Skip to content

Bump the composer-production-dependencies group across 1 directory with 11 updates #156

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Bump the composer-production-dependencies group across 1 directory with 11 updates #156

wants to merge 1 commit into from

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Nov 26, 2025 •
edited
Loading

Updates the requirements on monolog/monolog, open-telemetry/exporter-otlp, open-telemetry/detector-container, open-telemetry/opentelemetry-logger-monolog, guzzlehttp/guzzle, php-di/php-di, php-di/slim-bridge, php-http/guzzle7-adapter, react/http, slim/psr7 and slim/slim to permit the latest version.
Updates monolog/monolog to 3.9.0

Release notes

Sourced from monolog/monolog's releases.

3.9.0

  • BC Warning: Fixed SendGridHandler to use the V3 API as V2 is now shut down, but this requires a new API key (#1952)
  • Deprecated Monolog\Test\TestCase in favor of Monolog\Test\MonologTestCase (#1953)
  • Added extension point for NativeMailerHandler::mail (#1948)
  • Added setHandler method to BufferHandler to modify the nested handler at runtime (#1946)
  • Fixed date format in ElasticsearchFormatter to use +00:00 vs +0000 tz identifiers (#1942)
  • Fixed GelfMessageFormatter handling numeric context/extra keys (#1932)

Full Changelog: Seldaek/monolog@3.8.1...3.9.0

Changelog

Sourced from monolog/monolog's changelog.

3.9.0 (2025-03-24)

  • BC Warning: Fixed SendGridHandler to use the V3 API as V2 is now shut down, but this requires a new API key (#1952)
  • Deprecated Monolog\Test\TestCase in favor of Monolog\Test\MonologTestCase (#1953)
  • Added extension point for NativeMailerHandler::mail (#1948)
  • Added setHandler method to BufferHandler to modify the nested handler at runtime (#1946)
  • Fixed date format in ElasticsearchFormatter to use +00:00 vs +0000 tz identifiers (#1942)
  • Fixed GelfMessageFormatter handling numeric context/extra keys (#1932)

3.8.1 (2024-12-05)

  • Deprecated Monolog\DateTimeImmutable in favor of Monolog\JsonSerializableDateTimeImmutable (#1928)
  • Fixed gelf keys not being valid when context/extra data keys have spaces in them (#1927)
  • Fixed empty lines appearing in the stack traces when a custom formatter returned null (#1925)

3.8.0 (2024-11-12)

  • Added $fileOpenMode param to StreamHandler to define a custom fopen mode to open the log file (#1913)
  • Fixed PHP 8.4 deprecation notices (#1903)
  • Added ability to extend/override IntrospectionProcessor (#1899)
  • Added $timeout param to ProcessHandler to configure the stream_select() timeout to avoid blocking too long (default is 1.0 sec) (#1916)
  • Fixed JsonFormatter batch handling to normalize records individually to make sure they look the same as if they were handled one by one (#1906)
  • Fixed StreamHandler handling of write failures so that it now closes/reopens the stream and retries the write once before failing (#1882)
  • Fixed StreamHandler error handler causing issues if a stream handler triggers an error (#1866)
  • Fixed StreamHandler::reset not closing the stream, so that it would fail to write in some cases with long running processes (#1862)
  • Fixed RotatingFileHandler issue where rotation does not happen in some long running processes (#1905)
  • Fixed JsonFormatter handling of incomplete classes (#1834)
  • Fixed RotatingFileHandler bug where rotation could sometimes not happen correctly (#1905)

3.7.0 (2024-06-28)

  • Added NormalizerFormatter->setBasePath(...) (and JsonFormatter by extension) that allows removing the project's path from the stack trace output (47e301d3e)
  • Fixed JsonFormatter handling of incomplete classes (#1834)
  • Fixed private error handlers causing problems with custom StreamHandler implementations (#1866)

3.6.0 (2024-04-12)

  • Added LineFormatter->setBasePath(...) that allows removing the project's path from the stack trace output (#1873)
  • Added $includeExtra option in PsrHandler to also use extra data to replace placeholder values in the message (#1852)
  • Added ability to customize what is a duplicated message by extending the DeduplicationHandler (#1879)
  • Added handling for using GelfMessageFormatter together with the AmqpHandler (#1869)
  • Added ability to extend GoogleCloudLoggingFormatter (#1859)
  • Fixed __toString failures in context data crashing the normalization process (#1868)
  • Fixed PHP 8.4 deprecation warnings (#1874)

3.5.0 (2023-10-27)

  • Added ability to indent stack traces in LineFormatter via e.g. indentStacktraces(' ') (#1835)
  • Added ability to configure a max level name length in LineFormatter via e.g. setMaxLevelNameLength(3) (#1850)
  • Added support for indexed arrays (i.e. [] and not {} arrays once json serialized) containing inline linebreaks in LineFormatter (#1818)

... (truncated)

Commits
  • 10d8574 Update changelog
  • 2b8777d SendGrid V3 API (#1952)
  • 5d0da0a Updating while loops to have boolean conditions. (#1956)
  • 6294651 Remove deprecated setType method call in ElasticaFormatter (#1955)
  • 467e764 Fix gelf message formatter failing to handle context/extra numeric keys, fixe...
  • 7ca003e Rename TestCase to MonologTestCase (#1953)
  • 9d6bcfc Fix build (#1954)
  • 45b5e0e Change datetime format from ISO 8601 to ATOM in ElasticsearchFormatter and re...
  • c8bbe52 added possibility to set child handler after instantiation (#1946)
  • 9cfd246 Add a mail() hook to NativeMailHandler. (#1948)
  • Additional commits viewable in compare view

Updates open-telemetry/exporter-otlp to 1.3.3

Release notes

Sourced from open-telemetry/exporter-otlp's releases.

Release 1.3.3

What's Changed:

Full Changelog: opentelemetry-php/exporter-otlp@1.3.2...1.3.3

Commits

Updates open-telemetry/detector-container to 1.1.0

Release notes

Sourced from open-telemetry/detector-container's releases.

Release 1.1.0

What's Changed:

Full Changelog: opentelemetry-php/contrib-detector-container@1.0.0...1.1.0

Commits

Updates open-telemetry/opentelemetry-logger-monolog to 1.1.0

Release notes

Sourced from open-telemetry/opentelemetry-logger-monolog's releases.

Release 1.1.0

What's Changed:

Full Changelog: opentelemetry-php/contrib-logger-monolog@1.0.0...1.1.0

Commits

Updates guzzlehttp/guzzle to 7.10.0

Release notes

Sourced from guzzlehttp/guzzle's releases.

Release 7.10.0

Added

  • Support for PHP 8.5

Changed

  • Adjusted guzzlehttp/promises version constraint to ^2.3
  • Adjusted guzzlehttp/psr7 version constraint to ^2.8
Changelog

Sourced from guzzlehttp/guzzle's changelog.

7.10.0 - 2025-08-23

Added

  • Support for PHP 8.5

Changed

  • Adjusted guzzlehttp/promises version constraint to ^2.3
  • Adjusted guzzlehttp/psr7 version constraint to ^2.8

7.9.3 - 2025-03-27

Changed

  • Remove explicit content-length header for GET requests
  • Improve compatibility with bad servers for boolean cookie values

7.9.2 - 2024-07-24

Fixed

  • Adjusted handler selection to use cURL if its version is 7.21.2 or higher, rather than 7.34.0

7.9.1 - 2024-07-19

Fixed

  • Fix TLS 1.3 check for HTTP/2 requests

7.9.0 - 2024-07-18

Changed

  • Improve protocol version checks to provide feedback around unsupported protocols
  • Only select the cURL handler by default if 7.34.0 or higher is linked
  • Improved CurlMultiHandler to avoid busy wait if possible
  • Dropped support for EOL guzzlehttp/psr7 v1
  • Improved URI user info redaction in errors

7.8.2 - 2024-07-18

Added

  • Support for PHP 8.4

... (truncated)

Commits
  • b51ac70 Release 7.10.0
  • af24c69 Use the http_get_last_response_headers function (#3301)
  • 2be2ee8 Remove obsolete reference capturing of $http_response_header (#3294)
  • c6420f2 Add PHP 8.5 support (#3300)
  • 7b2f29f Release 7.9.3
  • 8f68d9f Improve compatibility with bad servers for boolean cookie values (#3281)
  • 234747f Remove explicit content-length header for GET requests (#3278)
  • d28a072 testHandlesGarbageHttpServerGracefully: Split test between PHP <= 8.1 and >...
  • 41f5ce7 CS fixes
  • 0811cfd SA upgrades
  • Additional commits viewable in compare view

Updates php-di/php-di to 7.1.1

Release notes

Sourced from php-di/php-di's releases.

7.1.1

What's Changed

New Contributors

Full Changelog: PHP-DI/PHP-DI@7.1.0...7.1.1

Commits
  • f88054c Merge pull request #919 from vhd/master
  • 664ff75 Update createProxy method to return object instead of LazyLoadingInterface to...
  • 0543ee1 Merge pull request #917 from BusterNeece/feat/native-lazy-proxies
  • ae3ef96 Update docs on lazy injection.
  • e3ecb61 Wrap class instantiators in parenthesis for <8.4 compat.
  • 78a6e42 Revert style changes.
  • 751d6f5 Make native proxies default for 8.4+ users and update tests accordingly.
  • c1a56f9 Add support for native PHP 8.4+ lazy proxies.
  • 32f111a Merge pull request #914 from PHP-DI/revert-912-container-get-conditional-return
  • bf369f7 Revert "Added conditional return on container::get so static analysers unders...
  • Additional commits viewable in compare view

Updates php-di/slim-bridge to 3.4.1

Release notes

Sourced from php-di/slim-bridge's releases.

3.4.1

What's Changed

New Contributors

Full Changelog: PHP-DI/Slim-Bridge@3.4.0...3.4.1

Commits

Updates php-http/guzzle7-adapter to 1.1.0

Release notes

Sourced from php-http/guzzle7-adapter's releases.

1.1.0

Changed

  • Add support for PHP 8.4, drop support for PHP version 7.2

Fixed

  • Add missing composer test command and use it in CI
  • Fix deprecated usage of prophesize in phpunit tests
Changelog

Sourced from php-http/guzzle7-adapter's changelog.

[1.1.0] - 2024-11-26

Changed

  • Add support for PHP 8.4, drop support for PHP version 7.2

Fixed

  • Add missing composer test command and use it in CI
  • Fix deprecated usage of prophesize in phpunit tests

[1.0.0] - 2021-03-09

  • Stable release - no changes since 0.1.1

[0.1.1] - 2020-10-21

  • Allow installation with PHP 8

[0.1.0] - 2020-08-16

First release

Commits
  • 03a415f prepare release
  • 93243a3 Merge pull request #17 from ruudk/patch-1
  • f6efdfc Add PHP 8.4 to CI matrix
  • 3b623a6 Merge pull request #16 from php-http/housekeeping
  • b88310d psalm stop complaining about unused method
  • dc4da39 chore: feat ci deprecations
  • 513f508 add test for createWithConfig
  • c6975e5 latest cs fixes
  • 427e734 cleanup branch alias and explicitly require legacy message-factory
  • 0332804 chore: add ci-tests for php 8.2, bump github action verions (#13)
  • Additional commits viewable in compare view

Updates react/http to 1.11.0

Release notes

Sourced from react/http's releases.

v1.11.0

  • Feature: Improve PHP 8.4+ support by avoiding implicitly nullable types. (#537 by @​clue)

  • Feature: Allow underscore character in Uri host. (#524 by @​lulhum)

  • Improve test suite to fix expected error code when ext-sockets is not enabled. (#539 by @​WyriHaximus)

Changelog

Sourced from react/http's changelog.

1.11.0 (2024-11-20)

  • Feature: Improve PHP 8.4+ support by avoiding implicitly nullable types. (#537 by @​clue)

  • Feature: Allow underscore character in Uri host. (#524 by @​lulhum)

  • Improve test suite to fix expected error code when ext-sockets is not enabled. (#539 by @​WyriHaximus)

1.10.0 (2024-03-27)

  • Feature: Add new PSR-7 implementation and remove dated RingCentral PSR-7 dependency. (#518, #519, #520 and #522 by @​clue)

    This changeset allows us to maintain our own PSR-7 implementation and reduce dependencies on external projects. It also improves performance slightly and does not otherwise affect our public API. If you want to explicitly install the old RingCentral PSR-7 dependency, you can still install it like this:

    composer require ringcentral/psr7

  • Feature: Add new Uri class for new PSR-7 implementation. (#521 by @​clue)

  • Feature: Validate outgoing HTTP message headers and reject invalid messages. (#523 by @​clue)

  • Feature: Full PHP 8.3 compatibility. (#508 by @​clue)

  • Fix: Fix HTTP client to omit Transfer-Encoding: chunked when streaming empty request body. (#516 by @​clue)

  • Fix: Ensure connection close handler is cleaned up for each request. (#515 by @​WyriHaximus)

  • Update test suite and avoid unhandled promise rejections. (#501 and #502 by @​clue)

1.9.0 (2023-04-26)

This is a SECURITY and feature release for the 1.x series of ReactPHP's HTTP component.

  • Security fix: This release fixes a medium severity security issue in ReactPHP's HTTP server component that affects all versions between v0.8.0 and v1.8.0. All users are encouraged to upgrade immediately. (CVE-2023-26044 reported and fixed by @​WyriHaximus)

... (truncated)

Commits
  • 8db02de Prepare v1.11.0 release
  • 71c0e5c Merge pull request #524 from lulhum/lulhum-uri-allow-underscore
  • 888e3c0 Allow underscore character in Uri host
  • f2b8bf3 Merge pull request #539 from WyriHaximus-labs/1.x-fix-expected-error-code-in-...
  • e0ab174 Fix expected error code in tests when ext-sockets is not enabled
  • c4855ce Merge pull request #537 from clue-labs/nullable-v1
  • 88128ac Improve PHP 8.4+ support by avoiding implicitly nullable types
  • 8111281 Prepare v1.10.0 release
  • 04cb936 Merge pull request #523 from clue-labs/http-validate
  • 27d2e74 Validate outgoing HTTP message headers and reject invalid messages
  • Additional commits viewable in compare view

Updates slim/psr7 to 1.8.0

Release notes

Sourced from slim/psr7's releases.

1.8.0

What's Changed

New Contributors

Full Changelog: slimphp/Slim-Psr7@1.7.1...1.8.0

Commits
  • 76e7e3b Correct cookie expiration date format (#336)
  • 3b2fb2a Merge pull request #341 from slimphp/dependabot/composer/php-http/psr7-integr...
  • 652c019 Update php-http/psr7-integration-tests requirement from ^1.4 to ^1.5
  • 11ccdc9 Support PHP 8.5 (#340)
  • cce9c0d Merge pull request #337 from williamdes/phpunit-12
  • 3724f06 Add missing PHPUnit annotations
  • 80aa3e1 Merge pull request #334 from akrabat/update-composer-dependencies
  • 5b0886f Run analysis on PHP 8.4 in CI
  • 054c5e9 Remove symfony/ppolyfill-php80
  • a10f2b0 Update adriansuter/php-autoload-override constraints
  • Additional commits viewable in compare view

Updates slim/slim to 4.15.1

Release notes

Sourced from slim/slim's releases.

4.15.1

Fixed

  • Allow PHPUnit 10, 11 and 12 when testing Slim itself (#3411)

Added

  • Add support for PHP 8.5 (#3415)

Full Changelog: slimphp/Slim@4.15.0...4.15.1

Changelog

Sourced from slim/slim's changelog.

4.15.1 - 2025-11-21

Fixed

  • Allow PHPUnit 10, 11 and 12 when testing Slim itself (#3411)

Added

  • Add support for PHP 8.5 (#3415)

Full Changelog: slimphp/Slim@4.15.0...4.15.1

4.15.0 - 2025-08-24

Fixed

  • Fix DocBlocks for callable route handlers (#3389)
  • Change class keyword to lowercase (#3346)
  • Fix tests for PHP 8.3
  • Fixes the build status badge in Readme (#3331)
  • Fix text and eol attributes for * selector in .gitattributes (#3391)
  • Deprecate setArgument/s (#3383)

Added

  • Add support for PHP 8.4
  • Add phpstan v2

Changed

  • Update http urls in composer.json (#3399)

Full Changelog: slimphp/Slim@4.14.0...4.15.0

4.14.0 - 2024-06-13

Changed

Type hinting with template generics

With the introduction of template generics, if you type-hint Slim\App instance variable using /** @var \Slim\App $app */, then you will need to change it to either:

  • /** @var \Slim\App<null> $app */ if you are not using a DI container, or

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the composer-production-dependencies group across 1 directory wi…
a2956a6 
…th 11 updates

Updates the requirements on [monolog/monolog](https://github.com/Seldaek/monolog), [open-telemetry/exporter-otlp](https://github.com/opentelemetry-php/exporter-otlp), [open-telemetry/detector-container](https://github.com/opentelemetry-php/contrib-detector-container), [open-telemetry/opentelemetry-logger-monolog](https://github.com/opentelemetry-php/contrib-logger-monolog), [guzzlehttp/guzzle](https://github.com/guzzle/guzzle), [php-di/php-di](https://github.com/PHP-DI/PHP-DI), [php-di/slim-bridge](https://github.com/PHP-DI/Slim-Bridge), [php-http/guzzle7-adapter](https://github.com/php-http/guzzle7-adapter), [react/http](https://github.com/reactphp/http), [slim/psr7](https://github.com/slimphp/Slim-Psr7) and [slim/slim](https://github.com/slimphp/Slim) to permit the latest version.

Updates `monolog/monolog` to 3.9.0
- [Release notes](https://github.com/Seldaek/monolog/releases)
- [Changelog](https://github.com/Seldaek/monolog/blob/main/CHANGELOG.md)
- [Commits](Seldaek/monolog@3.5.0...3.9.0)

Updates `open-telemetry/exporter-otlp` to 1.3.3
- [Release notes](https://github.com/opentelemetry-php/exporter-otlp/releases)
- [Commits](opentelemetry-php/exporter-otlp@1.0.4...1.3.3)

Updates `open-telemetry/detector-container` to 1.1.0
- [Release notes](https://github.com/opentelemetry-php/contrib-detector-container/releases)
- [Commits](opentelemetry-php/contrib-detector-container@1.0.0...1.1.0)

Updates `open-telemetry/opentelemetry-logger-monolog` to 1.1.0
- [Release notes](https://github.com/opentelemetry-php/contrib-logger-monolog/releases)
- [Commits](opentelemetry-php/contrib-logger-monolog@1.0.0...1.1.0)

Updates `guzzlehttp/guzzle` to 7.10.0
- [Release notes](https://github.com/guzzle/guzzle/releases)
- [Changelog](https://github.com/guzzle/guzzle/blob/7.10/CHANGELOG.md)
- [Commits](guzzle/guzzle@7.8.1...7.10.0)

Updates `php-di/php-di` to 7.1.1
- [Release notes](https://github.com/PHP-DI/PHP-DI/releases)
- [Commits](PHP-DI/PHP-DI@7.0.6...7.1.1)

Updates `php-di/slim-bridge` to 3.4.1
- [Release notes](https://github.com/PHP-DI/Slim-Bridge/releases)
- [Commits](PHP-DI/Slim-Bridge@3.4.0...3.4.1)

Updates `php-http/guzzle7-adapter` to 1.1.0
- [Release notes](https://github.com/php-http/guzzle7-adapter/releases)
- [Changelog](https://github.com/php-http/guzzle7-adapter/blob/1.x/CHANGELOG.md)
- [Commits](php-http/guzzle7-adapter@1.0.0...1.1.0)

Updates `react/http` to 1.11.0
- [Release notes](https://github.com/reactphp/http/releases)
- [Changelog](https://github.com/reactphp/http/blob/v1.11.0/CHANGELOG.md)
- [Commits](reactphp/http@v1.9.0...v1.11.0)

Updates `slim/psr7` to 1.8.0
- [Release notes](https://github.com/slimphp/Slim-Psr7/releases)
- [Commits](slimphp/Slim-Psr7@1.6.1...1.8.0)

Updates `slim/slim` to 4.15.1
- [Release notes](https://github.com/slimphp/Slim/releases)
- [Changelog](https://github.com/slimphp/Slim/blob/4.x/CHANGELOG.md)
- [Commits](slimphp/Slim@4.12.0...4.15.1)

---
updated-dependencies:
- dependency-name: monolog/monolog
  dependency-version: 3.9.0
  dependency-type: direct:production
  dependency-group: composer-production-dependencies
- dependency-name: open-telemetry/exporter-otlp
  dependency-version: 1.3.3
  dependency-type: direct:production
  dependency-group: composer-production-dependencies
- dependency-name: open-telemetry/detector-container
  dependency-version: 1.1.0
  dependency-type: direct:production
  dependency-group: composer-production-dependencies
- dependency-name: open-telemetry/opentelemetry-logger-monolog
  dependency-version: 1.1.0
  dependency-type: direct:production
  dependency-group: composer-production-dependencies
- dependency-name: guzzlehttp/guzzle
  dependency-version: 7.10.0
  dependency-type: direct:production
  dependency-group: composer-production-dependencies
- dependency-name: php-di/php-di
  dependency-version: 7.1.1
  dependency-type: direct:production
  dependency-group: composer-production-dependencies
- dependency-name: php-di/slim-bridge
  dependency-version: 3.4.1
  dependency-type: direct:production
  dependency-group: composer-production-dependencies
- dependency-name: php-http/guzzle7-adapter
  dependency-version: 1.1.0
  dependency-type: direct:production
  dependency-group: composer-production-dependencies
- dependency-name: react/http
  dependency-version: 1.11.0
  dependency-type: direct:production
  dependency-group: composer-production-dependencies
- dependency-name: slim/psr7
  dependency-version: 1.8.0
  dependency-type: direct:production
  dependency-group: composer-production-dependencies
- dependency-name: slim/slim
  dependency-version: 4.15.1
  dependency-type: direct:production
  dependency-group: composer-production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file php Pull requests that update Php code labels Nov 26, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file php Pull requests that update Php code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant