build(deps): bump the composer-minor-patch group across 1 directory with 3 updates by dependabot[bot] · Pull Request #37 · GigaionLLC/RD-API-Server

dependabot · 2026-10-14T18:15:56Z

Bumps the composer-minor-patch group with 3 updates in the / directory: laravel/framework, larastan/larastan and phpunit/phpunit.

Updates laravel/framework from 13.33.0 to 13.35.0

Release notes

Sourced from laravel/framework's releases.

v13.35.0

[13.x] Allow fake assertions to accept an array of properties by @jackbayliss in laravel/framework#61770

[13.x] Support percentages for queue:work --memory by @jackbayliss in laravel/framework#61753

[13.x] Let long-running scheduled commands see schedule:interrupt by @cyppe in laravel/framework#61764

[13.x] Make the parallel compiled view callbacks tolerate a concurrent run by @joshdaugherty in laravel/framework#61786

[13.x] Add markdown() method to the response factory by @Ashot1995 in laravel/framework#61800

[13.x] Add onOneServer to the schedule:list --json output by @MizouziE in laravel/framework#61798

[13.x] Add lazy_root_creation configuration option for local disks by @ziadoz in laravel/framework#61799

[13.x] Test Improvements by @crynobone in laravel/framework#61790

Exception enhancements by @timacdonald in laravel/framework#61791

[13.x] Add Schedule::alwaysOnOneServer(); by @jackbayliss in laravel/framework#61789

[13.x] add test for notifyJobOfSignal SIGALRM by @jackbayliss in laravel/framework#61787

[13.x] Optimize Str::finish and Str::start by @HamidRezaLS in laravel/framework#61803

[13.x] Fix reference cycle from PendingRequest::throw() default callback by @andrewnabors in laravel/framework#61802

[13.x] Fix Memcached lock isLocked() on a free lock by @mrjavadseydi in laravel/framework#61801

[13.x] Add QUERY route method support by @joelbutcher in laravel/framework#61797

[13.x] Fix DatabaseRule where() and whereNot() losing false values by @sajjadhossainshohag in laravel/framework#61796

[13.x] Fix duration helpers truncating float values by @xurshudyan in laravel/framework#61825

[13.x] Release unique job locks in Queue::fakeFor() by @xurshudyan in laravel/framework#61824

[13.x] Fix forceCreate() ignoring withAttributes() by @xurshudyan in laravel/framework#61823

[13.x] Fix has() and withCount() on HasOneThrough one-of-many relations by @xurshudyan in laravel/framework#61818

[13.x] Accept null password in hashPasswordForCookie by @troioi-vn in laravel/framework#61817

[13.x] Fix chunkById() and lazyById() looping forever on models with a cast primary key by @xurshudyan in laravel/framework#61816

[13.x] Fix custom MorphPivot not touching owners on detach by @mrjavadseydi in laravel/framework#61812

[13.x] Fix collapse(), collapseWithKeys() and flatten() dropping lazy collections by @ahmadreza-fatemikia in laravel/framework#61811

[13.x] Fix DB::setDefaultConnection() storing enums in the configuration by @ahmadreza-fatemikia in laravel/framework#61810

[13.x] normalize queue in SQS bulk method by @jackbayliss in laravel/framework#61828

[13.x] Fix HasOneThrough::is() comparing the wrong keys by @xurshudyan in laravel/framework#61827

[13.x] Fix inherited queue attributes being ignored when the child uses Queueable by @xurshudyan in laravel/framework#61826

[13.x] Fix JSON path updates on AsEncryptedArrayObject and AsEncryptedCollection by @xurshudyan in laravel/framework#61834

Fix root route matching with route cache when served from a subdirectory by @Simon0Harms in laravel/framework#61794

Address query issues by @taylorotwell in laravel/framework#61837

[13.x] Document enum support for disk in copyToDisk() and moveToDisk() by @riesjart in laravel/framework#61867

[13.x] Skip building a query in loadMissing() when no relations are given by @MAboyadak in laravel/framework#61869

[13.x] Accept enums in FilesystemManager::set(), forgetDisk() and purge() by @riesjart in laravel/framework#61868

[13.x] Fix parallel testing with PHPUnit 13.4 by @lazerg in laravel/framework#61859

[13.x] Fix AsHtmlString attributes serializing to an empty object by @xurshudyan in laravel/framework#61854

[13.x] Fix whereJsonOverlaps() with a JSON path on MySQL by @xurshudyan in laravel/framework#61853

[13.x] Fix reference cycle from Mailable headers() and priority() callbacks by @xurshudyan in laravel/framework#61863

[13.x] Fix findOrNew() and chunkMap() on HasManyThrough and BelongsToMany by @xurshudyan in laravel/framework#61855

[13.x] Fix incrementOrCreate() not setting the foreign key on relations by @xurshudyan in laravel/framework#61849

[13.x] Fix loadMissing() with nested relations on mixed morphTo models by @xurshudyan in laravel/framework#61845

[13.x] Fix Eloquent Collection findOrFail() with a collection of ids by @xurshudyan in laravel/framework#61844

[13.x] Fix cursorPaginate() losing union select and join bindings by @xurshudyan in laravel/framework#61841

[13.x] Fix docblocks of logoutOtherDevices method by @imanghafoori1 in laravel/framework#61877

[13.x] Fix JSON path updates discarding unsaved changes on cast objects by @xurshudyan in laravel/framework#61847

[13.x ] never return type for failedBasicResponse method by @imanghafoori1 in laravel/framework#61887

[13.x] Fix downloads crashing on filenames with no ASCII equivalent by @jhm-ciberman in laravel/framework#61888

[13.x] Qualify eager loaded columns on through and one-of-many relations by @xurshudyan in laravel/framework#61885

[13.x] Fix recycled models leaking into later calls on the same factory by @xurshudyan in laravel/framework#61884

... (truncated)

Changelog

Sourced from laravel/framework's changelog.

v13.35.0 - 2026-10-06

[13.x] Allow fake assertions to accept an array of properties by @jackbayliss in laravel/framework#61770

[13.x] Support percentages for queue:work --memory by @jackbayliss in laravel/framework#61753

[13.x] Let long-running scheduled commands see schedule:interrupt by @cyppe in laravel/framework#61764

[13.x] Make the parallel compiled view callbacks tolerate a concurrent run by @joshdaugherty in laravel/framework#61786

[13.x] Add markdown() method to the response factory by @Ashot1995 in laravel/framework#61800

[13.x] Add onOneServer to the schedule:list --json output by @MizouziE in laravel/framework#61798

[13.x] Add lazy_root_creation configuration option for local disks by @ziadoz in laravel/framework#61799

[13.x] Test Improvements by @crynobone in laravel/framework#61790

Exception enhancements by @timacdonald in laravel/framework#61791

[13.x] Add Schedule::alwaysOnOneServer(); by @jackbayliss in laravel/framework#61789

[13.x] add test for notifyJobOfSignal SIGALRM by @jackbayliss in laravel/framework#61787

[13.x] Optimize Str::finish and Str::start by @HamidRezaLS in laravel/framework#61803

[13.x] Fix reference cycle from PendingRequest::throw() default callback by @andrewnabors in laravel/framework#61802

[13.x] Fix Memcached lock isLocked() on a free lock by @mrjavadseydi in laravel/framework#61801

[13.x] Add QUERY route method support by @joelbutcher in laravel/framework#61797

[13.x] Fix DatabaseRule where() and whereNot() losing false values by @sajjadhossainshohag in laravel/framework#61796

[13.x] Fix duration helpers truncating float values by @xurshudyan in laravel/framework#61825

[13.x] Release unique job locks in Queue::fakeFor() by @xurshudyan in laravel/framework#61824

[13.x] Fix forceCreate() ignoring withAttributes() by @xurshudyan in laravel/framework#61823

[13.x] Fix has() and withCount() on HasOneThrough one-of-many relations by @xurshudyan in laravel/framework#61818

[13.x] Accept null password in hashPasswordForCookie by @troioi-vn in laravel/framework#61817

[13.x] Fix chunkById() and lazyById() looping forever on models with a cast primary key by @xurshudyan in laravel/framework#61816

[13.x] Fix custom MorphPivot not touching owners on detach by @mrjavadseydi in laravel/framework#61812

[13.x] Fix collapse(), collapseWithKeys() and flatten() dropping lazy collections by @ahmadreza-fatemikia in laravel/framework#61811

[13.x] Fix DB::setDefaultConnection() storing enums in the configuration by @ahmadreza-fatemikia in laravel/framework#61810

[13.x] normalize queue in SQS bulk method by @jackbayliss in laravel/framework#61828

[13.x] Fix HasOneThrough::is() comparing the wrong keys by @xurshudyan in laravel/framework#61827

[13.x] Fix inherited queue attributes being ignored when the child uses Queueable by @xurshudyan in laravel/framework#61826

[13.x] Fix JSON path updates on AsEncryptedArrayObject and AsEncryptedCollection by @xurshudyan in laravel/framework#61834

Fix root route matching with route cache when served from a subdirectory by @Simon0Harms in laravel/framework#61794

Address query issues by @taylorotwell in laravel/framework#61837

[13.x] Document enum support for disk in copyToDisk() and moveToDisk() by @riesjart in laravel/framework#61867

[13.x] Skip building a query in loadMissing() when no relations are given by @MAboyadak in laravel/framework#61869

[13.x] Accept enums in FilesystemManager::set(), forgetDisk() and purge() by @riesjart in laravel/framework#61868

[13.x] Fix parallel testing with PHPUnit 13.4 by @lazerg in laravel/framework#61859

[13.x] Fix AsHtmlString attributes serializing to an empty object by @xurshudyan in laravel/framework#61854

[13.x] Fix whereJsonOverlaps() with a JSON path on MySQL by @xurshudyan in laravel/framework#61853

[13.x] Fix reference cycle from Mailable headers() and priority() callbacks by @xurshudyan in laravel/framework#61863

[13.x] Fix findOrNew() and chunkMap() on HasManyThrough and BelongsToMany by @xurshudyan in laravel/framework#61855

[13.x] Fix incrementOrCreate() not setting the foreign key on relations by @xurshudyan in laravel/framework#61849

[13.x] Fix loadMissing() with nested relations on mixed morphTo models by @xurshudyan in laravel/framework#61845

[13.x] Fix Eloquent Collection findOrFail() with a collection of ids by @xurshudyan in laravel/framework#61844

[13.x] Fix cursorPaginate() losing union select and join bindings by @xurshudyan in laravel/framework#61841

[13.x] Fix docblocks of logoutOtherDevices method by @imanghafoori1 in laravel/framework#61877

[13.x] Fix JSON path updates discarding unsaved changes on cast objects by @xurshudyan in laravel/framework#61847

[13.x ] never return type for failedBasicResponse method by @imanghafoori1 in laravel/framework#61887

[13.x] Fix downloads crashing on filenames with no ASCII equivalent by @jhm-ciberman in laravel/framework#61888

[13.x] Qualify eager loaded columns on through and one-of-many relations by @xurshudyan in laravel/framework#61885

... (truncated)

Commits

a413a9d Update version to v13.35.0
2e172fc Fix withCasts on cloned query affecting the original (#61883)
998623e Ignore _token and _method in FormRequest strict mode (#61891)
d302e39 Don't expand URL templates without URL parameters (#61893)
0aae7ce wip (#61894)
6563c70 Bump source-map-js (#61889)
dd40be7 [13.x] Port defaults() via opt-in trait (#61813)
fb79bca [13.x] Database test improvements (#61819)
df12f83 [13.x] Fix undefined array key in GenericUser::getAuthPassword() for users wi...
7778ecf Fix incrementOrCreate extra attributes on create (#61878)
Additional commits viewable in compare view

Updates larastan/larastan from 3.12.2 to 3.13.0

Release notes

Sourced from larastan/larastan's releases.

3.13.0

What's Changed

Larastan 3.13.0 requires PHPStan 2.3.0 or newer within the 2.x series. Update PHPStan alongside Larastan when upgrading. The PHP and Laravel requirements are unchanged.

Added

Add relation-of<Model, Relationship> and infer concrete relationship types in eager-loading arrays passed to with(), withOnly(), load(), and loadMissing() by @canvural in #2562.

Support PHPStan 2.3's opt-in bleeding-edge inference for empty collections and closures from their usage by @canvural in #2562.

Fixed

Correct collection key types for methods that append or renumber keys, including concat(), merge(), shift(), and splice(), by @canvural in #2562.

Report invalid eager-loading column selections paired with callbacks, such as with(['posts:id' => $callback]), by @canvural in #2562.

Handle a null package manifest path when bootstrapping the application by @canvural in #2562.

Resolve forwarded Eloquent builder calls using the custom query builder returned by toBase(), including passthru return types, by @Wirone in #2575.

New Contributors

@Wirone made their first contribution in #2575.

Full Changelog: v3.12.3...v3.13.0

3.12.3

What's Changed

Fixed

Preserve collection key types in Eloquent queries and paginators, with an optional key type in collection-of, by @canvural in 397c6df. Read more about it here.

Infer chunk() and each() callback types on BelongsToMany and through relations, including pivot types, by @canvural in 726e7a8

Check model properties in forceCreateQuietly() by @midhunmonachan in #2558

Check model properties in quiet and force relation create methods by @Cayan in #2560

Accept save() options such as touch instead of model properties by @Cayan in #2561

Resolve config keys using paths relative to their config directory and expand glob patterns in configDirectories by @canvural in f9b491b, fe7154b

Preserve the config value type when a default is passed to config() by @canvural in f2a79f7

Preserve $this in where() and global scope methods on Eloquent builders by @SanderMuller in #2567

Prevent index methods from overwriting or creating migration columns by @Cayan in #2566

Refine Laravel API types for events, query logs, migrations, mail, notifications, routing, and reflection by @canvural in 8fc1821

Resolve class constants used as migration column names by @Cayan in #2565

Accept numeric strings, integers, and floats when writing decimal casts by @matical in #2570

Infer named guard types from their configured driver by @antoinelame in #2571

Performance

Cache object types in helper extensions and builder names in BuilderHelper by @haratake22 in #2553

Load migrations only once when no tables are found by @ryanshepherd in #2569

New Contributors

@midhunmonachan made their first contribution in #2558

... (truncated)

Commits

24ee69a chore: update E2E baselines
8901aa1 chore: update E2E commit hashes
e6154e3 fix query builder passthru (#2575)
619e671 feat: phpstan 2.3.0 (#2562)
792628d fix: type named guards from their configured driver (#2571)
c95b4d3 fix: accept numeric strings, ints and floats when writing decimal casts (#2570)
84bb905 feat: resolve class constants used as migration column names (#2565)
8fc1821 fix: refine Laravel API types
128814f fix: stop index methods from overwriting or creating migration columns (#2566)
4b8971f fix: return $this from where() and the global scope methods in the builder st...
Additional commits viewable in compare view

Updates phpunit/phpunit from 12.5.36 to 12.5.38

Release notes

Sourced from phpunit/phpunit's releases.

PHPUnit 12.5.38

Changed

The Software Bill of Materials (SBOM) embedded in the PHAR now uses CycloneDX 1.7 and provides the NTIA minimum elements as well as the data fields that BSI TR-03183-2 (version 2.1.0) requires for logical and identified components, including component creators, original, distribution and effective licences, source code URIs, and the PHP runtime and its extensions as external components

Fixed

setUpBeforeClass() and tearDownAfterClass() were run twice for a test class that is the only test class in a test suite of the XML configuration file that has the name of that test class

Tests could not be run in process isolation when the path of the bootstrap script, the test file, or the directory for temporary files contained a single quote

A test that is run in process isolation aborts the test run when its result cannot be unserialized, for instance because it returns an object that holds a test double

Issues that are listed in the baseline are not ignored for tests that are run in a separate process

Arguments in the --ARGS-- section of a PHPT test that start with - were interpreted by PHP instead of being passed to the test when the test also has a --STDIN-- section

Recording the tests that passed in a child process copied all tests that had passed so far, which made running many tests in process isolation increasingly slow

Learn how to install or update PHPUnit 12.5 in the documentation.

Keep up to date with PHPUnit:

You can follow @phpunit@phpc.social to stay up to date with PHPUnit's development.

You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

PHPUnit 12.5.37

Fixed

The class name argument of #[RequiresMethod] is declared as class-string, so static analysis reports an error when it refers to a class that does not exist

A #[RequiresMethod] attribute that refers to a class which cannot be loaded, for instance because its parent class does not exist, aborts the test run instead of skipping the test

Learn how to install or update PHPUnit 12.5 in the documentation.

Keep up to date with PHPUnit:

You can follow @phpunit@phpc.social to stay up to date with PHPUnit's development.

You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

Changelog

Sourced from phpunit/phpunit's changelog.

[12.5.38] - 2026-10-05

Changed

The Software Bill of Materials (SBOM) embedded in the PHAR now uses CycloneDX 1.7 and provides the NTIA minimum elements as well as the data fields that BSI TR-03183-2 (version 2.1.0) requires for logical and identified components, including component creators, original, distribution and effective licences, source code URIs, and the PHP runtime and its extensions as external components

Fixed

setUpBeforeClass() and tearDownAfterClass() were run twice for a test class that is the only test class in a test suite of the XML configuration file that has the name of that test class

Tests could not be run in process isolation when the path of the bootstrap script, the test file, or the directory for temporary files contained a single quote

A test that is run in process isolation aborts the test run when its result cannot be unserialized, for instance because it returns an object that holds a test double

Issues that are listed in the baseline are not ignored for tests that are run in a separate process

Arguments in the --ARGS-- section of a PHPT test that start with - were interpreted by PHP instead of being passed to the test when the test also has a --STDIN-- section

Recording the tests that passed in a child process copied all tests that had passed so far, which made running many tests in process isolation increasingly slow

[12.5.37] - 2026-09-29

Fixed

The class name argument of #[RequiresMethod] is declared as class-string, so static analysis reports an error when it refers to a class that does not exist

A #[RequiresMethod] attribute that refers to a class which cannot be loaded, for instance because its parent class does not exist, aborts the test run instead of skipping the test

Commits

1e87ad8 Prepare release
80758d0 Merge branch '11.5' into 12.5
36b75bf Prepare release
43b38ce Merge branch '10.5' into 11.5
747c988 Prepare release
a7d6e8b Merge branch '9.6' into 10.5
8b5f757 Prepare release
d2e3381 Merge branch '8.5' into 9.6
951b085 Prepare release
b599a80 Update dependency phpstan/phpstan to ^2.2.17
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ith 3 updates Bumps the composer-minor-patch group with 3 updates in the / directory: [laravel/framework](https://github.com/laravel/framework), [larastan/larastan](https://github.com/larastan/larastan) and [phpunit/phpunit](https://github.com/sebastianbergmann/phpunit). Updates `laravel/framework` from 13.33.0 to 13.35.0 - [Release notes](https://github.com/laravel/framework/releases) - [Changelog](https://github.com/laravel/framework/blob/13.x/CHANGELOG.md) - [Commits](laravel/framework@v13.33.0...v13.35.0) Updates `larastan/larastan` from 3.12.2 to 3.13.0 - [Release notes](https://github.com/larastan/larastan/releases) - [Changelog](https://github.com/larastan/larastan/blob/3.x/RELEASE.md) - [Commits](larastan/larastan@v3.12.2...v3.13.0) Updates `phpunit/phpunit` from 12.5.36 to 12.5.38 - [Release notes](https://github.com/sebastianbergmann/phpunit/releases) - [Changelog](https://github.com/sebastianbergmann/phpunit/blob/12.5.38/ChangeLog-12.5.md) - [Commits](sebastianbergmann/phpunit@12.5.36...12.5.38) --- updated-dependencies: - dependency-name: laravel/framework dependency-version: 13.35.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: composer-minor-patch - dependency-name: larastan/larastan dependency-version: 3.13.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: composer-minor-patch - dependency-name: phpunit/phpunit dependency-version: 12.5.38 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: composer-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update php code labels Oct 14, 2026

Navigation Menu

Repository navigation

build(deps): bump the composer-minor-patch group across 1 directory with 3 updates - #37

build(deps): bump the composer-minor-patch group across 1 directory with 3 updates#37
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/composer/composer-minor-patch-ef8d60a542

dependabot Bot commented on behalf of github Oct 14, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v13.35.0

v13.35.0 - 2026-10-06

3.13.0

What's Changed

Added

Fixed

New Contributors

3.12.3

What's Changed

Fixed

Performance

New Contributors

PHPUnit 12.5.38

Changed

Fixed

Keep up to date with PHPUnit:

PHPUnit 12.5.37

Fixed

Keep up to date with PHPUnit:

[12.5.38] - 2026-10-05

Changed

Fixed

[12.5.37] - 2026-09-29

Fixed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Oct 14, 2026 •

edited

Loading