Skip to content

- Update all non-major dependencies with digest and pinDigest#585

Open
blumilk-renovate[bot] wants to merge 1 commit intomainfrom
renovate/all-minor-patch-digest-pindigest
Open

- Update all non-major dependencies with digest and pinDigest#585
blumilk-renovate[bot] wants to merge 1 commit intomainfrom
renovate/all-minor-patch-digest-pindigest

Conversation

@blumilk-renovate
Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence Type Update Pending
@inertiajs/vue3 (source) ^2.0.17 -> ^2.3.18 age confidence dependencies patch
@vue/compiler-sfc (source) ^3.5.26 -> ^3.5.31 age confidence dependencies patch
actions/cache v4.2.4 -> v4.3.0 age confidence action minor
alpine 3.22.2 -> 3.22.3 age confidence stage patch
appleboy/ssh-action v1.2.4 -> v1.2.5 age confidence action patch
autoprefixer ^10.4.23 -> ^10.4.27 age confidence dependencies patch
axios (source) ^1.13.2 -> ^1.13.6 age confidence dependencies patch
axllent/mailpit (source) v1.27 -> v1.29 age confidence minor
azuyalabs/yasumi (source) ^2.9.0 -> ^2.10.0 age confidence require patch 2.11.0
barryvdh/laravel-debugbar ^3.16.3 -> ^3.16.5 age confidence require-dev patch
barryvdh/laravel-dompdf ^3.1.1 -> ^3.1.2 age confidence require patch
composer 2.8.12 -> 2.9.5 age confidence stage minor
composer/composer 2.8.12-bin -> 2.9.5-bin age confidence stage minor
docker/build-push-action v6.18.0 -> v6.19.2 age confidence action minor
docker/login-action v3.6.0 -> v3.7.0 age confidence action minor
dompdf/dompdf ^3.1.4 -> ^3.1.5 age confidence require patch
eslint (source) ^9.30.1 -> ^9.39.4 age confidence dependencies patch
inertiajs/inertia-laravel ^2.0.18 -> ^2.0.22 age confidence require patch
laravel/dusk (source) ^8.3.4 -> ^8.3.6 age confidence require-dev patch
laravel/framework (source) ^11.45.3 -> ^11.51.0 age confidence require minor
laravel/sanctum ^4.1.2 -> ^4.3.1 age confidence require patch
laravel/socialite (source) ^5.24.1 -> ^5.24.3 age confidence require patch
laravel/telescope ^5.16.1 -> ^5.19.0 age confidence require minor
laravel/tinker ^2.10.2 -> ^2.11.1 age confidence require patch
maatwebsite/excel ^3.1.67 -> ^3.1.68 age confidence require patch
node 22.17.1 -> 22.22.2 age confidence uses-with minor
node 22.17.1-bullseye-slim -> 22.22.2-bullseye-slim age confidence stage minor
nunomaduro/collision ^8.8.3 -> ^8.9.1 age confidence require-dev patch 8.9.2
php 8.4.16 -> 8.4.19 age confidence patch
php 8.4.11 -> 8.4.19 age confidence patch
php -> aa9ca43 final pinDigest
php -> aa9ca43 stage pinDigest
phpunit/phpunit (source) ^11.5.46 -> ^11.5.55 age confidence require-dev patch
postcss (source) ^8.5.6 -> ^8.5.8 age confidence dependencies patch
postgres a7711af -> c635fa3 service digest
postgres a7711af -> c635fa3 digest
selenium/standalone-chrome 57bc98a -> aae9b44 digest
sentry/sentry-laravel (source) ^4.15.3 -> ^4.24.0 age confidence require minor
shivammathur/setup-php 2.36.0 -> 2.37.0 age confidence action minor
spatie/laravel-google-calendar ^3.8.4 -> ^3.8.5 age confidence require patch
spatie/laravel-ignition (source) ^2.9.1 -> ^2.12.0 age confidence require-dev minor
spatie/laravel-model-states ^2.11.3 -> ^2.13.1 age confidence require minor
spatie/laravel-permission ^6.24.0 -> ^6.24.1 age confidence require patch
spatie/laravel-slack-slash-command ^1.12.2 -> ^1.13.0 age confidence require patch
vite (source) ^6.3.5 -> ^6.3.7 age confidence dependencies patch
vue (source) ^3.5.26 -> ^3.5.31 age confidence dependencies patch
xdebug/xdebug 3.4.7 -> 3.5.1 age confidence minor

Release Notes

inertiajs/inertia (@​inertiajs/vue3)

v2.3.18

Compare Source

What's Changed

New Contributors

Full Changelog: inertiajs/inertia@v2.3.17...v2.3.18

vuejs/core (@​vue/compiler-sfc)

v3.5.31

Compare Source

Bug Fixes

v3.5.30

Compare Source

Bug Fixes
actions/cache (actions/cache)

v4.3.0

Compare Source

What's Changed
New Contributors

Full Changelog: actions/cache@v4...v4.3.0

appleboy/ssh-action (appleboy/ssh-action)

v1.2.5

Compare Source

Changelog

Refactor
Documentation updates
axllent/mailpit (axllent/mailpit)

v1.29

Security
  • Add sandbox attribute to message iframe for extra later of security (already protected via CSP headers)
Feature
  • Add option to disable auto-VACUUMing of the SQLite database (#​661)
Chore
  • Update Go dependencies
  • Update node dependencies

v1.28

Chore
  • Increase allowed SMTP email address length to 1024 chars & return clearer SMTP responses for failures (#​620)
  • Update Go dependencies
  • Update node dependencies
Fix
  • Ensure SMTP HELO/EHLO command is issued before MAIL FROM as per RFC 5321 (#​621)
  • Prevent nested MAIL command during an active SMTP transaction (#​623)
  • Avoid error on image type assertion in thumbnail generation
barryvdh/laravel-dompdf (barryvdh/laravel-dompdf)

v3.1.2

Compare Source

What's Changed

New Contributors

Full Changelog: barryvdh/laravel-dompdf@v3.1.1...v3.1.2

docker/build-push-action (docker/build-push-action)

v6.19.2

Compare Source

Full Changelog: docker/build-push-action@v6.19.1...v6.19.2

v6.19.1

Compare Source

Full Changelog: docker/build-push-action@v6.19.0...v6.19.1

v6.19.0

Compare Source

  • Scope default git auth token to github.com by @​crazy-max in #​1451
  • Bump brace-expansion from 1.1.11 to 1.1.12 in #​1396
  • Bump form-data from 2.5.1 to 2.5.5 in #​1391
  • Bump js-yaml from 3.14.1 to 3.14.2 in #​1429
  • Bump lodash from 4.17.21 to 4.17.23 in #​1446
  • Bump tmp from 0.2.3 to 0.2.4 in #​1398
  • Bump undici from 5.28.4 to 5.29.0 in #​1397

Full Changelog: docker/build-push-action@v6.18.0...v6.19.0

docker/login-action (docker/login-action)

v3.7.0

Compare Source

Full Changelog: docker/login-action@v3.6.0...v3.7.0

eslint/eslint (eslint)

v9.39.4

Compare Source

Bug Fixes

Documentation

Chores

inertiajs/inertia-laravel (inertiajs/inertia-laravel)

v2.0.22

Compare Source

What's Changed

Full Changelog: inertiajs/inertia-laravel@v2.0.21...v2.0.22

laravel/framework (laravel/framework)

v11.51.0

Compare Source

v11.50.0

Compare Source

v11.49.0

Compare Source

laravel/telescope (laravel/telescope)

v5.19.0

Compare Source

SpartnerNL/Laravel-Excel (maatwebsite/excel)

v3.1.68

Compare Source

What's Changed

New Contributors

Full Changelog: SpartnerNL/Laravel-Excel@3.1.67...3.1.68

actions/node-versions (node)

v22.22.2: 22.22.2

Compare Source

Node.js 22.22.2

v22.22.1: 22.22.1

Compare Source

Node.js 22.22.1

v22.22.0: 22.22.0

Compare Source

Node.js 22.22.0

v22.21.1: 22.21.1

Compare Source

Node.js 22.21.1

v22.21.0: 22.21.0

Compare Source

Node.js 22.21.0

v22.20.0: 22.20.0

Compare Source

Node.js 22.20.0

v22.19.0: 22.19.0

Compare Source

Node.js 22.19.0

v22.18.0: 22.18.0

Compare Source

Node.js 22.18.0

nodejs/node (node)

v22.22.2: 2026-03-24, Version 22.22.2 'Jod' (LTS), @​RafaelGSS prepared by @​aduh95

Compare Source

This is a security release.

Notable Changes
  • (CVE-2026-21637) wrap SNICallback invocation in try/catch (Matteo Collina) - High
  • (CVE-2026-21710) use null prototype for headersDistinct/trailersDistinct (Matteo Collina) - High
  • (CVE-2026-21713) use timing-safe comparison in Web Cryptography HMAC (Filip Skokan) - Medium
  • (CVE-2026-21714) handle NGHTTP2_ERR_FLOW_CONTROL error code (RafaelGSS) - Medium
  • (CVE-2026-21717) test array index hash collision (Joyee Cheung) - Medium
  • (CVE-2026-21715) add permission check to realpath.native (RafaelGSS) - Low
  • (CVE-2026-21716) include permission check on lib/fs/promises (RafaelGSS) - Low
Commits

v22.22.1: 2026-03-05, Version 22.22.1 'Jod' (LTS)

Compare Source

Notable Changes
Commits
  • [5f773488c2] - assert: use a set instead of an array for faster lookup (Ruben Bridgewater) #​61076
  • [feecbb0eab] - assert,util: fix deep comparison for sets and maps with mixed types (Ruben Bridgewater) #​61388
  • [096095b127] - benchmark: add SQLite benchmarks (Guilherme Araújo) #​61401
  • [b5fe481415] - benchmark: use boolean options in benchmark tests (SeokhunEom) #​60129
  • [fa9faacacb] - benchmark: allow boolean option values (SeokhunEom) #​60129
  • [ba8714ac21] - benchmark: fix incorrect base64 input in byteLength benchmark (semimikoh) #​60841
  • [53596de876] - benchmark: use typescript for import cjs benchmark (Joyee Cheung) #​60663
  • [e8930e9d7c] - benchmark: focus on import.meta intialization in import-meta benchmark (Joyee Cheung) #​60603
  • [1155e412b1] - benchmark: add per-suite setup option (Joyee Cheung) #​60574
  • [e01903d304] - benchmark: improve cpu.sh for safety and usability (Nam Yooseong) #​60162
  • [623a405747] - benchmark: add benchmark for leaf source text modules (Joyee Cheung) #​60205
  • [7f5e7b9f7f] - benchmark: add microbench on isInsideNodeModules (Chengzhong Wu) [#​60991](http

Configuration

📅 Schedule: Branch creation - On day 1 of the month, every 3 months ( * * 1 */3 * ) in timezone Europe/Warsaw, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@blumilk-renovate blumilk-renovate bot requested a review from a team as a code owner April 1, 2026 10:12
@blumilk-renovate blumilk-renovate bot added dependencies Pull requests that update a dependency file docker Pull requests that update Docker code github-actions javascript Pull requests that update Javascript code php Pull requests that update Php code renovate labels Apr 1, 2026
@blumilk-renovate blumilk-renovate bot requested a review from Blusia April 1, 2026 10:12
@blumilk-renovate
Copy link
Copy Markdown
Contributor Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: composer.lock
Command failed: composer update azuyalabs/yasumi:2.10.0 barryvdh/laravel-debugbar:3.16.5 barryvdh/laravel-dompdf:3.1.2 dompdf/dompdf:3.1.5 inertiajs/inertia-laravel:2.0.22 laravel/dusk:8.3.6 laravel/framework:11.51.0 laravel/sanctum:4.3.1 laravel/socialite:5.24.3 laravel/telescope:5.19.0 laravel/tinker:2.11.1 maatwebsite/excel:3.1.68 nunomaduro/collision:8.9.1 phpunit/phpunit:11.5.55 sentry/sentry-laravel:4.24.0 spatie/laravel-google-calendar:3.8.5 spatie/laravel-ignition:2.12.0 spatie/laravel-model-states:2.13.1 spatie/laravel-permission:6.24.1 spatie/laravel-slack-slash-command:1.13.0 --with-dependencies --ignore-platform-req='ext-*' --ignore-platform-req='lib-*' --no-ansi --no-interaction --no-scripts --no-autoloader --no-plugins --minimal-changes
Loading composer repositories with package information
Dependency guzzlehttp/guzzle is also a root requirement. Package has not been listed as an update argument, so keeping locked at old version. Use --with-all-dependencies (-W) to include root dependencies.
Dependency mockery/mockery is also a root requirement. Package has not been listed as an update argument, so keeping locked at old version. Use --with-all-dependencies (-W) to include root dependencies.
Updating dependencies
Your requirements could not be resolved to an installable set of packages.

  Problem 1
    - Root composer.json requires spatie/laravel-model-states ^2.13.1 -> satisfiable by spatie/laravel-model-states[2.13.1].
    - spatie/laravel-model-states 2.13.1 requires illuminate/contracts ^12.0|^13.0 -> found illuminate/contracts[v12.0.0, ..., v12.56.0, v13.0.0, v13.1.0, v13.1.1, v13.2.0] but these were not loaded, likely because it conflicts with another require.

Use the option --with-all-dependencies (-W) to allow upgrades, downgrades and removals for packages currently locked to specific versions.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file docker Pull requests that update Docker code github-actions javascript Pull requests that update Javascript code php Pull requests that update Php code renovate

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants