Skip to content

- Update all non-major dependencies with digest and pinDigest#585

Open
blumilk-renovate[bot] wants to merge 1 commit intomainfrom
renovate/all-minor-patch-digest-pindigest
Open

- Update all non-major dependencies with digest and pinDigest#585
blumilk-renovate[bot] wants to merge 1 commit intomainfrom
renovate/all-minor-patch-digest-pindigest

Conversation

@blumilk-renovate
Copy link
Copy Markdown
Contributor

@blumilk-renovate blumilk-renovate bot commented Apr 1, 2026

This PR contains the following updates:

Package Change Age Confidence Type Update Pending
@inertiajs/vue3 (source) ^2.0.17 -> ^2.3.18 age confidence dependencies patch
@vue/compiler-sfc (source) ^3.5.26 -> ^3.5.31 age confidence dependencies patch
actions/cache v4.2.4 -> v4.3.0 age confidence action minor
alpine 3.22.2 -> 3.22.3 age confidence stage patch
appleboy/ssh-action v1.2.4 -> v1.2.5 age confidence action patch
autoprefixer ^10.4.23 -> ^10.4.27 age confidence dependencies patch
axios (source) ^1.13.2 -> ^1.13.6 age confidence dependencies patch
axllent/mailpit (source) v1.27 -> v1.29 age confidence minor
azuyalabs/yasumi (source) ^2.9.0 -> ^2.10.0 age confidence require patch 2.11.0
barryvdh/laravel-debugbar ^3.16.3 -> ^3.16.5 age confidence require-dev patch
barryvdh/laravel-dompdf ^3.1.1 -> ^3.1.2 age confidence require patch
composer 2.8.12 -> 2.9.5 age confidence stage minor
composer/composer 2.8.12-bin -> 2.9.5-bin age confidence stage minor
docker/build-push-action v6.18.0 -> v6.19.2 age confidence action minor
docker/login-action v3.6.0 -> v3.7.0 age confidence action minor
dompdf/dompdf ^3.1.4 -> ^3.1.5 age confidence require patch
eslint (source) ^9.30.1 -> ^9.39.4 age confidence dependencies patch
inertiajs/inertia-laravel ^2.0.18 -> ^2.0.22 age confidence require patch
laravel/dusk (source) ^8.3.4 -> ^8.3.6 age confidence require-dev patch
laravel/framework (source) ^11.45.3 -> ^11.51.0 age confidence require minor
laravel/sanctum ^4.1.2 -> ^4.3.1 age confidence require patch
laravel/socialite (source) ^5.24.1 -> ^5.24.3 age confidence require patch
laravel/telescope ^5.16.1 -> ^5.19.0 age confidence require minor
laravel/tinker ^2.10.2 -> ^2.11.1 age confidence require patch
lodash (source) ^4.17.21 -> ^4.17.23 age confidence dependencies patch
maatwebsite/excel ^3.1.67 -> ^3.1.68 age confidence require patch
node 22.17.1 -> 22.22.2 age confidence uses-with minor
node 22.17.1-bullseye-slim -> 22.22.2-bullseye-slim age confidence stage minor
nunomaduro/collision ^8.8.3 -> ^8.9.1 age confidence require-dev patch 8.9.2
php 8.4.16 -> 8.4.19 age confidence patch
php 8.4.11 -> 8.4.19 age confidence patch
php -> aa9ca43 final pinDigest
php -> aa9ca43 stage pinDigest
phpunit/phpunit (source) ^11.5.46 -> ^11.5.55 age confidence require-dev patch
postcss (source) ^8.5.6 -> ^8.5.8 age confidence dependencies patch
postgres a7711af -> c635fa3 service digest
postgres a7711af -> c635fa3 digest
selenium/standalone-chrome 57bc98a -> aae9b44 digest
sentry/sentry-laravel (source) ^4.15.3 -> ^4.24.0 age confidence require minor
shivammathur/setup-php 2.36.0 -> 2.37.0 age confidence action minor
spatie/laravel-google-calendar ^3.8.4 -> ^3.8.5 age confidence require patch
spatie/laravel-ignition (source) ^2.9.1 -> ^2.12.0 age confidence require-dev minor
spatie/laravel-model-states ^2.11.3 -> ^2.13.1 age confidence require minor
spatie/laravel-permission ^6.24.0 -> ^6.24.1 age confidence require patch
spatie/laravel-slack-slash-command ^1.12.2 -> ^1.13.0 age confidence require patch
vite (source) ^6.3.5 -> ^6.3.7 age confidence dependencies patch
vue (source) ^3.5.26 -> ^3.5.31 age confidence dependencies patch
xdebug/xdebug 3.4.7 -> 3.5.1 age confidence minor

Release Notes

inertiajs/inertia (@​inertiajs/vue3)

v2.3.18

Compare Source

What's Changed

New Contributors

Full Changelog: inertiajs/inertia@v2.3.17...v2.3.18

vuejs/core (@​vue/compiler-sfc)

v3.5.31

Compare Source

Bug Fixes

v3.5.30

Compare Source

Bug Fixes
actions/cache (actions/cache)

v4.3.0

Compare Source

What's Changed
New Contributors

Full Changelog: actions/cache@v4...v4.3.0

appleboy/ssh-action (appleboy/ssh-action)

v1.2.5

Compare Source

Changelog

Refactor
Documentation updates
axllent/mailpit (axllent/mailpit)

v1.29

Security
  • Add sandbox attribute to message iframe for extra later of security (already protected via CSP headers)
Feature
  • Add option to disable auto-VACUUMing of the SQLite database (#​661)
Chore
  • Update Go dependencies
  • Update node dependencies

v1.28

Chore
  • Increase allowed SMTP email address length to 1024 chars & return clearer SMTP responses for failures (#​620)
  • Update Go dependencies
  • Update node dependencies
Fix
  • Ensure SMTP HELO/EHLO command is issued before MAIL FROM as per RFC 5321 (#​621)
  • Prevent nested MAIL command during an active SMTP transaction (#​623)
  • Avoid error on image type assertion in thumbnail generation
barryvdh/laravel-dompdf (barryvdh/laravel-dompdf)

v3.1.2

Compare Source

What's Changed

New Contributors

Full Changelog: barryvdh/laravel-dompdf@v3.1.1...v3.1.2

docker/build-push-action (docker/build-push-action)

v6.19.2

Compare Source

Full Changelog: docker/build-push-action@v6.19.1...v6.19.2

v6.19.1

Compare Source

Full Changelog: docker/build-push-action@v6.19.0...v6.19.1

v6.19.0

Compare Source

  • Scope default git auth token to github.com by @​crazy-max in #​1451
  • Bump brace-expansion from 1.1.11 to 1.1.12 in #​1396
  • Bump form-data from 2.5.1 to 2.5.5 in #​1391
  • Bump js-yaml from 3.14.1 to 3.14.2 in #​1429
  • Bump lodash from 4.17.21 to 4.17.23 in #​1446
  • Bump tmp from 0.2.3 to 0.2.4 in #​1398
  • Bump undici from 5.28.4 to 5.29.0 in #​1397

Full Changelog: docker/build-push-action@v6.18.0...v6.19.0

docker/login-action (docker/login-action)

v3.7.0

Compare Source

Full Changelog: docker/login-action@v3.6.0...v3.7.0

eslint/eslint (eslint)

v9.39.4

Compare Source

Bug Fixes

Documentation

Chores

inertiajs/inertia-laravel (inertiajs/inertia-laravel)

v2.0.22

Compare Source

What's Changed

Full Changelog: inertiajs/inertia-laravel@v2.0.21...v2.0.22

laravel/framework (laravel/framework)

v11.51.0

Compare Source

v11.50.0

Compare Source

v11.49.0

Compare Source

laravel/telescope (laravel/telescope)

v5.19.0

Compare Source

SpartnerNL/Laravel-Excel (maatwebsite/excel)

v3.1.68

Compare Source

What's Changed

New Contributors

Full Changelog: SpartnerNL/Laravel-Excel@3.1.67...3.1.68

actions/node-versions (node)

v22.22.2: 22.22.2

Compare Source

Node.js 22.22.2

v22.22.1: 22.22.1

Compare Source

Node.js 22.22.1

v22.22.0: 22.22.0

Compare Source

Node.js 22.22.0

v22.21.1: 22.21.1

Compare Source

Node.js 22.21.1

v22.21.0: 22.21.0

Compare Source

Node.js 22.21.0

v22.20.0: 22.20.0

Compare Source

Node.js 22.20.0

v22.19.0: 22.19.0

Compare Source

Node.js 22.19.0

v22.18.0: 22.18.0

Compare Source

Node.js 22.18.0

nodejs/node (node)

v22.22.2: 2026-03-24, Version 22.22.2 'Jod' (LTS), @​RafaelGSS prepared by @​aduh95

Compare Source

This is a security release.

Notable Changes
  • (CVE-2026-21637) wrap SNICallback invocation in try/catch (Matteo Collina) - High
  • (CVE-2026-21710) use null prototype for headersDistinct/trailersDistinct (Matteo Collina) - High
  • (CVE-2026-21713) use timing-safe comparison in Web Cryptography HMAC (Filip Skokan) - Medium
  • (CVE-2026-21714) handle NGHTTP2_ERR_FLOW_CONTROL error code (RafaelGSS) - Medium
  • (CVE-2026-21717) test array index hash collision (Joyee Cheung) - Medium
  • (CVE-2026-21715) add permission check to realpath.native (RafaelGSS) - Low
  • (CVE-2026-21716) include permission check on lib/fs/promises (RafaelGSS) - Low
Commits

v22.22.1: 2026-03-05, Version 22.22.1 'Jod' (LTS)

Compare Source

Notable Changes
Commits

Configuration

📅 Schedule: Branch creation - On day 1 of the month, every 3 months ( * * 1 */3 * ) in timezone Europe/Warsaw, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@blumilk-renovate blumilk-renovate bot requested a review from a team as a code owner April 1, 2026 10:12
@blumilk-renovate blumilk-renovate bot added dependencies Pull requests that update a dependency file docker Pull requests that update Docker code github-actions javascript Pull requests that update Javascript code php Pull requests that update Php code renovate labels Apr 1, 2026
@blumilk-renovate blumilk-renovate bot requested a review from Blusia April 1, 2026 10:12
@blumilk-renovate
Copy link
Copy Markdown
Contributor Author

blumilk-renovate bot commented Apr 1, 2026

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: composer.lock
Command failed: composer update azuyalabs/yasumi:2.10.0 barryvdh/laravel-debugbar:3.16.5 barryvdh/laravel-dompdf:3.1.2 dompdf/dompdf:3.1.5 inertiajs/inertia-laravel:2.0.22 laravel/dusk:8.3.6 laravel/framework:11.51.0 laravel/sanctum:4.3.1 laravel/socialite:5.24.3 laravel/telescope:5.19.0 laravel/tinker:2.11.1 maatwebsite/excel:3.1.68 nunomaduro/collision:8.9.1 phpunit/phpunit:11.5.55 sentry/sentry-laravel:4.24.0 spatie/laravel-google-calendar:3.8.5 spatie/laravel-ignition:2.12.0 spatie/laravel-model-states:2.13.1 spatie/laravel-permission:6.24.1 spatie/laravel-slack-slash-command:1.13.0 --with-dependencies --ignore-platform-req='ext-*' --ignore-platform-req='lib-*' --no-ansi --no-interaction --no-scripts --no-autoloader --no-plugins --minimal-changes
Loading composer repositories with package information
Dependency guzzlehttp/guzzle is also a root requirement. Package has not been listed as an update argument, so keeping locked at old version. Use --with-all-dependencies (-W) to include root dependencies.
Dependency mockery/mockery is also a root requirement. Package has not been listed as an update argument, so keeping locked at old version. Use --with-all-dependencies (-W) to include root dependencies.
Updating dependencies
Your requirements could not be resolved to an installable set of packages.

  Problem 1
    - Root composer.json requires spatie/laravel-model-states ^2.13.1 -> satisfiable by spatie/laravel-model-states[2.13.1].
    - spatie/laravel-model-states 2.13.1 requires illuminate/contracts ^12.0|^13.0 -> found illuminate/contracts[v12.0.0, ..., v12.56.0, v13.0.0, ..., v13.3.0] but these were not loaded, likely because it conflicts with another require.

Use the option --with-all-dependencies (-W) to allow upgrades, downgrades and removals for packages currently locked to specific versions.

@blumilk-renovate blumilk-renovate bot force-pushed the renovate/all-minor-patch-digest-pindigest branch from cd80ce7 to b8d5f76 Compare April 2, 2026 10:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file docker Pull requests that update Docker code github-actions javascript Pull requests that update Javascript code php Pull requests that update Php code renovate

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants