- Update all non-major dependencies with digest and pinDigest

[blumilk-renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update	Pending
@alpinejs/focus (source)	^3.15.0 -> ^3.15.9			dependencies	patch	3.15.10
@alpinejs/persist (source)	^3.15.0 -> ^3.15.9			dependencies	patch	3.15.10
@tailwindcss/forms	^0.5.10 -> ^0.5.11			dependencies	patch
@tailwindcss/postcss (source)	^4.1.14 -> ^4.1.18			dependencies	patch
@typescript-eslint/eslint-plugin (source)	^8.35.1 -> ^8.57.2			devDependencies	minor	8.58.0
@typescript-eslint/parser (source)	^8.35.1 -> ^8.57.2			devDependencies	minor	8.58.0
actions/cache	v4.2.4 -> v4.3.0			action	minor
actions/checkout	v4.3.0 -> v4.3.1			action	patch
alpine	3.22.1 -> 3.22.3			stage	patch
alpinejs (source)	^3.15.0 -> ^3.15.9			dependencies	patch	3.15.10
appleboy/ssh-action	v1.2.2 -> v1.2.5			action	patch
axllent/mailpit (source)	v1.27.9 -> v1.27.11				patch
composer	2.8.12 -> 2.9.5			stage	minor
composer/composer	2.8.12-bin -> 2.9.5-bin			stage	minor
docker/build-push-action	v6.18.0 -> v6.19.2			action	minor
docker/login-action	v3.6.0 -> v3.7.0			action	minor
docker/metadata-action	v5.8.0 -> v5.10.0			action	minor
docker/setup-buildx-action	v3.11.1 -> v3.12.0			action	minor
filament/filament (source)	^3.3.43 -> ^3.3.49			require	patch
filament/spatie-laravel-translatable-plugin (source)	^3.3.43 -> ^3.3.49			require	patch
intervention/image-laravel (source)	^1.5.6 -> ^1.5.9			require	patch
josiasmontag/laravel-recaptchav3	^1.0.4 -> ^1.0.5			require	patch
larastan/larastan	^3.7.2 -> ^3.9.3			require-dev	minor
laravel/framework (source)	^12.32.5 -> ^12.56.0			require	minor
laravel/sanctum	^4.1.2 -> ^4.3.1			require	minor
laravel/tinker	^2.10.1 -> ^2.10.2			require	patch
nesbot/carbon (source)	^3.10.3 -> ^3.11.3			require	patch
node	22.20.0 -> 22.22.2			uses-with	minor
node	22.17.1-bullseye-slim -> 22.22.2-bullseye-slim			stage	minor
nunomaduro/collision	^8.8.2 -> ^8.8.3			require-dev	patch
opgginc/codezero-laravel-localized-routes	^5.1 -> ^5.1.1			require	patch
php	8.4.13 -> 8.4.19				patch
php	8.4.13-fpm-bookworm -> 8.4.19-fpm-bookworm			final	patch
phpredis/phpredis	6.2.0 -> 6.3.0				minor
phpunit/phpunit (source)	^12.2.9 -> ^12.5.14			require-dev	patch	12.5.15
postcss (source)	^8.5.6 -> ^8.5.8			devDependencies	patch
sentry/sentry-laravel (source)	^4.15.3 -> ^4.24.0			require	minor
shivammathur/setup-php	2.35.5 -> 2.37.0			action	minor
spatie/laravel-ignition (source)	^2.9.1 -> ^2.12.0			require-dev	minor
tailwindcss (source)	^4.1.14 -> ^4.1.18			dependencies	patch
vite (source)	^6.3.5 -> ^6.3.7			devDependencies	patch
xdebug/xdebug	3.4.5 -> 3.4.7				patch

---

Release Notes

alpinejs/alpine (@​alpinejs/focus)

v3.15.9

Compare Source

What's Changed

• fix(morph): close dialogs properly when removing open attribute by @​calebporzio in #​4739
• Update tabbable and focus-trap dependencies in focus plugin by @​joshhanley in #​4737
• feat(x-anchor): allow dynamic reference to be used with x-anchor by @​maximbelyayev in #​4735
• Handle all types of whitespace in class lists, not just spaces by @​calebporzio in #​4743
• docs: clearer variable name in x-bind example by @​calebporzio in #​4742
• Fix x-model.parent when inside of x-teleport by @​willrowe in #​4676
• feat: x-on.passive.false modifier by @​hirasso in #​4610
• Add support for Set objects in x-for loop function by @​alfanzain in #​4672
• Add support for custom options and cancelable $dispatch by @​nicolagianelli in #​4608
• Fix how x-html handles undefined by @​willrowe in #​4555
• move dependencies from monorepo root to correct packages by @​Igloczek in #​4550
• Don't assign the normalEvaluator per default by @​JeroenBoersma in #​4548
• Fix class setters invocation on nested x-data by @​helio3197 in #​4528
• 🐛 Masks model updates by @​ekwoka in #​4175
• Allow debouncing/throttling x-model when using x-modelable by @​Spitfire972 in #​4186
• UI x-radio: fix keyboard navigation when value of first/last radio option is null by @​gdebrauwer in #​4308
• Improve handling of autocomplete values in X-Mask by @​robertmarney in #​4260
• ⚡ Improves x-for performance by @​ekwoka in #​4361
• Fix x-ref crash during child-element morph by @​calebporzio in #​4748
• Fix $watch oldValue for objects by @​calebporzio in #​4749
• Escape attribute values in morph setAttribute patch by @​joshhanley in #​4770
• Fix x-model setting .value instead of .checked on checkboxes by @​ganyicz in #​4779
• Fix x-model.blur crash when input is removed from a form by @​joshhanley in #​4783

New Contributors

• @​maximbelyayev made their first contribution in #​4735
• @​hirasso made their first contribution in #​4610
• @​alfanzain made their first contribution in #​4672
• @​nicolagianelli made their first contribution in #​4608
• @​Igloczek made their first contribution in #​4550
• @​JeroenBoersma made their first contribution in #​4548
• @​helio3197 made their first contribution in #​4528
• @​Spitfire972 made their first contribution in #​4186
• @​robertmarney made their first contribution in #​4260

Full Changelog: alpinejs/alpine@v3.15.8...v3.15.9

v3.15.8

Compare Source

Fixed

• Flush x-model.blur value before form submit handlers run #​4729

v3.15.7

Compare Source

Fixed

• Fix $watch firing callback when primitive value unchanged #​4732

v3.15.6

Compare Source

Added

• Add reactive effect transactions #​4731

v3.15.5

Compare Source

Added

• feat(x-model): add .change, .blur, and .enter event modifiers #​4728

typescript-eslint/typescript-eslint (@​typescript-eslint/eslint-plugin)

v8.57.2

Compare Source

🩹 Fixes

• eslint-plugin: [prefer-readonly-parameter-types] preserve type alias infomation (#​11954)
• eslint-plugin: [no-useless-default-assignment] skip reporting false positives for unresolved type parameters (#​12127)
• eslint-plugin: [no-unsafe-return] false positive on unwrapping generic (#​12125)
• eslint-plugin: [no-restricted-types] flag banned generics in extends or implements (#​12120)
• eslint-plugin: [array-type] ignore Array and ReadonlyArray without type arguments (#​11971)
• eslint-plugin: [prefer-optional-chain] remove dangling closing parenthesis (#​11865)

❤️ Thank You

• Kirk Waiblinger @​kirkwaiblinger
• Konv Suu
• mdm317
• Newton Yuan @​NewtonYuan
• SungHyun627 @​SungHyun627
• Tamashoo @​Tamashoo

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.57.1

Compare Source

🩹 Fixes

• eslint-plugin: [prefer-optional-chain] no report for property on intersection type (#​12126)

❤️ Thank You

• Newton Yuan @​NewtonYuan

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.57.0

Compare Source

🚀 Features

• eslint-plugin: [no-unnecessary-condition] allow literal loop conditions in for/do loops (#​12080)

🩹 Fixes

• eslint-plugin: [no-base-to-string] fix false positive for toString with overloads (#​12089)
• eslint-plugin: [prefer-promise-reject-errors] add allow TypeOrValueSpecifier to prefer-promise-reject-errors (#​12094)
• typescript-estree: if the template literal is tagged and the text has an invalid escape, cooked will be null (#​11355)
• eslint-plugin: guard against negative paramIndex in no-useless-default-assignment (#​12077)
• eslint-plugin: handle statically analyzable computed keys in prefer-readonly (#​12079)
• eslint-plugin: [strict-void-return] false positives with overloads (#​12055)

❤️ Thank You

• Brad Zacher @​bradzacher
• Brian Schlenker @​bschlenk
• Evyatar Daud @​StyleShit
• James Henry @​JamesHenry
• Josh Goldberg
• Kirk Waiblinger @​kirkwaiblinger
• Moses Odutusin @​thebolarin
• Newton Yuan @​NewtonYuan
• SungHyun627 @​SungHyun627
• Younsang Na @​nayounsang

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.56.1

Compare Source

This was a version bump only for eslint-plugin to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.56.0

Compare Source

🚀 Features

• support ESLint v10 (#​12057)

🩹 Fixes

• use parser options from context.languageOptions (#​12043)

❤️ Thank You

• Brad Zacher @​bradzacher
• fnx @​DMartens
• Joshua Chen

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.55.0

Compare Source

🚀 Features

• utils: deprecate defaultOptions in favor of meta.defaultOptions (#​11992)

🩹 Fixes

• eslint-plugin: [no-useless-default-assignment] reduce param index to ts this handling (#​11949)
• eslint-plugin: [no-useless-default-assignment] report unnecessary defaults in ternary expressions (#​11984)
• eslint-plugin: [no-useless-default-assignment] require strictNullChecks (#​11966, #​12000)
• eslint-plugin: [no-unused-vars] remove trailing newline when removing entire import (#​11990)

❤️ Thank You

• Christian Rose @​chrros95
• Josh Goldberg
• Maria Solano @​MariaSolOs
• Minyeong Kim @​minyeong981
• SungHyun627 @​SungHyun627
• Yukihiro Hasegawa @​y-hsgw

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.54.0

Compare Source

🚀 Features

• eslint-plugin-internal: add prefer-tsutils-methods rule (#​11974, #​11625)
• typescript-estree: add shortcut methods to ParserServicesWithTypeInformation (#​11965, #​11955)

🩹 Fixes

• eslint-plugin: [no-unnecessary-type-assertion] check both base constraint and actual type for non-null assertions (#​11967, #​11559)
• deps: update dependency prettier to v3.8.0 (#​11991)
• scope-manager: fix catch clause scopes def.name (#​11982)
• eslint-plugin: [no-unused-private-class-members] private destructured class member is defined but used (#​11785)

❤️ Thank You

• Brad Zacher @​bradzacher
• Josh Goldberg
• MinJae @​Ju-MINJAE
• Minyeong Kim @​minyeong981
• overlookmotel
• Yuya Yoshioka @​YuyaYoshioka
• 김현수 @​Kimsoo0119

You can read about our versioning strategy and releases on our website.

v8.53.1

Compare Source

🩹 Fixes

• utils: make RuleCreator root defaultOptions optional (#​11956)
• eslint-plugin: [consistent-indexed-object-style] skip fixer if interface is a default export (#​11951)

❤️ Thank You

• Cameron
• Yukihiro Hasegawa @​y-hsgw

You can read about our versioning strategy and releases on our website.

typescript-eslint/typescript-eslint (@​typescript-eslint/parser)

v8.57.2

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.57.1

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.57.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.56.1

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.56.0

Compare Source

🚀 Features

• support ESLint v10 (#​12057)

❤️ Thank You

• Brad Zacher @​bradzacher
• Joshua Chen

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.55.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.54.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.53.1

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

actions/cache (actions/cache)

v4.3.0

Compare Source

What's Changed

• Add note on runner versions by @​GhadimiR in #​1642
• Prepare v4.3.0 release by @​Link- in #​1655

New Contributors

• @​GhadimiR made their first contribution in #​1642

Full Changelog: actions/cache@v4...v4.3.0

actions/checkout (actions/checkout)

v4.3.1

Compare Source

• Port v6 cleanup to v4 by @​ericsciple in #​2305

appleboy/ssh-action (appleboy/ssh-action)

v1.2.5

Compare Source

Changelog

Refactor

• 0ff4204: refactor: streamline output handling for GITHUB_OUTPUT in workflows (#​404) (@​appleboy)

Documentation updates

• 23bd972: docs: update README and assets for new SSH agent workflow (@​appleboy)
• 8e460a2: docs: improve documentation table formatting for output descriptions (@​appleboy)

v1.2.4

Compare Source

Changelog

Enhancements

• 4e3535e: chore: bump default DRONE_SSH_VERSION to 1.8.2 (@​appleboy)

Build process updates

• 823bd89: ci: trigger GitHub Actions workflows only on version tags (@​appleboy)

Documentation updates

• 652a0be: docs: update CI documentation and workflow references (@​appleboy)
• f6208e0: docs: document and demonstrate capturing and using command output (@​appleboy)

v1.2.3

Compare Source

Changelog

Features

• 20d5c5b: feat: add configurable curl insecure flag to GitHub action (@​appleboy)

Bug fixes

• 170eebb: fix: enhance binary download flow with robust error handling (#​394) (@​appleboy)

Enhancements

• b27b9f8: chore: refactor system to improve efficiency and update API usage (@​appleboy)
• 0e19dd9: chore: improve robustness and consistency across multiple scripts (@​appleboy)

Refactor

• b6690ee: refactor: improve error handling and code readability across scripts (#​374) (@​appleboy)

Build process updates

• 2b3c650: ci: unify and enhance GitHub workflow configurations (@​appleboy)
• ffd1eec: ci: add workflow step for multi-command SSH testing (#​386) (@​appleboy)
• 53f5c5c: ci: add automated Trivy security scanning via GitHub Actions (@​appleboy)

Documentation updates

• 52a1840: docs: update SSH action version to v1 in all README files (#​372) (@​appleboy)
• 689de3c: docs: improve CLI messaging and error clarity for users (@​appleboy)
• 9ca1cd2: docs: document the new curl_insecure configuration option (@​appleboy)
• bd83ba7: docs: document and configure drone-ssh version usage (#​381) (@​appleboy)
• b80f638: docs: rewrite and unify documentation across all supported languages (@​appleboy)
• c7fbbc9: docs: add table of contents to multilingual README files (@​appleboy)
• 4d84f05: docs: revamp and unify multi-language readme documentation (@​appleboy)
• 8f3cc07: docs: add comprehensive tables of contents to all README files (@​appleboy)
• 8745f95: docs: restructure and clarify parameter documentation across all readmes (@​appleboy)
• 57f6f35: docs(readme): better wording for script_path property (#​387) (@​kontur)
• 3ca8a7c: docs: clarify script_path usage in Chinese remote execution docs (@​appleboy)
• c680069: docs: add comprehensive documentation for project setup and usage (@​appleboy)
• 91f3272: docs: add Trivy security scan badge to all documentation (@​appleboy)

axllent/mailpit (axllent/mailpit)

v1.27.11

Compare Source

Chore

• Update Go dependencies
• Update node dependencies
• Add type assertion for value in imaging assignment

v1.27.10

Compare Source

Security

• Prevent potential information disclosure via indirect expvar library (Prometheus)

Chore

• Add tooltip to messages nav dropdown
• Update GitHub Actions
• Add tooltip to messages nav dropdown
• Update GitHub Actions
• Update Go dependencies
• Update node dependencies

docker/build-push-action (docker/build-push-action)

v6.19.2

Compare Source

• Preserve port in GIT_AUTH_TOKEN host by @​crazy-max in #​1458

Full Changelog: docker/build-push-action@v6.19.1...v6.19.2

v6.19.1

Compare Source

• Derive GIT_AUTH_TOKEN host from GitHub server URL by @​crazy-max in #​1456

Full Changelog: docker/build-push-action@v6.19.0...v6.19.1

v6.19.0

Compare Source

• Scope default git auth token to github.com by @​crazy-max in #​1451
• Bump brace-expansion from 1.1

---

Configuration

📅 Schedule: Branch creation - On day 1 of the month, every 3 months ( * * 1 */3 * ) in timezone Europe/Warsaw, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.