Skip to content

chore(deps): bump the composer-minor-and-patch group across 1 directory with 4 updates - #18

Merged
spdotdev merged 1 commit into
mainfrom
dependabot/composer/composer-minor-and-patch-a8d836f0a6
Nov 14, 2026
Merged

chore(deps): bump the composer-minor-and-patch group across 1 directory with 4 updates#18
spdotdev merged 1 commit into
mainfrom
dependabot/composer/composer-minor-and-patch-a8d836f0a6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 14, 2026

Copy link
Copy Markdown
Contributor

Bumps the composer-minor-and-patch group with 4 updates in the / directory: laravel/sanctum, larastan/larastan, laravel/mcp and laravel/pint.

Updates laravel/sanctum from 4.3.3 to 4.4.0

Release notes

Sourced from laravel/sanctum's releases.

v4.4.0

What's Changed

New Contributors

Full Changelog: laravel/sanctum@v4.3.3...v4.4.0

Changelog

Sourced from laravel/sanctum's changelog.

v4.4.0 - 2026-11-02

What's Changed

New Contributors

Full Changelog: laravel/sanctum@v4.3.3...v4.4.0

Commits

Updates larastan/larastan from 3.12.2 to 3.14.0

Release notes

Sourced from larastan/larastan's releases.

3.14.0

What's Changed

The new Arr::get() and Arr::pull() key check is enabled by default. Calls with definitely missing keys now report offsetAccess.notFound, including calls that provide a default value. PHP, Laravel, and PHPStan requirements are unchanged.

Added

  • Infer return types for Arr::get() and Arr::pull(), including dot notation and default values, and track array keys removed by Arr::pull(), by @​canvural in #2635.
  • Report definitely missing keys in Arr::get() and Arr::pull() by @​canvural in #2635.
  • Load Redis facade and connection stubs for the configured PhpRedis or Predis driver, with a redisDriver override, by @​canvural in #2626.
  • Re-analyse affected files when config files, migrations, or schema dumps are created, changed, or deleted by @​canvural in #2631.

Fixed

  • Resolve config values in the config file's own scope, including local variables and imports, by @​canvural in aefbc03.
  • Resolve config file @return PHPDocs using that file's imports, and avoid incorrect inference for missing keys or files with multiple returns, by @​canvural in f0e6e1c, 73cd4c3, and 10e955b.
  • Preserve env()'s possible return types when its default is null and generalizeEnvReturnType is enabled by @​canvural in bfcc01e.
  • Rerun unused-view and missing-translation checks when their input files change by @​SanderMuller in #2630.
  • Preserve Arrayable<TKey, TValue> types in toArray() and correct model array key types by @​liamduckett in #2254.
  • Support union and intersection return types from model newCollection() methods by @​ybai08 in #2604.
  • Accept unions of array shapes in FormRequest::safe() by @​aran112000 in #2637.
  • Only evaluate closures passed to value(), preserving other callable values, by @​APX403 in #2632.
  • Read #[UseEloquentBuilder] from parent models and traits on Laravel 13.31 and newer by @​APX403 in #2621.
  • Resolve a model subclass's factory using its own conventional factory name by @​SanderMuller in #2625.
  • Infer group key types for higher-order groupBy calls by @​mkantautas in #2620.
  • Accept a per-page callback in Eloquent paginate() by @​mkantautas in #2619.
  • Accept a Cursor object in relation cursorPaginate() calls by @​mkantautas in #2627.
  • Check model properties in fillAndInsert(), fillAndInsertOrIgnore(), fillAndInsertGetId(), and fillForInsert() by @​uchimaki-vensley in #2601.
  • Read migration columns declared in arrow-function callbacks by @​aka-tpayne in #2608.
  • Resolve custom generic PHPDoc names through the TypeNode API by @​Xauele in 1509cc6.
  • Keep dispatch argument checking compatible with PHPStan's updated FunctionCallParametersCheck API by @​canvural in #2633.

New Contributors

Full Changelog: v3.13.2...v3.14.0

3.13.2

What's Changed

Added

  • Read CREATE TABLE statements passed as string literals to DB::statement() and DB::unprepared() in migrations, using the same SQL parsers as schema dumps, by @​tiagoabsantos in #2564. Read more about it here.
  • Infer Arr::map() callback parameter types and the mapped array type by @​Gabrieljr42 in #2587.

Fixed

... (truncated)

Commits
  • d8fabc3 test: make migration cache timestamps deterministic
  • 9eadf82 feat: infer Arr::get() and Arr::pull() types and report missing keys (#2635)
  • ab9b54a fix: support union and intersection return types of newCollection() (#2604)
  • 83f9065 fix: accept a union of constant arrays in FormRequest::safe() (#2637)
  • 762646b fix: arrayable generics (#2254)
  • aefbc03 fix: type config values in the config file's own scope instead of the caller's
  • 10e955b fix: read config values only from a config file's single top-level return
  • f0e6e1c fix: resolve config file @​return PHPDocs with the config file's imports
  • bfcc01e fix: keep env()'s set-variable types for a null default with generalizeEnvRet...
  • 73cd4c3 fix: give no config() type for keys missing from or below a scalar in the con...
  • Additional commits viewable in compare view

Updates laravel/mcp from 1.0.1 to 1.2.0

Release notes

Sourced from laravel/mcp's releases.

v1.2.0

What's Changed

New Contributors

Full Changelog: laravel/mcp@v1.1.2...v1.2.0

v1.1.2

What's Changed

New Contributors

Full Changelog: laravel/mcp@v1.1.1...v1.1.2

v1.1.1

What's Changed

Full Changelog: laravel/mcp@v1.1.0...v1.1.1

v1.1.0

What's Changed

New Contributors

Full Changelog: laravel/mcp@v1.0.2...v1.1.0

v1.0.2

What's Changed

... (truncated)

Changelog

Sourced from laravel/mcp's changelog.

v1.2.0 - 2026-11-10

What's Changed

New Contributors

Full Changelog: laravel/mcp@v1.1.2...v1.2.0

v1.1.2 - 2026-10-26

What's Changed

New Contributors

Full Changelog: laravel/mcp@v1.1.1...v1.1.2

v1.1.1 - 2026-10-21

What's Changed

Full Changelog: laravel/mcp@v1.1.0...v1.1.1

v1.1.0 - 2026-10-20

What's Changed

... (truncated)

Commits
  • 4df5077 Validate the Origin header on MCP web routes (#394)
  • cff3263 Return JSON-RPC errors instead of 500s for malformed requests and params (#395)
  • c510d61 Dependency floor bump (#393)
  • 47771dc Stop following redirects in the MCP HTTP client transport (#392)
  • c4dd29a Keep invalid UTF-8 header values out of the header mismatch message (#391)
  • 18d01aa Fix code styling
  • b82ad51 Add missing return types to closures and test fixtures
  • c0dfbec Add more JSON assertions for structured content (#384)
  • bfc8bbe Bump stefanzweifel/git-auto-commit-action (#383)
  • 637a21a Update CHANGELOG
  • Additional commits viewable in compare view

Updates laravel/pint from 1.32.1 to 1.32.2

Release notes

Sourced from laravel/pint's releases.

v1.32.2

What's Changed

New Contributors

Full Changelog: laravel/pint@v1.32.1...v1.32.2

Commits
  • 35f43b8 release: v1.32.2
  • d2cee27 fix: forward memory_limit to parallel workers (#497)
  • c56f945 Validate cache-file and extend paths from pint.json (#503)
  • 4c4014b chore: bumps deps
  • 46761ab Merge pull request #501 from laravel/fix/symfony-security-advisories
  • 3b1c883 Update composer.lock
  • aab177d chore: tests against php 8.6
  • 855ea25 build(deps): bump the github-actions group with 3 updates (#496)
  • b3ea291 Merge pull request #495 from laravel/security-policy-parity
  • cd3876f Remove security policy in favor of the org-wide default
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the composer-minor-and-patch group across 1 directo…
647a216 
…ry with 4 updates

Bumps the composer-minor-and-patch group with 4 updates in the / directory: [laravel/sanctum](https://github.com/laravel/sanctum), [larastan/larastan](https://github.com/larastan/larastan), [laravel/mcp](https://github.com/laravel/mcp) and [laravel/pint](https://github.com/laravel/pint).


Updates `laravel/sanctum` from 4.3.3 to 4.4.0
- [Release notes](https://github.com/laravel/sanctum/releases)
- [Changelog](https://github.com/laravel/sanctum/blob/4.x/CHANGELOG.md)
- [Commits](laravel/sanctum@v4.3.3...v4.4.0)

Updates `larastan/larastan` from 3.12.2 to 3.14.0
- [Release notes](https://github.com/larastan/larastan/releases)
- [Changelog](https://github.com/larastan/larastan/blob/3.x/RELEASE.md)
- [Commits](larastan/larastan@v3.12.2...v3.14.0)

Updates `laravel/mcp` from 1.0.1 to 1.2.0
- [Release notes](https://github.com/laravel/mcp/releases)
- [Changelog](https://github.com/laravel/mcp/blob/main/CHANGELOG.md)
- [Commits](laravel/mcp@v1.0.1...v1.2.0)

Updates `laravel/pint` from 1.32.1 to 1.32.2
- [Release notes](https://github.com/laravel/pint/releases)
- [Changelog](https://github.com/laravel/pint/blob/main/CHANGELOG.md)
- [Commits](laravel/pint@v1.32.1...v1.32.2)

---
updated-dependencies:
- dependency-name: laravel/sanctum
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: composer-minor-and-patch
- dependency-name: larastan/larastan
  dependency-version: 3.14.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: composer-minor-and-patch
- dependency-name: laravel/mcp
  dependency-version: 1.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: composer-minor-and-patch
- dependency-name: laravel/pint
  dependency-version: 1.32.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: composer-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update php code labels Nov 14, 2026
@spdotdev
spdotdev merged commit 864f804 into main Nov 14, 2026
5 checks passed
@dependabot
dependabot Bot deleted the dependabot/composer/composer-minor-and-patch-a8d836f0a6 branch November 14, 2026 22:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file php Pull requests that update php code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@spdotdev