Skip to content

Update dependency psalm/plugin-laravel to v4.10.1#832

Merged
renovate[bot] merged 1 commit into
mainfrom
renovate/psalm-plugin-laravel-4.x
May 11, 2026
Merged

Update dependency psalm/plugin-laravel to v4.10.1#832
renovate[bot] merged 1 commit into
mainfrom
renovate/psalm-plugin-laravel-4.x

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented May 11, 2026

This PR contains the following updates:

Package Change Age Confidence
psalm/plugin-laravel 4.7.04.10.1 age confidence

Release Notes

psalm/psalm-plugin-laravel (psalm/plugin-laravel)

v4.10.1: - Macro+Octane+Factory

Compare Source

What's Changed

Features
  • Macro: propagate macros to facade classes (support Route::macro, Http::macro, Collection::macro, etc) by @​alies-dev in #​905
Fixes

Full Changelog: psalm/psalm-plugin-laravel@v4.10.0...v4.10.1

v4.10.0: - Macro+Octane+Factory

Compare Source

What's Changed

Features
Fixes
Internal changes

Full Changelog: psalm/psalm-plugin-laravel@v4.9.3...v4.10.0

v4.9.3

Compare Source

What's Changed

Improvements
  • Better handle 4 params generics for BelongsToMany/MorphToMany by @​alies-dev in #​883
  • Narrow Rule::in(...) fluent builder to literal-string union by @​alies-dev in #​877
  • Fix Route::middleware() chain inference on Psalm dev-master by @​alies-dev in #​889
  • Better default config created by psalm-laravel init command by @​alies-dev in #​881:
    • exclude "tests" dir
    • use "info" level instead if "suppress"
    • use level 4 by default

Full Changelog: psalm/psalm-plugin-laravel@v4.9.2...v4.9.3

v4.9.2

Compare Source

What's Changed

Features & Fixes
  • Better Eloquent Relationship type inferring:
  • Config options: Allow custom config directories for NoEnvOutsideConfig by @​alies-dev in #​859
  • Suppress PossiblyUnusedMethod:
    • Suppress PossiblyUnusedMethod reports for FormRequest hooks by @​andrew-demb in #​863
    • Expand PossiblyUnusedMethod suppression to common Laravel hook methods: Command, Migration, Seeder, Mailable, Notification, ServiceProvider by @​alies-dev in #​866
Internal changes

New Contributors

Full Changelog: psalm/psalm-plugin-laravel@v4.9.1...v4.9.2

v4.9.1: - Validation Rules

Compare Source

What’s Changed

Fixes
  • Fix Psalm crash on AuthManager::__call-forwarded methods (eg auth()->authenticate()) (#​856) @​alies-dev

Full Changelog: psalm/psalm-plugin-laravel@v4.9.0...v4.9.1

v4.9.0: - Validation Rules

Compare Source

What’s Changed

This release is focused respecting validation rules when to mark input as safe.

Validation & taint analysis
Custom Eloquent Builders
CLI Features
  • New vendor/bin/psalm-laravel CLI with init subcommand for first-time plugin setup (#​786) @​alies-dev
  • New psalm-laravel add subcommand to scaffold a GitHub Actions security-analysis workflow (#​814) @​alies-dev
Other type infer Changes
  • Support more Laravel public methods that use variadic parameters: Collection, Session, RedirectResponse, LazyCollection, MessageBag, ServiceProvider(#​809, #​832) @​alies-dev
  • Widen Collection::make / LazyCollection::make / collect() for scalar inputs (#​783) @​alies-dev
  • Fix InvalidArgument on arrow-function closures in the Builder::where family (#​784) @​alies-dev
  • Relocate only / except / collect / old to the correct traits (#​825) @​alies-dev
  • Restate implements / extends in 4 stubs that were wiping reflected metadata (#​835, #​836) @​alies-dev
Internal changes

v4.8.4: - AI skill

Compare Source

What’s Changed

This release focuses on fixing minor issues (plugin gaps) found on real projects.

Fixes

Full Changelog: psalm/psalm-plugin-laravel@v4.8.3...v4.8.4

v4.8.3: - AI Skill

Compare Source

What’s Changed

Fixes
  • Fix false-positive DocblockTypeContradiction on filled()/blank() guards with nullable strings (#​753) @​alies-dev
  • fix: narrow app(static::class, ...) and class-string<Foo> arguments (#​754) @​alies-dev

Full Changelog: psalm/psalm-plugin-laravel@v4.8.2...v4.8.3

v4.8.2: - AI Skill

Compare Source

What’s Changed

Fixes
Internal changes
  • Shorten bug-report title and prevent "vendorsrc" path collapse in IssueUrlGenerator (#​747) @​alies-dev
  • Tests: Add --SKIPIF-- support to PsalmTest via getSkipReason() (#​742) @​alies-dev
  • Tests: Run type tests in parallel (use alies-dev/psalm-tester) @​alies-dev

Full Changelog: psalm/psalm-plugin-laravel@v4.8.1...v4.8.2

v4.8.1: - AI Skill

Compare Source

What’s Changed

  • Enhance AI skill to use compact output mode to save tokens (available from Psalm v7.0.beta-18)
  • Use E_USER_DEPRECATED output type for deprecation warnings

Full Changelog: psalm/psalm-plugin-laravel@v4.8.0...v4.8.1

v4.8.0: - AI Skill

Compare Source

Laravel Boost Skill

This release adds psalm-security-analysis AI skill installable via Laravel Boost. You can install it by re-running boost:update (or boost:install on fresh installations).
This allows your agent find and fix security issues found by Psalm taint analysis.

image

What’s Changed

Features
  • Add Laravel Boost psalm-security-analysis skill for AI agents (#​672) @​alies-dev
  • Support HigherOrderCollectionProxy method call chains (#​724) @​alies-dev
  • Validate Config::array() and Config::collection() default argument type (#​736) @​alies-dev
  • Resolve scope methods on Eloquent relation chains (#​738) @​alies-dev
  • 🛡️ Add missing @psalm-taint-sink file methods to Filesystem/FilesystemAdapter stubs (#​739) @​alies-dev
Fixes
  • Fix: PossiblyUnusedMethod false positives for Eloquent legacy accessor/mutator methods (#​732) @​alies-dev
Internal changes
  • Simplify migration: Add Psalter plugin for upgrading relation PHPDoc annotations (#​735) @​alies-dev

    Migration of PHPDoc from v3.x version to v4.7+ for relationship definitions is easy now:

    ./vendor/bin/psalter --plugin=vendor/psalm/plugin-laravel/tools/psalter/UpgradeRelationAnnotations.php

Full Changelog: psalm/psalm-plugin-laravel@v4.7.0...v4.8.0


Configuration

📅 Schedule: (in timezone America/New_York)

  • Branch creation
    • "before 4pm every weekday except before 9am every weekday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot enabled auto-merge May 11, 2026 17:51
@renovate renovate Bot merged commit 1271ffe into main May 11, 2026
7 checks passed
@renovate renovate Bot deleted the renovate/psalm-plugin-laravel-4.x branch May 11, 2026 17:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants