- Update all non-major dependencies with digest and pinDigest

[blumilk-renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
@headlessui/vue (source)	dependencies	patch	^1.7.22 -> ^1.7.23
@tailwindcss/forms	dependencies	patch	^0.5.8 -> ^0.5.9
actions/checkout	action	minor	v4.1.7 -> v4.2.0
actions/checkout	action	minor	v4.1.1 -> v4.2.0
actions/setup-node	action	patch	v4.0.3 -> v4.0.4
alpine	stage	patch	3.20.2 -> 3.20.3
composer	stage	patch	2.7.8 -> 2.7.9
docker/build-push-action	action	minor	v6.7.0 -> v6.8.0	v6.9.0
dompurify	dependencies	patch	^3.1.6 -> ^3.1.7
eslint (source)	devDependencies	patch	^8.57.0 -> ^8.57.1
eslint-plugin-vue (source)	devDependencies	patch	^9.27.0 -> ^9.28.0
laravel/framework (source)	require	minor	^11.21.0 -> ^11.25.0
laravel/tinker	require	minor	^2.9 -> ^2.10.0
php	final	patch	8.3.11-fpm-bullseye -> 8.3.12-fpm-bullseye
phpunit/phpunit (source)	require-dev	patch	^11.3.1 -> ^11.3.6
postcss (source)	devDependencies	patch	^8.4.44 -> ^8.4.47
stevebauman/purify	require	patch	^6.2.1 -> ^6.2.2
tailwindcss (source)	dependencies	patch	^3.4.10 -> ^3.4.13
vite (source)	devDependencies	patch	^4.5.3 -> ^4.5.5
vue (source)	dependencies	patch	^3.4.38 -> ^3.5.10

---

Release Notes

actions/checkout (actions/checkout)

v4.2.0

Compare Source

• Add Ref and Commit outputs by @​lucacome in https://github.com/actions/checkout/pull/1180
• Dependency updates by @​dependabot- https://github.com/actions/checkout/pull/1777, https://github.com/actions/checkout/pull/1872

actions/setup-node (actions/setup-node)

v4.0.4

Compare Source

What's Changed

• Add workflow file for publishing releases to immutable action package by @​Jcambass in https://github.com/actions/setup-node/pull/1125
• Enhance Windows ARM64 Setup and Update micromatch Dependency by @​priyagupta108 in https://github.com/actions/setup-node/pull/1126

Documentation changes:

• Documentation update in the README file by @​suyashgaonkar in https://github.com/actions/setup-node/pull/1106
• Correct invalid 'lts' version string reference by @​fulldecent in https://github.com/actions/setup-node/pull/1124

New Contributors

• @​suyashgaonkar made their first contribution in https://github.com/actions/setup-node/pull/1106
• @​priyagupta108 made their first contribution in https://github.com/actions/setup-node/pull/1126
• @​Jcambass made their first contribution in https://github.com/actions/setup-node/pull/1125
• @​fulldecent made their first contribution in https://github.com/actions/setup-node/pull/1124

Full Changelog: actions/setup-node@v4...v4.0.4

docker/build-push-action (docker/build-push-action)

v6.8.0

Compare Source

• Bump @​docker/actions-toolkit from 0.37.1 to 0.38.0 in https://github.com/docker/build-push-action/pull/1230

Full Changelog: docker/build-push-action@v6.7.0...v6.8.0

cure53/DOMPurify (dompurify)

v3.1.7: DOMPurify 3.1.7

Compare Source

• Fixed an issue with comment detection and possible bypasses with specific config settings, thanks @​masatokinugawa
• Fixed several smaller typos in documentation and test & build files, thanks @​christianhg
• Added better support for Angular compiler, thanks @​jeroen1602
• Added several new attributes to HTML and SVG allow-list, thanks @​Gigabyte5671 and @​Rotzbua
• Removed the foreignObject element from the list of HTML entry-points, thanks @​masatokinugawa
• Bumped several dependencies to be more up to date

laravel/framework (laravel/framework)

v11.25.0

Compare Source

• [11.x] Fix make:listener command by @​iamgergo in https://github.com/laravel/framework/pull/52924
• [11.x] Fix incorrect PHPDoc for KeyBy and GroupBy by @​kayw-geek in https://github.com/laravel/framework/pull/52918
• [11.x] Fix PHPDoc for TestResponse's Response Type to \Symfony\Component\HttpFoundation\Response by @​kayw-geek in https://github.com/laravel/framework/pull/52915
• [11.x] Docblock Improvements by @​saMahmoudzadeh in https://github.com/laravel/framework/pull/52909
• [11.x] Add vector column support to migrations by @​Jim-Webfox in https://github.com/laravel/framework/pull/52884
• [11.x] Revert auto-discovering routes/console.php as this will cause breaking change with the default withRouting($console) by @​crynobone in https://github.com/laravel/framework/pull/52942
• [11.x] Fixed docblock on typeVector method in Grammer by @​flavio-schoute in https://github.com/laravel/framework/pull/52927

v11.24.1

Compare Source

• [11.x] Fixes defer() function return type by @​staudenmeir in https://github.com/laravel/framework/pull/52910
• [11.x] Fixes missing ExecutableFinder import by @​InfinityXTech in https://github.com/laravel/framework/pull/52912
• [11.x] Fix for not automatically registering commands in App\Console\Commands by @​SamuelNitsche in https://github.com/laravel/framework/pull/52903

v11.24.0

Compare Source

• [11.x] Fix issue where $name variable in non base config file becomes it's key by @​rojtjo in https://github.com/laravel/framework/pull/52738
• [11.x] PHPDoc Improvements by @​amitmerchant1990 in https://github.com/laravel/framework/pull/52797
• [11.x] Remove a unused import and fix docblock for DeferredCallbackCollection by @​seriquynh in https://github.com/laravel/framework/pull/52808
• [11.x] Handle SQLSTATE[HY000] [2002] Operation now in progress in DetectsLostConnection trait #​52759 by @​webartisan10 in https://github.com/laravel/framework/pull/52805
• [11.x] Add prependLocation method to View Factory by @​nshiro in https://github.com/laravel/framework/pull/52806
• [11.x] add nullOnUpdate() method to ForeignKeyDefinition by @​gisuNasr in https://github.com/laravel/framework/pull/52798
• [11.x] Allow BackedEnum to be passed to Route::can() by @​Omegadela in https://github.com/laravel/framework/pull/52792
• [11.x] Ensure headers are only attached to illuminate responses by @​timacdonald in https://github.com/laravel/framework/pull/52789
• [11.x] feat: improve Collection groupBy, keyBy generics by @​calebdw in https://github.com/laravel/framework/pull/52787
• [11.x] Using Correct Concurrency Configuration Index Name by @​devajmeireles in https://github.com/laravel/framework/pull/52788
• [11.x] Ensure withoutPretending method properly resets state after callback execution by @​xurshudyan in https://github.com/laravel/framework/pull/52794
• [11.x] delegate ProcessDriver[@​defer](https://togithub.com/defer)() to ProcessDriver[@​run](https://togithub.com/run)() method by @​rodrigopedra in https://github.com/laravel/framework/pull/52807
• [11.x] Use command string instead of array on Concurrency\ProcessDriver by @​rodrigopedra in https://github.com/laravel/framework/pull/52813
• [11.x] Allows Laravel Framework to correctly resolve PHP binary when running via Laravel Herd by @​crynobone in https://github.com/laravel/framework/pull/52791
• [11.x] Move Defer classes to Support component and add Illuminate\Support\defer function by @​crynobone in https://github.com/laravel/framework/pull/52801
• [11.x] Suggest laravel/serializable-closure on Database component by @​crynobone in https://github.com/laravel/framework/pull/52835
• Bump vite from 5.2.10 to 5.2.14 in /src/Illuminate/Foundation/resources/exceptions/renderer by @​dependabot in https://github.com/laravel/framework/pull/52834
• [11.x] Update Concurrency component's composer dependencies by @​rodrigopedra in https://github.com/laravel/framework/pull/52836
• Add result shorthands for Process fakes by @​jasonmccreary in https://github.com/laravel/framework/pull/52840
• Update SerializesCastableAttributes to include array generics by @​cosmastech in https://github.com/laravel/framework/pull/52841
• [11.x] CI Improvements by @​crynobone in https://github.com/laravel/framework/pull/52850
• [11.x] Supports laravel/prompts v0.2 by @​crynobone in https://github.com/laravel/framework/pull/52849
• [11.x] Handle allows null parameter instead of requiring default value by @​crynobone in https://github.com/laravel/framework/pull/52866
• [11.x] Adds [@throws](https://togithub.com/throws) section to Concurrency manager doc block by @​rnambaale in https://github.com/laravel/framework/pull/52856
• Update stub to remove unused trait imports by @​lombervid in https://github.com/laravel/framework/pull/52877
• [11.x] Fix validation rule type hints by @​axlon in https://github.com/laravel/framework/pull/52870
• [11.x] Support multiple batch IDs when retrying failed batch jobs by @​skegel13 in https://github.com/laravel/framework/pull/52873
• [11.x] Remove unused namespaces from DatabaseInspectionCommand and LocalFileSystemAdapter by @​saMahmoudzadeh in https://github.com/laravel/framework/pull/52868
• [11.x] Auto-register commands in routes/console.php by @​SamuelNitsche in https://github.com/laravel/framework/pull/52867
• [11.x] Prevent infinite recursion on touchesParents() for chaperoned models by @​samlev in https://github.com/laravel/framework/pull/52883
• Bump rollup from 4.17.1 to 4.22.4 in /src/Illuminate/Foundation/resources/exceptions/renderer by @​dependabot in https://github.com/laravel/framework/pull/52892
• [11.x] Cache::flexible improvements by @​timacdonald in https://github.com/laravel/framework/pull/52891
• [11.x] Add \DateTimeInterface and \DateInterval to type for Cache::flexible() by @​bram-pkg in https://github.com/laravel/framework/pull/52888
• [11.x] CI Improvements by @​crynobone in https://github.com/laravel/framework/pull/52851
• [11.x] Do not trigger missing translation key handling when checking existence of translation key by @​gdebrauwer in https://github.com/laravel/framework/pull/52895

v11.23.5

Compare Source

• allow recursive Model::withoutTimestamps calls by @​m1guelpf in https://github.com/laravel/framework/pull/52768
• [11.x] Fixes out of memory issue running route:cache with ServeFile by @​crynobone in https://github.com/laravel/framework/pull/52781

v11.23.4

Compare Source

• [10.x] Fixes whereDate, whereDay, whereMonth, whereTime, whereYear and whereJsonLength to ignore invalid $operator by @​crynobone in https://github.com/laravel/framework/pull/52704
• [11.x] Fixing Concurrency Facade Docblocks by @​devajmeireles in https://github.com/laravel/framework/pull/52764
• [11.x] add lazy default to when helper by @​rodrigopedra in https://github.com/laravel/framework/pull/52747
• Fix arguments passed to artisan commands that start with 'env' by @​willrowe in https://github.com/laravel/framework/pull/52748

v11.23.3

Compare Source

• [11.x] Fixed attempt to call Application::routesAreCached() when application doesn't implements CachesRoutes contract. by @​crynobone in https://github.com/laravel/framework/pull/52761
• [11.x] Fix PHP and Artisan binary by @​hafezdivandari in https://github.com/laravel/framework/pull/52744
• [11.x] fix: PHPDoc for loading nested relations by @​calebdw in https://github.com/laravel/framework/pull/52762
• Update facade dockblocks by @​timacdonald in https://github.com/laravel/framework/pull/52750
• Fix: Unreachable action buttons in notification template when using "align" prop with "left" or "right". by @​lpheller in https://github.com/laravel/framework/pull/52758

v11.23.2

Compare Source

v11.23.1

Compare Source

v11.23.0

Compare Source

• [11.x] Fix $fail closure type in docblocks for validation rules by @​bastien-phi in https://github.com/laravel/framework/pull/52644
• [11.x] Add MSSQL 2017 and PGSQL 10 builds by @​driesvints in https://github.com/laravel/framework/pull/52631
• Update everyThirtyMinutes cron expression by @​SamuelNitsche in https://github.com/laravel/framework/pull/52662
• Bump micromatch from 4.0.5 to 4.0.8 in /src/Illuminate/Foundation/resources/exceptions/renderer by @​dependabot in https://github.com/laravel/framework/pull/52664
• [11.x] apply excludeUnvalidatedArrayKeys to list validation by @​lorenzolosa in https://github.com/laravel/framework/pull/52658
• [11.x] Adding minRatio & maxRatio rules on Dimension validation ruleset by @​CamKem in https://github.com/laravel/framework/pull/52482
• [11.x] Add BackedEnum support to Authorize middleware by @​diaafares in https://github.com/laravel/framework/pull/52679
• [11.x] Add BackedEnum support to Gate methods by @​diaafares in https://github.com/laravel/framework/pull/52677
• [11.x] Suggest serializable-closure by @​driesvints in https://github.com/laravel/framework/pull/52673
• [11.x] Fix alter table expressions on SQLite by @​hafezdivandari in https://github.com/laravel/framework/pull/52678
• [11.x] Add Exceptions\Handler::mapLogLevel(...) so the logic can be easily overridden by @​taka-oyama in https://github.com/laravel/framework/pull/52666
• [11.x] Bugfix for calling pluck() on chaperoned relations. by @​samlev in https://github.com/laravel/framework/pull/52680
• [11.x] Fix build failures due to enum collide After adding BackedEnum support to Gate by @​diaafares in https://github.com/laravel/framework/pull/52683
• Fixing Str::trim to remove the default trim/ltrim/rtim characters " \n\r\t\v\0" by @​mathiasgrimm in https://github.com/laravel/framework/pull/52684
• [11.x] Add Skip middleware for Queue Jobs by @​KennedyTedesco in https://github.com/laravel/framework/pull/52645
• [11.x] Fix etag headers for binary file responses by @​wouterrutgers in https://github.com/laravel/framework/pull/52705
• [11.x] add withoutDelay() to PendingDispatch by @​KennedyTedesco in https://github.com/laravel/framework/pull/52696
• [11.x] Refactor Container::getInstance() to use null coalescing assignment by @​xurshudyan in https://github.com/laravel/framework/pull/52693
• [11.x] Removed unnecessary call to setAccessible(true) by @​xurshudyan in https://github.com/laravel/framework/pull/52691
• [11.x] Add Eloquent\Collection::findOrFail by @​stevebauman in https://github.com/laravel/framework/pull/52690
• [11.x] PHPStan Improvements by @​crynobone in https://github.com/laravel/framework/pull/52712
• [11.x] Fix Collection PHPDoc by @​staudenmeir in https://github.com/laravel/framework/pull/52724
• [11.x] Add optional parameter for confirmed validator rule by @​jwpage in https://github.com/laravel/framework/pull/52722
• [11.x] Test Improvements by @​crynobone in https://github.com/laravel/framework/pull/52718
• [11.x] Fix incorrect variable-length argument $guards from array to string by @​kayw-geek in https://github.com/laravel/framework/pull/52719
• Allow testing of relative signed routes by @​shealavington in https://github.com/laravel/framework/pull/52726
• [11.x] fix: Builder::with closure types by @​calebdw in https://github.com/laravel/framework/pull/52729
• Laracon 2024 by @​taylorotwell in https://github.com/laravel/framework/pull/52710
• Add Tag attribute by @​TijmenWierenga in https://github.com/laravel/framework/pull/52743
• [11.x] Adds BackedEnum to PendingDispatch's phpDoc for onQueue, allOnQueue, onConnection, allOnConnection methods by @​sethsandaru in https://github.com/laravel/framework/pull/52739
• New when() helper. by @​danmatthews in https://github.com/laravel/framework/pull/52665
• [11.x] Add fromUrl() to Attachment by @​KennedyTedesco in https://github.com/laravel/framework/pull/52688

v11.22.0

Compare Source

• [11.x] Fix FoundationServiceProvider docblock by @​seriquynh in https://github.com/laravel/framework/pull/52542
• [11.x] Fix ReflectionParameter @​param type on Util::getContextualAttributeFromDependency() by @​samsonasik in https://github.com/laravel/framework/pull/52541
• [11.x] More specific parameter type in CastsInboundAttributes by @​lorenzolosa in https://github.com/laravel/framework/pull/52536
• [11.x] Unify prefetch API by @​timacdonald in https://github.com/laravel/framework/pull/52550
• [11.x] Add PDO subclass support for PHP 8.4 by @​ju5t in https://github.com/laravel/framework/pull/52538
• [11.x] Handle circular references in model serialization by @​samlev in https://github.com/laravel/framework/pull/52461
• [11.x] Eloquent inverse relations by @​samlev in https://github.com/laravel/framework/pull/51582
• [11.x] Feature/whereany closures by @​liamduckett in https://github.com/laravel/framework/pull/52555
• [11.x] Update remaining workflows to run on latest possible ubuntu version by @​Jubeki in https://github.com/laravel/framework/pull/52566
• Correct comments to better represent the updated method functionality by @​dropweb in https://github.com/laravel/framework/pull/52564
• [11.x] Support CSP nonce by @​timacdonald in https://github.com/laravel/framework/pull/52558
• [11.x] Allow enums to be passed to routes by @​NickSdot in https://github.com/laravel/framework/pull/52561
• [11.x] SORT_NATURAL on Collection no longer throws warning for nulls by @​Chaplinski in https://github.com/laravel/framework/pull/52557
• [11.x] Allow prefetch to start on custom event by @​timacdonald in https://github.com/laravel/framework/pull/52574
• [11.x] Fix regression in database assertions with custom model connections by @​devfrey in https://github.com/laravel/framework/pull/52581
• [11] Update DetectsLostConnections.php by @​webartisan10 in https://github.com/laravel/framework/pull/52614
• Fix docblock for Model::getEventDispatcher() by @​inmula in https://github.com/laravel/framework/pull/52602
• [11.x] Restore Request::HEADER_X_FORWARDED_PREFIX in TrustProxies by @​taka-oyama in https://github.com/laravel/framework/pull/52598
• [11.x] Accepts BackedEnum for onQueue, onConnection, allOnQueue, and allOnConnection methods in the Queueable trait by @​sethsandaru in https://github.com/laravel/framework/pull/52604
• [11.x] Use the same parameter type for 'throwUnless' as used for 'throwIf' by @​pataar in https://github.com/laravel/framework/pull/52626
• [11.x] Pass iterable keys to withProgressBar in InteractsWithIO by @​robinmoisson in https://github.com/laravel/framework/pull/52623
• [11.x] Fix docblock for Filesystem::hash() by @​sunaoka in https://github.com/laravel/framework/pull/52630
• Fix Apostrophe Handling in SeeInOrder.php and Enhance Test Coverage by @​nomitoor in https://github.com/laravel/framework/pull/52627
• [11.x] SQLite Error: "General error: 1 no such table" after adding a foreign key when using a table prefix. by @​incrize in https://github.com/laravel/framework/pull/52578

laravel/tinker (laravel/tinker)

v2.10.0

Compare Source

• Use actions/checkout@​v4 by @​Jubeki in https://github.com/laravel/tinker/pull/172
• Use new static analysis workflow by @​Jubeki in https://github.com/laravel/tinker/pull/173
• Replace dead link in Security Policy by @​Jubeki in https://github.com/laravel/tinker/pull/180
• [2.x] Supports PHP 8.4 by @​crynobone in https://github.com/laravel/tinker/pull/182

sebastianbergmann/phpunit (phpunit/phpunit)

v11.3.6: PHPUnit 11.3.6

Compare Source

Changed

• #​5956: Deprecation of the E_STRICT constant in PHP 8.4

Fixed

• #​5950: TestDox text should not be trim()med when it contains $ character
• The attribute parser will no longer try to instantiate attribute classes that do not exist

---

How to install or update PHPUnit

v11.3.5: PHPUnit 11.3.5

Compare Source

Fixed

• #​5874: Test Stub generated by return value generator for doubled method with static return type declaration is not properly initialized
• #​5931: Reverted addition of name property on <testsuites> element in JUnit XML logfile
• #​5946: Callback throws a TypeError when checking a callable has variadic parameters

---

How to install or update PHPUnit

v11.3.4: PHPUnit 11.3.4

Compare Source

Fixed

• #​4584: assertJsonStringEqualsJsonString() considers objects with sequential numeric keys equal to be arrays
• #​4625: Generator yielding keys that are neither integer or string leads to hard-to-understand error message when used as data provider
• #​4674: JSON assertions should treat objects as unordered
• #​5891: Callback constraint does not handle variadic arguments correctly when used for mock object expectations
• #​5929: TestDox output containing $ at the beginning gets truncated when used with a data provider
• #​5943: Tests configured to be in group(s) using the XML configuration file are also added to the default group

---

How to install or update PHPUnit

v11.3.3: PHPUnit 11.3.3

Compare Source

Added

• #​5937: failOnPhpunitDeprecation attribute on the <phpunit> element of the XML configuration file and --fail-on-phpunit-deprecation CLI option for controlling whether PHPUnit deprecations should be considered when determining the test runner's shell exit code (default: do not consider)
• displayDetailsOnPhpunitDeprecations attribute on the <phpunit> element of the XML configuration file and --display-phpunit-deprecations CLI option for controlling whether details on PHPUnit deprecations should be displayed (default: do not display)

Changed

• #​5937: PHPUnit deprecations will, by default, no longer affect the test runner's shell exit code. This can optionally be turned back on using the --fail-on-phpunit-deprecation CLI option or the failOnPhpunitDeprecation="true" attribute on the <phpunit> element of the XML configuration file.
• Details for PHPUnit deprecations will, by default, no longer be displayed. This can optionally be turned back on using the --display-phpunit-deprecations CLI option or the displayDetailsOnPhpunitDeprecations attribute on the <phpunit> element of the XML configuration file.

---

How to install or update PHPUnit

v11.3.2: PHPUnit 11.3.2

Compare Source

Changed

• #​5931: name property on <testsuites> element in JUnit XML logfile
• Removed .phpstorm.meta.php file as methods such as TestCase::createStub() use generics / template types for their return types and PhpStorm, for example, uses that information

Fixed

• #​5884: TestDox printer does not consider that issues can be suppressed by attribute, baseline, source location, or @ operator

---

How to install or update PHPUnit

stevebauman/purify (stevebauman/purify)

v6.2.2

Compare Source

Added

• <u> (underline) tag to default HTML.Allowed configuration - stevebauman/purify@a449299 - https://github.com/stevebauman/purify/issues/93

vuejs/core (vue)

v3.5.10

Compare Source

Bug Fixes

• custom-element: properly set kebab-case props on Vue custom elements (ea3efa0), closes #​12030 #​12032
• reactivity: fix nested batch edge case (93c95dd)
• reactivity: only clear notified flags for computed in first batch iteration (aa9ef23), closes #​12045
• types/ref: handle nested refs in UnwrapRef (#​12049) (e2c19c2), closes #​12044

v3.5.9

Compare Source

Bug Fixes

• reactivity: fix property dep removal regression (6001e5c), closes #​12020 #​12021
• reactivity: fix recursive sync watcher on computed edge case (10ff159), closes #​12033 #​12037
• runtime-core: avoid rendering plain object as VNode (#​12038) (cb34b28), closes #​12035 vitejs/vite-plugin-vue#353
• runtime-core: make useId() always return a string (a177092)
• types: correct type inference of union event names (#​12022) (4da6881)
• vue: properly cache runtime compilation (#​12019) (fa0ba24)

---

Configuration

📅 Schedule: Branch creation - "after 7am on the first day of the month,before 3pm on the first day of the month" in timezone Europe/Warsaw, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[blumilk-renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.