Skip to content

chore(deps): bump the minor-production-deps group across 1 directory with 3 updates #1227

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

chore(deps): bump the minor-production-deps group across 1 directory with 3 updates #1227

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 1, 2025 •
edited
Loading

Bumps the minor-production-deps group with 3 updates in the /packages/php directory: ramsey/uuid, composer/composer and vlucas/phpdotenv.

Updates ramsey/uuid from 4.7.6 to 4.8.1

Release notes

Sourced from ramsey/uuid's releases.

4.8.1

Fixed

  • This tagged release ensures the stable documentation build matches the current stable release.

Full Changelog: ramsey/uuid@4.8.0...4.8.1

4.8.0

Deprecated

The following will be removed in ramsey/uuid 5.0.0:

  • Ramsey\Uuid\Codec\OrderedTimeCodec is deprecated; please migrate to version 6 UUIDs.
  • Ramsey\Uuid\Codec\TimestampFirstCombCodec is deprecated; please migrate to version 7 UUIDs.
  • Ramsey\Uuid\Codec\TimestampLastCombCodec is deprecated; please use Ramsey\Uuid\Codec\StringCodec instead.
  • Ramsey\Uuid\Generator\CombGenerator is deprecated; please migrate to version 7 UUIDs.

Fixed

  • Allow brick/math version ^0.13; fixed in #589.
  • Update call to str_getcsv() to avoid deprecation notice in PHP 8.4; fixed in #590.
  • Hexadecimal is never an empty string; fixed in #593.
  • Update docblocks for Uuid::fromBytes(), Uuid::fromString(), Uuid::fromDateTime(), Uuid::fromHexadecimal(), and Uuid::fromInteger() to note that each can throw InvalidArgumentException, addressing PHPStan errors occurring at call sites; fixed in #552.
  • getVariant() for MaxUuid now correctly returns Uuid::RESERVED_FUTURE, as specified in RFC 9562, section 5.10.
  • getVariant() for NilUuid now correctly returns Uuid::RESERVED_NCS, as specified in RFC 9562, section 5.9.

New Contributors

Full Changelog: ramsey/uuid@4.7.6...4.8.0

Changelog

Sourced from ramsey/uuid's changelog.

4.8.1 - 2025-06-01

Fixed

  • This tagged release ensures the stable documentation build matches the current stable release.

4.8.0 - 2025-06-01

Deprecated

The following will be removed in ramsey/uuid 5.0.0:

  • Ramsey\Uuid\Codec\OrderedTimeCodec is deprecated; please migrate to version 6 UUIDs.
  • Ramsey\Uuid\Codec\TimestampFirstCombCodec is deprecated; please migrate to version 7 UUIDs.
  • Ramsey\Uuid\Codec\TimestampLastCombCodec is deprecated; please use Ramsey\Uuid\Codec\StringCodec instead.
  • Ramsey\Uuid\Generator\CombGenerator is deprecated; please migrate to version 7 UUIDs.

Fixed

  • Allow brick/math version ^0.13; fixed in #589.
  • Update call to str_getcsv() to avoid deprecation notice in PHP 8.4; fixed in #590.
  • Hexadecimal is never an empty string; fixed in #593.
  • Update docblocks for Uuid::fromBytes(), Uuid::fromString(), Uuid::fromDateTime(), Uuid::fromHexadecimal(), and Uuid::fromInteger() to note that each can throw InvalidArgumentException, addressing PHPStan errors occurring at call sites; fixed in #552.
  • getVariant() for MaxUuid now correctly returns Uuid::RESERVED_FUTURE, as specified in RFC 9562, section 5.10.
  • getVariant() for NilUuid now correctly returns Uuid::RESERVED_NCS, as specified in RFC 9562, section 5.9.
Commits
  • fdf4dd4 Prepare release 4.8.1
  • b366701 Update documentation with references to RFC 9562
  • 6700833 Prepare for release 4.8.0
  • a11a7e5 Lock brick/math to ^0.9 for testing and update CHANGELOG
  • db6a661 Merge branch 'derrabus-bump/math' into 4.x
  • d52de61 fix: max UUID should be variant 7, nil UUID should be variant 0
  • dbcee99 Update CHANGELOG with most recent changes
  • efc4409 Clean up docblocks, code, and note new deprecations
  • d43a9e7 chore: update copyright year
  • 4d0c09d chore: convert @​psalm-return to @​return
  • Additional commits viewable in compare view

Updates composer/composer from 2.8.6 to 2.8.9

Release notes

Sourced from composer/composer's releases.

2.8.9

  • Fixed json schema issues with version validation (#12376)
  • Fixed bump-after-update triggering after an update --lock, which makes no sense (#12371)
  • Fixed zip bomb false positives when unpacking using ZipArchive (#12409)
  • Fixed creation of empty archives (#12408)
  • Removed output of script being run when running via composer <script-name> (#12383)

Full Changelog: composer/composer@2.8.8...2.8.9

2.8.8

  • Fixed json schema issues with version validation (#12367)
  • Fixed issues running on 32bit machines (#12365)

Full Changelog: composer/composer@2.8.7...2.8.8

2.8.7

  • Bumped justinrainbow/json-schema dependency to 6.x (#12348)
  • Added COMPOSER_MAX_PARALLEL_PROCESS env var to control max amount of parallel processes Composer will start (#12356)
  • Added zstd/brotli presence in diagnose command output
  • Fixed error handler to avoid spamming deprecation notices (#12360)
  • Fixed InstalledVersions returning duplicate data at Composer runtime (#12225)
  • Fixed handling of --with ... constraints to make them apply to packages replaced a package with a different name (#12353)
  • Fixed deprecation warnings showing up in IDE code inspections within the vendor dir (#12331)
  • Fixed a few json schema completeness issues (#12332, #12321)
  • Fixed issue autoloading files with a .phar inside the path (#12326)

Full Changelog: composer/composer@2.8.6...2.8.7

Changelog

Sourced from composer/composer's changelog.

[2.8.9] 2025-05-13

  • Fixed json schema issues with version validation (#12376)
  • Fixed bump-after-update triggering after an update --lock, which makes no sense (#12371)
  • Fixed zip bomb false positives when unpacking using ZipArchive (#12409)
  • Fixed creation of empty archives (#12408)
  • Removed output of script being run when running via composer <script-name> (#12383)

[2.8.8] 2025-04-04

  • Fixed json schema issues with version validation (#12367)
  • Fixed issues running on 32bit machines (#12365)

[2.8.7] 2025-04-03

  • Bumped justinrainbow/json-schema dependency to 6.x (#12348)
  • Added COMPOSER_MAX_PARALLEL_PROCESS env var to control max amount of parallel processes Composer will start (#12356)
  • Added zstd/brotli presence in diagnose command output
  • Fixed error handler to avoid spamming deprecation notices (#12360)
  • Fixed InstalledVersions returning duplicate data at Composer runtime (#12225)
  • Fixed handling of --with ... constraints to make them apply to packages replaced a package with a different name (#12353)
  • Fixed deprecation warnings showing up in IDE code inspections within the vendor dir (#12331)
  • Fixed a few json schema completeness issues (#12332, #12321)
  • Fixed issue autoloading files with a .phar inside the path (#12326)
Commits

Updates vlucas/phpdotenv from 5.6.1 to 5.6.2

Release notes

Sourced from vlucas/phpdotenv's releases.

V5.6.2 (01/05/2025)

We announce the immediate availability V5.6.2.

Changes

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file php Issues related to our PHP SDK labels Jun 1, 2025
@dependabot
chore(deps): bump the minor-production-deps group across 1 directory …
34f3c4b 
…with 3 updates

Bumps the minor-production-deps group with 3 updates in the /packages/php directory: [ramsey/uuid](https://github.com/ramsey/uuid), [composer/composer](https://github.com/composer/composer) and [vlucas/phpdotenv](https://github.com/vlucas/phpdotenv).


Updates `ramsey/uuid` from 4.7.6 to 4.8.1
- [Release notes](https://github.com/ramsey/uuid/releases)
- [Changelog](https://github.com/ramsey/uuid/blob/4.x/CHANGELOG.md)
- [Commits](ramsey/uuid@4.7.6...4.8.1)

Updates `composer/composer` from 2.8.6 to 2.8.9
- [Release notes](https://github.com/composer/composer/releases)
- [Changelog](https://github.com/composer/composer/blob/main/CHANGELOG.md)
- [Commits](composer/composer@2.8.6...2.8.9)

Updates `vlucas/phpdotenv` from 5.6.1 to 5.6.2
- [Release notes](https://github.com/vlucas/phpdotenv/releases)
- [Commits](vlucas/phpdotenv@v5.6.1...v5.6.2)

---
updated-dependencies:
- dependency-name: ramsey/uuid
  dependency-version: 4.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-production-deps
- dependency-name: composer/composer
  dependency-version: 2.8.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-production-deps
- dependency-name: vlucas/phpdotenv
  dependency-version: 5.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-production-deps
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/composer/packages/php/minor-production-deps-6ca8c3ea1a branch from 8277125 to 34f3c4b Compare July 1, 2025 19:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file php Issues related to our PHP SDK
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants