deps: bump dbflowlabs/core from 1.1.0 to 1.1.1

[dependabot]

Bumps dbflowlabs/core from 1.1.0 to 1.1.1.

Release notes

Sourced from dbflowlabs/core's releases.

DBFlow Core 1.1.1

DBFlow Core 1.1.1 is a maintenance release focused on dependency security, package distribution, and repository health.

It does not change DBFlow runtime behavior, public APIs, migrations, workflow semantics, or integration contracts.

Security

• Pinned external GitHub Actions to immutable commit SHAs.
• Added Composer dependency auditing to CI.
• Added a public security policy and private vulnerability reporting guidance.
• Removed the temporary Symfony Cache advisory exception after resolving the dependency to a secure, host-compatible release.
• Updated vulnerable Guzzle dependencies to secure releases.

Maintenance

• Excluded composer.lock and other development-only files from release archives.
• Added automated release archive validation.
• Added Dependabot configuration for Composer and GitHub Actions.

Compatibility

• PHP 8.3+
• Laravel 13.x
• Symfony ExpressionLanguage ^7.0
• DBFlow Filament ^1.1

Upgrade

No application code or database migration changes are required specifically for this patch release.

Existing ^1.1 Composer constraints may receive this release automatically:

composer update dbflowlabs/core

Changelog

Sourced from dbflowlabs/core's changelog.

[1.1.1] - 2026-07-25

Security

• Pinned external GitHub Actions to immutable full commit SHAs.
• Added Composer dependency security auditing to CI.
• Added a public vulnerability reporting policy.
• Removed the temporary Symfony Cache advisory exception after resolving the affected dependency to a secure, host-compatible release.
• Updated vulnerable Guzzle dependencies to secure releases.

Changed

• Excluded composer.lock and other development-only files from exported package archives.
• Added automated validation of release archive contents.
• Added Dependabot maintenance for Composer and GitHub Actions.

Commits

• f1edcf9 Prepare DBFlow Core 1.1.1
• aedc5cc Harden package security and release archives
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[baron-dbflow]

@dependabot rebase

[dependabot]

Oh no! Something went wrong on our end. Please try again later.

If the problem persists, please contact GitHub support for assistance 🙇