- Update all non-major dependencies with digest and pinDigest by blumilk-renovate[bot] · Pull Request #177 · blumilksoftware/lmt

blumilk-renovate · 2026-07-01T10:36:43Z

This PR contains the following updates:

Package	Change	Type	Update	Pending
@tailwindcss/typography	`^0.5.19` -> `^0.5.20`	dependencies	patch
@tailwindcss/vite (source)	`^4.2.4` -> `^4.3.3`	dependencies	minor
Infisical/secrets-action	`v1.0.15` -> `v1.0.16`	action	patch
actions/cache	`v5.0.5` -> `v5.1.0`	action	minor
actions/checkout	`v6.0.2` -> `v6.0.3`	action	patch
alpinejs (source)	`^3.15.11` -> `^3.15.12`	dependencies	patch
appleboy/ssh-action	`v1.2.3` -> `v1.2.5`	action	patch
autoprefixer	`^10.4.27` -> `^10.5.4`	dependencies	patch
axllent/mailpit (source)	`v1.29.7` -> `v1.30.5`		minor
composer	`2.9.7` -> `2.9.8`	stage	patch
docker/build-push-action	`v7.1.0` -> `v7.3.0`	action	minor
docker/login-action	`v4.1.0` -> `v4.4.0`	action	minor	`v4.5.0`
docker/metadata-action	`v6.0.0` -> `v6.2.0`	action	minor
docker/setup-buildx-action	`v4.0.0` -> `v4.2.0`	action	minor
filament/spatie-laravel-media-library-plugin (source)	`^3.3.50` -> `^3.3.54`	require	patch
laravel/telescope	`^5.20.0` -> `^5.21.0`	require-dev	minor
livewire/livewire	`^3.7.15` -> `^3.8.2`	require	patch
nginx/nginx	`1.29.8` -> `1.31.3`		minor
node	`24.11.1-bookworm-slim` -> `24.18.0-bookworm-slim`	stage	minor
nunomaduro/collision	`^8.9.4` -> `^8.9.5`	require-dev	patch
php	`8.3.30-fpm-bookworm` -> `8.3.32-fpm-bookworm`	final	patch
phpunit/phpunit (source)	`^11.5.55` -> `^11.5.56`	require-dev	patch
postcss (source)	`^8.5.12` -> `^8.5.21`	dependencies	patch	`8.5.22`
postgres	`17.9` -> `17.10`	final	minor
registry.blumilk.pl/internal-public/lmt-postgres	`234ae47` -> `92fe26f`		digest
registry.blumilk.pl/internal-public/lmt-postgres	`cf30f96` -> `e62c39e`		digest
shivammathur/setup-php	`2.35.5` -> `2.37.2`	action	minor
tailwindcss (source)	`^4.1.18` -> `^4.3.3`	dependencies	minor
xdebug/xdebug	`3.5.1` -> `3.5.3`		patch

Release Notes

tailwindlabs/tailwindcss-typography (@tailwindcss/typography)

`v0.5.20`

Compare Source

Fixed

Support installing with stable versions of Tailwind CSS v4 (#424)

tailwindlabs/tailwindcss (@tailwindcss/vite)

`v4.3.3`

Compare Source

Fixed

Support --watch --poll[=ms] in @tailwindcss/cli when filesystem events are unreliable or unavailable (#20297)
Canonicalization: match arbitrary hex colors against theme colors case-insensitively (e.g. bg-[#fff] and bg-[#FFF] → bg-white) (#20298)
Prevent Preflight from overriding Firefox's native iframe:focus-visible outline styles (#20292)
Ensure theme('colors.foo') in JS plugins resolves correctly when both --color-foo and --color-foo-bar exist (#20299)
Ensure fractional opacity modifiers work with named shadow sizes like shadow-sm/12.5, text-shadow-sm/12.5, drop-shadow-sm/12.5, and inset-shadow-sm/12.5 (#20302)
Parse selectors like [data-foo]div as two selectors instead of one (#20303)
Ensure @tailwindcss/postcss rebuilds when a preprocessor like Sass changes the input CSS without changing the input file on disk (#20310)
Ensure CSS nesting is handled even when Lightning CSS isn't run, such as in @tailwindcss/browser and Tailwind Play (#20124)
Prevent achromatic theme colors from shifting hue when mixed in polar color spaces like oklch (#20314)
Ensure --spacing(0) is optimized to 0px instead of 0 so it remains a <length> when used in calc(…) (#20319)
Load @parcel/watcher only when needed in @tailwindcss/cli --watch mode, so one-off builds and --watch --poll work when @parcel/watcher can't be loaded (#20325)
Use explicit platform fonts instead of system-ui and ui-sans-serif so CJK text respects the page's lang attribute on Windows (#20318)
Prevent @tailwindcss/upgrade from rewriting ignored files when run from a subdirectory (#20329)
Ensure earlier @source rules pointing to nested files are scanned when later @source rules point to files in parent folders (#20335)
Prevent @tailwindcss/vite from triggering full page reloads when scanned files are processed by Vite but haven't been loaded as modules yet (#20336)

`v4.3.2`

Compare Source

Fixed

Support bare spacing values for auto-rows-* and auto-cols-* utilities (e.g. auto-rows-12 and auto-cols-16) (#20229)
Prevent @tailwindcss/cli in --watch mode from crashing on Windows when @source points to a directory that doesn't exist (#20242)
Prevent @tailwindcss/vite from crashing in Deno v2.8.x when context.parentURL is not a valid URL (#20245)
Ensure @tailwindcss/cli in --watch mode rebuilds when the input CSS file changes in an ignored directory (#20246)
Allow @variant rules used in addBase(…) to use custom variants defined later (#20247)
Prevent @tailwindcss/vite from crashing during HMR when scanned files or directories are deleted (#20259)
Generate font-size instead of color declarations for text-[--spacing(…)] (#20260)
Prevent @source patterns from scanning unrelated sibling files and folders (#20263)
Extract class candidates adjacent to Template Toolkit delimiters like %]…[% in .tt, .tt2, and .tx files (#20269)
Extract class candidates from conditional Maud syntax like p.text-black[condition] (#20269)
Prevent @position-try rules from triggering unknown at-rule warnings when optimizing CSS (#20277)
Support class suggestions for named opacity modifiers from --opacity theme values (#20287)
Prevent type errors in @tailwindcss/postcss when used with newer PostCSS patch releases (#20289)

`v4.3.1`

Compare Source

Added

Add --silent option to suppress output in @tailwindcss/cli (#20100)

Fixed

Remove deprecation warnings by using Module#registerHooks instead of Module#register on Node 26+ (#20028)
Canonicalization: don't crash when plugin utilities throw for unsupported values (#20052)
Allow @apply to be used with CSS mixins (#19427)
Ensure not-* correctly negates @container queries, including style(…) queries (#20059)
Ensure drop-shadow-* color utilities work with custom shadow values containing calc(…) (#20080)
Fix 'Sourcemap is likely to be incorrect' warnings when using @tailwindcss/vite (#20103)
Ensure @tailwindcss/webpack can be installed in Rspack projects without requiring webpack as a peer dependency (#20027)
Canonicalization: don't suggest invalid calc(…) expressions (e.g. px-[calc(1rem+0px)] → px-[calc(1rem+0)]) (#20127)
Canonicalization: avoid suggesting large spacing-scale values for arbitrary lengths (e.g. left-[99999px] → left-[99999px], not left-24999.75) (#20130)
Ensure @tailwindcss/cli in --watch mode recovers when a tracked dependency is deleted and restored (#20137)
Ensure standalone @tailwindcss/cli binaries are ignored when scanning for class candidates (#20139)
Ensure class candidates are extracted from Twig addClass(…) and removeClass(…) calls (#20198)
Don't crash in the Ruby or Vue preprocessors when scanning files containing invalid UTF-8 bytes (#19588)
Allow @variant to be used inside addBase (#19480)
Ensure @source globs with symlinks are preserved (#20203)
Ensure later @source rules can re-include files excluded by earlier @source not rules (#20203)
Upgrade: don't migrate empty class rules to invalid @utility rules (#20205)
Ensure transitions between inset-shadow-none and other inset shadows work correctly (#20208)
Ensure explicitly referenced @source directories are scanned even when ignored by git (#20214)
Ensure @source globs ending in **/* preserve dynamic path segments to avoid scanning too many files (#20217)
Canonicalization: don't fold calc(…) divisions when the result would require high precision (e.g. w-[calc(100%/3.5)] → w-[calc(100%/3.5)], not w-[28.571428571428573%]) (#20221)
Serve ESM type declarations to ESM importers of @tailwindcss/postcss (#20228)

Changed

Generate 0 instead of calc(var(--spacing) * 0) for spacing utilities like m-0 and left-0 (#20196)
Generate var(--spacing) instead of calc(var(--spacing) * 1) for spacing utilities like m-1 and left-1 (#20196)

`v4.3.0`

Compare Source

Added

Add @container-size utility (#18901)
Add scrollbar-{auto,thin,none} utilities for scrollbar-width, and scrollbar-thumb-* / scrollbar-track-* color utilities for scrollbar-color (#19981, #20019)
Add scrollbar-gutter-* utilities (#20018)
Add zoom-* utilities (#20020)
Add tab-* utilities (#20022)
Allow using @variant with stacked variants (e.g. @variant hover:focus { … }) (#19996)
Allow using @variant with compound variants (e.g. @variant hover, focus { … }) (#19996)
Support --default(…) in --value(…) and --modifier(…) for functional @utility definitions (#19989)

Fixed

Ensure @plugin resolves package JavaScript entries instead of browser CSS entries when using @tailwindcss/vite (#19949)
Fix relative @import and @plugin paths resolving from the wrong directory when using @tailwindcss/vite (#19965)
Ensure CSS files containing @variant are processed by @tailwindcss/vite (#19966)
Resolve imports relative to base when result.opts.from is not provided when using @tailwindcss/postcss (#19980)
Canonicalization: preserve significant _ whitespace in arbitrary values (#19986)
Canonicalization: add parentheses when removing whitespace from arbitrary values would hurt readability (e.g. w-[calc(100%---spacing(60))] → w-[calc(100%-(--spacing(60)))]) (#19986)
Canonicalization: preserve the original unit in arbitrary values instead of normalizing to base units (e.g. -mt-[20in] → mt-[-20in], not mt-[-1920px]) (#19988)
Canonicalization: migrate arbitrary :has() variants from [&:has(…)] to has-[…] (#19991)
Upgrade: don’t migrate inline style attributes (e.g. style="flex-grow: 1" → style="flex-grow: 1", not style="grow: 1") (#19918)
Allow multiple @utility definitions with the same name but different value types (#19777)
Export missing PluginWithConfig type from tailwindcss/plugin to fix errors when inferring plugin config types (#19707)
Ensure start and end legacy utilities without values do not generate CSS (#20003)
Ensure --value(…) is required in functional @utility definitions (#20005)
Canonicalization: preserve required whitespace around operators in negated arbitrary values (e.g. -left-[(var(--a)+var(--b))]) (#20011)

Infisical/secrets-action (Infisical/secrets-action)

`v1.0.16`

Compare Source

What's Changed

Update readme on using the action with internal ca certificate by @akhilmhdh in #24
chore(version): update node version by @adilsitos in #35

New Contributors

@akhilmhdh made their first contribution in #24
@adilsitos made their first contribution in #35

Full Changelog: Infisical/secrets-action@v1.0.15...v1.0.16

actions/cache (actions/cache)

`v5.1.0`

Compare Source

What's Changed

Bump @actions/cache to v5.1.0 - handle read-only cache access by @jasongin in #1775

Full Changelog: actions/cache@v5...v5.1.0

actions/checkout (actions/checkout)

`v6.0.3`

Compare Source

Fix checkout init for SHA-256 repositories by @yaananth in #2439
fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in #2414

appleboy/ssh-action (appleboy/ssh-action)

`v1.2.5`

Compare Source

Changelog

Refactor

0ff4204: refactor: streamline output handling for GITHUB_OUTPUT in workflows (#404) (@appleboy)

Documentation updates

23bd972: docs: update README and assets for new SSH agent workflow (@appleboy)
8e460a2: docs: improve documentation table formatting for output descriptions (@appleboy)

`v1.2.4`

Compare Source

Changelog

Enhancements

4e3535e: chore: bump default DRONE_SSH_VERSION to 1.8.2 (@appleboy)

Build process updates

823bd89: ci: trigger GitHub Actions workflows only on version tags (@appleboy)

Documentation updates

652a0be: docs: update CI documentation and workflow references (@appleboy)
f6208e0: docs: document and demonstrate capturing and using command output (@appleboy)

postcss/autoprefixer (autoprefixer)

`v10.5.4`

Compare Source

Fixed prefixed rule duplication (by @xianjianlf2).

`v10.5.3`

Compare Source

Fixed brackets and gradient parser (@alanturing881).

`v10.5.2`

Compare Source

Moved -webkit-fill-available before -moz-available, so Firefox
will use -webkit- version which is closer to stretch.

`v10.5.1`

Compare Source

Fixed grid-area span reset for overriding areas (by @puneetdixit200).

axllent/mailpit (axllent/mailpit)

`v1.30.5`

Compare Source

Security

Prevent SMTP DATA line exceeding MaxSize (GHSA-r553-m4fv-5v97)

Chore

Update Go dependencies
Update node dependencies

`v1.30.4`

Compare Source

Security

Reject oversized image dimensions in thumbnail handler before full decode (GHSA-75mr-qw9x-3r39)
Enforce command line length limits in SMTP and POP3 handlers (GHSA-w878-pj84-3j5v)

Chore

Update Github Actions
Refactor browser storage settings for consistency (#715)
Update Go dependencies
Update node dependencies
Update caniemail test database
Update Github Action requirements

Fix

Exclude supported clients in HTML check results (#716)

`v1.30.3`

Compare Source

Feature

Add link check rate limiting and caching mechanism

Chore

Update Go dependencies
Update node dependencies

Fix

Correctly parse after/before datetimes with timestamp in search query (#704)
Update Swagger response definitions for MessageHeadersResponse (#703)
Refactor Web UI configuration definitions in Swagger documentation
Handle MaxBytesError in SendMessageHandler and return JSON error response

`v1.30.2`

Compare Source

Security

Fix incomplete SSRF protection in IsInternalIP() detection for IPv6 transition mechanisms (GHSA-w4mc-hhc6-xp28)

Feature

Add wait support to readyz (#697)

Chore

Compress websocket messages once per broadcast to improve performance (#695)
Toggle websocket compression using HTTP compression setting
Update Github Actions dependencies
Update Go dependencies
Update node dependencies

Fix

Adjust header setting order in error response functions (#699)

Test

Add readyz tests

`v1.30.1`

Compare Source

Security

Extend request body size cap to all JSON API endpoints (GHSA-28pq-6qxg-wg5r)
Pin Github Actions workflow versions using full commit SHA
Do not use npm cache to prevent cache poisoning
Disable GitHub Actions credential persistence for checkout steps

Chore

Enhance schema application logging (#688)
Change log level to Info for database vacuuming message (#688)
Update Github Action workflows
Update Go dependencies
Update node dependencies
Update caniemail test database

`v1.30.0`

Compare Source

Security

Set a default 50MB p/m limit to prevent DoS via unlimited SMTP DATA and /api/v1/send body sizes (GHSA-fpxj-m5q8-fphw)
Include CGNAT (Carrier-Grade NAT) in internal IP checks (GHSA-j3fj-qppj-fmmc)
Block internal IP access by default in HTML check (GHSA-j3fj-qppj-fmmc)
Fix for path traversal & arbitrary file write in mailpit dump --http via attacker-controlled message IDs (GHSA-qx5x-85p8-vg4j)
Fix concurrent map read & write in proxy CSS rewriter (GHSA-w4vj-r5pg-3722)

Feature

New loading indicator, reduce flash during message transitions (#682)

Chore

Remove gorilla/mux dependency and replace with stdlib routing
Remove logrus dependency and implement slog-based logging
Remove go-telnet dependency and implement TCP/Unix socket handling for SMTP
Replace lithammer/shortuuid with custom shortuuid implementation and update tests
Improve iframe height adjustment with optional chaining
Bump axios version to v1.16.0
Refactor Prometheus metrics implementation and remove unused dependencies
Refactor MarkRead and MarkUnread functions to only broadcast changes of modified messages
Optimize tag retrieval by batching message IDs in List and Search functions
Enhance SetMessageTags function to improve tag handling and batch deletions
Optimize MarkRead and MarkUnread functions to reduce database calls and improve performance
Refactor pruneMessages function to eliminate duplicate ID checks using a map
Refactor addMessageTag function to remove mutex and ensure safe concurrent inserts
Refactor Hub to use atomic clientCount for safe concurrent client tracking
Ensure websocket connection is closed on client unregistration
Simplify writePump by using WriteMessage and remove unnecessary newline handling
Add message dump max-message-size flag and refactor message handling
Add message ingest max-message-size flag and refactor message handling
Update Go dependencies
Update node dependencies
Update caniemail test database

Fix

Validate SMTP XCLIENT args before processing

Build

Update CI actions to use npm ci
Tag Docker edge build with next patch versions

docker/build-push-action (docker/build-push-action)

`v7.3.0`

Compare Source

Preserve names in esbuild bundle by @crazy-max in #1567
Bump @docker/actions-toolkit from 0.90.0 to 0.92.0 in #1545 #1572
Bump @sigstore/core from 3.1.0 to 3.2.1 in #1568
Bump js-yaml from 4.1.1 to 4.3.0 in #1566
Bump tmp from 0.2.5 to 0.2.7 in #1547
Bump undici from 6.24.1 to 6.27.0 in #1564
Bump vite from 7.3.2 to 7.3.6 in #1563

Full Changelog: docker/build-push-action@v7.2.0...v7.3.0

`v7.2.0`

Compare Source

Bump @actions/core from 3.0.0 to 3.0.1 in #1525
Bump @docker/actions-toolkit from 0.87.0 to 0.90.0 in #1517
Bump brace-expansion from 2.0.2 to 5.0.6 in #1534
Bump fast-xml-builder from 1.1.4 to 1.2.0 in #1529
Bump fast-xml-parser from 5.5.7 to 5.8.0 in #1521
Bump postcss from 8.5.6 to 8.5.10 in #1526
Bump tar from 6.2.1 to 7.5.15 in #1533

Full Changelog: docker/build-push-action@v7.1.0...v7.2.0

docker/login-action (docker/login-action)

`v4.4.0`

Compare Source

Skip empty registry-auth secret mask by @crazy-max in #1035
Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1077.0 #1034

Full Changelog: docker/login-action@v4.3.0...v4.4.0

`v4.3.0`

Compare Source

Preserve names in esbuild bundle by @crazy-max in #1022
Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1076.0 #999 #1030
Bump @docker/actions-toolkit from 0.90.0 to 0.92.0 in #1004 #1027
Bump @sigstore/core from 3.1.0 to 3.2.1 in #1023
Bump @sigstore/verify from 3.1.0 to 3.1.1 in #1029
Bump http-proxy-agent and https-proxy-agent to 9.1.0 in #1017
Bump js-yaml from 4.1.1 to 5.2.0 in #1028
Bump sigstore from 4.1.0 to 4.1.1 in #1031
Bump tmp from 0.2.5 to 0.2.7 in #1002
Bump undici from 6.24.1 to 6.27.0 in #1020
Bump vite from 7.3.3 to 7.3.6 in #1019

Full Changelog: docker/login-action@v4.2.0...v4.3.0

`v4.2.0`

Compare Source

Bump @actions/core from 3.0.0 to 3.0.1 in #976
Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1050.0 in #960
Bump @docker/actions-toolkit from 0.86.0 to 0.90.0 in #970
Bump brace-expansion from 2.0.1 to 5.0.6 in #993
Bump fast-xml-builder from 1.1.4 to 1.2.0 in #985
Bump fast-xml-parser from 5.3.6 to 5.8.0 in #963
Bump http-proxy-agent and https-proxy-agent to 9.0.0 in #961
Bump postcss from 8.5.6 to 8.5.10 in #979
Bump tar from 6.2.1 to 7.5.15 in #991
Bump vite from 7.3.1 to 7.3.3 in #986

Full Changelog: docker/login-action@v4.1.0...v4.2.0

docker/metadata-action (docker/metadata-action)

`v6.2.0`

Compare Source

Preserve names in esbuild bundle by @crazy-max in #689
Bump @actions/core from 3.0.0 to 3.0.1 in #663
Bump @actions/github from 9.0.0 to 9.1.1 in #666
Bump @docker/actions-toolkit from 0.90.0 to 0.92.0 in #672 #696
Bump @sigstore/core from 3.1.0 to 3.2.1 in #690
Bump @sigstore/verify from 3.1.0 to 3.1.1 in #693
Bump csv-parse from 6.2.1 to 7.0.0 in #683
Bump js-yaml from 4.1.1 to 4.3.0 in #688
Bump moment-timezone from 0.6.1 to 0.6.2 in #664
Bump semver from 7.7.4 to 7.8.5 in #665 #695
Bump sigstore from 4.1.0 to 4.1.1 in #694
Bump tmp from 0.2.5 to 0.2.7 in #673
Bump undici from 6.25.0 to 6.27.0 in #686
Bump vite from 7.3.2 to 7.3.6 in #685

Full Changelog: docker/metadata-action@v6.1.0...v6.2.0

`v6.1.0`

Compare Source

Bump @docker/actions-toolkit from 0.79.0 to 0.90.0 in #613
Bump brace-expansion from 1.1.12 to 5.0.6 in #658 #630
Bump csv-parse from 6.1.0 to 6.2.1 in #617
Bump fast-xml-parser from 5.4.2 to 5.8.0 in #620
Bump flatted from 3.3.3 to 3.4.2 in #623
Bump glob from 10.3.15 to 10.5.0 in #621
Bump handlebars from 4.7.8 to 4.7.9 in #629
Bump lodash from 4.17.23 to 4.18.1 in #639
Bump moment-timezone from 0.6.0 to 0.6.1 in #619
Bump picomatch from 4.0.3 to 4.0.4 in #626
Bump postcss from 8.5.6 to 8.5.10 in #649
Bump tar from 6.2.1 to 7.5.15 in #657
Bump undici from 6.23.0 to 6.25.0 in #614
Bump vite from 7.3.1 to 7.3.2 in #637

Full Changelog: docker/metadata-action@v6.0.0...v6.1.0

docker/setup-buildx-action (docker/setup-buildx-action)

`v4.2.0`

Compare Source

Preserve names in esbuild bundle by @crazy-max in #572
Bump @actions/core from 3.0.0 to 3.0.1 in #551
Bump @docker/actions-toolkit from 0.90.0 to 0.92.0 in #557 #580
Bump @sigstore/core from 3.1.0 to 3.2.1 in #573
Bump @sigstore/verify from 3.1.0 to 3.1.1 in #576
Bump js-yaml from 4.1.1 to 5.2.0 in #562
Bump sigstore from 4.1.0 to 4.1.1 in #577
Bump tmp from 0.2.5 to 0.2.7 in #556
Bump undici from 6.25.0 to 6.27.0 in #570
Bump vite from 7.3.2 to 7.3.6 in #569

Full Changelog: docker/setup-buildx-action@v4.1.0...v4.2.0

`v4.1.0`

Compare Source

Bump @docker/actions-toolkit from 0.79.0 to 0.90.0 in #489
Bump brace-expansion from 1.1.12 to 5.0.6 in #547 #508
Bump fast-xml-builder from 1.0.0 to 1.2.0 in #540
Bump fast-xml-parser from 5.4.2 to 5.8.0 in #496
Bump flatted from 3.3.3 to 3.4.2 in #499
Bump glob from 10.3.12 to 13.0.6 in #495
Bump handlebars from 4.7.8 to 4.7.9 in #504
Bump lodash from 4.17.23 to 4.18.1 in #523
Bump picomatch from 4.0.3 to 4.0.4 in #503
Bump postcss from 8.5.6 to 8.5.10 in #537
Bump tar from 6.2.1 to 7.5.15 in #545
Bump undici from 6.23.0 to 6.25.0 in #492
Bump vite from 7.3.1 to 7.3.2 in #520

Full Changelog: docker/setup-buildx-action@v4.0.0...v4.1.0

filamentphp/spatie-laravel-media-library-plugin (filament/spatie-laravel-media-library-plugin)

<detai

Configuration

📅 Schedule: Branch creation - On day 1 of the month, every 3 months ( * * 1 */3 * ) in timezone Europe/Warsaw, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

blumilk-renovate · 2026-07-01T10:36:52Z

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: composer.lock

Command failed: composer update filament/spatie-laravel-media-library-plugin:3.3.54 laravel/telescope:5.21.0 livewire/livewire:3.8.2 nunomaduro/collision:8.9.5 phpunit/phpunit:11.5.56 --with-dependencies --ignore-platform-req='ext-*' --ignore-platform-req='lib-*' --no-ansi --no-interaction --no-scripts --no-autoloader --no-plugins --minimal-changes
Loading composer repositories with package information
Dependency laravel/framework is also a root requirement. Package has not been listed as an update argument, so keeping locked at old version. Use --with-all-dependencies (-W) to include root dependencies.
Dependency mockery/mockery is also a root requirement. Package has not been listed as an update argument, so keeping locked at old version. Use --with-all-dependencies (-W) to include root dependencies.
Dependency fakerphp/faker is also a root requirement. Package has not been listed as an update argument, so keeping locked at old version. Use --with-all-dependencies (-W) to include root dependencies.
Dependency laravel/tinker is also a root requirement. Package has not been listed as an update argument, so keeping locked at old version. Use --with-all-dependencies (-W) to include root dependencies.
Updating dependencies
Your requirements could not be resolved to an installable set of packages.

  Problem 1
    - Root composer.json requires filament/spatie-laravel-media-library-plugin ^3.3.54 -> satisfiable by filament/spatie-laravel-media-library-plugin[v3.3.54].
    - filament/spatie-laravel-media-library-plugin v3.3.54 requires filament/support v3.3.54 -> found filament/support[v3.3.54] but these were not loaded, likely because it conflicts with another require.

Use the option --with-all-dependencies (-W) to allow upgrades, downgrades and removals for packages currently locked to specific versions.

File name: package-lock.json

npm warn Unknown env config "store". This will error in a future major version of npm. See `npm help npmrc` for supported config options.
npm error code EALLOWREMOTE
npm error Fetching packages of type "remote" have been disabled
npm error Refusing to fetch "https://registry.npmjs.org/@tailwindcss/oxide-wasm32-wasi/-/oxide-wasm32-wasi-4.3.3.tgz"
npm error A complete log of this run can be found in: /tmp/renovate/cache/others/npm/_logs/2026-07-24T10_07_43_825Z-debug-0.log

blumilk-renovate Bot requested a review from a team as a code owner July 1, 2026 10:36

blumilk-renovate Bot added dependencies Pull requests that update a dependency file docker github-actions javascript php renovate labels Jul 1, 2026

blumilk-renovate Bot requested a review from Blusia July 1, 2026 10:36

blumilk-renovate Bot force-pushed the renovate/all-minor-patch-digest-pindigest branch 6 times, most recently from 5aa34e5 to d083dbe Compare July 8, 2026 10:38

blumilk-renovate Bot force-pushed the renovate/all-minor-patch-digest-pindigest branch 6 times, most recently from dc23e35 to 3194d51 Compare July 16, 2026 10:37

blumilk-renovate Bot force-pushed the renovate/all-minor-patch-digest-pindigest branch 7 times, most recently from 5977693 to 2610924 Compare July 23, 2026 10:03

- Update all non-major dependencies with digest and pinDigest

b9712dc

blumilk-renovate Bot force-pushed the renovate/all-minor-patch-digest-pindigest branch from 2610924 to b9712dc Compare July 24, 2026 10:07

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

- Update all non-major dependencies with digest and pinDigest#177

- Update all non-major dependencies with digest and pinDigest#177
blumilk-renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch-digest-pindigest

blumilk-renovate Bot commented Jul 1, 2026 •

edited

Loading

Uh oh!

blumilk-renovate Bot commented Jul 1, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

blumilk-renovate Bot commented Jul 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Fixed

Fixed

Fixed

Added

Fixed

Changed

Added

Fixed

What's Changed

New Contributors

What's Changed

Changelog

Refactor

Documentation updates

Changelog

Enhancements

Build process updates

Documentation updates

Security

Chore

Security

Chore

Fix

Feature

Chore

Fix

Security

Feature

Chore

Fix

Test

Security

Chore

Security

Feature

Chore

Fix

Build

Configuration

Uh oh!

blumilk-renovate Bot commented Jul 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Artifact update problem

File name: composer.lock

File name: package-lock.json

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

blumilk-renovate Bot commented Jul 1, 2026 •

edited

Loading

blumilk-renovate Bot commented Jul 1, 2026 •

edited

Loading