Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 2, 2025

Bumps the minor-production-deps group with 5 updates in the /packages/php directory:

Package From To
ramsey/uuid 4.7.6 4.9.0
composer/composer 2.8.6 2.8.11
guzzlehttp/guzzle 7.9.3 7.10.0
phpoption/phpoption 1.9.3 1.9.4
vlucas/phpdotenv 5.6.1 5.6.2

Updates ramsey/uuid from 4.7.6 to 4.9.0

Release notes

Sourced from ramsey/uuid's releases.

4.9.0

Added

  • Add new @pure annotations to the following (#605):
    • Ramsey\Uuid\Codec\CodecInterface::encode()
    • Ramsey\Uuid\Codec\CodecInterface::encodeBinary()
    • Ramsey\Uuid\Codec\CodecInterface::decode()
    • Ramsey\Uuid\Codec\CodecInterface::decodeBytes()
    • Ramsey\Uuid\Fields\FieldsInterface::getBytes()
    • Ramsey\Uuid\Math\CalculatorInterface::add()
    • Ramsey\Uuid\Math\CalculatorInterface::subtract()
    • Ramsey\Uuid\Math\CalculatorInterface::multiply()
    • Ramsey\Uuid\Math\CalculatorInterface::divide()
    • Ramsey\Uuid\Math\CalculatorInterface::fromBase()
    • Ramsey\Uuid\Math\CalculatorInterface::toBase()
    • Ramsey\Uuid\Math\CalculatorInterface::toHexadecimal()
    • Ramsey\Uuid\Math\CalculatorInterface::toInteger()
    • Ramsey\Uuid\Nonstandard\Uuid
    • Ramsey\Uuid\Rfc4122\Fields::isMax()
    • Ramsey\Uuid\Rfc4122\FieldsInterface::getVersion()
    • Ramsey\Uuid\Rfc4122\FieldsInterface::isNil()
    • Ramsey\Uuid\Type\Time::getSeconds()
    • Ramsey\Uuid\Type\Time::getMicroseconds()
    • Ramsey\Uuid\Type\TypeInterface::toString()
    • Ramsey\Uuid\UuidInterface::getBytes()
    • Ramsey\Uuid\UuidInterface::toString()
    • Ramsey\Uuid\Validator\ValidatorInterface::validate()

Fixed

  • Restore the @pure annotations that were removed in 4.8.0 (#603).

Full Changelog: ramsey/uuid@4.8.1...4.9.0

4.8.1

Fixed

  • This tagged release ensures the stable documentation build matches the current stable release.

Full Changelog: ramsey/uuid@4.8.0...4.8.1

4.8.0

Deprecated

The following will be removed in ramsey/uuid 5.0.0:

  • Ramsey\Uuid\Codec\OrderedTimeCodec is deprecated; please migrate to version 6 UUIDs.
  • Ramsey\Uuid\Codec\TimestampFirstCombCodec is deprecated; please migrate to version 7 UUIDs.
  • Ramsey\Uuid\Codec\TimestampLastCombCodec is deprecated; please use Ramsey\Uuid\Codec\StringCodec instead.

... (truncated)

Changelog

Sourced from ramsey/uuid's changelog.

4.9.0 - 2025-06-25

Added

  • Add new @pure annotations to the following (#605):
    • Ramsey\Uuid\Codec\CodecInterface::encode()
    • Ramsey\Uuid\Codec\CodecInterface::encodeBinary()
    • Ramsey\Uuid\Codec\CodecInterface::decode()
    • Ramsey\Uuid\Codec\CodecInterface::decodeBytes()
    • Ramsey\Uuid\Fields\FieldsInterface::getBytes()
    • Ramsey\Uuid\Math\CalculatorInterface::add()
    • Ramsey\Uuid\Math\CalculatorInterface::subtract()
    • Ramsey\Uuid\Math\CalculatorInterface::multiply()
    • Ramsey\Uuid\Math\CalculatorInterface::divide()
    • Ramsey\Uuid\Math\CalculatorInterface::fromBase()
    • Ramsey\Uuid\Math\CalculatorInterface::toBase()
    • Ramsey\Uuid\Math\CalculatorInterface::toHexadecimal()
    • Ramsey\Uuid\Math\CalculatorInterface::toInteger()
    • Ramsey\Uuid\Nonstandard\Uuid
    • Ramsey\Uuid\Rfc4122\Fields::isMax()
    • Ramsey\Uuid\Rfc4122\FieldsInterface::getVersion()
    • Ramsey\Uuid\Rfc4122\FieldsInterface::isNil()
    • Ramsey\Uuid\Type\Time::getSeconds()
    • Ramsey\Uuid\Type\Time::getMicroseconds()
    • Ramsey\Uuid\Type\TypeInterface::toString()
    • Ramsey\Uuid\UuidInterface::getBytes()
    • Ramsey\Uuid\UuidInterface::toString()
    • Ramsey\Uuid\Validator\ValidatorInterface::validate()

Fixed

  • Restore the @pure annotations that were removed in 4.8.0 (#603).

4.8.1 - 2025-06-01

Fixed

  • This tagged release ensures the stable documentation build matches the current stable release.

4.8.0 - 2025-06-01

Deprecated

The following will be removed in ramsey/uuid 5.0.0:

  • Ramsey\Uuid\Codec\OrderedTimeCodec is deprecated; please migrate to version 6 UUIDs.
  • Ramsey\Uuid\Codec\TimestampFirstCombCodec is deprecated; please migrate to version 7 UUIDs.
  • Ramsey\Uuid\Codec\TimestampLastCombCodec is deprecated; please use Ramsey\Uuid\Codec\StringCodec instead.

... (truncated)

Commits
  • 4e0e23c Prepare release 4.9.0
  • 1fffdc3 Call getFields() only once
  • 4ca249e Ignore the "result unused" error in tests from the PHPStan config
  • 088b873 Use explicit error identifiers when ignoring PHPStan errors
  • aa18ce1 Fix pure annotations (#605)
  • df575bd Re-add the @​pure annotations
  • dbc8104 chore(deps-dev): bump squizlabs/php_codesniffer from 3.13.1 to 3.13.2
  • eaa5e16 Assert the length of time bytes is 6
  • f295696 Update tests for testing bytes "rollover"
  • b40c069 Remove errant echo statement from test.
  • Additional commits viewable in compare view

Updates composer/composer from 2.8.6 to 2.8.11

Release notes

Sourced from composer/composer's releases.

2.8.11

  • Fixed PHP 8.5 deprecation warnings (#12504, #12493, #12505)
  • Fixed bump command handling of 0.x versions (#12468)
  • Fixed psr-4 warnings being shown in some cases when using symlinked directories (#12480)
  • Fixed audit command failing hard if any advisory constraint was invalid (#12507)

Full Changelog: composer/composer@2.8.10...2.8.11

2.8.10

  • Fixed plugins appearing loaded despite not being loaded yet in some edge cases (#12442)
  • Fixed forward compatibility with Symfony 7.4 (#12445)
  • Fixed deprecation warning on PHP 8.4 when platform check fails (#12453)
  • Fixed support for new planner role in GitLab (#12426)
  • Fixed Bitbucket regression introduced in 2.8.0 (#12462)
  • Fixed json schema issues with version validation (#12438)
  • Fixed git prompt breaking some systems (#12437)
  • Fixed warning on PHP 8.5 when curl is not loaded (#12472)

Full Changelog: composer/composer@2.8.9...2.8.10

2.8.9

  • Fixed json schema issues with version validation (#12376)
  • Fixed bump-after-update triggering after an update --lock, which makes no sense (#12371)
  • Fixed zip bomb false positives when unpacking using ZipArchive (#12409)
  • Fixed creation of empty archives (#12408)
  • Removed output of script being run when running via composer <script-name> (#12383)

Full Changelog: composer/composer@2.8.8...2.8.9

2.8.8

  • Fixed json schema issues with version validation (#12367)
  • Fixed issues running on 32bit machines (#12365)

Full Changelog: composer/composer@2.8.7...2.8.8

2.8.7

  • Bumped justinrainbow/json-schema dependency to 6.x (#12348)
  • Added COMPOSER_MAX_PARALLEL_PROCESS env var to control max amount of parallel processes Composer will start (#12356)
  • Added zstd/brotli presence in diagnose command output
  • Fixed error handler to avoid spamming deprecation notices (#12360)
  • Fixed InstalledVersions returning duplicate data at Composer runtime (#12225)
  • Fixed handling of --with ... constraints to make them apply to packages replaced a package with a different name (#12353)
  • Fixed deprecation warnings showing up in IDE code inspections within the vendor dir (#12331)
  • Fixed a few json schema completeness issues (#12332, #12321)
  • Fixed issue autoloading files with a .phar inside the path (#12326)

Full Changelog: composer/composer@2.8.6...2.8.7

Changelog

Sourced from composer/composer's changelog.

[2.8.11] 2025-08-21

  • Fixed PHP 8.5 deprecation warnings (#12504, #12493, #12505)
  • Fixed bump command handling of 0.x versions (#12468)
  • Fixed psr-4 warnings being shown in some cases when using symlinked directories (#12480)
  • Fixed audit command failing hard if any advisory constraint was invalid (#12507)

[2.8.10] 2025-07-10

  • Fixed plugins appearing loaded despite not being loaded yet in some edge cases (#12442)
  • Fixed forward compatibility with Symfony 7.4 (#12445)
  • Fixed deprecation warning on PHP 8.4 when platform check fails (#12453)
  • Fixed support for new planner role in GitLab (#12426)
  • Fixed Bitbucket regression introduced in 2.8.0 (#12462)
  • Fixed json schema issues with version validation (#12438)
  • Fixed git prompt breaking some systems (#12437)
  • Fixed warning on PHP 8.5 when curl is not loaded (#12472)

[2.8.9] 2025-05-13

  • Fixed json schema issues with version validation (#12376)
  • Fixed bump-after-update triggering after an update --lock, which makes no sense (#12371)
  • Fixed zip bomb false positives when unpacking using ZipArchive (#12409)
  • Fixed creation of empty archives (#12408)
  • Removed output of script being run when running via composer <script-name> (#12383)

[2.8.8] 2025-04-04

  • Fixed json schema issues with version validation (#12367)
  • Fixed issues running on 32bit machines (#12365)

[2.8.7] 2025-04-03

  • Bumped justinrainbow/json-schema dependency to 6.x (#12348)
  • Added COMPOSER_MAX_PARALLEL_PROCESS env var to control max amount of parallel processes Composer will start (#12356)
  • Added zstd/brotli presence in diagnose command output
  • Fixed error handler to avoid spamming deprecation notices (#12360)
  • Fixed InstalledVersions returning duplicate data at Composer runtime (#12225)
  • Fixed handling of --with ... constraints to make them apply to packages replaced a package with a different name (#12353)
  • Fixed deprecation warnings showing up in IDE code inspections within the vendor dir (#12331)
  • Fixed a few json schema completeness issues (#12332, #12321)
  • Fixed issue autoloading files with a .phar inside the path (#12326)
Commits
  • 00e1a33 Release 2.8.11
  • 3e80d61 Update changelog
  • af8ea90 Add php 8.5 to CI
  • af81eac ProcessExecutor: mask GitHub fine grained access tokens similar to URL (#12487)
  • 5a85ab7 Fix audit command failing when an advisory contains an invalid constraint (#1...
  • e95d72a Fix PSR-4 warnings when using exclude-from-classmap with symlinked directorie...
  • 304107d Avoid bumping 0.3 to 0.4.3 for example for pre-1.0 releases, fixes #12468
  • c50807e Update deps
  • d35c034 fix: deprecation of curl_close in CurlDownloader.php (#12505)
  • 5014343 Update baseline (1362, 80)
  • Additional commits viewable in compare view

Updates guzzlehttp/guzzle from 7.9.3 to 7.10.0

Release notes

Sourced from guzzlehttp/guzzle's releases.

Release 7.10.0

Added

  • Support for PHP 8.5

Changed

  • Adjusted guzzlehttp/promises version constraint to ^2.3
  • Adjusted guzzlehttp/psr7 version constraint to ^2.8
Changelog

Sourced from guzzlehttp/guzzle's changelog.

7.10.0 - 2025-08-23

Added

  • Support for PHP 8.5

Changed

  • Adjusted guzzlehttp/promises version constraint to ^2.3
  • Adjusted guzzlehttp/psr7 version constraint to ^2.8
Commits

Updates phpoption/phpoption from 1.9.3 to 1.9.4

Release notes

Sourced from phpoption/phpoption's releases.

1.9.4

What's Changed

Full Changelog: schmittjoh/php-option@1.9.3...1.9.4

Commits

Updates vlucas/phpdotenv from 5.6.1 to 5.6.2

Release notes

Sourced from vlucas/phpdotenv's releases.

V5.6.2 (01/05/2025)

We announce the immediate availability V5.6.2.

Changes

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…with 5 updates

Bumps the minor-production-deps group with 5 updates in the /packages/php directory:

| Package | From | To |
| --- | --- | --- |
| [ramsey/uuid](https://github.com/ramsey/uuid) | `4.7.6` | `4.9.0` |
| [composer/composer](https://github.com/composer/composer) | `2.8.6` | `2.8.11` |
| [guzzlehttp/guzzle](https://github.com/guzzle/guzzle) | `7.9.3` | `7.10.0` |
| [phpoption/phpoption](https://github.com/schmittjoh/php-option) | `1.9.3` | `1.9.4` |
| [vlucas/phpdotenv](https://github.com/vlucas/phpdotenv) | `5.6.1` | `5.6.2` |



Updates `ramsey/uuid` from 4.7.6 to 4.9.0
- [Release notes](https://github.com/ramsey/uuid/releases)
- [Changelog](https://github.com/ramsey/uuid/blob/4.x/CHANGELOG.md)
- [Commits](ramsey/uuid@4.7.6...4.9.0)

Updates `composer/composer` from 2.8.6 to 2.8.11
- [Release notes](https://github.com/composer/composer/releases)
- [Changelog](https://github.com/composer/composer/blob/main/CHANGELOG.md)
- [Commits](composer/composer@2.8.6...2.8.11)

Updates `guzzlehttp/guzzle` from 7.9.3 to 7.10.0
- [Release notes](https://github.com/guzzle/guzzle/releases)
- [Changelog](https://github.com/guzzle/guzzle/blob/7.10/CHANGELOG.md)
- [Commits](guzzle/guzzle@7.9.3...7.10.0)

Updates `phpoption/phpoption` from 1.9.3 to 1.9.4
- [Release notes](https://github.com/schmittjoh/php-option/releases)
- [Commits](schmittjoh/php-option@1.9.3...1.9.4)

Updates `vlucas/phpdotenv` from 5.6.1 to 5.6.2
- [Release notes](https://github.com/vlucas/phpdotenv/releases)
- [Commits](vlucas/phpdotenv@v5.6.1...v5.6.2)

---
updated-dependencies:
- dependency-name: ramsey/uuid
  dependency-version: 4.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-production-deps
- dependency-name: composer/composer
  dependency-version: 2.8.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-production-deps
- dependency-name: guzzlehttp/guzzle
  dependency-version: 7.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-production-deps
- dependency-name: phpoption/phpoption
  dependency-version: 1.9.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-production-deps
- dependency-name: vlucas/phpdotenv
  dependency-version: 5.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-production-deps
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file php Issues related to our PHP SDK labels Sep 2, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file php Issues related to our PHP SDK
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants