[dependabot]

Bumps monolog/monolog from 3.11.0 to 3.12.1.

Release notes

Sourced from monolog/monolog's releases.

3.12.1

• Fixed Logger silently dropping every record for the rest of the process once the infinite loop guard aborted a nested logging cycle, which could hit long-running workers (#2072)
• Fixed RedactingFormatter letting secrets containing &, < or > through when wrapping an HtmlFormatter (#2069)
• Fixed SocketHandler throwing the writing timeout immediately when the first write made no progress, instead of waiting for the configured timeout (#2071)
• Fixed RotatingFileHandler computing the first rotation in the default timezone instead of the $timezone passed to the constructor (#2070)

Full Changelog: Seldaek/monolog@3.12.0...3.12.1

3.12.0

• Added support for reading the timestamp of new records from a PSR-20 clock, via a new $clock constructor param and Logger::setClock() (#2065)
• Added support for #[WithMonologChannel] on constructor/method parameters, so a channel can be bound to a single argument instead of the whole class (#2068)
• Fixed TelegramBotHandler breaking HTML markup when truncating or splitting long messages, open tags are now closed at the end of a chunk and reopened in the next one (#2066)
• Fixed RedactingFormatter not redacting secrets nested inside array values of sensitive keys (#2067)

Full Changelog: Seldaek/monolog@3.11.0...3.12.0

Changelog

Sourced from monolog/monolog's changelog.

3.12.1 (2026-09-29)

• Fixed Logger silently dropping every record for the rest of the process once the infinite loop guard aborted a nested logging cycle, which could hit long-running workers (#2072)
• Fixed RedactingFormatter letting secrets containing &, < or > through when wrapping an HtmlFormatter (#2069)
• Fixed SocketHandler throwing the writing timeout immediately when the first write made no progress, instead of waiting for the configured timeout (#2071)
• Fixed RotatingFileHandler computing the first rotation in the default timezone instead of the $timezone passed to the constructor (#2070)

3.12.0 (2026-09-09)

• Added support for reading the timestamp of new records from a PSR-20 clock, via a new $clock constructor param and Logger::setClock() (#2065)
• Added support for #[WithMonologChannel] on constructor/method parameters, so a channel can be bound to a single argument instead of the whole class (#2068)
• Fixed TelegramBotHandler breaking HTML markup when truncating or splitting long messages, open tags are now closed at the end of a chunk and reopened in the next one (#2066)
• Fixed RedactingFormatter not redacting secrets nested inside array values of sensitive keys (#2067)

Commits

• d7059e4 Update changelog
• aa53cd9 Restore the log depth counter when an aborted logging cycle returns early (#2...
• d94b61e Look for the html-escaped spelling of a secret too (#2069)
• 7e3dac1 Fix SocketHandler firing writingTimeout instantly instead of waiting (#2071)
• a6047df Fix RotatingFileHandler ignoring timezone for initial rotation (#2070)
• 783156a Update favicon
• 1b5f307 Update logo
• 2dc40e8 Remove mongodb pin
• 72c534f Update changelog
• 7f81d36 Fix baseline
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Looks like monolog/monolog is up-to-date now, so this is no longer needed.