Skip to content

- Update all non-major dependencies with digest and pinDigest#606

Open
blumilk-renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch-digest-pindigest
Open

- Update all non-major dependencies with digest and pinDigest#606
blumilk-renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch-digest-pindigest

Conversation

@blumilk-renovate

@blumilk-renovate blumilk-renovate Bot commented Jul 1, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence Type Update Pending
@inertiajs/vue3 (source) ^2.3.23 -> ^2.3.27 age confidence dependencies patch
@tailwindcss/postcss (source) ^4.3.0 -> ^4.3.3 age confidence dependencies patch
@tailwindcss/typography ^0.5.19 -> ^0.5.20 age confidence dependencies patch
@vitejs/plugin-vue (source) ^6.0.6 -> ^6.0.8 age confidence dependencies patch
@vue/compiler-sfc (source) ^3.5.34 -> ^3.5.40 age confidence dependencies patch
actions/cache v5.0.5 -> v5.1.0 age confidence action minor
actions/checkout v6.0.2 -> v6.0.3 age confidence action patch
actions/setup-node v6.4.0 -> v6.5.0 age confidence action minor
alpine 3.22.4 -> 3.22.5 age confidence stage patch
axllent/mailpit (source) v1.29 -> v1.30 age confidence minor
barryvdh/laravel-debugbar ^4.0 -> ^4.0.10 age confidence require-dev patch
composer 2.9.5 -> 2.9.8 age confidence stage patch
composer/composer 2.9.7-bin -> 2.9.8-bin age confidence stage patch
docker/build-push-action v7.1.0 -> v7.3.0 age confidence action minor
docker/login-action v4.1.0 -> v4.4.0 age confidence action minor v4.5.0
docker/metadata-action v6.0.0 -> v6.2.0 age confidence action minor
docker/setup-buildx-action v4.0.0 -> v4.2.0 age confidence action minor
dompdf/dompdf ^3.1.5 -> ^3.1.6 age confidence require patch
eslint (source) ^9.39.4 -> ^9.39.5 age confidence dependencies patch
laravel/dusk (source) ^8.3.6 -> ^8.6.0 age confidence require-dev patch
laravel/framework (source) ^12.0 -> ^12.0.1 age confidence require patch
laravel/sanctum ^4.3.2 -> ^4.3.3 age confidence require patch
laravel/socialite (source) ^5.24.3 -> ^5.29.0 age confidence require minor
laravel/telescope ^5.20.0 -> ^5.21.0 age confidence require minor
lodash (source) ^4.17.23 -> ^4.18.1 age confidence dependencies patch
node 22.22.2 -> 22.22.3 age confidence uses-with patch
node 22.22.2-bullseye-slim -> 22.22.3-bullseye-slim age confidence stage patch
nunomaduro/collision ^8.9.4 -> ^8.9.5 age confidence require-dev patch
php 8.4.20 -> 8.4.23 age confidence patch
php 8.4.11 -> 8.4.23 age confidence patch
php -> aa9ca43 final pinDigest
php -> aa9ca43 stage pinDigest
phpunit/phpunit (source) ^12.0 -> ^12.0.10 age confidence require-dev patch
postcss (source) ^8.5.14 -> ^8.5.21 age confidence dependencies patch 8.5.22
postgres 32016c7 -> 74e110c service digest
postgres 32016c7 -> 74e110c digest
selenium/standalone-chrome b36b074 -> 9569014 digest
sentry/sentry-laravel (source) ^4.25.1 -> ^4.27.0 age confidence require minor
shivammathur/setup-php 2.37.0 -> 2.37.2 age confidence action patch
spatie/laravel-permission ^6.24.1 -> ^6.25.0 age confidence require patch
tailwindcss (source) ^4.3.0 -> ^4.3.3 age confidence dependencies patch
vite (source) ^7.3.3 -> ^7.3.6 age confidence dependencies patch
vue (source) ^3.5.34 -> ^3.5.40 age confidence dependencies patch
xdebug/xdebug 3.5.1 -> 3.5.3 age confidence patch

Release Notes

inertiajs/inertia (@​inertiajs/vue3)

v2.3.27

Compare Source

What's Changed

Full Changelog: inertiajs/inertia@v2.3.26...v2.3.27

v2.3.26

Compare Source

What's Changed

New Contributors

Full Changelog: inertiajs/inertia@v2.3.25...v2.3.26

v2.3.25

Compare Source

What's Changed

Full Changelog: inertiajs/inertia@v2.3.24...v2.3.25

v2.3.24

Compare Source

What's Changed

Full Changelog: inertiajs/inertia@v2.3.23...v2.3.24

tailwindlabs/tailwindcss (@​tailwindcss/postcss)

v4.3.3

Compare Source

Fixed
  • Support --watch --poll[=ms] in @tailwindcss/cli when filesystem events are unreliable or unavailable (#​20297)
  • Canonicalization: match arbitrary hex colors against theme colors case-insensitively (e.g. bg-[#fff] and bg-[#FFF] → bg-white) (#​20298)
  • Prevent Preflight from overriding Firefox's native iframe:focus-visible outline styles (#​20292)
  • Ensure theme('colors.foo') in JS plugins resolves correctly when both --color-foo and --color-foo-bar exist (#​20299)
  • Ensure fractional opacity modifiers work with named shadow sizes like shadow-sm/12.5, text-shadow-sm/12.5, drop-shadow-sm/12.5, and inset-shadow-sm/12.5 (#​20302)
  • Parse selectors like [data-foo]div as two selectors instead of one (#​20303)
  • Ensure @tailwindcss/postcss rebuilds when a preprocessor like Sass changes the input CSS without changing the input file on disk (#​20310)
  • Ensure CSS nesting is handled even when Lightning CSS isn't run, such as in @tailwindcss/browser and Tailwind Play (#​20124)
  • Prevent achromatic theme colors from shifting hue when mixed in polar color spaces like oklch (#​20314)
  • Ensure --spacing(0) is optimized to 0px instead of 0 so it remains a <length> when used in calc(…) (#​20319)
  • Load @parcel/watcher only when needed in @tailwindcss/cli --watch mode, so one-off builds and --watch --poll work when @parcel/watcher can't be loaded (#​20325)
  • Use explicit platform fonts instead of system-ui and ui-sans-serif so CJK text respects the page's lang attribute on Windows (#​20318)
  • Prevent @tailwindcss/upgrade from rewriting ignored files when run from a subdirectory (#​20329)
  • Ensure earlier @source rules pointing to nested files are scanned when later @source rules point to files in parent folders (#​20335)
  • Prevent @tailwindcss/vite from triggering full page reloads when scanned files are processed by Vite but haven't been loaded as modules yet (#​20336)

v4.3.2

Compare Source

Fixed
  • Support bare spacing values for auto-rows-* and auto-cols-* utilities (e.g. auto-rows-12 and auto-cols-16) (#​20229)
  • Prevent @tailwindcss/cli in --watch mode from crashing on Windows when @source points to a directory that doesn't exist (#​20242)
  • Prevent @tailwindcss/vite from crashing in Deno v2.8.x when context.parentURL is not a valid URL (#​20245)
  • Ensure @tailwindcss/cli in --watch mode rebuilds when the input CSS file changes in an ignored directory (#​20246)
  • Allow @variant rules used in addBase(…) to use custom variants defined later (#​20247)
  • Prevent @tailwindcss/vite from crashing during HMR when scanned files or directories are deleted (#​20259)
  • Generate font-size instead of color declarations for text-[--spacing(…)] (#​20260)
  • Prevent @source patterns from scanning unrelated sibling files and folders (#​20263)
  • Extract class candidates adjacent to Template Toolkit delimiters like %]…[% in .tt, .tt2, and .tx files (#​20269)
  • Extract class candidates from conditional Maud syntax like p.text-black[condition] (#​20269)
  • Prevent @position-try rules from triggering unknown at-rule warnings when optimizing CSS (#​20277)
  • Support class suggestions for named opacity modifiers from --opacity theme values (#​20287)
  • Prevent type errors in @tailwindcss/postcss when used with newer PostCSS patch releases (#​20289)

v4.3.1

Compare Source

Added
  • Add --silent option to suppress output in @tailwindcss/cli (#​20100)
Fixed
  • Remove deprecation warnings by using Module#registerHooks instead of Module#register on Node 26+ (#​20028)
  • Canonicalization: don't crash when plugin utilities throw for unsupported values (#​20052)
  • Allow @apply to be used with CSS mixins (#​19427)
  • Ensure not-* correctly negates @container queries, including style(…) queries (#​20059)
  • Ensure drop-shadow-* color utilities work with custom shadow values containing calc(…) (#​20080)
  • Fix 'Sourcemap is likely to be incorrect' warnings when using @tailwindcss/vite (#​20103)
  • Ensure @tailwindcss/webpack can be installed in Rspack projects without requiring webpack as a peer dependency (#​20027)
  • Canonicalization: don't suggest invalid calc(…) expressions (e.g. px-[calc(1rem+0px)] → px-[calc(1rem+0)]) (#​20127)
  • Canonicalization: avoid suggesting large spacing-scale values for arbitrary lengths (e.g. left-[99999px] → left-[99999px], not left-24999.75) (#​20130)
  • Ensure @tailwindcss/cli in --watch mode recovers when a tracked dependency is deleted and restored (#​20137)
  • Ensure standalone @tailwindcss/cli binaries are ignored when scanning for class candidates (#​20139)
  • Ensure class candidates are extracted from Twig addClass(…) and removeClass(…) calls (#​20198)
  • Don't crash in the Ruby or Vue preprocessors when scanning files containing invalid UTF-8 bytes (#​19588)
  • Allow @variant to be used inside addBase (#​19480)
  • Ensure @source globs with symlinks are preserved (#​20203)
  • Ensure later @source rules can re-include files excluded by earlier @source not rules (#​20203)
  • Upgrade: don't migrate empty class rules to invalid @utility rules (#​20205)
  • Ensure transitions between inset-shadow-none and other inset shadows work correctly (#​20208)
  • Ensure explicitly referenced @source directories are scanned even when ignored by git (#​20214)
  • Ensure @source globs ending in **/* preserve dynamic path segments to avoid scanning too many files (#​20217)
  • Canonicalization: don't fold calc(…) divisions when the result would require high precision (e.g. w-[calc(100%/3.5)] → w-[calc(100%/3.5)], not w-[28.571428571428573%]) (#​20221)
  • Serve ESM type declarations to ESM importers of @tailwindcss/postcss (#​20228)
Changed
  • Generate 0 instead of calc(var(--spacing) * 0) for spacing utilities like m-0 and left-0 (#​20196)
  • Generate var(--spacing) instead of calc(var(--spacing) * 1) for spacing utilities like m-1 and left-1 (#​20196)
tailwindlabs/tailwindcss-typography (@​tailwindcss/typography)

v0.5.20

Compare Source

Fixed
  • Support installing with stable versions of Tailwind CSS v4 (#​424)
vitejs/vite-plugin-vue (@​vitejs/plugin-vue)

v6.0.8

Features
Bug Fixes

v6.0.7

Features
Bug Fixes
vuejs/core (@​vue/compiler-sfc)

v3.5.40

Compare Source

Bug Fixes

v3.5.39

Compare Source

Bug Fixes

v3.5.38

Compare Source

v3.5.37

Compare Source

v3.5.36

Compare Source

Bug Fixes

v3.5.35

Compare Source

Bug Fixes
Performance Improvements
actions/cache (actions/cache)

v5.1.0

Compare Source

What's Changed

Full Changelog: actions/cache@v5...v5.1.0

actions/checkout (actions/checkout)

v6.0.3

Compare Source

actions/setup-node (actions/setup-node)

v6.5.0

Compare Source

What's Changed

Full Changelog: actions/setup-node@v6.4.0...v6.5.0

axllent/mailpit (axllent/mailpit)

v1.30

Security
Chore
  • Update Go dependencies
  • Update node dependencies
docker/build-push-action (docker/build-push-action)

v7.3.0

Compare Source

Full Changelog: docker/build-push-action@v7.2.0...v7.3.0

v7.2.0

Compare Source

Full Changelog: docker/build-push-action@v7.1.0...v7.2.0

docker/login-action (docker/login-action)

v4.4.0

Compare Source

Full Changelog: docker/login-action@v4.3.0...v4.4.0

v4.3.0

Compare Source

Configuration

📅 Schedule: Branch creation - On day 1 of the month, every 3 months ( * * 1 */3 * ) in timezone Europe/Warsaw, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@blumilk-renovate
blumilk-renovate Bot requested a review from a team as a code owner July 1, 2026 10:15
@blumilk-renovate blumilk-renovate Bot added dependencies Pull requests that update a dependency file docker Pull requests that update Docker code github-actions javascript Pull requests that update Javascript code php Pull requests that update Php code renovate labels Jul 1, 2026
@blumilk-renovate
blumilk-renovate Bot requested a review from Blusia July 1, 2026 10:15
@blumilk-renovate

blumilk-renovate Bot commented Jul 1, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor Author

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: composer.lock
Command failed: composer update barryvdh/laravel-debugbar:4.0.10 dompdf/dompdf:3.1.6 laravel/dusk:8.6.0 laravel/framework:12.0.1 laravel/sanctum:4.3.3 laravel/socialite:5.29.0 laravel/telescope:5.21.0 nunomaduro/collision:8.9.5 phpunit/phpunit:12.0.10 sentry/sentry-laravel:4.27.0 spatie/laravel-permission:6.25.0 --with-dependencies --ignore-platform-req='ext-*' --ignore-platform-req='lib-*' --no-ansi --no-interaction --no-scripts --no-autoloader --no-plugins --minimal-changes
Loading composer repositories with package information
Dependency guzzlehttp/guzzle is also a root requirement. Package has not been listed as an update argument, so keeping locked at old version. Use --with-all-dependencies (-W) to include root dependencies.
Updating dependencies
Your requirements could not be resolved to an installable set of packages.

  Problem 1
    - Root composer.json requires laravel/framework ^12.0.1, found laravel/framework[v12.0.1, ..., v12.64.0] but these were not loaded, because they are affected by security advisories ("PKSA-m5cs-t1y6-qpcs", "PKSA-3r5d-mb8f-1qw9", "PKSA-mdq4-51ck-6kdq", "PKSA-8qx3-n5y5-vvnd"). Go to https://packagist.org/security-advisories/ to find advisory details. To ignore the advisories, add their IDs to the "policy.advisories.ignore-id" config or add the package to "policy.advisories.ignore". To turn the feature off entirely, you can set "policy.advisories.block" to false.
  Problem 2
    - Root composer.json requires phpunit/phpunit ^12.0.10, found phpunit/phpunit[12.0.10, ..., 12.5.31] but these were not loaded, because they are affected by security advisories ("PKSA-qccq-2pht-gg3w", "PKSA-5jz8-6tcw-pbk4", "PKSA-z3gr-8qht-p93v"). Go to https://packagist.org/security-advisories/ to find advisory details. To ignore the advisories, add their IDs to the "policy.advisories.ignore-id" config or add the package to "policy.advisories.ignore". To turn the feature off entirely, you can set "policy.advisories.block" to false.
  Problem 3
    - inertiajs/inertia-laravel is locked to version v2.0.24 and an update of this package was not requested.
    - inertiajs/inertia-laravel v2.0.24 requires laravel/framework ^10.0|^11.0|^12.0|^13.0 -> found laravel/framework[v10.0.0, ..., 10.50.2, v11.0.0, ..., v11.55.0, v12.0.0, ..., v12.64.0, v13.0.0, ..., v13.21.1] but these were not loaded, because they are affected by security advisories ("PKSA-m5cs-t1y6-qpcs", "PKSA-3r5d-mb8f-1qw9", "PKSA-mdq4-51ck-6kdq", "PKSA-8qx3-n5y5-vvnd", "PKSA-q46n-4fdk-zjr4", "PKSA-qzrn-rnz3-85w1", "PKSA-w7xr-vk7n-rstm"). Go to https://packagist.org/security-advisories/ to find advisory details. To ignore the advisories, add their IDs to the "policy.advisories.ignore-id" config or add the package to "policy.advisories.ignore". To turn the feature off entirely, you can set "policy.advisories.block" to false.
  Problem 4
    - Root composer.json requires laravel/telescope ^5.21.0 -> satisfiable by laravel/telescope[v5.21.0].
    - laravel/telescope v5.21.0 requires laravel/framework ^8.37|^9.0|^10.0|^11.0|^12.0|^13.0 -> found laravel/framework[v8.37.0, ..., v8.83.29, v9.0.0, ..., v9.52.21, v10.0.0, ..., 10.50.2, v11.0.0, ..., v11.55.0, v12.0.0, ..., v12.64.0, v13.0.0, ..., v13.21.1] but these were not loaded, because they are affected by security advisories ("PKSA-m5cs-t1y6-qpcs", "PKSA-3r5d-mb8f-1qw9", "PKSA-mdq4-51ck-6kdq", "PKSA-8qx3-n5y5-vvnd", "PKSA-q46n-4fdk-zjr4", "PKSA-qzrn-rnz3-85w1", "PKSA-w7xr-vk7n-rstm", "PKSA-p3rx-dfwp-73ny", "PKSA-ckwp-rt7t-c46m", "PKSA-njrm-6dtg-m2pc"). Go to https://packagist.org/security-advisories/ to find advisory details. To ignore the advisories, add their IDs to the "policy.advisories.ignore-id" config or add the package to "policy.advisories.ignore". To turn the feature off entirely, you can set "policy.advisories.block" to false.
  Problem 5
    - maatwebsite/excel is locked to version 3.1.69 and an update of this package was not requested.
    - maatwebsite/excel 3.1.69 requires phpoffice/phpspreadsheet ^1.30.4 -> satisfiable by phpoffice/phpspreadsheet[1.30.5].
    - phpoffice/phpspreadsheet 1.30.5 requires php >=7.4.0 <8.5.0 -> your php version (8.5.8) does not satisfy that requirement.

Use the option --with-all-dependencies (-W) to allow upgrades, downgrades and removals for packages currently locked to specific versions.
File name: package-lock.json
npm warn Unknown env config "store". This will error in a future major version of npm. See `npm help npmrc` for supported config options.
npm error code EALLOWREMOTE
npm error Fetching packages of type "remote" have been disabled
npm error Refusing to fetch "https://registry.npmjs.org/@tailwindcss/oxide-wasm32-wasi/-/oxide-wasm32-wasi-4.3.3.tgz"
npm error A complete log of this run can be found in: /tmp/renovate/cache/others/npm/_logs/2026-07-24T11_05_36_546Z-debug-0.log

@blumilk-renovate
blumilk-renovate Bot force-pushed the renovate/all-minor-patch-digest-pindigest branch 6 times, most recently from 35bd2a5 to e541a07 Compare July 8, 2026 10:15
@blumilk-renovate
blumilk-renovate Bot force-pushed the renovate/all-minor-patch-digest-pindigest branch 5 times, most recently from e4054d0 to 539ea90 Compare July 16, 2026 10:15
@blumilk-renovate
blumilk-renovate Bot force-pushed the renovate/all-minor-patch-digest-pindigest branch 7 times, most recently from 1138755 to 07a49b5 Compare July 23, 2026 10:55
@blumilk-renovate
blumilk-renovate Bot force-pushed the renovate/all-minor-patch-digest-pindigest branch from 07a49b5 to a79f87d Compare July 24, 2026 11:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Blusia Blusia Awaiting requested review from Blusia

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file docker Pull requests that update Docker code github-actions javascript Pull requests that update Javascript code php Pull requests that update Php code renovate

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants