Upgrade: Bump the composer group across 1 directory with 2 updates by dependabot[bot] · Pull Request #31 · GC-Stats/Website

dependabot · 2026-10-01T00:11:23Z

Bumps the composer group with 2 updates in the / directory: laravel/framework and phpseclib/phpseclib.

Updates laravel/framework from 13.16.1 to 13.30.0

Release notes

Sourced from laravel/framework's releases.

v13.30.0

[12.x] Backport #60908: Avoid quadratic wildcard rule expansion by @matteo-palazzo in laravel/framework#61232

Fix resource loading by @taylorotwell in laravel/framework#61323

[13.x] Output the worker stop reason in queue:work by @jackbayliss in laravel/framework#61339

Fix incorrect $startTime type in Worker::stopIfNecessary docblock by @il-m-tomita in laravel/framework#61347

[13.x] Ability to opt out of vendor/default commands in DevCommands by @jackbayliss in laravel/framework#61344

[13.x] Confine Storage::path() to the configured disk root by @KIKOmanasijev in laravel/framework#61343

[13.x] Support Microsoft SQL Server DSN connection strings by @HenkPoley in laravel/framework#61341

[13.x] Restore the facade application after route:cache boots a fresh application by @reiarseni in laravel/framework#61346

[13.x] Gracefully handle missing param value or strings with request clamps by @kylemilloy in laravel/framework#61355

[13.x] Restore default database connection when seeding fails by @sayful1411 in laravel/framework#61354

[13.x] Cloud enhancements by @timacdonald in laravel/framework#61360

[13.x] Allow retrieving command by name without resolving all commands by @timacdonald in laravel/framework#61361

[13.x] Expose methods by @timacdonald in laravel/framework#61362

[13.x] Add basic test for query explain by @imanghafoori1 in laravel/framework#61363

[13.x] Add totalXSize methods to Cloud Queue by @jackbayliss in laravel/framework#61352

[13.x] Add chunkBy to collections by @JosephSilber in laravel/framework#61357

[13.x] spl_object_id over hash by @jackbayliss in laravel/framework#61372

[13.x] Add createPayloadUsing directly to the queue manager by @jackbayliss in laravel/framework#61367

[13.x] Set visibility on files that only exist on a read-through disk's fallback by @sulimanbenhalim in laravel/framework#61375

[12.x] Disable html by default on Laravel exception page tooltip by @crynobone in laravel/framework#61381

v13.29.0

No release notes provided.

v13.27.0

[13.x] Prevent duplicate scoped instance registrations by @jordanhavard in laravel/framework#61251

[13.x] Add refreshForUpdate() method to Eloquent models by @stevebauman in laravel/framework#61247

[13.x] Fix PHPUnit and Mockery deprecations in tests by @lucasmichot in laravel/framework#61244

[13.x] Throw on unsuccessful responses when creating images from URLs by @Button99 in laravel/framework#61254

Apply fixes from StyleCI by @taylorotwell in laravel/framework#61256

[13.x] Skip scheduled workflows on forks by @MrPunyapal in laravel/framework#61239

[13.x] Consolidate tearDown boilerplate into AfterEachTestSubscriber by @lucasmichot in laravel/framework#61245

[13.x] Pin rector version by @lucasmichot in laravel/framework#61257

[13.x] Re-introduce orWhereKey() and orWhereKeyNot() without breaking Builder subclasses by @kevariable in laravel/framework#61242

[13.x] Don't force release a unique lock the job never acquired by @sulimanbenhalim in laravel/framework#61234

[13.x] Convert foreach-loop tests to data providers by @lucasmichot in laravel/framework#61258

[13.x] Simplify testImageBmp by @lucasmichot in laravel/framework#61259

[13.x] Add missing test coverage for Str and Stringable by @lucasmichot in laravel/framework#61260

[13.x] Add Queue totalXSize methods by @jackbayliss in laravel/framework#61231

Add MariaDB support for vector distance queries by @Rhaima96 in laravel/framework#61250

[13.x] Add whereBinary() to the query builder by @xiCO2k in laravel/framework#61261

[13.x] Fix quietly() making throw() unreachable on process results by @xurshudyan in laravel/framework#61227

Revert "[13.x] Consolidate tearDown boilerplate into AfterEachTestSubscriber (#61245)" by @crynobone in laravel/framework#61262

Use nick-fields/retry to verify clustered redis ports are available by @crynobone in laravel/framework#61263

[13.x] Guard against false returns in PhpRedisConnection::mget() and hmget() by @matthewfarrugia in laravel/framework#61267

[13.x] Add stop() and ensureNotTimedOut() to FakeInvokedProcess by @xurshudyan in laravel/framework#61266

[13.x] Make eager-load constraint closures static to break Builder reference cycle by @mspasov in laravel/framework#61264

[13.x] Move and copy files that only exist on a read-through disk's fallback by @sulimanbenhalim in laravel/framework#61272

[13.x] Adjust QueueTest by @jackbayliss in laravel/framework#61284

... (truncated)

Changelog

Sourced from laravel/framework's changelog.

v13.30.0 - 2026-09-01

[12.x] Backport #60908: Avoid quadratic wildcard rule expansion by @matteo-palazzo in laravel/framework#61232

Fix resource loading by @taylorotwell in laravel/framework#61323

[13.x] Output the worker stop reason in queue:work by @jackbayliss in laravel/framework#61339

Fix incorrect $startTime type in Worker::stopIfNecessary docblock by @il-m-tomita in laravel/framework#61347

[13.x] Ability to opt out of vendor/default commands in DevCommands by @jackbayliss in laravel/framework#61344

[13.x] Confine Storage::path() to the configured disk root by @KIKOmanasijev in laravel/framework#61343

[13.x] Support Microsoft SQL Server DSN connection strings by @HenkPoley in laravel/framework#61341

[13.x] Restore the facade application after route:cache boots a fresh application by @reiarseni in laravel/framework#61346

[13.x] Gracefully handle missing param value or strings with request clamps by @kylemilloy in laravel/framework#61355

[13.x] Restore default database connection when seeding fails by @sayful1411 in laravel/framework#61354

[13.x] Cloud enhancements by @timacdonald in laravel/framework#61360

[13.x] Allow retrieving command by name without resolving all commands by @timacdonald in laravel/framework#61361

[13.x] Expose methods by @timacdonald in laravel/framework#61362

[13.x] Add basic test for query explain by @imanghafoori1 in laravel/framework#61363

[13.x] Add totalXSize methods to Cloud Queue by @jackbayliss in laravel/framework#61352

[13.x] Add chunkBy to collections by @JosephSilber in laravel/framework#61357

[13.x] spl_object_id over hash by @jackbayliss in laravel/framework#61372

[13.x] Add createPayloadUsing directly to the queue manager by @jackbayliss in laravel/framework#61367

[13.x] Set visibility on files that only exist on a read-through disk's fallback by @sulimanbenhalim in laravel/framework#61375

[12.x] Disable html by default on Laravel exception page tooltip by @crynobone in laravel/framework#61381

v13.29.0 - 2026-08-25

v13.27.0 - 2026-08-25

[13.x] Prevent duplicate scoped instance registrations by @jordanhavard in laravel/framework#61251

[13.x] Add refreshForUpdate() method to Eloquent models by @stevebauman in laravel/framework#61247

[13.x] Fix PHPUnit and Mockery deprecations in tests by @lucasmichot in laravel/framework#61244

[13.x] Throw on unsuccessful responses when creating images from URLs by @Button99 in laravel/framework#61254

Apply fixes from StyleCI by @taylorotwell in laravel/framework#61256

[13.x] Skip scheduled workflows on forks by @MrPunyapal in laravel/framework#61239

[13.x] Consolidate tearDown boilerplate into AfterEachTestSubscriber by @lucasmichot in laravel/framework#61245

[13.x] Pin rector version by @lucasmichot in laravel/framework#61257

[13.x] Re-introduce orWhereKey() and orWhereKeyNot() without breaking Builder subclasses by @kevariable in laravel/framework#61242

[13.x] Don't force release a unique lock the job never acquired by @sulimanbenhalim in laravel/framework#61234

[13.x] Convert foreach-loop tests to data providers by @lucasmichot in laravel/framework#61258

[13.x] Simplify testImageBmp by @lucasmichot in laravel/framework#61259

[13.x] Add missing test coverage for Str and Stringable by @lucasmichot in laravel/framework#61260

[13.x] Add Queue totalXSize methods by @jackbayliss in laravel/framework#61231

Add MariaDB support for vector distance queries by @Rhaima96 in laravel/framework#61250

[13.x] Add whereBinary() to the query builder by @xiCO2k in laravel/framework#61261

[13.x] Fix quietly() making throw() unreachable on process results by @xurshudyan in laravel/framework#61227

Revert "[13.x] Consolidate tearDown boilerplate into AfterEachTestSubscriber (#61245)" by @crynobone in laravel/framework#61262

Use nick-fields/retry to verify clustered redis ports are available by @crynobone in laravel/framework#61263

[13.x] Guard against false returns in PhpRedisConnection::mget() and hmget() by @matthewfarrugia in laravel/framework#61267

[13.x] Add stop() and ensureNotTimedOut() to FakeInvokedProcess by @xurshudyan in laravel/framework#61266

[13.x] Make eager-load constraint closures static to break Builder reference cycle by @mspasov in laravel/framework#61264

[13.x] Move and copy files that only exist on a read-through disk's fallback by @sulimanbenhalim in laravel/framework#61272

... (truncated)

Commits

9c008e7 Update version to v13.30.0
df92a8b Merge branch '12.x' into 13.x
b495ca2 [12.x] Disable html by default on Laravel exception page tooltip (#61381)
f9c010a fix validation disagreement
8390200 Update facade docblocks
e437d91 [13.x] Set visibility on files that only exist on a read-through disk's fallb...
356865b Update QueueManager.php (#61367)
a8b65eb [13.x] spl_object_id over hash (#61372)
bf309eb [13.x] Add chunkBy to collections (#61357)
62c4fd3 [13.x] Add totalXSize methods to Cloud Queue (#61352)
Additional commits viewable in compare view

Updates phpseclib/phpseclib from 3.0.55 to 3.0.57

Release notes

Sourced from phpseclib/phpseclib's releases.

3.0.57

ASN1: fix tag matching for tagged CHOICE children (#2158)

RSA: fix for openssl_verify calls that error out (#2161)

RSA/PublicKey: implement salt length discovery for PSS verification (#2164)

BigInteger/PHP: don't return the divisor as the common residue (#2165)

Curve25519/448: improve timing attack resistance (CVE-2026-84308)

3.0.56

RSA: don't use OpenSSL for PSS on OpenSSL < 3.1.0 (#2152)

SFTP: throw TimeoutExceptions on timeout vs UnexpectedValueException (#2156)

SFTP/Stream: use default context if one isn't explicitly provided (#2154)

Changelog

Sourced from phpseclib/phpseclib's changelog.

3.0.57 - 2026-08-26

ASN1: fix tag matching for tagged CHOICE children (#2158)

RSA: fix for openssl_verify calls that error out (#2161)

RSA/PublicKey: implement salt length discovery for PSS verification (#2164)

BigInteger/PHP: don't return the divisor as the common residue (#2165)

Curve25519/448: improve timing attack resistance (CVE-2026-84308)

3.0.56 - 2026-08-02

RSA: don't use OpenSSL for PSS on OpenSSL < 3.1.0 (#2152)

SFTP: throw TimeoutExceptions on timeout vs UnexpectedValueException (#2156)

SFTP/Stream: use default context if one isn't explicitly provided (#2154)

Commits

d17e0dd CHANGELOG: add 3.0.57 release
3a43a75 EC: implement blinding for montgomery curve multiplication
6d4805f DH: add tests for all-zero shared secrets with Curve25519 / Curve448
fb56bc5 EC/Curve{25519,448} enhancements
54fd28d BigInteger/Engines/PHP: adjust visibility of subtratHelper()
ebe334e CHANGELOG: issue ID's were swapped
70e0ef9 CS adjustment
93b5c5e Merge pull request #2167 from dngr2/backport/php-engine-negative-exact-division
481a882 rm psalm
c54b313 CS adjustments
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the composer group with 2 updates in the / directory: [laravel/framework](https://github.com/laravel/framework) and [phpseclib/phpseclib](https://github.com/phpseclib/phpseclib). Updates `laravel/framework` from 13.16.1 to 13.30.0 - [Release notes](https://github.com/laravel/framework/releases) - [Changelog](https://github.com/laravel/framework/blob/13.x/CHANGELOG.md) - [Commits](laravel/framework@v13.16.1...v13.30.0) Updates `phpseclib/phpseclib` from 3.0.55 to 3.0.57 - [Release notes](https://github.com/phpseclib/phpseclib/releases) - [Changelog](https://github.com/phpseclib/phpseclib/blob/master/CHANGELOG.md) - [Commits](phpseclib/phpseclib@3.0.55...3.0.57) --- updated-dependencies: - dependency-name: laravel/framework dependency-version: 13.30.0 dependency-type: direct:production dependency-group: composer - dependency-name: phpseclib/phpseclib dependency-version: 3.0.57 dependency-type: indirect dependency-group: composer ... Signed-off-by: dependabot[bot] <support@github.com>

CLAassistant · 2026-10-01T00:11:38Z

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

socket-security · 2026-10-01T00:23:50Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	composer/laravel/framework@13.16.1.0 ⏵ 13.30.0.0

View full report

dependabot · 2026-10-01T16:59:07Z

Looks like these dependencies are no longer updatable, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update php code labels Oct 1, 2026

dependabot Bot closed this Oct 1, 2026

dependabot Bot deleted the dependabot/composer/composer-d2f3cef655 branch October 1, 2026 16:59

Navigation Menu

Repository navigation

Upgrade: Bump the composer group across 1 directory with 2 updates - #31

Upgrade: Bump the composer group across 1 directory with 2 updates#31
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/composer/composer-d2f3cef655

dependabot Bot commented on behalf of github Oct 1, 2026 •

edited

Loading

Uh oh!

CLAassistant commented Oct 1, 2026

Uh oh!

socket-security Bot commented Oct 1, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 1, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v13.30.0

v13.29.0

v13.27.0

v13.30.0 - 2026-09-01

v13.29.0 - 2026-08-25

v13.27.0 - 2026-08-25

3.0.57

3.0.56

3.0.57 - 2026-08-26

3.0.56 - 2026-08-02

Uh oh!

CLAassistant commented Oct 1, 2026

Uh oh!

socket-security Bot commented Oct 1, 2026

Uh oh!

dependabot Bot commented on behalf of github Oct 1, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Oct 1, 2026 •

edited

Loading