Skip to content

chore(deps): bump the composer-production-dependencies group across 1 directory with 8 updates#2

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/composer/src/quote/composer-production-dependencies-c620ea1ae0
Open

chore(deps): bump the composer-production-dependencies group across 1 directory with 8 updates#2
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/composer/src/quote/composer-production-dependencies-c620ea1ae0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 17, 2026 •
edited
Loading

Copy link
Copy Markdown

Updates the requirements on monolog/monolog, open-telemetry/exporter-otlp, open-telemetry/detector-container, open-telemetry/opentelemetry-logger-monolog, guzzlehttp/guzzle, php-di/php-di, slim/psr7 and slim/slim to permit the latest version.
Updates monolog/monolog to 3.10.0

Release notes

Sourced from monolog/monolog's releases.

3.10.0

  • Added automatic directory cleanup in RotatingFileHandler (#2000)
  • Added timezone-aware file rotation to RotatingFileHandler (#1982)
  • Added support for mongodb/mongodb 2.0+ (#1998)
  • Added NoDiscard attribute to TestHandler methods to ensure the result is used (#2013)
  • Fixed JsonFormatter crashing if __toString throws while normalizing data (#1968)
  • Fixed PHP 8.5 deprecation warnings (#1997, #2009)
  • Fixed DeduplicatingHandler collecting duplicate logs if the file cannot be locked (2e97231)
  • Fixed GelfMessageFormatter to use integers instead of bool for gelf 1.1 support (#1973)
  • Fixed empty stack traces being output anyway (#1979)
  • Fixed StreamHandler not reopening the file if the inode changed (#1963)
  • Fixed TelegramBotHandler sending empty messages (#1992)
  • Fixed file paths in stack traces containing backslashes on windows, always using / now to unify logs (#1980)
  • Fixed RotatingFileHandler unlink errors not being suppressed correctly (#1999)

Full Changelog: Seldaek/monolog@3.9.0...3.10.0

Changelog

Sourced from monolog/monolog's changelog.

3.10.0 (2026-01-02)

  • Added automatic directory cleanup in RotatingFileHandler (#2000)
  • Added timezone-aware file rotation to RotatingFileHandler (#1982)
  • Added support for mongodb/mongodb 2.0+ (#1998)
  • Added NoDiscard attribute to TestHandler methods to ensure the result is used (#2013)
  • Fixed JsonFormatter crashing if __toString throws while normalizing data (#1968)
  • Fixed PHP 8.5 deprecation warnings (#1997, #2009)
  • Fixed DeduplicatingHandler collecting duplicate logs if the file cannot be locked (2e97231)
  • Fixed GelfMessageFormatter to use integers instead of bool for gelf 1.1 support (#1973)
  • Fixed empty stack traces being output anyway (#1979)
  • Fixed StreamHandler not reopening the file if the inode changed (#1963)
  • Fixed TelegramBotHandler sending empty messages (#1992)
  • Fixed file paths in stack traces containing backslashes on windows, always using / now to unify logs (#1980)
  • Fixed RotatingFileHandler unlink errors not being suppressed correctly (#1999)

3.9.0 (2025-03-24)

  • BC Warning: Fixed SendGridHandler to use the V3 API as V2 is now shut down, but this requires a new API key (#1952)
  • Deprecated Monolog\Test\TestCase in favor of Monolog\Test\MonologTestCase (#1953)
  • Added extension point for NativeMailerHandler::mail (#1948)
  • Added setHandler method to BufferHandler to modify the nested handler at runtime (#1946)
  • Fixed date format in ElasticsearchFormatter to use +00:00 vs +0000 tz identifiers (#1942)
  • Fixed GelfMessageFormatter handling numeric context/extra keys (#1932)

3.8.1 (2024-12-05)

  • Deprecated Monolog\DateTimeImmutable in favor of Monolog\JsonSerializableDateTimeImmutable (#1928)
  • Fixed gelf keys not being valid when context/extra data keys have spaces in them (#1927)
  • Fixed empty lines appearing in the stack traces when a custom formatter returned null (#1925)

3.8.0 (2024-11-12)

  • Added $fileOpenMode param to StreamHandler to define a custom fopen mode to open the log file (#1913)
  • Fixed PHP 8.4 deprecation notices (#1903)
  • Added ability to extend/override IntrospectionProcessor (#1899)
  • Added $timeout param to ProcessHandler to configure the stream_select() timeout to avoid blocking too long (default is 1.0 sec) (#1916)
  • Fixed JsonFormatter batch handling to normalize records individually to make sure they look the same as if they were handled one by one (#1906)
  • Fixed StreamHandler handling of write failures so that it now closes/reopens the stream and retries the write once before failing (#1882)
  • Fixed StreamHandler error handler causing issues if a stream handler triggers an error (#1866)
  • Fixed StreamHandler::reset not closing the stream, so that it would fail to write in some cases with long running processes (#1862)
  • Fixed RotatingFileHandler issue where rotation does not happen in some long running processes (#1905)
  • Fixed JsonFormatter handling of incomplete classes (#1834)
  • Fixed RotatingFileHandler bug where rotation could sometimes not happen correctly (#1905)

3.7.0 (2024-06-28)

  • Added NormalizerFormatter->setBasePath(...) (and JsonFormatter by extension) that allows removing the project's path from the stack trace output (47e301d3e)
  • Fixed JsonFormatter handling of incomplete classes (#1834)
  • Fixed private error handlers causing problems with custom StreamHandler implementations (#1866)

... (truncated)

Commits

Updates open-telemetry/exporter-otlp to 1.4.0

Release notes

Sourced from open-telemetry/exporter-otlp's releases.

Release 1.4.0

What's Changed:

  • Revert "Fix getLabel() deprecation warning with Protobuf 4.33+" by @​Nevay in 1880

Full Changelog: opentelemetry-php/exporter-otlp@1.3.4...1.4.0

Commits

Updates open-telemetry/detector-container to 1.3.0

Release notes

Sourced from open-telemetry/detector-container's releases.

Release 1.3.0

What's Changed:

  • detector-container. Update schema url to use Version::VERSION_1_38_0 by @​adiafora in 523

Full Changelog: opentelemetry-php/contrib-detector-container@1.2.0...1.3.0

Commits

Updates open-telemetry/opentelemetry-logger-monolog to 1.2.0

Release notes

Sourced from open-telemetry/opentelemetry-logger-monolog's releases.

Release 1.2.0

What's Changed:

  • Revert "chore(deps): update dependency vimeo/psalm to v6.16.1" by @​bobstrecansky in 540
  • chore(deps): update dependency vimeo/psalm to v6.16.1 by @​renovate[bot] in 512
  • [Monolog] Add option to directly assign context elements as attributes by @​smaddock in 467
  • feat: Allowed user-defined formatterInterface in opentelemetry-logger-monolog by @​jerrytfleung in 458

Full Changelog: opentelemetry-php/contrib-logger-monolog@1.1.0...1.2.0

Commits
  • 418b110 Revert "chore(deps): update dependency vimeo/psalm to v6.16.1 (#512)" (#540)
  • d73e768 chore(deps): update dependency vimeo/psalm to v6.16.1 (#512)
  • f8b51db [Monolog] Add option to directly assign context elements as attributes (#467)
  • c27f31e feat: Allowed user-defined formatterInterface in opentelemetry-logger-monolog...
  • e188fa2 Drop support for PHP 7.4 and 8.0, introduce support for PHP 8.4, fix semconv ...
  • 103ca21 Update auto-instrumentation packages to SemConv 1.30 (#327)
  • 95fd260 update rules (#254)
  • 2cc37c3 Add PHP 8.3 to test matrix (#245)
  • 96f32d8 update monolog example (#231)
  • See full diff in compare view

Updates guzzlehttp/guzzle to 7.11.1

Release notes

Sourced from guzzlehttp/guzzle's releases.

Release 7.11.1

Fixed

  • Ignore request-level transport_sharing, matching other unknown request options
Changelog

Sourced from guzzlehttp/guzzle's changelog.

7.11.1 - 2026-06-07

Fixed

  • Ignore request-level transport_sharing, matching other unknown request options

7.11.0 - 2026-06-02

Added

  • Added support for providing the proxy request option's no value as a comma-delimited string
  • Added the protocols request option to restrict allowed URI schemes for request transfers
  • Added cert_type and ssl_key_type request options for TLS certificate and private-key file types
  • Added PHP stream handler support for the ssl_key request option
  • Added transport sharing via the transport_sharing client and cURL handler options

Changed

  • Adjusted guzzlehttp/promises version constraint to ^2.5
  • Adjusted guzzlehttp/psr7 version constraint to ^2.11
  • Allowed domainless SetCookie instances to be stored without wildcard request matching
  • Changed no-proxy matching to respect request ports for host-and-port rules
  • Prevented CurlMultiHandler destructors from throwing during cleanup
  • Improved invalid response handling across handlers

Deprecated

  • Deprecated non-iterable Pool request collections, which will be rejected in 8.0
  • Deprecated non-uppercase easy request methods; 8.0 preserves method casing
  • Deprecated non-string headers request option values, which will be rejected in 8.0
  • Deprecated empty headers request option value arrays, which will be rejected in 8.0
  • Deprecated empty and malformed request protocol versions, which will be rejected in 8.0
  • Deprecated conflicting raw cURL request options, including CURLOPT_SHARE, which will be rejected in 8.0
  • Deprecated scalar-coerced idn_conversion request option values, which will be rejected in 8.0
  • Deprecated invalid documented request option value types, which will be rejected in 8.0
  • Deprecated selected request options ignored by incompatible built-in handlers, which will be rejected in 8.0
  • Deprecated RequestException::wrapException(), which will be removed in 8.0
  • Deprecated RetryMiddleware::exponentialDelay(), which will be removed in 8.0

7.10.6 - 2026-06-01

Fixed

  • CurlMultiHandler now rejects the promise when CurlFactory::finish() throws, preserving sibling transfers
  • SetCookie now normalizes unparseable Expires values to null instead of false
  • Fix stream handler decoded gzip/deflate truncation by dropping invalid Content-Length

... (truncated)

Commits

Updates php-di/php-di to 7.1.1

Release notes

Sourced from php-di/php-di's releases.

7.1.1

What's Changed

New Contributors

Full Changelog: PHP-DI/PHP-DI@7.1.0...7.1.1

Commits
  • f88054c Merge pull request #919 from vhd/master
  • 664ff75 Update createProxy method to return object instead of LazyLoadingInterface to...
  • 0543ee1 Merge pull request #917 from BusterNeece/feat/native-lazy-proxies
  • ae3ef96 Update docs on lazy injection.
  • e3ecb61 Wrap class instantiators in parenthesis for <8.4 compat.
  • 78a6e42 Revert style changes.
  • 751d6f5 Make native proxies default for 8.4+ users and update tests accordingly.
  • c1a56f9 Add support for native PHP 8.4+ lazy proxies.
  • 32f111a Merge pull request #914 from PHP-DI/revert-912-container-get-conditional-return
  • bf369f7 Revert "Added conditional return on container::get so static analysers unders...
  • Additional commits viewable in compare view

Updates slim/psr7 to 1.8.0

Release notes

Sourced from slim/psr7's releases.

1.8.0

What's Changed

New Contributors

Full Changelog: slimphp/Slim-Psr7@1.7.1...1.8.0

Commits
  • 76e7e3b Correct cookie expiration date format (#336)
  • 3b2fb2a Merge pull request #341 from slimphp/dependabot/composer/php-http/psr7-integr...
  • 652c019 Update php-http/psr7-integration-tests requirement from ^1.4 to ^1.5
  • 11ccdc9 Support PHP 8.5 (#340)
  • cce9c0d Merge pull request #337 from williamdes/phpunit-12
  • 3724f06 Add missing PHPUnit annotations
  • 80aa3e1 Merge pull request #334 from akrabat/update-composer-dependencies
  • 5b0886f Run analysis on PHP 8.4 in CI
  • 054c5e9 Remove symfony/ppolyfill-php80
  • a10f2b0 Update adriansuter/php-autoload-override constraints
  • Additional commits viewable in compare view

Updates slim/slim to 4.15.2

Release notes

Sourced from slim/slim's releases.

4.15.2

Fixed

Full Changelog: slimphp/Slim@4.15.1...4.15.2

Changelog

Sourced from slim/slim's changelog.

4.15.2 - 2026-05-22

Fixed

  • Escape HTML entities in HtmlErrorRenderer to prevent XSS attacks (GHSA-53h4-8rc4-f539)
  • Fix static analysis suppression in RouteCollector::removeNamedRoute() (#3445)

Full Changelog: slimphp/Slim@4.15.1...4.15.2

4.15.1 - 2025-11-21

Fixed

  • Allow PHPUnit 10, 11 and 12 when testing Slim itself (#3411)

Added

  • Add support for PHP 8.5 (#3415)

Full Changelog: slimphp/Slim@4.15.0...4.15.1

4.15.0 - 2025-08-24

Fixed

  • Fix DocBlocks for callable route handlers (#3389)
  • Change class keyword to lowercase (#3346)
  • Fix tests for PHP 8.3
  • Fixes the build status badge in Readme (#3331)
  • Fix text and eol attributes for * selector in .gitattributes (#3391)
  • Deprecate setArgument/s (#3383)

Added

  • Add support for PHP 8.4
  • Add phpstan v2

Changed

  • Update http urls in composer.json (#3399)

Full Changelog: slimphp/Slim@4.14.0...4.15.0

4.14.0 - 2024-06-13

Changed

... (truncated)

Commits
  • e12cb05 Merge commit from fork
  • b3c4462 Update CHANGELOG
  • b51432b Update CHANGELOG
  • f897118 Escape error title and description in HtmlErrorRenderer
  • 402fcbc Fix static analysis suppression in RouteCollector::removeNamedRoute() (#3445)
  • 025043e Bump actions/checkout from 5 to 6 (#3420)
  • 8878935 Merge pull request #3416 from akrabat/update-to-4.15.1
  • f0ed67f Use Composer v2.8 in CI
  • 612267e Update version to 4.15.1
  • 1c75bcc Merge pull request #3415 from akrabat/support-php8.5
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update php code labels May 17, 2026
@dependabot dependabot Bot force-pushed the dependabot/composer/src/quote/composer-production-dependencies-c620ea1ae0 branch from 0c85899 to b982964 Compare May 22, 2026 19:29
@dependabot
chore(deps): bump the composer-production-dependencies group across 1…
e801dc5 
… directory with 8 updates

Updates the requirements on [monolog/monolog](https://github.com/Seldaek/monolog), [open-telemetry/exporter-otlp](https://github.com/opentelemetry-php/exporter-otlp), [open-telemetry/detector-container](https://github.com/opentelemetry-php/contrib-detector-container), [open-telemetry/opentelemetry-logger-monolog](https://github.com/opentelemetry-php/contrib-logger-monolog), [guzzlehttp/guzzle](https://github.com/guzzle/guzzle), [php-di/php-di](https://github.com/PHP-DI/PHP-DI), [slim/psr7](https://github.com/slimphp/Slim-Psr7) and [slim/slim](https://github.com/slimphp/Slim) to permit the latest version.

Updates `monolog/monolog` to 3.10.0
- [Release notes](https://github.com/Seldaek/monolog/releases)
- [Changelog](https://github.com/Seldaek/monolog/blob/main/CHANGELOG.md)
- [Commits](Seldaek/monolog@3.8.1...3.10.0)

Updates `open-telemetry/exporter-otlp` to 1.4.0
- [Release notes](https://github.com/opentelemetry-php/exporter-otlp/releases)
- [Commits](opentelemetry-php/exporter-otlp@1.2.0...1.4.0)

Updates `open-telemetry/detector-container` to 1.3.0
- [Release notes](https://github.com/opentelemetry-php/contrib-detector-container/releases)
- [Commits](opentelemetry-php/contrib-detector-container@1.0.0...1.3.0)

Updates `open-telemetry/opentelemetry-logger-monolog` to 1.2.0
- [Release notes](https://github.com/opentelemetry-php/contrib-logger-monolog/releases)
- [Commits](opentelemetry-php/contrib-logger-monolog@1.0.0...1.2.0)

Updates `guzzlehttp/guzzle` to 7.11.1
- [Release notes](https://github.com/guzzle/guzzle/releases)
- [Changelog](https://github.com/guzzle/guzzle/blob/7.11/CHANGELOG.md)
- [Commits](guzzle/guzzle@7.9.2...7.11.1)

Updates `php-di/php-di` to 7.1.1
- [Release notes](https://github.com/PHP-DI/PHP-DI/releases)
- [Commits](PHP-DI/PHP-DI@7.0.7...7.1.1)

Updates `slim/psr7` to 1.8.0
- [Release notes](https://github.com/slimphp/Slim-Psr7/releases)
- [Commits](slimphp/Slim-Psr7@1.7.0...1.8.0)

Updates `slim/slim` to 4.15.2
- [Release notes](https://github.com/slimphp/Slim/releases)
- [Changelog](https://github.com/slimphp/Slim/blob/4.x/CHANGELOG.md)
- [Commits](slimphp/Slim@4.14.0...4.15.2)

---
updated-dependencies:
- dependency-name: guzzlehttp/guzzle
  dependency-version: 7.10.0
  dependency-type: direct:production
  dependency-group: composer-production-dependencies
- dependency-name: monolog/monolog
  dependency-version: 3.10.0
  dependency-type: direct:production
  dependency-group: composer-production-dependencies
- dependency-name: open-telemetry/detector-container
  dependency-version: 1.3.0
  dependency-type: direct:production
  dependency-group: composer-production-dependencies
- dependency-name: open-telemetry/exporter-otlp
  dependency-version: 1.4.0
  dependency-type: direct:production
  dependency-group: composer-production-dependencies
- dependency-name: open-telemetry/opentelemetry-logger-monolog
  dependency-version: 1.2.0
  dependency-type: direct:production
  dependency-group: composer-production-dependencies
- dependency-name: php-di/php-di
  dependency-version: 7.1.1
  dependency-type: direct:production
  dependency-group: composer-production-dependencies
- dependency-name: slim/psr7
  dependency-version: 1.8.0
  dependency-type: direct:production
  dependency-group: composer-production-dependencies
- dependency-name: slim/slim
  dependency-version: 4.15.1
  dependency-type: direct:production
  dependency-group: composer-production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump the composer-production-dependencies group across 1 directory with 8 updates chore(deps): bump the composer-production-dependencies group across 1 directory with 8 updates Jun 11, 2026
@dependabot dependabot Bot force-pushed the dependabot/composer/src/quote/composer-production-dependencies-c620ea1ae0 branch from b982964 to e801dc5 Compare June 11, 2026 18:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file php Pull requests that update php code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants