Skip to content

chore(deps): bump the composer group across 1 directory with 14 updates - #31

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/composer/composer-f362cea190
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/composer/composer-f362cea190

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 3, 2026 •

Copy link
Copy Markdown

Bumps the composer group with 14 updates in the / directory:

Package From To
aws/aws-php-sns-message-validator 1.10.2 1.10.3
aws/aws-sdk-php 3.395.2 3.402.3
inertiajs/inertia-laravel 3.3.4 3.5.2
laravel/fortify 1.39.0 1.41.0
laravel/framework 13.32.0 13.39.0
laravel/horizon 5.49.0 5.50.1
laravel/mcp 1.0.0 1.1.2
laravel/passport 13.8.0 13.10.0
laravel/wayfinder 0.1.21 0.1.23
spatie/laravel-permission 8.3.0 8.3.2
larastan/larastan 3.12.1 3.13.2
laravel/boost 2.9.0 2.10.3
laravel/sail 1.67.0 1.69.0
pestphp/pest 5.2.0 5.3.4

Updates aws/aws-php-sns-message-validator from 1.10.2 to 1.10.3

Release notes

Sourced from aws/aws-php-sns-message-validator's releases.

Version 1.10.3

  • validate supported SNS message types and canonicalize the type-specific signed fields
  • reject newlines in signed metadata fields while preserving multiline message and subject content
Commits

Updates aws/aws-sdk-php from 3.395.2 to 3.402.3

Release notes

Sourced from aws/aws-sdk-php's releases.

Version 3.402.3

  • Aws\ - Fixed AssumeRoleCredentialProvider throwing a TypeError and losing the original exception when the STS request fails with an exception that does not extend RuntimeException.
  • Aws\Neptunedata - Get Storage API analyzes storage usage to identify database bloat and your storage footprint. Index Rebuild API triggers on-demand index reconstruction to eliminate bloat and restore query performance.
  • Aws\MediaLive - AWS Elemental MediaLive now supports SMPTE 2022-7 seamless protection switching for multicast inputs on MediaLive Anywhere. Support for MulticastSettings sources to add a redundant copy of the stream received on a second network interface.
  • Aws\Artifact - Update support mode for Assurance Assistance
  • Aws\KafkaConnect - Amazon MSK Connect now supports updating a connector's custom plugin and worker configuration via the UpdateConnector API. MSK Connect checks connector and task health after the update and rolls back on failure. Each call returns an operation ARN to track with DescribeConnectorOperation.
  • Aws\SecurityAgent - Adds support for attaching client certificates for mutual TLS (mTLS) authentication to penetration test target endpoints via the new ClientCertificates field on Assets, enabling pentesting of endpoints that require client certificate authentication.
  • Aws\ACM - AWS Certificate Manager now supports the Automatic Certificate Management Environment (ACME) protocol in the AWS GovCloud (US-East) and AWS GovCloud (US-West) Regions.
  • Aws\IVS - InsertAdBreak now allows setting a customized adBreakId on a request and also adds a new field targetStartAt for a delayed ad insertion
  • Aws\OpenSearchService - This release adds APIs to simplify setting up a replication relationship between OpenSearch clusters. The APIs include new Switchover and Failover actions for planned switchovers and unplanned failovers to ensure high availability for OpenSearch in the event of disaster in a single region.
  • Aws\EC2 - Amazon EC2 Capacity Manager adds supportability checks and capacity fulfillment metrics. Use GetCapacityManagerSupportabilityScores to score how well instance types and Availability Zones can support a capacity request, and GetCapacityManagerMetricData to retrieve fulfillment metrics.
  • Aws\Connect - Amazon Connect APIs - CreateTaskTemplate and UpdateTaskTemplate accept a new ContactHooks parameter called WrapUpFlowId to identify the flow module that runs when an agent attempts to disconnect from a task created with the template. Use this to verify an agent's work or update external case repos.
  • Aws\ConnectParticipant - Amazon Connect Participant Service now supports the optional UrlContentDisposition parameter on GetAttachment, which returns a pre-signed URL that renders a chat attachment inline in the browser instead of forcing a download.

Version 3.402.2

  • Aws\Credentials - Parse shared configuration values without rejecting unquoted equals signs in credential_process commands, and resolve the canonical default config profile in the default credential chain.
  • Aws\EC2 - EC2 AMIs can now show vulnerability data and be targeted directly for scanning.
  • Aws\Lightsail - Added the attributeUpdates parameter to the Lightsail StartInstance API, which allows customers to update the attributes of a stopped instance when starting it.
  • Aws\Inspector2 - Adding support for Machine Image scan
  • Aws\BedrockAgentCoreControl - Adds the ResetTokenVaultKeyMaterial API, which restores a token vault whose customer managed key was deleted by moving it to an AWS owned key. The reset permanently deletes the stored OAuth 2.0 tokens, users must consent again. Adds on-behalf-of token exchange client authentication override option.
  • Aws\ECS - ECS now supports GPU sharing via NVIDIA Multi-Process Service (MPS) on ECS Managed Instances and ECS EC2, allowing multiple ECS tasks to share a single Nvidia GPU for improved utilization.
  • Aws\LicenseManager - AWS License Manager now supports delegate grants for read-only visibility into license distributions. CreateGrant accepts a new GrantType (BuyerGrant or DelegateGrant) and a desired status at distribution time.

Version 3.402.1

  • Aws\ - Fixed an issue in NonSeekableStreamDecodingEventStreamIterator where a message checksum returned across multiple partial reads caused a checksum mismatch.
  • Aws\Api - Caches compiled AWS Query and EC2 Query serialization plans on model shapes, reducing per-request parameter building overhead. Serialized parameters are unchanged, and plans are invalidated when a shape is mutated. The internal QueryParamBuilder and Ec2ParamBuilder no longer expose their protected format_*, queryName() and isFlat() methods.
  • Aws\KMS - This release adds support for ML-KEM (Module-Lattice-Based Key-Encapsulation Mechanism) keys in AWS KMS. ML-KEM, as specified in NIST FIPS 203, is a post-quantum key encapsulation mechanism that can be used to establish a shared secret between two parties.
  • Aws\SageMaker - Amazon SageMaker HyperPod adds the MultiNodeTrainingValidation deep health check for clusters orchestrated by Amazon EKS. It validates NVIDIA GPU instances by running a short multi-node training workload and flags instances that produce numerical errors or fall behind expected training time.
  • Aws\IVS - The release adds failover slate configurations, which show viewers a slate during temporary broadcaster network disruptions to reduce viewer drop-off and refresh storms.
  • Aws\Odb - Adds support for Exascale storage with Oracle Exadata Database Service on Dedicated Infrastructure
  • Aws\Signin - Adds support for the OAuth 2.0 Token Exchange grant (RFC 8693), enabling applications to exchange identity provider issued JSON Web Tokens (JWTs) for short-lived OAuth access tokens to access supported AWS services without managing separate AWS credentials.
  • Aws\MediaConnect - This release adds support for managing and sharing endpoint across accounts in AWS Elemental MediaConnect. You can now register endpoints to represent external or service-managed sources and destinations, and share them across AWS accounts.
  • Aws\ECR - Add support for ECR replication backfill
  • Aws\TaxSettings - Add Mexico Additional Info changes
  • Aws\Billing - Adds support for managing private pricing contracts and contractual investments including listing and associating contracts, retrieving contractual investments and their summaries, and creating, listing, and canceling contractual investment attestations
  • Aws\MediaLive - AWS Elemental MediaLive now lets you control whether explicit weighted prediction is applied to H.264 outputs. It also introduces Perceptual Filter, a new noise reduction filter designed to improve video quality by increasing VMAF scores, now with Auto, None, and strength options.
  • Aws\SSOAdmin - Added support for the RegionScope parameter on ListInstances, allowing you to list IAM Identity Center instances in the current Region or across all Regions.
  • Aws\EKS - This release adds support for EKS management of Gateway API CRDs (Custom Resource Definitions)
  • Aws\MarketplaceCatalog - This release adds support for the SubsidiaryAuthorization entity type in the ListEntities operation, including entity-type filters with partial name search, sort options, and a summary returned for each subsidiary authorization.
  • Aws\Lightsail - This release adds Web Application Firewall (WAF) support for Lightsail distribution.
  • Aws\AppStream - Add Windows 11 to PlatformType enum
  • Aws\Deadline - fix the sdk documenation issue only
  • Aws\Connect - Amazon Connect now automatically saves agents' in-progress email drafts preserving the message, recipients, and subject during browser or network interruptions so agents can return to the mail and continue instead of starting over.

Version 3.402.0

  • Aws\ - Updates the minimum required PHP version to 8.2, following the disclosure of CVE-2026-109618 and CVE-2026-109619.
  • Aws\IVSRealTime - Adds RevokeConnectionToken operation for Amazon IVS Real-Time Streaming.
  • Aws\Lambda - AWS Lambda durable functions now supports payloads up to 1 MB for checkpoints, callback completion, and error details.
  • Aws\KafkaConnect - Amazon MSK Connect now supports pausing and resuming connectors via the asynchronous PauseConnector and ResumeConnector APIs. Paused connectors keep their configuration and committed offsets and resume where they left off. Each call returns an operation ARN to track with DescribeConnectorOperation.
  • Aws\Glue - Add support for large worker types in AWS Glue

... (truncated)

Commits
  • 2546b13 3.402.3 release
  • c5e6218 Update models for release
  • 7f1f2fa bugfix: wrap non-RuntimeException failures in AssumeRoleCredentialProvider (#...
  • 4e48320 Bump codecov/codecov-action from 7.0.0 to 7.1.1 (#3361)
  • 8c6f1ee 3.402.2 release
  • b4b215c Update models for release
  • 6d44e2f fix: parse credential process commands containing equals signs (#3388)
  • 8c7d9eb 3.402.1 release
  • 898e32f Update models for release
  • 6fd96bd Build: Scope PHPCS checks to changed lines and produce annotations for failur...
  • Additional commits viewable in compare view

Updates inertiajs/inertia-laravel from 3.3.4 to 3.5.2

Release notes

Sourced from inertiajs/inertia-laravel's releases.

v3.5.2

What's Changed

New Contributors

Full Changelog: inertiajs/inertia-laravel@v3.5.1...v3.5.2

v3.5.1

What's Changed

Full Changelog: inertiajs/inertia-laravel@v3.5.0...v3.5.1

v3.5.0

What's Changed

Full Changelog: inertiajs/inertia-laravel@v3.4.0...v3.5.0

v3.4.0

What's Changed

New Contributors

Full Changelog: inertiajs/inertia-laravel@v3.3.4...v3.4.0

Changelog

Sourced from inertiajs/inertia-laravel's changelog.

v3.5.2 - 2026-10-21

What's Changed

New Contributors

Full Changelog: inertiajs/inertia-laravel@v3.5.1...v3.5.2

v3.5.1 - 2026-10-01

What's Changed

Full Changelog: inertiajs/inertia-laravel@v3.5.0...v3.5.1

v3.5.0 - 2026-10-01

What's Changed

Full Changelog: inertiajs/inertia-laravel@v3.4.0...v3.5.0

v3.4.0 - 2026-09-25

What's Changed

New Contributors

Full Changelog: inertiajs/inertia-laravel@v3.3.4...v3.4.0

Commits

Updates laravel/fortify from 1.39.0 to 1.41.0

Release notes

Sourced from laravel/fortify's releases.

v1.41.0

v1.40.0

Changelog

Sourced from laravel/fortify's changelog.

v1.41.0 - 2026-09-28

v1.40.0 - 2026-09-10

Commits

Updates laravel/framework from 13.32.0 to 13.39.0

Release notes

Sourced from laravel/framework's releases.

v13.39.0

... (truncated)

Changelog

Sourced from laravel/framework's changelog.

v13.39.0 - 2026-10-27

... (truncated)

Commits
  • d52c3b3 Update version to v13.39.0
  • 41840cf Fix install:broadcasting with app.jsx and app.js (#62202)
  • f10b9a1 Fix process fake shorthands when starting processes (#62200)
  • e093e46 [13.x] Add WithoutMigrationEvents attribute (#62201)
  • c4a246e Add restoreOrCreate and createOrRestore to through relations (#62204)
  • 07279a6 [13.x] Throw on unencodable JSON in object casts (#62203)
  • 723b151 Disable incrementing for models without a primary key (#62205)
  • 377f5ce [13.x] Roll back transactions manager when commit fails (#62206)
  • 2ff984f Cast failed job ids to strings (#62208)
  • f3adacd Ensure schedule:interrupt errors if its not interruptible (#62183)
  • Additional commits viewable in compare view

Updates laravel/horizon from 5.49.0 to 5.50.1

Release notes

Sourced from laravel/horizon's releases.

v5.50.1

v5.50.0

Changelog

Sourced from laravel/horizon's changelog.

v5.50.1 - 2026-10-13

v5.50.0 - 2026-09-15

Commits

Updates laravel/mcp from 1.0.0 to 1.1.2

Release notes

Sourced from laravel/mcp's releases.

v1.1.2

What's Changed

  • Limit OAuth requests to HTTP and HTTPS and cap response size by Description has been truncated

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update php code labels Nov 3, 2026
Bumps the composer group with 14 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [aws/aws-php-sns-message-validator](https://github.com/aws/aws-php-sns-message-validator) | `1.10.2` | `1.10.3` |
| [aws/aws-sdk-php](https://github.com/aws/aws-sdk-php) | `3.395.2` | `3.402.3` |
| [inertiajs/inertia-laravel](https://github.com/inertiajs/inertia-laravel) | `3.3.4` | `3.5.2` |
| [laravel/fortify](https://github.com/laravel/fortify) | `1.39.0` | `1.41.0` |
| [laravel/framework](https://github.com/laravel/framework) | `13.32.0` | `13.39.0` |
| [laravel/horizon](https://github.com/laravel/horizon) | `5.49.0` | `5.50.1` |
| [laravel/mcp](https://github.com/laravel/mcp) | `1.0.0` | `1.1.2` |
| [laravel/passport](https://github.com/laravel/passport) | `13.8.0` | `13.10.0` |
| [laravel/wayfinder](https://github.com/laravel/wayfinder) | `0.1.21` | `0.1.23` |
| [spatie/laravel-permission](https://github.com/spatie/laravel-permission) | `8.3.0` | `8.3.2` |
| [larastan/larastan](https://github.com/larastan/larastan) | `3.12.1` | `3.13.2` |
| [laravel/boost](https://github.com/laravel/boost) | `2.9.0` | `2.10.3` |
| [laravel/sail](https://github.com/laravel/sail) | `1.67.0` | `1.69.0` |
| [pestphp/pest](https://github.com/pestphp/pest) | `5.2.0` | `5.3.4` |



Updates `aws/aws-php-sns-message-validator` from 1.10.2 to 1.10.3
- [Release notes](https://github.com/aws/aws-php-sns-message-validator/releases)
- [Commits](aws/aws-php-sns-message-validator@1.10.2...1.10.3)

Updates `aws/aws-sdk-php` from 3.395.2 to 3.402.3
- [Release notes](https://github.com/aws/aws-sdk-php/releases)
- [Commits](aws/aws-sdk-php@3.395.2...3.402.3)

Updates `inertiajs/inertia-laravel` from 3.3.4 to 3.5.2
- [Release notes](https://github.com/inertiajs/inertia-laravel/releases)
- [Changelog](https://github.com/inertiajs/inertia-laravel/blob/3.x/CHANGELOG.md)
- [Commits](inertiajs/inertia-laravel@v3.3.4...v3.5.2)

Updates `laravel/fortify` from 1.39.0 to 1.41.0
- [Release notes](https://github.com/laravel/fortify/releases)
- [Changelog](https://github.com/laravel/fortify/blob/1.x/CHANGELOG.md)
- [Commits](laravel/fortify@v1.39.0...v1.41.0)

Updates `laravel/framework` from 13.32.0 to 13.39.0
- [Release notes](https://github.com/laravel/framework/releases)
- [Changelog](https://github.com/laravel/framework/blob/13.x/CHANGELOG.md)
- [Commits](laravel/framework@v13.32.0...v13.39.0)

Updates `laravel/horizon` from 5.49.0 to 5.50.1
- [Release notes](https://github.com/laravel/horizon/releases)
- [Changelog](https://github.com/laravel/horizon/blob/5.x/CHANGELOG.md)
- [Commits](laravel/horizon@v5.49.0...v5.50.1)

Updates `laravel/mcp` from 1.0.0 to 1.1.2
- [Release notes](https://github.com/laravel/mcp/releases)
- [Changelog](https://github.com/laravel/mcp/blob/main/CHANGELOG.md)
- [Commits](laravel/mcp@v1.0.0...v1.1.2)

Updates `laravel/passport` from 13.8.0 to 13.10.0
- [Release notes](https://github.com/laravel/passport/releases)
- [Changelog](https://github.com/laravel/passport/blob/13.x/CHANGELOG.md)
- [Commits](laravel/passport@v13.8.0...v13.10.0)

Updates `laravel/wayfinder` from 0.1.21 to 0.1.23
- [Release notes](https://github.com/laravel/wayfinder/releases)
- [Changelog](https://github.com/laravel/wayfinder/blob/main/CHANGELOG.md)
- [Commits](laravel/wayfinder@v0.1.21...v0.1.23)

Updates `spatie/laravel-permission` from 8.3.0 to 8.3.2
- [Release notes](https://github.com/spatie/laravel-permission/releases)
- [Changelog](https://github.com/spatie/laravel-permission/blob/main/CHANGELOG.md)
- [Commits](spatie/laravel-permission@8.3.0...8.3.2)

Updates `larastan/larastan` from 3.12.1 to 3.13.2
- [Release notes](https://github.com/larastan/larastan/releases)
- [Changelog](https://github.com/larastan/larastan/blob/3.x/RELEASE.md)
- [Commits](larastan/larastan@v3.12.1...v3.13.2)

Updates `laravel/boost` from 2.9.0 to 2.10.3
- [Release notes](https://github.com/laravel/boost/releases)
- [Changelog](https://github.com/laravel/boost/blob/main/CHANGELOG.md)
- [Commits](laravel/boost@v2.9.0...v2.10.3)

Updates `laravel/sail` from 1.67.0 to 1.69.0
- [Release notes](https://github.com/laravel/sail/releases)
- [Changelog](https://github.com/laravel/sail/blob/1.x/CHANGELOG.md)
- [Commits](laravel/sail@v1.67.0...v1.69.0)

Updates `pestphp/pest` from 5.2.0 to 5.3.4
- [Release notes](https://github.com/pestphp/pest/releases)
- [Changelog](https://github.com/pestphp/pest/blob/5.x/RELEASE.md)
- [Commits](pestphp/pest@v5.2.0...v5.3.4)

---
updated-dependencies:
- dependency-name: aws/aws-php-sns-message-validator
  dependency-version: 1.10.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: composer
- dependency-name: aws/aws-sdk-php
  dependency-version: 3.402.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: composer
- dependency-name: inertiajs/inertia-laravel
  dependency-version: 3.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: composer
- dependency-name: larastan/larastan
  dependency-version: 3.13.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: composer
- dependency-name: laravel/boost
  dependency-version: 2.10.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: composer
- dependency-name: laravel/fortify
  dependency-version: 1.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: composer
- dependency-name: laravel/framework
  dependency-version: 13.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: composer
- dependency-name: laravel/horizon
  dependency-version: 5.50.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: composer
- dependency-name: laravel/mcp
  dependency-version: 1.1.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: composer
- dependency-name: laravel/passport
  dependency-version: 13.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: composer
- dependency-name: laravel/sail
  dependency-version: 1.69.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: composer
- dependency-name: laravel/wayfinder
  dependency-version: 0.1.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: composer
- dependency-name: pestphp/pest
  dependency-version: 5.3.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: composer
- dependency-name: spatie/laravel-permission
  dependency-version: 8.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: composer
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/composer/composer-f362cea190 branch from 08be8cd to c786dca Compare November 3, 2026 02:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file php Pull requests that update php code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants