Bump the php-dependencies group across 1 directory with 3 updates by dependabot[bot] · Pull Request #4649 · cachethq/cachet

dependabot · 2026-11-11T07:02:44Z

Bumps the php-dependencies group with 3 updates in the / directory: laravel/framework, laravel/sanctum and laravel/tinker.

Updates laravel/framework from 13.39.0 to 13.40.0

Release notes

Sourced from laravel/framework's releases.

v13.40.0

[13.x] Fix Paginator::links() return type by @dhrupo in laravel/framework#62226

[13.x] Fix updating JSON paths with arrays and collections on MySQL and MariaDB by @xurshudyan in laravel/framework#62225

[13.x] Use the write connection in BelongsToMany createOrFirst lookup by @xurshudyan in laravel/framework#62223

[13.x] Drop check constraints when dropping columns on SQL Server by @xurshudyan in laravel/framework#62222

[13.x] Centralize + improve tests for InteractsWithData by @inxilpro in laravel/framework#62217

[13.x] Fix Redis tagged cache flush blocking Redis when flushing many tags by @MohannadElemary in laravel/framework#62215

[13.x] Qualify dropped and renamed indexes with the table schema on PostgreSQL by @xurshudyan in laravel/framework#62213

[13.x] Reconnect after losing the connection during a transaction by @xurshudyan in laravel/framework#62211

[13.x] Add missing PostgreSQL full text languages by @xurshudyan in laravel/framework#62210

[13.x] Add Queue::whenJobRunsLongerThan by @jackbayliss in laravel/framework#62141

[13.x] Fix named arguments in Cookie::queue() by @xurshudyan in laravel/framework#62246

[13.x] Fix ImageFile::default() returning a plain File rule by @Marzaan in laravel/framework#62244

[13.x] Fix pagination contracts render() return type by @dhrupo in laravel/framework#62242

[13.x] Fix SQL Server ignoring orderBy on update and delete with limit by @xurshudyan in laravel/framework#62239

[13.x] Preserve error_get_last() for suppressed errors by @xurshudyan in laravel/framework#62228

Prepare reusable development environments for Amp orbs by @DGarbs51 in laravel/framework#62231

Allow $middleware->replace() to accept an array of replacements by @ziadoz in laravel/framework#62230

[13.x] Show released jobs as released in queue:work output by @jackbayliss in laravel/framework#62180

Add $middleware->insertBefore() and $middleware->insertAfter() helper methods by @ziadoz in laravel/framework#62261

[13.x] Reconnect the Cloud log socket after a failed write by @jamesdangercarpenter in laravel/framework#62258

[13.x] Dispatch ScheduledTaskSkipped when a task already ran on another server by @jackbayliss in laravel/framework#62256

[13.x] Fix forceIndex() generating invalid SQL on SQLite for PRIMARY and multiple indexes by @tharlei in laravel/framework#62255

[13.x] Add Schedule::whenTaskRunsLongerThan by @jackbayliss in laravel/framework#62233

[13.x] Roll back to savepoint on concurrency errors in nested transactions by @xurshudyan in laravel/framework#62248

[13.x] Fix toResourceCollection() on filtered collections by @xurshudyan in laravel/framework#62266

Fix lazily loaded images not being freed until garbage collection by @tamc in laravel/framework#62265

Bump stefanzweifel/git-auto-commit-action from 7.2.0 to 7.2.1 in the github-actions group by @dependabot[bot] in laravel/framework#62288

KeyGenerateCommand: improve help message about '--show' by @valerio-bozzolan in laravel/framework#62286

[13.x] Record failed batch jobs when the model is missing by @xurshudyan in laravel/framework#62280

[13.x] Fix broadcasting to multiple encrypted Pusher channels by @xurshudyan in laravel/framework#62279

[13.x] Fix Str::remove() rejecting a Traversable subject by @Amirhf1 in laravel/framework#62278

[13.x] Fix Str::substrCount() treating offset and length as bytes by @Amirhf1 in laravel/framework#62277

[13.x] Fix withExists() and loadExists() on SQL Server by @xurshudyan in laravel/framework#62273

[13.x] Fix cursorPaginate() columns on union queries with multiple orders by @xurshudyan in laravel/framework#62272

[13.x] Fix @param types wider than the native parameter type by @dhrupo in laravel/framework#62271

[13.x] Detect QueryList.TerminateAll() as lost connection by @jackbayliss in laravel/framework#62270

[13.x] Add a strict flag to InteractsWithData by @inxilpro in laravel/framework#62254

[13.x] database fundamentals to know if a read connection has catched up to a write connection by @tpetry in laravel/framework#62198

[13.x] Fix CommandSignatureTest by @jackbayliss in laravel/framework#62295

[13.x] Fix JSON:API resource collections wrapping plain objects by @lazerg in laravel/framework#62299

[13.x] Fix: Authenticate the Concurrency Process Result Envelope to Prevent Task Output Injection by @Arr0way in laravel/framework#62297

Changelog

Sourced from laravel/framework's changelog.

v13.40.0 - 2026-11-03

[13.x] Fix Paginator::links() return type by @dhrupo in laravel/framework#62226

[13.x] Fix updating JSON paths with arrays and collections on MySQL and MariaDB by @xurshudyan in laravel/framework#62225

[13.x] Use the write connection in BelongsToMany createOrFirst lookup by @xurshudyan in laravel/framework#62223

[13.x] Drop check constraints when dropping columns on SQL Server by @xurshudyan in laravel/framework#62222

[13.x] Centralize + improve tests for InteractsWithData by @inxilpro in laravel/framework#62217

[13.x] Fix Redis tagged cache flush blocking Redis when flushing many tags by @MohannadElemary in laravel/framework#62215

[13.x] Qualify dropped and renamed indexes with the table schema on PostgreSQL by @xurshudyan in laravel/framework#62213

[13.x] Reconnect after losing the connection during a transaction by @xurshudyan in laravel/framework#62211

[13.x] Add missing PostgreSQL full text languages by @xurshudyan in laravel/framework#62210

[13.x] Add Queue::whenJobRunsLongerThan by @jackbayliss in laravel/framework#62141

[13.x] Fix named arguments in Cookie::queue() by @xurshudyan in laravel/framework#62246

[13.x] Fix ImageFile::default() returning a plain File rule by @Marzaan in laravel/framework#62244

[13.x] Fix pagination contracts render() return type by @dhrupo in laravel/framework#62242

[13.x] Fix SQL Server ignoring orderBy on update and delete with limit by @xurshudyan in laravel/framework#62239

[13.x] Preserve error_get_last() for suppressed errors by @xurshudyan in laravel/framework#62228

Prepare reusable development environments for Amp orbs by @DGarbs51 in laravel/framework#62231

Allow $middleware->replace() to accept an array of replacements by @ziadoz in laravel/framework#62230

[13.x] Show released jobs as released in queue:work output by @jackbayliss in laravel/framework#62180

Add $middleware->insertBefore() and $middleware->insertAfter() helper methods by @ziadoz in laravel/framework#62261

[13.x] Reconnect the Cloud log socket after a failed write by @jamesdangercarpenter in laravel/framework#62258

[13.x] Dispatch ScheduledTaskSkipped when a task already ran on another server by @jackbayliss in laravel/framework#62256

[13.x] Fix forceIndex() generating invalid SQL on SQLite for PRIMARY and multiple indexes by @tharlei in laravel/framework#62255

[13.x] Add Schedule::whenTaskRunsLongerThan by @jackbayliss in laravel/framework#62233

[13.x] Roll back to savepoint on concurrency errors in nested transactions by @xurshudyan in laravel/framework#62248

[13.x] Fix toResourceCollection() on filtered collections by @xurshudyan in laravel/framework#62266

Fix lazily loaded images not being freed until garbage collection by @tamc in laravel/framework#62265

Bump stefanzweifel/git-auto-commit-action from 7.2.0 to 7.2.1 in the github-actions group by @dependabot[bot] in laravel/framework#62288

KeyGenerateCommand: improve help message about '--show' by @valerio-bozzolan in laravel/framework#62286

[13.x] Record failed batch jobs when the model is missing by @xurshudyan in laravel/framework#62280

[13.x] Fix broadcasting to multiple encrypted Pusher channels by @xurshudyan in laravel/framework#62279

[13.x] Fix Str::remove() rejecting a Traversable subject by @Amirhf1 in laravel/framework#62278

[13.x] Fix Str::substrCount() treating offset and length as bytes by @Amirhf1 in laravel/framework#62277

[13.x] Fix withExists() and loadExists() on SQL Server by @xurshudyan in laravel/framework#62273

[13.x] Fix cursorPaginate() columns on union queries with multiple orders by @xurshudyan in laravel/framework#62272

[13.x] Fix @param types wider than the native parameter type by @dhrupo in laravel/framework#62271

[13.x] Detect QueryList.TerminateAll() as lost connection by @jackbayliss in laravel/framework#62270

[13.x] Add a strict flag to InteractsWithData by @inxilpro in laravel/framework#62254

[13.x] database fundamentals to know if a read connection has catched up to a write connection by @tpetry in laravel/framework#62198

[13.x] Fix CommandSignatureTest by @jackbayliss in laravel/framework#62295

[13.x] Fix JSON:API resource collections wrapping plain objects by @lazerg in laravel/framework#62299

[13.x] Fix: Authenticate the Concurrency Process Result Envelope to Prevent Task Output Injection by @Arr0way in laravel/framework#62297

Commits

1449bf2 Update version to v13.40.0
c37133b [13.x] Fix: Authenticate the Concurrency Process Result Envelope to Prevent T...
1571da1 Fix JSON:API resource collections wrapping plain objects (#62299)
aa6dcc6 Update command_signatures.php (#62295)
b20bf7f Update facade docblocks
86d3106 [13.x] database fundamentals to know if a read connection has catched up to a...
c40be6a Update facade docblocks
9a484bf [13.x] Add a strict flag to InteractsWithData (#62254)
3f50fa3 add QueryList.TerminateAll to lost connection detector (#62270)
ce1e6fa Fix @param types wider than the native parameter type (#62271)
Additional commits viewable in compare view

Updates laravel/sanctum from 4.3.3 to 4.4.0

Release notes

Sourced from laravel/sanctum's releases.

v4.4.0

What's Changed

Bump actions/checkout from 7.0.0 to 7.0.1 in the github-actions group by @dependabot[bot] in laravel/sanctum#614

Migration from Mockery to Double by @jasonmccreary in laravel/sanctum#618

Bump to Double v1 by @jasonmccreary in laravel/sanctum#620

Remove security policy in favor of the org-wide default by @pushpak1300 in laravel/sanctum#621

Bump shivammathur/setup-php from 2.37.2 to 2.40.0 in the github-actions group by @dependabot[bot] in laravel/sanctum#622

Possible fix for cases where a SPA has more than one guard simultaneously by @sandcore-dev in laravel/sanctum#624

New Contributors

@jasonmccreary made their first contribution in laravel/sanctum#618

@pushpak1300 made their first contribution in laravel/sanctum#621

@sandcore-dev made their first contribution in laravel/sanctum#624

Full Changelog: laravel/sanctum@v4.3.3...v4.4.0

Changelog

Sourced from laravel/sanctum's changelog.

v4.4.0 - 2026-11-02

What's Changed

Bump actions/checkout from 7.0.0 to 7.0.1 in the github-actions group by @dependabot[bot] in laravel/sanctum#614

Migration from Mockery to Double by @jasonmccreary in laravel/sanctum#618

Bump to Double v1 by @jasonmccreary in laravel/sanctum#620

Remove security policy in favor of the org-wide default by @pushpak1300 in laravel/sanctum#621

Bump shivammathur/setup-php from 2.37.2 to 2.40.0 in the github-actions group by @dependabot[bot] in laravel/sanctum#622

Possible fix for cases where a SPA has more than one guard simultaneously by @sandcore-dev in laravel/sanctum#624

New Contributors

@jasonmccreary made their first contribution in laravel/sanctum#618

@pushpak1300 made their first contribution in laravel/sanctum#621

@sandcore-dev made their first contribution in laravel/sanctum#624

Full Changelog: laravel/sanctum@v4.3.3...v4.4.0

Commits

a28ea5d Specify guard to get password (#624)
c33d50f Bump shivammathur/setup-php (#622)
b628646 Merge pull request #621 from laravel/security-policy-parity
d7727c6 Remove security policy in favor of the org-wide default
1aa53e0 Bump to Double v1 (#620)
2d1fee0 Migration from Mockery to Double (#618)
7fb0d86 Bump actions/checkout from 7.0.0 to 7.0.1 in the github-actions group (#614)
beb27ac Update CHANGELOG
See full diff in compare view

Updates laravel/tinker from 3.0.2 to 3.1.0

Release notes

Sourced from laravel/tinker's releases.

v3.1.0

What's Changed

Pin GitHub Actions to commit SHAs and add Dependabot config by @joetannenbaum in laravel/tinker#200

Bump shivammathur/setup-php from 2.37.0 to 2.37.1 in the github-actions group by @dependabot[bot] in laravel/tinker#202

Pin pull requests and issues workflows to latest laravel/.github by @nunomaduro in laravel/tinker#203

Add Dependabot cooldown of 5 days by @nunomaduro in laravel/tinker#204

Enable Dependabot auto-merge by @nunomaduro in laravel/tinker#206

Bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions group by @dependabot[bot] in laravel/tinker#207

Bump shivammathur/setup-php from 2.37.1 to 2.37.2 in the github-actions group by @dependabot[bot] in laravel/tinker#208

Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group by @dependabot[bot] in laravel/tinker#209

Bump actions/checkout from 7.0.0 to 7.0.1 in the github-actions group by @dependabot[bot] in laravel/tinker#210

Bump minimum PsySH version by @lazerg in laravel/tinker#212

Remove Mockery by @jasonmccreary in laravel/tinker#214

Experimental supports for PHP 8.6 by @crynobone in laravel/tinker#215

Remove security policy in favor of the org-wide default by @pushpak1300 in laravel/tinker#216

Bump shivammathur/setup-php from 2.37.2 to 2.40.0 in the github-actions group by @dependabot[bot] in laravel/tinker#217

New Contributors

@joetannenbaum made their first contribution in laravel/tinker#200

@jasonmccreary made their first contribution in laravel/tinker#214

@pushpak1300 made their first contribution in laravel/tinker#216

Full Changelog: laravel/tinker@v3.0.2...v3.1.0

Changelog

Sourced from laravel/tinker's changelog.

v3.1.0 - 2026-10-16

What's Changed

Pin GitHub Actions to commit SHAs and add Dependabot config by @joetannenbaum in laravel/tinker#200

Bump shivammathur/setup-php from 2.37.0 to 2.37.1 in the github-actions group by @dependabot[bot] in laravel/tinker#202

Pin pull requests and issues workflows to latest laravel/.github by @nunomaduro in laravel/tinker#203

Add Dependabot cooldown of 5 days by @nunomaduro in laravel/tinker#204

Enable Dependabot auto-merge by @nunomaduro in laravel/tinker#206

Bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions group by @dependabot[bot] in laravel/tinker#207

Bump shivammathur/setup-php from 2.37.1 to 2.37.2 in the github-actions group by @dependabot[bot] in laravel/tinker#208

Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group by @dependabot[bot] in laravel/tinker#209

Bump actions/checkout from 7.0.0 to 7.0.1 in the github-actions group by @dependabot[bot] in laravel/tinker#210

Bump minimum PsySH version by @lazerg in laravel/tinker#212

Remove Mockery by @jasonmccreary in laravel/tinker#214

Experimental supports for PHP 8.6 by @crynobone in laravel/tinker#215

Remove security policy in favor of the org-wide default by @pushpak1300 in laravel/tinker#216

Bump shivammathur/setup-php from 2.37.2 to 2.40.0 in the github-actions group by @dependabot[bot] in laravel/tinker#217

New Contributors

@joetannenbaum made their first contribution in laravel/tinker#200

@jasonmccreary made their first contribution in laravel/tinker#214

@pushpak1300 made their first contribution in laravel/tinker#216

Full Changelog: laravel/tinker@v3.0.2...v3.1.0

Commits

5fab251 Bump shivammathur/setup-php (#217)
b9e6176 Merge pull request #216 from laravel/security-policy-parity
4df3e97 Experimental supports for PHP 8.6 (#215)
8f4063c Remove Mockery (#214)
e7da751 Bump minimum PsySH version (#212)
a1fd59c Bump actions/checkout from 7.0.0 to 7.0.1 in the github-actions group (#210)
7dd1879 Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group (#209)
1111e60 Bump shivammathur/setup-php in the github-actions group (#208)
fd59e06 Bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions group (#207)
cb0d910 Enable Dependabot auto-merge (#206)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the php-dependencies group with 3 updates in the / directory: [laravel/framework](https://github.com/laravel/framework), [laravel/sanctum](https://github.com/laravel/sanctum) and [laravel/tinker](https://github.com/laravel/tinker). Updates `laravel/framework` from 13.39.0 to 13.40.0 - [Release notes](https://github.com/laravel/framework/releases) - [Changelog](https://github.com/laravel/framework/blob/13.x/CHANGELOG.md) - [Commits](laravel/framework@v13.39.0...v13.40.0) Updates `laravel/sanctum` from 4.3.3 to 4.4.0 - [Release notes](https://github.com/laravel/sanctum/releases) - [Changelog](https://github.com/laravel/sanctum/blob/4.x/CHANGELOG.md) - [Commits](laravel/sanctum@v4.3.3...v4.4.0) Updates `laravel/tinker` from 3.0.2 to 3.1.0 - [Release notes](https://github.com/laravel/tinker/releases) - [Changelog](https://github.com/laravel/tinker/blob/3.x/CHANGELOG.md) - [Commits](laravel/tinker@v3.0.2...v3.1.0) --- updated-dependencies: - dependency-name: laravel/framework dependency-version: 13.40.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: php-dependencies - dependency-name: laravel/sanctum dependency-version: 4.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: php-dependencies - dependency-name: laravel/tinker dependency-version: 3.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: php-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

laravel-cloud-app · 2026-11-11T07:02:52Z

☁️ Laravel Cloud Preview Environment
A preview environment for this pull request was successfully created.

✅ Deployment successful
The latest deployment fc8b906 finished at Nov 11, 2026 7:04 AM UTC.

Visit preview URL · View deployment logs

The environment and attached resources will be destroyed when the PR is merged or closed.
You can disable this under the environment settings.

dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update Php code labels Nov 11, 2026

Navigation Menu

Repository navigation

Bump the php-dependencies group across 1 directory with 3 updates - #4649

Bump the php-dependencies group across 1 directory with 3 updates#4649
dependabot[bot] wants to merge 1 commit into
3.xfrom
dependabot/composer/php-dependencies-6d61efce8d

dependabot Bot commented on behalf of github Nov 11, 2026

Uh oh!

laravel-cloud-app Bot commented Nov 11, 2026 •

edited

Loading

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Nov 11, 2026

v13.40.0

v13.40.0 - 2026-11-03

v4.4.0

What's Changed

New Contributors

v4.4.0 - 2026-11-02

What's Changed

New Contributors

v3.1.0

What's Changed

New Contributors

v3.1.0 - 2026-10-16

What's Changed

New Contributors

Uh oh!

laravel-cloud-app Bot commented Nov 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

laravel-cloud-app Bot commented Nov 11, 2026 •

edited

Loading