chore(deps): bump the dependencies group with 5 updates by dependabot[bot] · Pull Request #34 · redot-src/core

dependabot · 2026-11-01T09:56:31Z

Bumps the dependencies group with 5 updates:

Package	From	To
giggsey/libphonenumber-for-php	`9.0.40`	`9.0.42`
intervention/image	`4.3.3`	`4.4.0`
laravel/framework	`13.34.0`	`13.39.0`
livewire/livewire	`4.4.6`	`4.4.8`
spatie/laravel-permission	`8.3.0`	`8.3.2`

Updates giggsey/libphonenumber-for-php from 9.0.40 to 9.0.42

Release notes

Sourced from giggsey/libphonenumber-for-php's releases.

9.0.42

PHP Changes

Fix STRICT_GROUPING rejecting numbers written without formatting (#772 - @wleeaf)

Do not skip the character after a match in PhoneNumberMatcher (#773 - @wleeaf)

Treat an unset extension as empty in containsOnlyValidXChars (#774 - @wleeaf)

Bump minimum giggsey/locale version for CLDR v49 test compatibility

Google v9.0.42 changes: Oct 22, 2026

Metadata changes:

Updated alternate formatting data for country calling code(s): 91

Updated phone metadata for region code(s): AU, AX, BW, CC, CN, CO, CR, CV, CX, DK, ES, FI, GH, GY, IN, KE, KW, PG, PY, RU, SH

Updated short number metadata for region code(s): BW, CO

Updated geocoding data for country calling code(s): 86 (en, zh), 91 (en), 233 (en), 267 (en)

New carrier data for country calling code(s): 7 (kk)

Updated carrier data for country calling code(s): 7 (en, ru), 33 (en), 34 (en), 40 (en), 57 (en), 91 (en), 238 (en), 254 (en), 267 (en), 290 (en), 358 (en), 501 (en), 592 (en), 595 (en), 965 (ar, en), 973 (en)

9.0.41

PHP Changes

Return an empty string when dialing BR numbers without a carrier code (#769) - thanks @youdie006

Return false from isCarrierSpecific() when no region matches (#770) - thanks @youdie006

Google v9.0.41 changes: Oct 07, 2026

Metadata changes:

Updated phone metadata for region code(s): CN, IR, NG, US

Updated short number metadata for region code(s): CN

Updated carrier data for country calling code(s): 27 (en), 30 (en), 60 (en), 98 (en, fa), 234 (en), 852 (en, zh, zh_Hant)

Updated / refreshed time zone meta data.

Commits

bd4266d Merge pull request #776 from giggsey/upstream-9.0.42
61efd18 Pin CI runner to Ubuntu 24.04
7631495 Update GitHub action versions
edd5ffb Upstream metadata changes from Google for v9.0.42
1ad4042 Merge pull request #774 from wleeaf/fix-matcher-x-without-extension
83f5ca9 Merge branch 'master' into fix-matcher-x-without-extension
0bb5aea Merge pull request #773 from wleeaf/fix-matcher-skipped-character
9f3dd3b Merge branch 'master' into fix-matcher-skipped-character
0f0e014 Merge pull request #772 from wleeaf/fix-strict-grouping-national-number
318d9b7 Merge branch 'master' into fix-strict-grouping-national-number
Additional commits viewable in compare view

Updates intervention/image from 4.3.3 to 4.4.0

Release notes

Sourced from intervention/image's releases.

4.4.0

What's Changed

Bugfix: Keep resolution unit in Imagick CropModifier by @NotAFlightRisk in Intervention/image#1551

Add support for decoding images directly from Psr7 stream or response instances by @olivervogel in Intervention/image#1552

Various minor improvements by @olivervogel

Full Changelog: Intervention/image@4.3.5...4.4.0

4.3.5

What's Changed

Fix resolution unit in Imagick ResolutionModifier by @NotAFlightRisk in Intervention/image#1548

Fix transparent seam in GD RotateModifier by @nlemoine in Intervention/image#1550

Add missing native types for PHP 8.3 by @guillaume-sainthillier in Intervention/image#1549

New Contributors

@NotAFlightRisk made their first contribution in Intervention/image#1548

Full Changelog: Intervention/image@4.3.4...4.3.5

4.3.4

What's Changed

Support strip option in PngEncoder by @lazerg in Intervention/image#1535

Fix transparent pixels in GD RotateModifier by @guillaume-sainthillier in Intervention/image#1536

Skip pixel operations when rotating by 0 degrees by @guillaume-sainthillier in Intervention/image#1542

Fill new GD canvases without flood fill by @guillaume-sainthillier in Intervention/image#1540

Cache Imagick media type per image format by @guillaume-sainthillier in Intervention/image#1538

Avoid sorting and filtering in hot lookups by @guillaume-sainthillier in Intervention/image#1541

Skip coalescing single frame Imagick images by @guillaume-sainthillier in Intervention/image#1539

Fix transparent color check of GD clone background by @guillaume-sainthillier in Intervention/image#1537

Fix Imagick driver's StripMetaModifier by @olivervogel in Intervention/image#1546

New Contributors

@guillaume-sainthillier made their first contribution in Intervention/image#1536

Full Changelog: Intervention/image@4.3.3...4.3.4

Commits

ddf4d84 Add support for decoding images from Psr7 stream/response (#1552)
2665d50 Switch from calling accessor to property
686fe2c Fix typo
2ae9f2e Fix typo
57624bf Fix doc blocks
a5d5668 Fix exception message
b6baaac Fix doc blocks
1593185 Fix doc blocks
c5de754 Optimize exception message
51c6ff8 Make input type more precise
Additional commits viewable in compare view

Updates laravel/framework from 13.34.0 to 13.39.0

Release notes

Sourced from laravel/framework's releases.

v13.39.0

[13.x] Rebuild the phpredis client when a broken pipe surfaces as a warning by @aleedhillon in laravel/framework#62111

[13.x] Resolve view namespace hints like view locations by @fgilio in laravel/framework#62005

[13.x] feat(database): allow disabling primary key via #[Table(key: false)] by @calebdw in laravel/framework#62113

[13.x] add duration to JobAttempted event by @jackbayliss in laravel/framework#62118

[13.x] Write config, route and event cache files atomically by @xurshudyan in laravel/framework#62117

[13.x] Fix database cache lock aborting the transaction on PostgreSQL by @xurshudyan in laravel/framework#62114

Fix assertSeeText('0') silently passes for zero as string by @crynobone in laravel/framework#62126

[13.x] Fix incorrect docblocks by @xurshudyan in laravel/framework#62125

[13.x] Don't let a job with a deleted model stop queue:retry by @xurshudyan in laravel/framework#62124

[13.x] Fix the previous route leaking into 404 requests under Octane by @xurshudyan in laravel/framework#62123

[13.x] Fix cache:prune-stale-tags with the phpredis SCAN_PREFIX option by @xurshudyan in laravel/framework#62122

[13.x] Fix Http::batch() treating retry() and throw() failures as successes by @mkantautas in laravel/framework#62120

[13.x] Create SessionGarbageCollectCommand by @browner12 in laravel/framework#62104

Bump vite from 8.0.16 to 8.3.5 in /src/Illuminate/Foundation/resources/exceptions/renderer by @dependabot[bot] in laravel/framework#62132

[13.x] Add withoutDispatchingAfterResponses to BusFake by @xurshudyan in laravel/framework#62130

[13.x] Fix pagination counts for grouped union queries by @mkantautas in laravel/framework#62131

[13.x] Fix simple paginator ignoring page name by @xurshudyan in laravel/framework#62128

[13.x] Qualify pivot columns in wherePivot closures by @xurshudyan in laravel/framework#62137

[13.x] Add forceCreate and forceCreateQuietly to BelongsToMany by @xurshudyan in laravel/framework#62136

Apply fixes from StyleCI by @taylorotwell in laravel/framework#62140

[13.x] remember token is nullable by @browner12 in laravel/framework#62105

[13.x] Fix dimensions of JXL images by @xurshudyan in laravel/framework#62151

[13.x] Fix latest() and oldest() with a join from a subquery by @xurshudyan in laravel/framework#62149

[13.x] Register the session:garbage-collect command by @xurshudyan in laravel/framework#62150

[13.x] Ensure _error_bag input is a string in Handler::invalid() by @manavu in laravel/framework#62147

[13.x] Cloud exceptions follow-ups by @timacdonald in laravel/framework#62142

[13.x] Don't fail database queue jobs on concurrency errors while reserving by @xurshudyan in laravel/framework#62145

[13.x] Fix N+1 queries on JSON:API resource collection includes by @xurshudyan in laravel/framework#62152

[13.x] Fix once() returning a cached value for a different object by @xurshudyan in laravel/framework#62121

[13.x] Fix Rule::anyOf() passing associative arrays against plain rule lists by @xurshudyan in laravel/framework#62171

[13.x] Fix withoutMiddleware() not excluding middleware with parameters by @xurshudyan in laravel/framework#62166

[13.x] Block phar:// stream wrapper in Filesystem::exists() and isFile() by @AsahiSoftWareEngineer in laravel/framework#62164

[13.x] Embed images once in markdown notifications by @xurshudyan in laravel/framework#62163

[13.x] Fake html() and plain() on MailFake by @xurshudyan in laravel/framework#62162

[12.x] Test SessionGuard::user() with recaller cookie that has an empty remember token by @crynobone with @Copilot in laravel/framework#62156

[13.x] Fix restoreOrCreate() and createOrRestore() on relations by @xurshudyan in laravel/framework#62146

[13.x] ensure sync queue passes duration too by @jackbayliss in laravel/framework#62155

Bump RedCrafter07/release-notes-action from 1.0.1 to 1.0.2 in the github-actions group by @dependabot[bot] in laravel/framework#62196

[13.x] Roll back all transaction levels after each test in RefreshDatabase by @xurshudyan in laravel/framework#62194

[13.x] Fix Request::route() return type when no route is resolved by @yoannblot in laravel/framework#62191

[13.x] Convert the down --retry datetime to GMT by @xurshudyan in laravel/framework#62190

[13.x] Cloud exceptions improvements by @timacdonald in laravel/framework#62189

[13.x] Fix illuminate/bus fatal error without illuminate/queue by @xurshudyan in laravel/framework#62182

[13.x] Add size methods to the array rule builder by @riesjart in laravel/framework#62179

[13.x] Fix distinct:ignore_case throwing on values that are not valid UTF-8 by @sumaiazaman in laravel/framework#62178

[13.x] Use the CI MySQL port in ApiAuthenticationWithEloquentTest by @xurshudyan in laravel/framework#62176

[13.x] Throw on unencodable JSON path values by @xurshudyan in laravel/framework#62175

[13.x] Allow reading files from the running phar by @xurshudyan in laravel/framework#62174

[13.x] Fail schedule:interrupt when interruption polling is disabled by @jackbayliss in laravel/framework#62183

... (truncated)

Changelog

Sourced from laravel/framework's changelog.

v13.39.0 - 2026-10-27

[13.x] Rebuild the phpredis client when a broken pipe surfaces as a warning by @aleedhillon in laravel/framework#62111

[13.x] Resolve view namespace hints like view locations by @fgilio in laravel/framework#62005

[13.x] feat(database): allow disabling primary key via #[Table(key: false)] by @calebdw in laravel/framework#62113

[13.x] add duration to JobAttempted event by @jackbayliss in laravel/framework#62118

[13.x] Write config, route and event cache files atomically by @xurshudyan in laravel/framework#62117

[13.x] Fix database cache lock aborting the transaction on PostgreSQL by @xurshudyan in laravel/framework#62114

Fix assertSeeText('0') silently passes for zero as string by @crynobone in laravel/framework#62126

[13.x] Fix incorrect docblocks by @xurshudyan in laravel/framework#62125

[13.x] Don't let a job with a deleted model stop queue:retry by @xurshudyan in laravel/framework#62124

[13.x] Fix the previous route leaking into 404 requests under Octane by @xurshudyan in laravel/framework#62123

[13.x] Fix cache:prune-stale-tags with the phpredis SCAN_PREFIX option by @xurshudyan in laravel/framework#62122

[13.x] Fix Http::batch() treating retry() and throw() failures as successes by @mkantautas in laravel/framework#62120

[13.x] Create SessionGarbageCollectCommand by @browner12 in laravel/framework#62104

Bump vite from 8.0.16 to 8.3.5 in /src/Illuminate/Foundation/resources/exceptions/renderer by @dependabot[bot] in laravel/framework#62132

[13.x] Add withoutDispatchingAfterResponses to BusFake by @xurshudyan in laravel/framework#62130

[13.x] Fix pagination counts for grouped union queries by @mkantautas in laravel/framework#62131

[13.x] Fix simple paginator ignoring page name by @xurshudyan in laravel/framework#62128

[13.x] Qualify pivot columns in wherePivot closures by @xurshudyan in laravel/framework#62137

[13.x] Add forceCreate and forceCreateQuietly to BelongsToMany by @xurshudyan in laravel/framework#62136

Apply fixes from StyleCI by @taylorotwell in laravel/framework#62140

[13.x] remember token is nullable by @browner12 in laravel/framework#62105

[13.x] Fix dimensions of JXL images by @xurshudyan in laravel/framework#62151

[13.x] Fix latest() and oldest() with a join from a subquery by @xurshudyan in laravel/framework#62149

[13.x] Register the session:garbage-collect command by @xurshudyan in laravel/framework#62150

[13.x] Ensure _error_bag input is a string in Handler::invalid() by @manavu in laravel/framework#62147

[13.x] Cloud exceptions follow-ups by @timacdonald in laravel/framework#62142

[13.x] Don't fail database queue jobs on concurrency errors while reserving by @xurshudyan in laravel/framework#62145

[13.x] Fix N+1 queries on JSON:API resource collection includes by @xurshudyan in laravel/framework#62152

[13.x] Fix once() returning a cached value for a different object by @xurshudyan in laravel/framework#62121

[13.x] Fix Rule::anyOf() passing associative arrays against plain rule lists by @xurshudyan in laravel/framework#62171

[13.x] Fix withoutMiddleware() not excluding middleware with parameters by @xurshudyan in laravel/framework#62166

[13.x] Block phar:// stream wrapper in Filesystem::exists() and isFile() by @AsahiSoftWareEngineer in laravel/framework#62164

[13.x] Embed images once in markdown notifications by @xurshudyan in laravel/framework#62163

[13.x] Fake html() and plain() on MailFake by @xurshudyan in laravel/framework#62162

[12.x] Test SessionGuard::user() with recaller cookie that has an empty remember token by @crynobone with @Copilot in laravel/framework#62156

[13.x] Fix restoreOrCreate() and createOrRestore() on relations by @xurshudyan in laravel/framework#62146

[13.x] ensure sync queue passes duration too by @jackbayliss in laravel/framework#62155

Bump RedCrafter07/release-notes-action from 1.0.1 to 1.0.2 in the github-actions group by @dependabot[bot] in laravel/framework#62196

[13.x] Roll back all transaction levels after each test in RefreshDatabase by @xurshudyan in laravel/framework#62194

[13.x] Fix Request::route() return type when no route is resolved by @yoannblot in laravel/framework#62191

[13.x] Convert the down --retry datetime to GMT by @xurshudyan in laravel/framework#62190

[13.x] Cloud exceptions improvements by @timacdonald in laravel/framework#62189

[13.x] Fix illuminate/bus fatal error without illuminate/queue by @xurshudyan in laravel/framework#62182

[13.x] Add size methods to the array rule builder by @riesjart in laravel/framework#62179

[13.x] Fix distinct:ignore_case throwing on values that are not valid UTF-8 by @sumaiazaman in laravel/framework#62178

[13.x] Use the CI MySQL port in ApiAuthenticationWithEloquentTest by @xurshudyan in laravel/framework#62176

[13.x] Throw on unencodable JSON path values by @xurshudyan in laravel/framework#62175

[13.x] Allow reading files from the running phar by @xurshudyan in laravel/framework#62174

... (truncated)

Commits

d52c3b3 Update version to v13.39.0
41840cf Fix install:broadcasting with app.jsx and app.js (#62202)
f10b9a1 Fix process fake shorthands when starting processes (#62200)
e093e46 [13.x] Add WithoutMigrationEvents attribute (#62201)
c4a246e Add restoreOrCreate and createOrRestore to through relations (#62204)
07279a6 [13.x] Throw on unencodable JSON in object casts (#62203)
723b151 Disable incrementing for models without a primary key (#62205)
377f5ce [13.x] Roll back transactions manager when commit fails (#62206)
2ff984f Cast failed job ids to strings (#62208)
f3adacd Ensure schedule:interrupt errors if its not interruptible (#62183)
Additional commits viewable in compare view

Updates livewire/livewire from 4.4.6 to 4.4.8

Release notes

Sourced from livewire/livewire's releases.

v4.4.8

What's Changed

[4.x] Fix persistent middleware route deduplication by @danharrin in livewire/livewire#10790

[4.x] Stop island scoping at the component boundary by @robert-stanciu in livewire/livewire#10789

[4.x] Recompile components when compiled view file is missing by @hamdyelbatal122 in livewire/livewire#10785

[4.x] Resolve current page in previousPage() and nextPage() when uninitialized by @hamdyelbatal122 in livewire/livewire#10782

[4.x] Bust the script cache when toggling csp_safe by @m-develops in livewire/livewire#10781

[4.x] Don't resolve inherited Object.prototype keys on the $wire proxy by @arjankapteijn in livewire/livewire#10780

Keep the navigate progress bar above positioned elements while it fades out by @kobykorman in livewire/livewire#10773

[4.x] Fix an interceptor unsubscribing itself skipping the next one by @MaxencePaulin in livewire/livewire#10759

[4.x] Fix interceptor unsubscribe functions removing the wrong interceptor or throwing by @MaxencePaulin in livewire/livewire#10758

[4.x] Only report locked property violations in debug mode by @oleksandr-roskovynskyi in livewire/livewire#10754

[4.x] Don't read uninitialized typed properties when setting a nested update path by @oleksandr-roskovynskyi in livewire/livewire#10753

[4.x] Return 404 instead of 500 when component JS or CSS asset does not exist by @littfed in livewire/livewire#10744

[4.x] Throw when redirecting to a component whose route needs parameters by @ghabriel25 in livewire/livewire#10743

[4.x] Fix queued $set dropping updates to properties that share its prefix by @ghabriel25 in livewire/livewire#10742

[4.x] Fix resetting nested form object properties from the component by @ghabriel25 in livewire/livewire#10741

[4.x] Add an ID to the temporary upload cleanup lifecycle rule by @lazerg in livewire/livewire#10740

[4.x] Fix wildcard validateOnly() validating untargeted sibling keys by @ghabriel25 in livewire/livewire#10736

[4.x] Speed up synth resolution by not building an exception on every getKey() call by @ghabriel25 in livewire/livewire#10728

[4.x] Clean up render state when rendering throws by @ghabriel25 in livewire/livewire#10642

[4.x] Regenerate island cache files declared in included partials by @lazerg in livewire/livewire#10792

[4.x] Fix MIME detection for MP3 uploads with ID3 tags larger than 64 KiB by @lazerg in livewire/livewire#10762

[4.x] Fix validateOnly() clearing unrelated validation errors by @ghabriel25 in livewire/livewire#10751

[4.x] Fix legacy models validation for encrypted model attributes by @ghabriel25 in livewire/livewire#10750

[4.x] Fix Form::resetErrorBag() clearing the entire component error bag by @ghabriel25 in livewire/livewire#10747

[4.x] Update Alpine to 3.17.5 by @calebporzio in livewire/livewire#10787

New Contributors

@m-develops made their first contribution in livewire/livewire#10781

@kobykorman made their first contribution in livewire/livewire#10773

@oleksandr-roskovynskyi made their first contribution in livewire/livewire#10754

@littfed made their first contribution in livewire/livewire#10744

Full Changelog: livewire/livewire@v4.4.7...v4.4.8

Security

Includes additional authorization hardening.

v4.4.7

Full Changelog: livewire/livewire@v4.4.6...v4.4.7

Commits

8d7f8fc Refresh v4.4.8 release build
8ead428 Merge remote-tracking branch 'origin/4.x' into codex/refresh-v4.4.8-security
822a4fa Keep #[Authorize] and the called method on the same parameters
e20a11c Build assets for v4.4.8
89b3693 Merge pull request #10787 from livewire/codex/alpine-3.17.5-4x
7b958bf Lock published Alpine 3.17.5 packages
6eb5fac Merge remote-tracking branch 'origin/4.x' into codex/alpine-3.17.5-4x
5383ac7 Merge pull request #10747 from ghabriel25/fix/form-reset-error-bag
2d4d64a Merge remote-tracking branch 'origin/4.x' into pr-10747
f3b7490 Merge pull request #10750 from ghabriel25/fix/legacy-models-validation
Additional commits viewable in compare view

Updates spatie/laravel-permission from 8.3.0 to 8.3.2

Release notes

Sourced from spatie/laravel-permission's releases.

8.3.2

Performance

Speed up repeated cached permission lookups by name and ID without changing lookup semantics (#2969).

Preserve loose comparisons, guard isolation, first-match ordering, shared model identity, and mutations of returned models. Custom models and keyed collections continue to use the original filter.

Keep lookup indexes tied to cache invalidation, including saved changes, deletion, explicit resets, and cache/tenant reinitialization.

Verification

Add regression coverage for numeric comparisons, custom accessors and keys, collection ordering, runtime casts, invalidation, strict missing-attribute handling, and release of cached model references.

Add an opt-in benchmark covering warm hits/misses, hydration, and retained memory. Indexing trades some hydration work and memory for faster repeated lookups; performance depends on the workload and is not unconditionally O(1).

No breaking changes. Public APIs, persistent cache format, and PHP/Laravel support are unchanged.

Full Changelog: spatie/laravel-permission@8.3.1...8.3.2

8.3.1

Fixes

Respect the explicit guard when hasRole() and hasAllRoles() receive a role model, including model-array checks. Fixes #2977 via #2978.

Refresh the cache manager when reinitializing permission caches, preventing stale stores after tenant or cache configuration switches (#2973).

Exclude pint.json from distribution archives (#2972).

Maintenance

Update test tooling to Pest 5.3.3, with Pest 4.7.8 for compatible PHP 8.3 and Laravel 12 stacks.

Test PHP 8.3–8.6 and Laravel 12/13 with appropriate lowest and highest dependencies (#2975, #2976, #2978).

No breaking changes. PHP and Laravel support are unchanged.

Full Changelog: spatie/laravel-permission@8.3.0...8.3.1

Changelog

Sourced from spatie/laravel-permission's changelog.

8.3.2 - 2026-10-19

Performance

Speed up repeated cached permission lookups by name and ID without changing lookup semantics (#2969).

Preserve loose comparisons, guard isolation, first-match ordering, shared model identity, and mutations of returned models. Custom models and keyed collections continue to use the original filter.

Keep lookup indexes tied to cache invalidation, including saved changes, deletion, explicit resets, and cache/tenant reinitialization.

Verification

Add regression coverage for numeric comparisons, custom accessors and keys, collection ordering, runtime casts, invalidation, strict missing-attribute handling, and release of cached model references.

Add an opt-in benchmark covering warm hits/misses, hydration, and retained memory. Indexing trades some hydration work and memory for faster repeated lookups; performance depends on the workload and is not unconditionally O(1).

No breaking changes. Public APIs, persistent cache format, and PHP/Laravel support are unchanged.

Full Changelog: spatie/laravel-permission@8.3.1...8.3.2

8.3.1 - 2026-10-19

Fixes

Respect the explicit guard when hasRole() and hasAllRoles() receive a role model, including model-array checks. Fixes #2977 via #2978.

Refresh the cache manager when reinitializing permission caches, preventing stale stores after tenant or cache configuration switches (#2973).

Exclude pint.json from distribution archives (#2972).

Maintenance

Update test tooling to Pest 5.3.3, with Pest 4.7.8 for compatible PHP 8.3 and Laravel 12 stacks.

Test PHP 8.3–8.6 and Laravel 12/13 with appropriate lowest and highest dependencies (#2975, #2976, #2978).

No breaking changes. PHP and Laravel support are unchanged.

Full Changelog: spatie/laravel-permission@8.3.0...8.3.1

Commits

e4e906f Merge pull request #2969: optimize cached permission lookups safely
c74c94e Preserve permission lookup semantics while indexing cached models
17c93a2 Merge remote-tracking branch 'origin/main' into perf/index-permission-lookups
e868d6a Update CHANGELOG
1ab5d33 Merge pull request #2978 from sean0407/codex/spatie-2977-role-guard-20261019
1a43000 Strengthen role guard checks and update Pest tooling
b5570d5 fix: respect guard when checking role models
182889d Test on PHP 8.6 (#2975)
da7bb6c Merge pull request #2976 from jnoordsij/consistent-composer-ci
2d162c9 Use Pest 4 with the Laravel 12 Testbench stack
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 5 updates: | Package | From | To | | --- | --- | --- | | [giggsey/libphonenumber-for-php](https://github.com/giggsey/libphonenumber-for-php) | `9.0.40` | `9.0.42` | | [intervention/image](https://github.com/Intervention/image) | `4.3.3` | `4.4.0` | | [laravel/framework](https://github.com/laravel/framework) | `13.34.0` | `13.39.0` | | [livewire/livewire](https://github.com/livewire/livewire) | `4.4.6` | `4.4.8` | | [spatie/laravel-permission](https://github.com/spatie/laravel-permission) | `8.3.0` | `8.3.2` | Updates `giggsey/libphonenumber-for-php` from 9.0.40 to 9.0.42 - [Release notes](https://github.com/giggsey/libphonenumber-for-php/releases) - [Commits](giggsey/libphonenumber-for-php@9.0.40...9.0.42) Updates `intervention/image` from 4.3.3 to 4.4.0 - [Release notes](https://github.com/Intervention/image/releases) - [Commits](Intervention/image@4.3.3...4.4.0) Updates `laravel/framework` from 13.34.0 to 13.39.0 - [Release notes](https://github.com/laravel/framework/releases) - [Changelog](https://github.com/laravel/framework/blob/13.x/CHANGELOG.md) - [Commits](laravel/framework@v13.34.0...v13.39.0) Updates `livewire/livewire` from 4.4.6 to 4.4.8 - [Release notes](https://github.com/livewire/livewire/releases) - [Commits](livewire/livewire@v4.4.6...v4.4.8) Updates `spatie/laravel-permission` from 8.3.0 to 8.3.2 - [Release notes](https://github.com/spatie/laravel-permission/releases) - [Changelog](https://github.com/spatie/laravel-permission/blob/main/CHANGELOG.md) - [Commits](spatie/laravel-permission@8.3.0...8.3.2) --- updated-dependencies: - dependency-name: giggsey/libphonenumber-for-php dependency-version: 9.0.42 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: intervention/image dependency-version: 4.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: laravel/framework dependency-version: 13.39.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: livewire/livewire dependency-version: 4.4.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: spatie/laravel-permission dependency-version: 8.3.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update php code labels Nov 1, 2026

Navigation Menu

Repository navigation

chore(deps): bump the dependencies group with 5 updates - #34

chore(deps): bump the dependencies group with 5 updates#34
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/composer/dependencies-43498de406

dependabot Bot commented on behalf of github Nov 1, 2026

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Nov 1, 2026

9.0.42

PHP Changes

Google v9.0.42 changes: Oct 22, 2026

Metadata changes:

9.0.41

PHP Changes

Google v9.0.41 changes: Oct 07, 2026

Metadata changes:

4.4.0

What's Changed

4.3.5

What's Changed

New Contributors

4.3.4

What's Changed

New Contributors

v13.39.0

v13.39.0 - 2026-10-27

v4.4.8

What's Changed

New Contributors

Security

v4.4.7

8.3.2

Performance

Verification

8.3.1

Fixes

Maintenance

8.3.2 - 2026-10-19

Performance

Verification

8.3.1 - 2026-10-19

Fixes

Maintenance

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants