Skip to content

chore(deps-dev): bump the composer-minor-and-patch group across 1 directory with 2 updates - #15

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/composer/composer-minor-and-patch-76aa2f4bfc
Closed

chore(deps-dev): bump the composer-minor-and-patch group across 1 directory with 2 updates#15
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/composer/composer-minor-and-patch-76aa2f4bfc

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 15, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the composer-minor-and-patch group with 2 updates in the / directory: larastan/larastan and laravel/mcp.

Updates larastan/larastan from 3.12.2 to 3.14.0

Release notes

Sourced from larastan/larastan's releases.

3.14.0

What's Changed

The new Arr::get() and Arr::pull() key check is enabled by default. Calls with definitely missing keys now report offsetAccess.notFound, including calls that provide a default value. PHP, Laravel, and PHPStan requirements are unchanged.

Added

  • Infer return types for Arr::get() and Arr::pull(), including dot notation and default values, and track array keys removed by Arr::pull(), by @​canvural in #2635.
  • Report definitely missing keys in Arr::get() and Arr::pull() by @​canvural in #2635.
  • Load Redis facade and connection stubs for the configured PhpRedis or Predis driver, with a redisDriver override, by @​canvural in #2626.
  • Re-analyse affected files when config files, migrations, or schema dumps are created, changed, or deleted by @​canvural in #2631.

Fixed

  • Resolve config values in the config file's own scope, including local variables and imports, by @​canvural in aefbc03.
  • Resolve config file @return PHPDocs using that file's imports, and avoid incorrect inference for missing keys or files with multiple returns, by @​canvural in f0e6e1c, 73cd4c3, and 10e955b.
  • Preserve env()'s possible return types when its default is null and generalizeEnvReturnType is enabled by @​canvural in bfcc01e.
  • Rerun unused-view and missing-translation checks when their input files change by @​SanderMuller in #2630.
  • Preserve Arrayable<TKey, TValue> types in toArray() and correct model array key types by @​liamduckett in #2254.
  • Support union and intersection return types from model newCollection() methods by @​ybai08 in #2604.
  • Accept unions of array shapes in FormRequest::safe() by @​aran112000 in #2637.
  • Only evaluate closures passed to value(), preserving other callable values, by @​APX403 in #2632.
  • Read #[UseEloquentBuilder] from parent models and traits on Laravel 13.31 and newer by @​APX403 in #2621.
  • Resolve a model subclass's factory using its own conventional factory name by @​SanderMuller in #2625.
  • Infer group key types for higher-order groupBy calls by @​mkantautas in #2620.
  • Accept a per-page callback in Eloquent paginate() by @​mkantautas in #2619.
  • Accept a Cursor object in relation cursorPaginate() calls by @​mkantautas in #2627.
  • Check model properties in fillAndInsert(), fillAndInsertOrIgnore(), fillAndInsertGetId(), and fillForInsert() by @​uchimaki-vensley in #2601.
  • Read migration columns declared in arrow-function callbacks by @​aka-tpayne in #2608.
  • Resolve custom generic PHPDoc names through the TypeNode API by @​Xauele in 1509cc6.
  • Keep dispatch argument checking compatible with PHPStan's updated FunctionCallParametersCheck API by @​canvural in #2633.

New Contributors

Full Changelog: v3.13.2...v3.14.0

3.13.2

What's Changed

Added

  • Read CREATE TABLE statements passed as string literals to DB::statement() and DB::unprepared() in migrations, using the same SQL parsers as schema dumps, by @​tiagoabsantos in #2564. Read more about it here.
  • Infer Arr::map() callback parameter types and the mapped array type by @​Gabrieljr42 in #2587.

Fixed

... (truncated)

Commits
  • d8fabc3 test: make migration cache timestamps deterministic
  • 9eadf82 feat: infer Arr::get() and Arr::pull() types and report missing keys (#2635)
  • ab9b54a fix: support union and intersection return types of newCollection() (#2604)
  • 83f9065 fix: accept a union of constant arrays in FormRequest::safe() (#2637)
  • 762646b fix: arrayable generics (#2254)
  • aefbc03 fix: type config values in the config file's own scope instead of the caller's
  • 10e955b fix: read config values only from a config file's single top-level return
  • f0e6e1c fix: resolve config file @​return PHPDocs with the config file's imports
  • bfcc01e fix: keep env()'s set-variable types for a null default with generalizeEnvRet...
  • 73cd4c3 fix: give no config() type for keys missing from or below a scalar in the con...
  • Additional commits viewable in compare view

Updates laravel/mcp from 1.0.1 to 1.1.2

Release notes

Sourced from laravel/mcp's releases.

v1.1.2

What's Changed

New Contributors

Full Changelog: laravel/mcp@v1.1.1...v1.1.2

v1.1.1

What's Changed

Full Changelog: laravel/mcp@v1.1.0...v1.1.1

v1.1.0

What's Changed

New Contributors

Full Changelog: laravel/mcp@v1.0.2...v1.1.0

v1.0.2

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from laravel/mcp's changelog.

v1.1.2 - 2026-10-26

What's Changed

New Contributors

Full Changelog: laravel/mcp@v1.1.1...v1.1.2

v1.1.1 - 2026-10-21

What's Changed

Full Changelog: laravel/mcp@v1.1.0...v1.1.1

v1.1.0 - 2026-10-20

What's Changed

New Contributors

Full Changelog: laravel/mcp@v1.0.2...v1.1.0

v1.0.2 - 2026-10-11

What's Changed

... (truncated)

Commits
  • ab9238c Check resolved addresses of OAuth discovery hosts (#378)
  • 41adefa Allow MCP Apps without a ui.domain (#381)
  • 79c6fed Prevent the OAuth authorize page from being framed by default (#376)
  • 5ef68ea Show the redirect URI on the OAuth authorize page (#377)
  • 6ed484c Limit OAuth requests to HTTP and HTTPS and cap response size (#380)
  • 2f8202a Update CHANGELOG
  • e77af70 Limit the number and length of redirect URIs in dynamic client registration (...
  • d412495 Update CHANGELOG
  • a40cc38 Verify the resource advertises caller supplied OAuth metadata (#371)
  • cd20f0a Align legacy initialization and HTTP protocol support
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update php code labels Oct 15, 2026
@dependabot
dependabot Bot force-pushed the dependabot/composer/composer-minor-and-patch-76aa2f4bfc branch from 5d483c3 to 2d9b4c0 Compare November 1, 2026 01:27
@dependabot
chore(deps-dev): bump the composer-minor-and-patch group across 1 dir…
f804787 
…ectory with 2 updates

Bumps the composer-minor-and-patch group with 2 updates in the / directory: [larastan/larastan](https://github.com/larastan/larastan) and [laravel/mcp](https://github.com/laravel/mcp).


Updates `larastan/larastan` from 3.12.2 to 3.14.0
- [Release notes](https://github.com/larastan/larastan/releases)
- [Changelog](https://github.com/larastan/larastan/blob/3.x/RELEASE.md)
- [Commits](larastan/larastan@v3.12.2...v3.14.0)

Updates `laravel/mcp` from 1.0.1 to 1.1.2
- [Release notes](https://github.com/laravel/mcp/releases)
- [Changelog](https://github.com/laravel/mcp/blob/main/CHANGELOG.md)
- [Commits](laravel/mcp@v1.0.1...v1.1.2)

---
updated-dependencies:
- dependency-name: larastan/larastan
  dependency-version: 3.13.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: composer-minor-and-patch
- dependency-name: laravel/mcp
  dependency-version: 1.0.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: composer-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/composer/composer-minor-and-patch-76aa2f4bfc branch from 2d9b4c0 to f804787 Compare November 6, 2026 12:32
@dependabot @github

dependabot Bot commented on behalf of github Nov 14, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Nov 14, 2026
@dependabot
dependabot Bot deleted the dependabot/composer/composer-minor-and-patch-76aa2f4bfc branch November 14, 2026 11:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file php Pull requests that update php code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants