Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 1, 2025

Bumps lcobucci/jwt from 4.3.0 to 5.5.0.

Release notes

Sourced from lcobucci/jwt's releases.

5.5.0

Release Notes for 5.5.0

Feature release (minor)

5.5.0

  • Total issues resolved: 0
  • Total pull requests resolved: 5
  • Total contributors: 2

Improvement

CI,Improvement

CI

renovate

5.4.3

Release Notes for 5.4.3

5.4.x bugfix release (patch)

5.4.3

  • Total issues resolved: 0
  • Total pull requests resolved: 1
  • Total contributors: 1

Documentation

5.4.2

Release Notes for 5.4.2

5.4.x bugfix release (patch)

5.4.2

... (truncated)

Commits
  • a835af5 Update dependency phpbench/phpbench to v1.4.0
  • f9fd918 Update codecov/codecov-action action to v5.3.1
  • b5239fa Update codecov/codecov-action action to v5.3.0
  • 70b1ce2 Update codecov/codecov-action action to v5.2.0
  • 8a455be Update dependency phpstan/phpstan to v1.12.16
  • 27d63e6 Update dependency phpstan/phpstan-strict-rules to v1.6.2
  • a6c79c0 Update dependency phpunit/phpunit to v11.5.3
  • 41c9bfb Update dependency phpstan/phpstan to v1.12.15
  • fd0d92b Update dependency phpstan/phpstan to v1.12.14
  • 94a8250 Update shivammathur/setup-php action to v2.32.0
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [lcobucci/jwt](https://github.com/lcobucci/jwt) from 4.3.0 to 5.5.0.
- [Release notes](https://github.com/lcobucci/jwt/releases)
- [Commits](lcobucci/jwt@4.3.0...5.5.0)

---
updated-dependencies:
- dependency-name: lcobucci/jwt
  dependency-version: 5.5.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file php Pull requests that update Php code labels Oct 1, 2025
@trasher
Copy link
Contributor

trasher commented Oct 1, 2025

This seems an important update, no idea if we can merge or not.

@stonebuzz stonebuzz requested review from stonebuzz and Rom1-B October 1, 2025 07:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file php Pull requests that update Php code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant