fix(deps): update composer minor updates by renovate[bot] · Pull Request #458 · NHSLeadership/assess

renovate · 2026-08-13T14:15:34Z

This PR contains the following updates:

Package	Change	Age	Confidence
driftingly/rector-laravel	`^2.5.0` → `^2.6.2`
filament/filament (source)	`^5.7.8` → `^5.8.1`
filament/spatie-laravel-settings-plugin (source)	`^5.7.8` → `^5.8.1`
larastan/larastan	`^3.10.0` → `^3.11.0`
laravel/framework (source)	`^13.25.0` → `^13.31.0`
laravel/pennant	`^1.25.0` → `^1.26.0`
laravel/pint (source)	`^1.30.5` → `^1.32.0`
laravel/sail	`^1.66.0` → `^1.67.0`
spatie/laravel-prometheus	`^1.6.1` → `^1.7.0`

Release Notes

driftingly/rector-laravel (driftingly/rector-laravel)

`v2.6.2`

Compare Source

What's Changed

Cap 5.x upgrade rules at <6.0 by @TomasVotruba in #555

Full Changelog: driftingly/rector-laravel@2.6.1...2.6.2

`v2.6.1`

Compare Source

What's Changed

Move Cashier to composer-based set, deprecate Cashier + Livewire set lists by @TomasVotruba in #546
Bump Rector to ^2.6.4 by @samsonasik in #550
feat: add missing status codes to AssertStatusToAssertMethodRector by @maks-oleksyuk in #551

Full Changelog: driftingly/rector-laravel@2.6.0...2.6.1

`v2.6.0`

Compare Source

What's Changed

fix: LARAVEL_STATIC_TO_INJECTION to point to correct translation methods. by @Andyuu in #519
Bump Rector to ^2.4.6 and fix test warning by @samsonasik in #522
have CarbonSetTestNowToTravelToRector work in pest as well by @moshe-autoleadstar in #501
Bump structarmed version to ^0.14 by @samsonasik in #527
Add AddGenericBuilderToScopesRector by @MrPunyapal in #529
ran composer docs by @MrPunyapal in #530
chore(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in #524
Add Eloquent relation stubs for HasOne, MorphMany, MorphOneOrMany, MorphToMany by @MizouziE in #526
[2.x] Update .gitattributes by @jackbayliss in #534
Bump to StructArmed ^0.15 and enable MustBeFinalRule by @samsonasik in #533
Fix WhereNullComparisonToWhereNullRector rewriting possibly-null values by @Radiergummi in #532
Add RouteKeyMethodToRouteKeyAttributeRector by @MrPunyapal in #537
Add ComposerPackageConstraint to attribute rules by @MrPunyapal in #539
feat(rules): add EmptyGuardedPropertyToUnguardedAttributeRector rule by @COCOUVI in #540
Bump Rector to ^2.6.3 and migrate SetProvider to composer based by @samsonasik in #543
Bump structarmed to ^0.16 by @samsonasik in #542
Move composer-based set to single config with version-bound rule registration by @TomasVotruba in #545

New Contributors

@Andyuu made their first contribution in #519
@moshe-autoleadstar made their first contribution in #501
@MizouziE made their first contribution in #526
@Radiergummi made their first contribution in #532
@COCOUVI made their first contribution in #540

Full Changelog: driftingly/rector-laravel@2.5.0...2.6.0

filamentphp/panels (filament/filament)

`v5.8.1`

Compare Source

`v5.8.0`

Compare Source

filamentphp/spatie-laravel-settings-plugin (filament/spatie-laravel-settings-plugin)

`v5.8.1`

Compare Source

`v5.8.0`

Compare Source

larastan/larastan (larastan/larastan)

`v3.11.0`: 3.11.0

Compare Source

What's Changed

[!IMPORTANT]
Migration caching is now enabled by default. This should not affect analysis results and should make subsequent runs faster. If you notice unexpected behavior, you can disable it:
parameters:
    enableMigrationCache: false

Added

Add HasParameters stub by @canvural in ef28a38
Narrow getCasts and getTouchedRelations return types by @dfinchenko in #2497
Type AbstractPaginator::getCollection() as an Eloquent collection for model values by @szepeviktor in #2528
Add createQuietly() to EloquentBuilder.stub by @Mr-Offline in #2523
Narrow getAppends and getMutatedAttributes return types by @dfinchenko in #2499
Add mixin to the View facade by @canvural in 9baa740

Fixed

Build on the latest PHPStan by @staabm in #2496
Use FQCN in stub by @canvural in 846a314
Allow closures in translation replacements by @lazerg in #2526
Resolve getCountForPagination passthru at call time by @lazerg in #2535
Handle nullableTimestampsTz in the schema aggregator by @lazerg in #2506
Skip redundant initial rewind when scanning directories by @denkfabrik-li in #2539
Sync BuilderHelper::$passthru with Eloquent Builder by @alexkart in #2533
Apply Eloquent PHP attributes when resolving model metadata by @NikitaKirin in #2500
Handle named scopes colliding with passthru methods by @canvural in c535450
Preserve builder types for forwarded query methods by @canvural in 9c81945
Compare generic model property types correctly by @canvural in 34f6cc1
Support model helper analysis on older Laravel versions by @canvural in 8033d9f
Suppress missing model initializers on older Laravel versions by @canvural in 577e0df

Performance

Improve analysis performance on large projects by @canvural in #2543

Internal

Remove the ext-json Composer dependency by @maks-oleksyuk in #2514
Update model type inference documentation by @dantleech in #2527
Bump GitHub Actions to their latest major versions by @maks-oleksyuk in #2515
Refresh the Monica E2E baseline by @maks-oleksyuk in #2542

New Contributors

@dfinchenko made their first contribution in #2497
@maks-oleksyuk made their first contribution in #2514
@dantleech made their first contribution in #2527
@Mr-Offline made their first contribution in #2523
@lazerg made their first contribution in #2526
@denkfabrik-li made their first contribution in #2539
@alexkart made their first contribution in #2533
@NikitaKirin made their first contribution in #2500

Full Changelog: larastan/larastan@v3.10.0...v3.11.0

laravel/framework (laravel/framework)

`v13.31.0`

Compare Source

[12.x] Ensure password hash matches stored cookie before authenticating the user by @crynobone in #61386
[12.x] Fix TypeError in userFromRecaller() when the recaller matches no user by @lazerg in #61397
[13.x] Add totalSize method to Queue by @jackbayliss in #61373
Merge branch '12.x' into 13.x by @crynobone in #61399
[13.x] Restore the container instance after route:cache boots a fresh application by @lazerg in #61405
[13.x] Include connection and queue on WorkerStopping when worker is killed by @jackbayliss in #61408
[13.x] Fix lazy() and lazyById() ignoring limit() and offset() by @xurshudyan in #61402
[13.x] JobInterrupted event by @jackbayliss in #61412
[13.x] Make the Redis queue driver cluster-safe (bulk() node-less MULTI; allQueueNames() uses KEYS) by @Orrison in #61198
[13.x] feat: add chaperone support for BelongsToMany pivot models by @calebdw in #61152
Dedupe common test fixtures by @jasonmccreary in #61422
[13.x] feat: improve higher order proxy generic types by @calebdw in #61418
Apply fixes from StyleCI by @taylorotwell in #61427
[13.x] Add once assertions to the mail and notification fakes by @talaridisTh in #61415
Let Monolog handle deprecation exceptions by @sysdev34-wq in #61414
[13.x] Default memoryExceededExitCode for Cloud by @jackbayliss in #61430
[13.x] Fix context not being propagated to concurrent processes by @newtonjob in #61419
[13.x] Remove the unused Request import from the JSON:API resource stub by @Bosun18 in #61434
[13.x] Memory leak fix in Http Client by @skr4dan in #61438
[13.x] Fix SelfBuilding build stack cleanup after exceptions by @emrebalasar in #61454
[13.x] defer all logic to the dedicated rule by @browner12 in #61445
Wrap the closure return type in withFreshQueryLog() by @SanderMuller in #61444
[13.x] Fix assertJsonMissingPath() ignoring wildcards by @xurshudyan in #61441
[13.x] Resolve the UsePolicy attribute from parent classes by @xurshudyan in #61439
[13.x] Resolve the UseEloquentBuilder attribute from parent classes by @xurshudyan in #61440
[13.x] Fix parameter docblocks that contradict the native signature by @dfinchenko in #61457
Bump softprops/action-gh-release from 3.0.2 to 3.0.3 in the github-actions group by @dependabot[bot] in #61468
[13.x] Fix RateLimited job middleware hitting limits that did not block the job by @xurshudyan in #61449
[13.x] Add devServerUrl() to Vite by @ramonmalcolm10 in #61465
[13.x] Retry phpredis commands when a connection reset surfaces as a warning by @Orrison in #61462
[13.x] Fix callbacks deferred from within a deferred callback by @newtonjob in #61431
[13.x] Propagate command_retries to phpredis cluster connections by @Orrison in #61460
[13.x] Qualify soft delete column with the query's table alias by @arunarw in #61456
[13.x] Keep Eloquent on the direct connection during migrations by @danielebarbaro in #61435
Apply fixes from StyleCI by @taylorotwell in #61470
[13.x] Fix Class Illuminate\Session\ArraySessionHandler implementing SessionHandlerInterface is missing the create_sid() method which will be required in PHP 9.0 by @crynobone in #61469
Fix route url generation under certain circumstances by @taylorotwell in #61475
[13.x] Fix message ID and header persistence on ResendTransport by @saurabhsharma2u in #61476
[13.x] Fix wherePivot() closure scope being ignored in pivot table operations by @iz-ahmad in #61488

`v13.30.1`

Compare Source

[13.x] Add connection and queue to WorkerStopping by @jackbayliss in #61387
[13.x] Add insertOrIgnoreReturning() to the Eloquent builder passthru by @xurshudyan in #61393
[13.x] Add dropVectorIndex() to the schema blueprint by @xurshudyan in #61391
[13.x] Fix limit() being ignored on update() for SQL Server by @xurshudyan in #61394
[13.x] Prevent orphaned Redis tagged cache entries by @drewmt in #61385

`v13.30.0`

Compare Source

[12.x] Backport #60908: Avoid quadratic wildcard rule expansion by @matteo-palazzo in #61232
Fix resource loading by @taylorotwell in #61323
[13.x] Output the worker stop reason in queue:work by @jackbayliss in #61339
Fix incorrect $startTime type in Worker::stopIfNecessary docblock by @il-m-tomita in #61347
[13.x] Ability to opt out of vendor/default commands in DevCommands by @jackbayliss in #61344
[13.x] Confine Storage::path() to the configured disk root by @KIKOmanasijev in #61343
[13.x] Support Microsoft SQL Server DSN connection strings by @HenkPoley in #61341
[13.x] Restore the facade application after route:cache boots a fresh application by @reiarseni in #61346
[13.x] Gracefully handle missing param value or strings with request clamps by @kylemilloy in #61355
[13.x] Restore default database connection when seeding fails by @sayful1411 in #61354
[13.x] Cloud enhancements by @timacdonald in #61360
[13.x] Allow retrieving command by name without resolving all commands by @timacdonald in #61361
[13.x] Expose methods by @timacdonald in #61362
[13.x] Add basic test for query explain by @imanghafoori1 in #61363
[13.x] Add totalXSize methods to Cloud Queue by @jackbayliss in #61352
[13.x] Add chunkBy to collections by @JosephSilber in #61357
[13.x] spl_object_id over hash by @jackbayliss in #61372
[13.x] Add createPayloadUsing directly to the queue manager by @jackbayliss in #61367
[13.x] Set visibility on files that only exist on a read-through disk's fallback by @sulimanbenhalim in #61375
[12.x] Disable html by default on Laravel exception page tooltip by @crynobone in #61381

[13.x] Prevent duplicate scoped instance registrations by @jordanhavard in #61251
[13.x] Add refreshForUpdate() method to Eloquent models by @stevebauman in #61247
[13.x] Fix PHPUnit and Mockery deprecations in tests by @lucasmichot in #61244
[13.x] Throw on unsuccessful responses when creating images from URLs by @Button99 in #61254
Apply fixes from StyleCI by @taylorotwell in #61256
[13.x] Skip scheduled workflows on forks by @MrPunyapal in #61239
[13.x] Consolidate tearDown boilerplate into AfterEachTestSubscriber by @lucasmichot in #61245
[13.x] Pin rector version by @lucasmichot in #61257
[13.x] Re-introduce orWhereKey() and orWhereKeyNot() without breaking Builder subclasses by @kevariable in #61242
[13.x] Don't force release a unique lock the job never acquired by @sulimanbenhalim in #61234
[13.x] Convert foreach-loop tests to data providers by @lucasmichot in #61258
[13.x] Simplify testImageBmp by @lucasmichot in #61259
[13.x] Add missing test coverage for Str and Stringable by @lucasmichot in #61260
[13.x] Add Queue totalXSize methods by @jackbayliss in #61231
Add MariaDB support for vector distance queries by @Rhaima96 in #61250
[13.x] Add whereBinary() to the query builder by @xiCO2k in #61261
[13.x] Fix quietly() making throw() unreachable on process results by @xurshudyan in #61227
Revert "[13.x] Consolidate tearDown boilerplate into AfterEachTestSubscriber (#61245)" by @crynobone in #61262
Use nick-fields/retry to verify clustered redis ports are available by @crynobone in #61263
[13.x] Guard against false returns in PhpRedisConnection::mget() and hmget() by @matthewfarrugia in #61267
[13.x] Add stop() and ensureNotTimedOut() to FakeInvokedProcess by @xurshudyan in #61266
[13.x] Make eager-load constraint closures static to break Builder reference cycle by @mspasov in #61264
[13.x] Move and copy files that only exist on a read-through disk's fallback by @sulimanbenhalim in #61272
[13.x] Adjust QueueTest by @jackbayliss in #61284
[13.x] Introduce InteractsWithTestCaseLifecycle::flushState() by @cosmastech in #61288
[13.x] Fix route name lost when RouteRegistrar action is not callable by @KalimeroMK in #61285
[13.x] Start a new max wait window after a debounced job runs by @sulimanbenhalim in #61281
[13.x] Fix nested includes not being limited when maxRelationshipDepth is zero by @martinsoenen in #61297
[13.x] Give each Redis Cluster node its own data directory in CI by @cyppe in #61294
[13.x] Ensure test namespaces are correct by @jackbayliss in #61304
[13.x] Fix flaky memcached touch test by pinning time by @mspasov in #61301
[13.x] Adjust database.yml timeout to 10 minutes by @jackbayliss in #61299
[13.x] Add Postgres keepalive DSN options by @tgivslife in #61307
[13.x] Introduce a Cloud facade by @jackbayliss in #61275
Normalize test fixtures by @jasonmccreary in #61315
[13.x] Treat asterisks as literal keys when merging request input by @KIKOmanasijev in #61309
[13.x] Guard against non-string mac in maintenance bypass cookie by @KIKOmanasijev in #61314
[13.x] Treat asterisks as literal keys when merging URI query parameters by @KIKOmanasijev in #61312
[13.x] Prevent loose comparison bypass in in_array validation rule by @KIKOmanasijev in #61319
[13.x] Prevent loose comparison bypass in contains validation rule by @KIKOmanasijev in #61320
[13.x] Prevent loose comparisons in doesnt_contain validation rule by @KIKOmanasijev in #61318
Fix resource loading by @taylorotwell in #61322
[13.x] Treat literal dots in input keys correctly when rejecting unknown fields by @KIKOmanasijev in #61313
Revert "[13.x] Prevent loose comparison bypass in contains validation rule" by @taylorotwell in #61330
[13.x] Allow masking query bindings in exception messages by @LauJosefsen in #61326
[13.x] Share cached AWS credentials across processes for SQS queue connections by @DGarbs51 in #61321
[13.x] Fix images created from a stream failing on the second read by @Chy-Zaber-Bin-Zahid in #61305
[13.x] Fix uncaught Brick MathException escaping the numeric comparison rules by @gcotcheza in #61332

`v13.26.1`

Compare Source

Revert "[13.x] feat: add orWhereKey and orWhereKeyNot to Eloquent Builder" by @taylorotwell in #61236

`v13.26.0`

Compare Source

[13.x] Add JobReleased event to Worker by @jackbayliss in #61108
[13.x] Fix QueueWorkerTest by @jackbayliss in #61134
[13.x] Avoid cross-slot reads when checking paused queues by @lazerg in #61139
[13.x] Add managedQueues() to the Cloud queue by @jackbayliss in #61149
[13.x] Accept enums in inOrderOf() by @ziadoz in #61147
[13.x] Surface paused queues in the queue worker output by @jackbayliss in #61142
[13.x] Respect readonly=false in Microsoft SQL Server configuration by @HenkPoley in #61141
[12.x] Stricten upload to be fetch only from request's query string for temporary upload urls by @crynobone in #61145
Read-through filesystem by @taylorotwell in #61140
[13.x] Pass a connector to PhpRedisClusterConnection so it can rebuild its client by @tgivslife in #61161
[13.x] Only register pail dev command when installed by @jackbayliss in #61157
[13.x] feat: add closure support to wherePivot and orWherePivot by @calebdw in #61150
[13.x] feat: add orWhereKey and orWhereKeyNot to Eloquent Builder by @calebdw in #61154
[13.x] allow read through filesystems to optionally not copy by @jimbojsb in #61155
[13.x] Fix constantly asking to install multiplex & starting vite on project without vite by @nunomaduro in #61167
[13.x] Add debounceable queued listeners by @stevebauman in #61169
[13.x] Add test to ensure pail is ignored if not installed by @jackbayliss in #61168
Allow some Redis commands to retry on transient failures by @taylorotwell in #61175
Fix Redis pipeline facade annotation by @MNazikk in #61173
[13.x] Remove the pinned @laravel/multiplex version by @joetannenbaum in #61171
[13.x] Fix FoundationDevCommandsTest by @jackbayliss in #61170
[12.x] Improves in validation rule from getting bypass via loose comparison by @crynobone in #61146
[13.x] Retry timed-out cloud agent long-polls by @kieranbrown in #61177
[12.x] Retry timed-out cloud agent long-polls by @kieranbrown in #61178
[13.x] Scan every master node in phpredis cluster connections by @tgivslife in #61174
[13.x] Fix uncaptured setTestNow now() reuse in tests by @lucasmichot in #61190
[13.x] Make process pools iterable by @xurshudyan in #61184
[13.x] Report seeder progress in db:seed command - when a specific class is specified by @iz-ahmad in #61186
[13.x] Fix infinite scan loop when pruning stale cache tags on a Redis cluster by @tgivslife in #61181
[13.x] Add a dedicated exception for idle process timeouts by @xurshudyan in #61182
[13.x] Keep the Redis connection usable when a pipeline or transaction fails by @tgivslife in #61183
[12.x] Escape single quotes in Postgres JSON path attributes by @crynobone in #61192
[13.x] Support Guzzle 8 by @GrahamCampbell in #60321
[13.x] Add process fake assertion helpers by @xurshudyan in #61193
[13.x] Introduce Queue::forward() by @jackbayliss in #61188
[13.x] Support array commands in process fake assertions by @xurshudyan in #61197
[13.x] Prevent TypeError when JSON:API query parameters are arrays by @s-shiryaev in #61206
More Mockery cleanup by @jasonmccreary in #61199
[13.x] fix: expectsQuestion() docblock to allow array answers by @joostdebruijn in #61223
[13.x] Test on MySQL 9.7 (lts) by @jnoordsij in #61218
[13.x] Promote nested data to top-level managed queue event by @timacdonald in #61209
[13.x] Rebuild the phpredis client after a cluster response error by @tgivslife in #61214
[13.x] Fix throwUnless() silently doing nothing when given a closure by @xurshudyan in #61217
[13.x] Keep the assertion failure message when session errors are JSON serialized by @lazerg in #61201
[13.x] Add getRelatedClass to Relation by @jackbayliss in #61222
[12.x] Promote nested data to top-level managed queue event by @timacdonald in #61225
Merge branch '12.x' into 13.x by @crynobone in #61228
[13.x] Preserve input key order when merging files in Request::all() by @roger-hermasch in #61221
Wait for Redis cluster nodes before creating the test cluster by @crynobone with @Copilot in #61229

laravel/pennant (laravel/pennant)

`v1.26.0`

Compare Source

Use object to represent global scope by @timacdonald in #181

laravel/pint (laravel/pint)

`v1.32.0`

Compare Source

`v1.31.1`

Compare Source

What's Changed

deps: composer update by @calebdw in #489

Full Changelog: laravel/pint@v1.31.0...v1.31.1

`v1.31.0`

Compare Source

`v1.30.6`

Compare Source

laravel/sail (laravel/sail)

`v1.67.0`

Compare Source

[1.x] Move from Launchpad PPA to packages.sury.org by @CasEbb in #896

spatie/laravel-prometheus (spatie/laravel-prometheus)

`v1.7.0`

Compare Source

Fixed

queue_oldest_pending_job_age now reports 0 for a queue without pending jobs instead of leaving the previous value in place, which made the metric freeze at a stale age on a persistent cache adapter (#80, #81)

A queue that cannot be read still reports no value at all, so a failed read never looks like an empty queue.

Configuration

📅 Schedule: (in timezone Europe/London)

Branch creation
- Between 09:00 AM and 04:59 PM, Monday through Friday (* 9-16 * * 1-5)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate Bot requested a review from a team as a code owner August 13, 2026 14:15

renovate Bot force-pushed the renovate/composer-minor-updates branch from 1dde5ca to a02f4de Compare August 18, 2026 12:41

renovate Bot changed the title ~~fix(deps): update dependency laravel/pennant to ^1.26.0~~ fix(deps): update composer minor updates Aug 18, 2026

renovate Bot force-pushed the renovate/composer-minor-updates branch 3 times, most recently from c149fbd to 5ba0191 Compare August 18, 2026 22:56

renovate Bot force-pushed the renovate/composer-minor-updates branch 9 times, most recently from eb72fc4 to d098532 Compare September 1, 2026 18:58

renovate Bot force-pushed the renovate/composer-minor-updates branch 10 times, most recently from 6b286ce to 43ff5c6 Compare September 8, 2026 18:09

fix(deps): update composer minor updates

d75e8bf

renovate Bot force-pushed the renovate/composer-minor-updates branch from 43ff5c6 to d75e8bf Compare September 9, 2026 17:03

Navigation Menu

Uh oh!

fix(deps): update composer minor updates - #458

fix(deps): update composer minor updates#458
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/composer-minor-updates

renovate Bot commented Aug 13, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Aug 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

What's Changed

What's Changed

New Contributors

v3.11.0: 3.11.0

What's Changed

Added

Fixed

Performance

Internal

New Contributors

What's Changed

Fixed

Configuration

Uh oh!

Reviewers

Assignees

Labels

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Aug 13, 2026 •

edited

Loading

`v3.11.0`: 3.11.0