chore(deps): bump the composer group with 14 updates by dependabot[bot] · Pull Request #13 · lattice-php/starter-kit

dependabot · 2026-10-31T01:14:27Z

Bumps the composer group with 14 updates:

Package	From	To
inertiajs/inertia-laravel	`3.3.3`	`3.5.2`
laravel/fortify	`1.39.0`	`1.41.0`
laravel/framework	`13.30.1`	`13.39.0`
laravel/reverb	`1.11.1`	`1.12.0`
lattice-php/lattice	`0.72.2`	`0.77.0`
driftingly/rector-laravel	`2.6.2`	`2.7.1`
larastan/larastan	`3.11.0`	`3.13.2`
laravel/boost	`2.7.0`	`2.10.3`
laravel/pao	`1.1.4`	`1.1.5`
laravel/pint	`1.30.5`	`1.32.1`
pestphp/pest-plugin-browser	`5.0.1`	`5.1.2`
pestphp/pest-plugin-phpstan	`5.2.0`	`5.2.2`
pestphp/pest-plugin-rector	`5.0.4`	`5.0.6`
rector/rector	`2.6.6`	`2.8.3`

Updates inertiajs/inertia-laravel from 3.3.3 to 3.5.2

Release notes

Sourced from inertiajs/inertia-laravel's releases.

v3.5.2

What's Changed

Bump shivammathur/setup-php from 2.37.2 to 2.40.0 in the github-actions group by @dependabot[bot] in inertiajs/inertia-laravel#921

[3.x] Append Vary header instead of setting it by @thannaske in inertiajs/inertia-laravel#920

[3.x] Reset the cached SSR response when the page changes by @lazerg in inertiajs/inertia-laravel#924

[3.x] Don't treat streamed or "0" responses as empty for Inertia requests by @mdalikadar in inertiajs/inertia-laravel#919

New Contributors

@thannaske made their first contribution in inertiajs/inertia-laravel#920

Full Changelog: inertiajs/inertia-laravel@v3.5.1...v3.5.2

v3.5.1

What's Changed

[3.x] Assert big integers as plain integers in tests by @pascalbaljet in inertiajs/inertia-laravel#918

Full Changelog: inertiajs/inertia-laravel@v3.5.0...v3.5.1

v3.5.0

What's Changed

[3.x] Support big integers as native BigInt values by @pascalbaljet in inertiajs/inertia-laravel#904

Full Changelog: inertiajs/inertia-laravel@v3.4.0...v3.5.0

v3.4.0

What's Changed

[3.x] Return Illuminate's RedirectResponse from back() by @YannikFirre in inertiajs/inertia-laravel#910

[3.x] Configure the HTTP request sent to the SSR server by @pascalbaljet in inertiajs/inertia-laravel#916

[3.x] Ensure deferred callbacks run on Inertia redirects by @pascalbaljet in inertiajs/inertia-laravel#915

[3.x] Add --graceful option to the inertia:stop-ssr command by @pascalbaljet in inertiajs/inertia-laravel#917

[3.x] Store previous locations for Inertia visits by @drewmt in inertiajs/inertia-laravel#888

New Contributors

@YannikFirre made their first contribution in inertiajs/inertia-laravel#910

@drewmt made their first contribution in inertiajs/inertia-laravel#888

Full Changelog: inertiajs/inertia-laravel@v3.3.4...v3.4.0

v3.3.4

What's Changed

[3.x] Escape HTML tags in the initial page JSON by @pascalbaljet in inertiajs/inertia-laravel#911

Full Changelog: inertiajs/inertia-laravel@v3.3.3...v3.3.4

Changelog

Sourced from inertiajs/inertia-laravel's changelog.

v3.5.2 - 2026-10-21

What's Changed

Bump shivammathur/setup-php from 2.37.2 to 2.40.0 in the github-actions group by @dependabot[bot] in inertiajs/inertia-laravel#921

[3.x] Append Vary header instead of setting it by @thannaske in inertiajs/inertia-laravel#920

[3.x] Reset the cached SSR response when the page changes by @lazerg in inertiajs/inertia-laravel#924

[3.x] Don't treat streamed or "0" responses as empty for Inertia requests by @mdalikadar in inertiajs/inertia-laravel#919

New Contributors

@thannaske made their first contribution in inertiajs/inertia-laravel#920

Full Changelog: inertiajs/inertia-laravel@v3.5.1...v3.5.2

v3.5.1 - 2026-10-01

What's Changed

[3.x] Assert big integers as plain integers in tests by @pascalbaljet in inertiajs/inertia-laravel#918

Full Changelog: inertiajs/inertia-laravel@v3.5.0...v3.5.1

v3.5.0 - 2026-10-01

What's Changed

[3.x] Support big integers as native BigInt values by @pascalbaljet in inertiajs/inertia-laravel#904

Full Changelog: inertiajs/inertia-laravel@v3.4.0...v3.5.0

v3.4.0 - 2026-09-25

What's Changed

[3.x] Return Illuminate's RedirectResponse from back() by @YannikFirre in inertiajs/inertia-laravel#910

[3.x] Configure the HTTP request sent to the SSR server by @pascalbaljet in inertiajs/inertia-laravel#916

[3.x] Ensure deferred callbacks run on Inertia redirects by @pascalbaljet in inertiajs/inertia-laravel#915

[3.x] Add --graceful option to the inertia:stop-ssr command by @pascalbaljet in inertiajs/inertia-laravel#917

[3.x] Store previous locations for Inertia visits by @drewmt in inertiajs/inertia-laravel#888

New Contributors

@YannikFirre made their first contribution in inertiajs/inertia-laravel#910

@drewmt made their first contribution in inertiajs/inertia-laravel#888

Full Changelog: inertiajs/inertia-laravel@v3.3.4...v3.4.0

v3.3.4 - 2026-09-11

... (truncated)

Commits

4e91cf4 [3.x] Don't treat streamed or "0" responses as empty for Inertia requests (#919)
6431f9a [3.x] Reset the cached SSR response when the page changes (#924)
d25c67c [3.x] Append Vary header instead of setting it (#920)
8355911 Update SECURITY.md
3158d13 Update SECURITY.md
7a53e1a Bump shivammathur/setup-php (#921)
4da52b7 Update CHANGELOG
35a27ea Helper for BigInt testing (#918)
05217db Update CHANGELOG
8ddb88b [3.x] Support big integers as native BigInt values (#904)
Additional commits viewable in compare view

Updates laravel/fortify from 1.39.0 to 1.41.0

Release notes

Sourced from laravel/fortify's releases.

v1.41.0

Migration from Mockery to Double by @jasonmccreary in laravel/fortify#699

TwoFactorEnabledResponse and TwoFactorDisabledResponse implement wrong interface by @SameOldNick in laravel/fortify#701

Apply fixes from StyleCI by @taylorotwell in laravel/fortify#702

Bump to Double v1 by @jasonmccreary in laravel/fortify#703

v1.40.0

Introduction of Timebox to prevent Timing-based Username Enumeration by @bretto36 in laravel/fortify#697

Changelog

Sourced from laravel/fortify's changelog.

v1.41.0 - 2026-09-28

Migration from Mockery to Double by @jasonmccreary in laravel/fortify#699

TwoFactorEnabledResponse and TwoFactorDisabledResponse implement wrong interface by @SameOldNick in laravel/fortify#701

Apply fixes from StyleCI by @taylorotwell in laravel/fortify#702

Bump to Double v1 by @jasonmccreary in laravel/fortify#703

v1.40.0 - 2026-09-10

Introduction of Timebox to prevent Timing-based Username Enumeration by @bretto36 in laravel/fortify#697

Commits

c456642 Bump to Double v1 (#703)
1dc9796 Apply fixes from StyleCI (#702)
5aa082b TwoFactorEnabledResponse and TwoFactorDisabledResponse implement wrong interf...
f9a7301 Migration from Mockery to Double (#699)
3d5eed6 Update CHANGELOG
fe0fce8 Introduction of Timebox to prevent Timing-based Username Enumeration (#697)
1f2c911 Update CHANGELOG
See full diff in compare view

Updates laravel/framework from 13.30.1 to 13.39.0

Release notes

Sourced from laravel/framework's releases.

v13.39.0

[13.x] Rebuild the phpredis client when a broken pipe surfaces as a warning by @aleedhillon in laravel/framework#62111

[13.x] Resolve view namespace hints like view locations by @fgilio in laravel/framework#62005

[13.x] feat(database): allow disabling primary key via #[Table(key: false)] by @calebdw in laravel/framework#62113

[13.x] add duration to JobAttempted event by @jackbayliss in laravel/framework#62118

[13.x] Write config, route and event cache files atomically by @xurshudyan in laravel/framework#62117

[13.x] Fix database cache lock aborting the transaction on PostgreSQL by @xurshudyan in laravel/framework#62114

Fix assertSeeText('0') silently passes for zero as string by @crynobone in laravel/framework#62126

[13.x] Fix incorrect docblocks by @xurshudyan in laravel/framework#62125

[13.x] Don't let a job with a deleted model stop queue:retry by @xurshudyan in laravel/framework#62124

[13.x] Fix the previous route leaking into 404 requests under Octane by @xurshudyan in laravel/framework#62123

[13.x] Fix cache:prune-stale-tags with the phpredis SCAN_PREFIX option by @xurshudyan in laravel/framework#62122

[13.x] Fix Http::batch() treating retry() and throw() failures as successes by @mkantautas in laravel/framework#62120

[13.x] Create SessionGarbageCollectCommand by @browner12 in laravel/framework#62104

Bump vite from 8.0.16 to 8.3.5 in /src/Illuminate/Foundation/resources/exceptions/renderer by @dependabot[bot] in laravel/framework#62132

[13.x] Add withoutDispatchingAfterResponses to BusFake by @xurshudyan in laravel/framework#62130

[13.x] Fix pagination counts for grouped union queries by @mkantautas in laravel/framework#62131

[13.x] Fix simple paginator ignoring page name by @xurshudyan in laravel/framework#62128

[13.x] Qualify pivot columns in wherePivot closures by @xurshudyan in laravel/framework#62137

[13.x] Add forceCreate and forceCreateQuietly to BelongsToMany by @xurshudyan in laravel/framework#62136

Apply fixes from StyleCI by @taylorotwell in laravel/framework#62140

[13.x] remember token is nullable by @browner12 in laravel/framework#62105

[13.x] Fix dimensions of JXL images by @xurshudyan in laravel/framework#62151

[13.x] Fix latest() and oldest() with a join from a subquery by @xurshudyan in laravel/framework#62149

[13.x] Register the session:garbage-collect command by @xurshudyan in laravel/framework#62150

[13.x] Ensure _error_bag input is a string in Handler::invalid() by @manavu in laravel/framework#62147

[13.x] Cloud exceptions follow-ups by @timacdonald in laravel/framework#62142

[13.x] Don't fail database queue jobs on concurrency errors while reserving by @xurshudyan in laravel/framework#62145

[13.x] Fix N+1 queries on JSON:API resource collection includes by @xurshudyan in laravel/framework#62152

[13.x] Fix once() returning a cached value for a different object by @xurshudyan in laravel/framework#62121

[13.x] Fix Rule::anyOf() passing associative arrays against plain rule lists by @xurshudyan in laravel/framework#62171

[13.x] Fix withoutMiddleware() not excluding middleware with parameters by @xurshudyan in laravel/framework#62166

[13.x] Block phar:// stream wrapper in Filesystem::exists() and isFile() by @AsahiSoftWareEngineer in laravel/framework#62164

[13.x] Embed images once in markdown notifications by @xurshudyan in laravel/framework#62163

[13.x] Fake html() and plain() on MailFake by @xurshudyan in laravel/framework#62162

[12.x] Test SessionGuard::user() with recaller cookie that has an empty remember token by @crynobone with @Copilot in laravel/framework#62156

[13.x] Fix restoreOrCreate() and createOrRestore() on relations by @xurshudyan in laravel/framework#62146

[13.x] ensure sync queue passes duration too by @jackbayliss in laravel/framework#62155

Bump RedCrafter07/release-notes-action from 1.0.1 to 1.0.2 in the github-actions group by @dependabot[bot] in laravel/framework#62196

[13.x] Roll back all transaction levels after each test in RefreshDatabase by @xurshudyan in laravel/framework#62194

[13.x] Fix Request::route() return type when no route is resolved by @yoannblot in laravel/framework#62191

[13.x] Convert the down --retry datetime to GMT by @xurshudyan in laravel/framework#62190

[13.x] Cloud exceptions improvements by @timacdonald in laravel/framework#62189

[13.x] Fix illuminate/bus fatal error without illuminate/queue by @xurshudyan in laravel/framework#62182

[13.x] Add size methods to the array rule builder by @riesjart in laravel/framework#62179

[13.x] Fix distinct:ignore_case throwing on values that are not valid UTF-8 by @sumaiazaman in laravel/framework#62178

[13.x] Use the CI MySQL port in ApiAuthenticationWithEloquentTest by @xurshudyan in laravel/framework#62176

[13.x] Throw on unencodable JSON path values by @xurshudyan in laravel/framework#62175

[13.x] Allow reading files from the running phar by @xurshudyan in laravel/framework#62174

[13.x] Fail schedule:interrupt when interruption polling is disabled by @jackbayliss in laravel/framework#62183

... (truncated)

Changelog

Sourced from laravel/framework's changelog.

v13.39.0 - 2026-10-27

[13.x] Rebuild the phpredis client when a broken pipe surfaces as a warning by @aleedhillon in laravel/framework#62111

[13.x] Resolve view namespace hints like view locations by @fgilio in laravel/framework#62005

[13.x] feat(database): allow disabling primary key via #[Table(key: false)] by @calebdw in laravel/framework#62113

[13.x] add duration to JobAttempted event by @jackbayliss in laravel/framework#62118

[13.x] Write config, route and event cache files atomically by @xurshudyan in laravel/framework#62117

[13.x] Fix database cache lock aborting the transaction on PostgreSQL by @xurshudyan in laravel/framework#62114

Fix assertSeeText('0') silently passes for zero as string by @crynobone in laravel/framework#62126

[13.x] Fix incorrect docblocks by @xurshudyan in laravel/framework#62125

[13.x] Don't let a job with a deleted model stop queue:retry by @xurshudyan in laravel/framework#62124

[13.x] Fix the previous route leaking into 404 requests under Octane by @xurshudyan in laravel/framework#62123

[13.x] Fix cache:prune-stale-tags with the phpredis SCAN_PREFIX option by @xurshudyan in laravel/framework#62122

[13.x] Fix Http::batch() treating retry() and throw() failures as successes by @mkantautas in laravel/framework#62120

[13.x] Create SessionGarbageCollectCommand by @browner12 in laravel/framework#62104

Bump vite from 8.0.16 to 8.3.5 in /src/Illuminate/Foundation/resources/exceptions/renderer by @dependabot[bot] in laravel/framework#62132

[13.x] Add withoutDispatchingAfterResponses to BusFake by @xurshudyan in laravel/framework#62130

[13.x] Fix pagination counts for grouped union queries by @mkantautas in laravel/framework#62131

[13.x] Fix simple paginator ignoring page name by @xurshudyan in laravel/framework#62128

[13.x] Qualify pivot columns in wherePivot closures by @xurshudyan in laravel/framework#62137

[13.x] Add forceCreate and forceCreateQuietly to BelongsToMany by @xurshudyan in laravel/framework#62136

Apply fixes from StyleCI by @taylorotwell in laravel/framework#62140

[13.x] remember token is nullable by @browner12 in laravel/framework#62105

[13.x] Fix dimensions of JXL images by @xurshudyan in laravel/framework#62151

[13.x] Fix latest() and oldest() with a join from a subquery by @xurshudyan in laravel/framework#62149

[13.x] Register the session:garbage-collect command by @xurshudyan in laravel/framework#62150

[13.x] Ensure _error_bag input is a string in Handler::invalid() by @manavu in laravel/framework#62147

[13.x] Cloud exceptions follow-ups by @timacdonald in laravel/framework#62142

[13.x] Don't fail database queue jobs on concurrency errors while reserving by @xurshudyan in laravel/framework#62145

[13.x] Fix N+1 queries on JSON:API resource collection includes by @xurshudyan in laravel/framework#62152

[13.x] Fix once() returning a cached value for a different object by @xurshudyan in laravel/framework#62121

[13.x] Fix Rule::anyOf() passing associative arrays against plain rule lists by @xurshudyan in laravel/framework#62171

[13.x] Fix withoutMiddleware() not excluding middleware with parameters by @xurshudyan in laravel/framework#62166

[13.x] Block phar:// stream wrapper in Filesystem::exists() and isFile() by @AsahiSoftWareEngineer in laravel/framework#62164

[13.x] Embed images once in markdown notifications by @xurshudyan in laravel/framework#62163

[13.x] Fake html() and plain() on MailFake by @xurshudyan in laravel/framework#62162

[12.x] Test SessionGuard::user() with recaller cookie that has an empty remember token by @crynobone with @Copilot in laravel/framework#62156

[13.x] Fix restoreOrCreate() and createOrRestore() on relations by @xurshudyan in laravel/framework#62146

[13.x] ensure sync queue passes duration too by @jackbayliss in laravel/framework#62155

Bump RedCrafter07/release-notes-action from 1.0.1 to 1.0.2 in the github-actions group by @dependabot[bot] in laravel/framework#62196

[13.x] Roll back all transaction levels after each test in RefreshDatabase by @xurshudyan in laravel/framework#62194

[13.x] Fix Request::route() return type when no route is resolved by @yoannblot in laravel/framework#62191

[13.x] Convert the down --retry datetime to GMT by @xurshudyan in laravel/framework#62190

[13.x] Cloud exceptions improvements by @timacdonald in laravel/framework#62189

[13.x] Fix illuminate/bus fatal error without illuminate/queue by @xurshudyan in laravel/framework#62182

[13.x] Add size methods to the array rule builder by @riesjart in laravel/framework#62179

[13.x] Fix distinct:ignore_case throwing on values that are not valid UTF-8 by @sumaiazaman in laravel/framework#62178

[13.x] Use the CI MySQL port in ApiAuthenticationWithEloquentTest by @xurshudyan in laravel/framework#62176

[13.x] Throw on unencodable JSON path values by @xurshudyan in laravel/framework#62175

[13.x] Allow reading files from the running phar by @xurshudyan in laravel/framework#62174

... (truncated)

Commits

d52c3b3 Update version to v13.39.0
41840cf Fix install:broadcasting with app.jsx and app.js (#62202)
f10b9a1 Fix process fake shorthands when starting processes (#62200)
e093e46 [13.x] Add WithoutMigrationEvents attribute (#62201)
c4a246e Add restoreOrCreate and createOrRestore to through relations (#62204)
07279a6 [13.x] Throw on unencodable JSON in object casts (#62203)
723b151 Disable incrementing for models without a primary key (#62205)
377f5ce [13.x] Roll back transactions manager when commit fails (#62206)
2ff984f Cast failed job ids to strings (#62208)
f3adacd Ensure schedule:interrupt errors if its not interruptible (#62183)
Additional commits viewable in compare view

Updates laravel/reverb from 1.11.1 to 1.12.0

Release notes

Sourced from laravel/reverb's releases.

v1.12.0

Close the connection when the WebSocket handshake fails by @boutetnico in laravel/reverb#406

Mockery to Double Converter by @jasonmccreary in laravel/reverb#407

Fix presence channels when scaling enabled by @clnt in laravel/reverb#408

Changelog

Sourced from laravel/reverb's changelog.

v1.12.0 - 2026-09-22

Close the connection when the WebSocket handshake fails by @boutetnico in laravel/reverb#406

Mockery to Double Converter by @jasonmccreary in laravel/reverb#407

Fix presence channels when scaling enabled by @clnt in laravel/reverb#408

Commits

e233471 Fix presence channels when scaling enabled (#408)
2f8a121 verify timestamps
44cdee0 Fix code styling
bf15196 Mockery to Double Converter (#407)
dbcb96d Close the connection when the WebSocket handshake fails (#406)
1017f07 Update CHANGELOG
See full diff in compare view

Updates lattice-php/lattice from 0.72.2 to 0.77.0

Commits

0de7d55 chore(main): release 0.77.0 (#606)
fd34949 feat(framework): select an endpoint area by route middleware
ce3d22f chore(main): release 0.76.1 (#603)
da3b9d6 fix(vite): scan every framework package for Tailwind utilities (#601)
9713664 chore(main): release 0.76.0 (#599)
b16c91c feat: MediaDropzone field, pdf toolbar slot and page-layer seam, form frame c...
3052167 chore(main): release 0.75.0 (#597)
209e765 feat(form): add a checkbox group field
4769da3 chore(main): release 0.74.0 (#593)
dc6ee42 feat(table)!: run an action, modal, or effects from a whole-row click (#592)
Additional commits viewable in compare view

Updates driftingly/rector-laravel from 2.6.2 to 2.7.1

Release notes

Sourced from driftingly/rector-laravel's releases.

2.7.1

What's Changed

Add RemoveDefaultAuthorizeTrueFromFormRequestRector by @chinmaypurav in driftingly/rector-laravel#577

Add Repository/Container ArrayAccessToMethodCall rules to replace removed core rule by @TomasVotruba in driftingly/rector-laravel#587

Inline constructor injection in ArgumentFuncCallToMethodCallRector by @TomasVotruba in driftingly/rector-laravel#589

Add StaticFacadeToServiceMethodCallRector to replace deprecated core rule by @TomasVotruba in driftingly/rector-laravel#590

Fix test error on RequestStaticValidateToInjectRector when using rector dev-main by @samsonasik in driftingly/rector-laravel#592

Use PhpVersion constants directly instead of deprecated PhpVersionFeature by @TomasVotruba in driftingly/rector-laravel#594

Full Changelog: driftingly/rector-laravel@2.7.0...2.7.1

2.7.0

What's Changed

Add composer keywords so Composer suggests --dev on require by @chinmaypurav in driftingly/rector-laravel#558

Scope legacy string event upgrades to the event dispatcher by @chinmaypurav in driftingly/rector-laravel#557

Add UnlinkFuncCallToFileFacadeDeleteRector by @chinmaypurav in driftingly/rector-laravel#559

Fix DispatchToHelperFunctionsRector instantiating abstract classes by @chinmaypurav in driftingly/rector-laravel#561

Skip variable-only contexts in ArrayDimFetch rules by @chinmaypurav in driftingly/rector-laravel#564

Skip static contexts in CarbonSetTestNowToTravelToRector by @chinmaypurav in driftingly/rector-laravel#565

Resolve container binding arguments by name in ContainerBindConcreteWithClosureOnlyRector by @chinmaypurav in driftingly/rector-laravel#566

Update rules overview count to 130 by @chinmaypurav in driftingly/rector-laravel#562

Bump structarmed to ^0.17 and enable CodeQuality preset by @samsonasik in driftingly/rector-laravel#563

Fix PHPStan notice on latest update by @samsonasik in driftingly/rector-laravel#572

Update boundwize/structarmed version to ^0.18 by @samsonasik in driftingly/rector-laravel#571

Add broadcast support to DispatchToHelperFunctionsRector by @calebdw in driftingly/rector-laravel#579

Update boundwize/structarmed version to ^0.19 by @samsonasik in driftingly/rector-laravel#580

Fix infinite loop in unit tests per latest rector dev-main by @samsonasik in driftingly/rector-laravel#584

Add .github to export-ignore in .gitattributes by @jackbayliss in driftingly/rector-laravel#569

Skip parent and interface scope methods in ScopeNamedClassMethodToScopeAttributedClassMethodRector by @yannickuhlmann in driftingly/rector-laravel#578

Fix Request static method transformation by @simonyang08 in driftingly/rector-laravel#552

Preserve timezone argument when replacing now()->startOfDay() by @jivanf in driftingly/rector-laravel#570

Fix/query builder union type reflection by @misaf in driftingly/rector-laravel#567

Fix silent model corruption in TablePropertyToTableAttributeRector by @edzus in driftingly/rector-laravel#568

feat: add CollectionCountComparisonToIsEmptyRector by @pataar in driftingly/rector-laravel#582

Add CommandPropertyToAsCommandAttributeRector by @chinmaypurav in driftingly/rector-laravel#560

feat(rules): Add RelationTableStringToPivotClassRector rule by @MizouziE in driftingly/rector-laravel#541

Add contributor @samsonasik to README.md by @samsonasik in driftingly/rector-laravel#585

New Contributors

@yannickuhlmann made their first contribution in driftingly/rector-laravel#578

@simonyang08 made their first contribution in driftingly/rector-laravel#552

@misaf made their first contribution in driftingly/rector-laravel#567

@edzus made their first contribution in driftingly/rector-laravel#568

Full Changelog: driftingly/rector-laravel@2.6.2...2.7.0

Commits

c472e21 release PHP 7.4 downgraded 2.7.1
0a333a9 use PhpVersion constants directly instead of deprecated PhpVersionFeature (#594)
bd84209 Fix test error on RequestStaticValidateToInjectRector when using rector dev-m...
ea12f4b Add StaticFacadeToServiceMethodCallRector to replace deprecated core rule (#590)
ce67d9c Inline constructor injection in ArgumentFuncCallToMethodCallRector (#589)
5b189b3 Add Repository/Container ArrayAccessToMethodCall rules to replace removed cor...
4084b43 Add RemoveDefaultAuthorizeTrueFromFormRequestRector (#577)
64d0c56 Add contributor @samsonasik to README.md (#585)
7ac48e5 feat(rules): Add RelationTableStringToPivotClassRector rule (#541)
99d65e6 Add CommandPropertyToAsCommandAttributeRector (#560)
Additional commits viewable in compare view

Updates larastan/larastan from 3.11.0 to 3.13.2

Release notes

Sourced from larastan/larastan's releases.

3.13.2

What's Changed

Added

Read CREATE TABLE statements passed as string literals to DB::statement() and DB::unprepared() in migrations, using the same SQL parsers as schema dumps, by @tiagoabsantos in #2564. Read more about it here.

Infer Arr::map() callback parameter types and the mapped array type by @Gabrieljr42 in #2587.

Fixed

Check model properties in fill() and forceFill() by @uchimaki-vensley in #2618.

Check model properties in withAttributes() by @uchimaki-vensley in

Bumps the composer group with 14 updates: | Package | From | To | | --- | --- | --- | | [inertiajs/inertia-laravel](https://github.com/inertiajs/inertia-laravel) | `3.3.3` | `3.5.2` | | [laravel/fortify](https://github.com/laravel/fortify) | `1.39.0` | `1.41.0` | | [laravel/framework](https://github.com/laravel/framework) | `13.30.1` | `13.39.0` | | [laravel/reverb](https://github.com/laravel/reverb) | `1.11.1` | `1.12.0` | | [lattice-php/lattice](https://github.com/lattice-php/framework) | `0.72.2` | `0.77.0` | | [driftingly/rector-laravel](https://github.com/driftingly/rector-laravel) | `2.6.2` | `2.7.1` | | [larastan/larastan](https://github.com/larastan/larastan) | `3.11.0` | `3.13.2` | | [laravel/boost](https://github.com/laravel/boost) | `2.7.0` | `2.10.3` | | [laravel/pao](https://github.com/laravel/pao) | `1.1.4` | `1.1.5` | | [laravel/pint](https://github.com/laravel/pint) | `1.30.5` | `1.32.1` | | [pestphp/pest-plugin-browser](https://github.com/pestphp/pest-plugin-browser) | `5.0.1` | `5.1.2` | | [pestphp/pest-plugin-phpstan](https://github.com/pestphp/pest-plugin-phpstan) | `5.2.0` | `5.2.2` | | [pestphp/pest-plugin-rector](https://github.com/pestphp/pest-plugin-rector) | `5.0.4` | `5.0.6` | | [rector/rector](https://github.com/rectorphp/rector) | `2.6.6` | `2.8.3` | Updates `inertiajs/inertia-laravel` from 3.3.3 to 3.5.2 - [Release notes](https://github.com/inertiajs/inertia-laravel/releases) - [Changelog](https://github.com/inertiajs/inertia-laravel/blob/3.x/CHANGELOG.md) - [Commits](inertiajs/inertia-laravel@v3.3.3...v3.5.2) Updates `laravel/fortify` from 1.39.0 to 1.41.0 - [Release notes](https://github.com/laravel/fortify/releases) - [Changelog](https://github.com/laravel/fortify/blob/1.x/CHANGELOG.md) - [Commits](laravel/fortify@v1.39.0...v1.41.0) Updates `laravel/framework` from 13.30.1 to 13.39.0 - [Release notes](https://github.com/laravel/framework/releases) - [Changelog](https://github.com/laravel/framework/blob/13.x/CHANGELOG.md) - [Commits](laravel/framework@v13.30.1...v13.39.0) Updates `laravel/reverb` from 1.11.1 to 1.12.0 - [Release notes](https://github.com/laravel/reverb/releases) - [Changelog](https://github.com/laravel/reverb/blob/main/CHANGELOG.md) - [Commits](laravel/reverb@v1.11.1...v1.12.0) Updates `lattice-php/lattice` from 0.72.2 to 0.77.0 - [Commits](lattice-php/framework@0.72.2...0.77.0) Updates `driftingly/rector-laravel` from 2.6.2 to 2.7.1 - [Release notes](https://github.com/driftingly/rector-laravel/releases) - [Commits](driftingly/rector-laravel@2.6.2...2.7.1) Updates `larastan/larastan` from 3.11.0 to 3.13.2 - [Release notes](https://github.com/larastan/larastan/releases) - [Changelog](https://github.com/larastan/larastan/blob/3.x/RELEASE.md) - [Commits](larastan/larastan@v3.11.0...v3.13.2) Updates `laravel/boost` from 2.7.0 to 2.10.3 - [Release notes](https://github.com/laravel/boost/releases) - [Changelog](https://github.com/laravel/boost/blob/main/CHANGELOG.md) - [Commits](laravel/boost@v2.7.0...v2.10.3) Updates `laravel/pao` from 1.1.4 to 1.1.5 - [Release notes](https://github.com/laravel/pao/releases) - [Commits](laravel/pao@v1.1.4...v1.1.5) Updates `laravel/pint` from 1.30.5 to 1.32.1 - [Release notes](https://github.com/laravel/pint/releases) - [Changelog](https://github.com/laravel/pint/blob/main/CHANGELOG.md) - [Commits](laravel/pint@v1.30.5...v1.32.1) Updates `pestphp/pest-plugin-browser` from 5.0.1 to 5.1.2 - [Commits](pestphp/pest-plugin-browser@v5.0.1...v5.1.2) Updates `pestphp/pest-plugin-phpstan` from 5.2.0 to 5.2.2 - [Commits](pestphp/pest-plugin-phpstan@v5.2.0...v5.2.2) Updates `pestphp/pest-plugin-rector` from 5.0.4 to 5.0.6 - [Commits](pestphp/pest-plugin-rector@v5.0.4...v5.0.6) Updates `rector/rector` from 2.6.6 to 2.8.3 - [Release notes](https://github.com/rectorphp/rector/releases) - [Commits](rectorphp/rector@2.6.6...2.8.3) --- updated-dependencies: - dependency-name: inertiajs/inertia-laravel dependency-version: 3.5.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: composer - dependency-name: laravel/fortify dependency-version: 1.41.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: composer - dependency-name: laravel/framework dependency-version: 13.39.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: composer - dependency-name: laravel/reverb dependency-version: 1.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: composer - dependency-name: lattice-php/lattice dependency-version: 0.77.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: composer - dependency-name: driftingly/rector-laravel dependency-version: 2.7.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: composer - dependency-name: larastan/larastan dependency-version: 3.13.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: composer - dependency-name: laravel/boost dependency-version: 2.10.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: composer - dependency-name: laravel/pao dependency-version: 1.1.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: composer - dependency-name: laravel/pint dependency-version: 1.32.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: composer - dependency-name: pestphp/pest-plugin-browser dependency-version: 5.1.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: composer - dependency-name: pestphp/pest-plugin-phpstan dependency-version: 5.2.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: composer - dependency-name: pestphp/pest-plugin-rector dependency-version: 5.0.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: composer - dependency-name: rector/rector dependency-version: 2.8.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: composer ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-11-07T01:13:44Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update php code labels Oct 31, 2026

dependabot Bot closed this Nov 7, 2026

dependabot Bot deleted the dependabot/composer/composer-4f1a112bea branch November 7, 2026 01:13

Navigation Menu

Repository navigation

chore(deps): bump the composer group with 14 updates - #13

chore(deps): bump the composer group with 14 updates#13
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/composer/composer-4f1a112bea

dependabot Bot commented on behalf of github Oct 31, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Nov 7, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 31, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v3.5.2

What's Changed

New Contributors

v3.5.1

What's Changed

v3.5.0

What's Changed

v3.4.0

What's Changed

New Contributors

v3.3.4

What's Changed

v3.5.2 - 2026-10-21

What's Changed

New Contributors

v3.5.1 - 2026-10-01

What's Changed

v3.5.0 - 2026-10-01

What's Changed

v3.4.0 - 2026-09-25

What's Changed

New Contributors

v3.3.4 - 2026-09-11

v1.41.0

v1.40.0

v1.41.0 - 2026-09-28

v1.40.0 - 2026-09-10

v13.39.0

v13.39.0 - 2026-10-27

v1.12.0

v1.12.0 - 2026-09-22

2.7.1

What's Changed

2.7.0

What's Changed

New Contributors

3.13.2

What's Changed

Added

Fixed

Uh oh!

dependabot Bot commented on behalf of github Nov 7, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Oct 31, 2026 •

edited

Loading