Accept deeper nesting and closures in nested eager-load arrays passed to with(), withOnly(), load(), and loadMissing() by @lazerg in #2583.

Read columns from ulidMorphs(), numericMorphs(), and their nullable variants in migrations by @mkantautas in #2614.

Treat rememberToken() columns as nullable by @lazerg in #2611.

Fall back to the bundled SQL parser when phpmyadmin/sql-parser can't parse a schema dump, instead of losing every table in it, by @Cayan in #2588.

Resolve EventFake methods such as dispatched() and hasDispatched() on the Event facade by @lazerg in #2574.

Resolve QueueFake methods such as pushed() and hasPushed() on the Queue facade by @canvural in 9c1d4f4.

Detect container, request, and config injection in OctaneCompatibilityRule through any constructor argument, make(), get(), and makeWith() calls, and class-string references by @Gabrieljr42 in #2609.

Avoid NoEnvCallsOutsideOfConfigRule false positives when a config file is analysed in editor mode by @billypoke in #2482.

Only count Laravel's view() helper when detecting unused views, and report static::make(), self::make(), and parent::make() in NoModelMakeRule, by @GTS-MEGHNI in #2598.

New Contributors

@billypoke made their first contribution in #2482.

@tiagoabsantos made their first contribution in #2564.

@APX403 made their first contribution in #2586.

@Gabrieljr42 made their first contribution in #2587.

@GTS-MEGHNI made their first contribution in #2598.

@mkantautas made their first contribution in #2614.

Full Changelog: v3.13.1...v3.13.2

3.13.1

What's Changed

Fixed

Type argument() and option() calls and check argument and option names in commands registered through the console kernel, including the kernel's $commands property, withCommands(), and app/Console/Commands on Laravel 13.36 and newer, by @robsonek in #2585.

Infer callback parameter types in map() and mapWithKeys() on Eloquent collections again, so mapped values are no longer mixed, by @canvural in dea9faf.

Check model properties in incrementEach() and decrementEach() by @uchimaki-vensley in #2573.

Check model properties in incrementOrCreate() by @uchimaki-vensley in #2581.

... (truncated)

Commits

0de9aec fix: keep the template type in forwarded static calls on a model class-string...
bd8d022 fix: check model properties in fill() and forceFill() (#2618)
6dfe581 refactor: fall back to factory() return type when resolving model factories
3a6aa17 fix: resolve factory() from the HasFactory generic when newFactory() is not o...
51c47c2 fix: read columns from ulidMorphs() and numericMorphs() migrations (#2614)
453bff0 fix: check for casts on date columns too
b862d19 chore: fix tests
61403ec fix: treat rememberToken() columns as nullable (#2611)
cd61813 fix: keep the relation type after when() and unless() (#2603)
3c8bc5d fix: check model properties in forceCreateMany() and forceCreateManyQuietly()...
Additional commits viewable in compare view

Updates pestphp/pest from 5.3.1 to 5.3.4

Release notes

Sourced from pestphp/pest's releases.

v5.3.4

What's Changed

feat: restore coversNothing() by @gsmeira in pestphp/pest#1981

fix: avoid passing an object when invoking static methods via reflection by @owenvoke in pestphp/pest#1988

test(sharding): cover module test classes outside the tests directory by @mudandstars in

Bumps the php-minor-and-patch group with 7 updates: | Package | From | To | | --- | --- | --- | | [inertiajs/inertia-laravel](https://github.com/inertiajs/inertia-laravel) | `3.5.1` | `3.5.2` | | [laravel/framework](https://github.com/laravel/framework) | `13.35.0` | `13.39.0` | | [spatie/laravel-medialibrary](https://github.com/spatie/laravel-medialibrary) | `11.23.9` | `11.23.11` | | [spatie/laravel-permission](https://github.com/spatie/laravel-permission) | `8.3.0` | `8.3.2` | | [tightenco/ziggy](https://github.com/tighten/ziggy) | `2.6.4` | `2.6.5` | | [larastan/larastan](https://github.com/larastan/larastan) | `3.13.0` | `3.13.2` | | [pestphp/pest](https://github.com/pestphp/pest) | `5.3.1` | `5.3.4` | Updates `inertiajs/inertia-laravel` from 3.5.1 to 3.5.2 - [Release notes](https://github.com/inertiajs/inertia-laravel/releases) - [Changelog](https://github.com/inertiajs/inertia-laravel/blob/3.x/CHANGELOG.md) - [Commits](inertiajs/inertia-laravel@v3.5.1...v3.5.2) Updates `laravel/framework` from 13.35.0 to 13.39.0 - [Release notes](https://github.com/laravel/framework/releases) - [Changelog](https://github.com/laravel/framework/blob/13.x/CHANGELOG.md) - [Commits](laravel/framework@v13.35.0...v13.39.0) Updates `spatie/laravel-medialibrary` from 11.23.9 to 11.23.11 - [Release notes](https://github.com/spatie/laravel-medialibrary/releases) - [Changelog](https://github.com/spatie/laravel-medialibrary/blob/main/CHANGELOG.md) - [Commits](spatie/laravel-medialibrary@11.23.9...11.23.11) Updates `spatie/laravel-permission` from 8.3.0 to 8.3.2 - [Release notes](https://github.com/spatie/laravel-permission/releases) - [Changelog](https://github.com/spatie/laravel-permission/blob/main/CHANGELOG.md) - [Commits](spatie/laravel-permission@8.3.0...8.3.2) Updates `tightenco/ziggy` from 2.6.4 to 2.6.5 - [Release notes](https://github.com/tighten/ziggy/releases) - [Changelog](https://github.com/tighten/ziggy/blob/2.x/CHANGELOG.md) - [Commits](tighten/ziggy@v2.6.4...v2.6.5) Updates `larastan/larastan` from 3.13.0 to 3.13.2 - [Release notes](https://github.com/larastan/larastan/releases) - [Changelog](https://github.com/larastan/larastan/blob/3.x/RELEASE.md) - [Commits](larastan/larastan@v3.13.0...v3.13.2) Updates `pestphp/pest` from 5.3.1 to 5.3.4 - [Release notes](https://github.com/pestphp/pest/releases) - [Changelog](https://github.com/pestphp/pest/blob/5.x/RELEASE.md) - [Commits](pestphp/pest@v5.3.1...v5.3.4) --- updated-dependencies: - dependency-name: inertiajs/inertia-laravel dependency-version: 3.5.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: php-minor-and-patch - dependency-name: laravel/framework dependency-version: 13.39.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: php-minor-and-patch - dependency-name: spatie/laravel-medialibrary dependency-version: 11.23.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: php-minor-and-patch - dependency-name: spatie/laravel-permission dependency-version: 8.3.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: php-minor-and-patch - dependency-name: tightenco/ziggy dependency-version: 2.6.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: php-minor-and-patch - dependency-name: larastan/larastan dependency-version: 3.13.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: php-minor-and-patch - dependency-name: pestphp/pest dependency-version: 5.3.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: php-minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added the dependencies Pull requests that update a dependency file label Nov 1, 2026

dependabot Bot requested a review from PhantomPixelDev as a code owner November 1, 2026 20:12

dependabot Bot added the php Pull requests that update php code label Nov 1, 2026

Navigation Menu

Repository navigation

chore(deps): bump the php-minor-and-patch group with 7 updates - #65

chore(deps): bump the php-minor-and-patch group with 7 updates#65
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/composer/php-minor-and-patch-72a8507b75

dependabot Bot commented on behalf of github Nov 1, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Nov 1, 2026

v3.5.2

What's Changed

New Contributors

v3.5.2 - 2026-10-21

What's Changed

New Contributors

v13.39.0

v13.39.0 - 2026-10-27

11.23.11

What's Changed

11.23.10

What’s Changed

Requirements

11.23.11 - 2026-10-26

What's Changed

11.23.10 - 2026-10-19

What’s Changed

Requirements

8.3.2

Performance

Verification

8.3.1

Fixes

Maintenance

8.3.2 - 2026-10-19

Performance

Verification

8.3.1 - 2026-10-19

Fixes

Maintenance

v2.6.5

What's Changed

New Contributors

[v2.6.5] - 2026-10-10

3.13.2

What's Changed

Added

Fixed

New Contributors

3.13.1

What's Changed

Fixed

v5.3.4

What's Changed

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants