Skip to content

Bump the prod-dependencies group across 1 directory with 7 updates#499

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/composer/prod-dependencies-9c63a754a7
Open

Bump the prod-dependencies group across 1 directory with 7 updates#499
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/composer/prod-dependencies-9c63a754a7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 22, 2026

Copy link
Copy Markdown
Contributor

Bumps the prod-dependencies group with 6 updates in the / directory:

Package From To
laravel/helpers 1.6.0 1.8.3
laravel/legacy-factories 1.3.2 1.4.2
laravel/ui 4.2.2 4.6.3
maatwebsite/excel 3.1.50 3.1.69
php-http/guzzle7-adapter 1.0.0 1.1.0
spatie/laravel-blade-javascript 2.7.1 2.9.0

Updates laravel/helpers from 1.6.0 to 1.8.3

Release notes

Sourced from laravel/helpers's releases.

v1.8.3

v1.8.2

v1.8.1

v1.8.0

v1.7.2

v1.7.1

v1.7.0

Changelog

Sourced from laravel/helpers's changelog.

v1.8.3 - 2026-03-17

v1.8.2 - 2025-11-25

v1.8.1 - 2025-09-02

v1.8.0 - 2025-09-01

v1.7.2 - 2025-01-24

v1.7.1 - 2024-11-26

v1.7.0 - 2023-11-30

v1.5.0 (2022-01-12)

Changed

  • Laravel 9 support (#24)

v1.4.1 (2021-02-16)

Fixed

  • Use func_get_args to pass array_prepend call through to Arr::prepend (#21)

v1.4.0 (2020-11-03)

Added

  • PHP 8 Support (#20)

v1.3.0 (2020-08-25)

... (truncated)

Commits

Updates laravel/legacy-factories from 1.3.2 to 1.4.2

Release notes

Sourced from laravel/legacy-factories's releases.

v1.4.2

v1.4.1

v1.4.0

Commits

Updates laravel/ui from 4.2.2 to 4.6.3

Release notes

Sourced from laravel/ui's releases.

v4.6.3

v4.6.2

v4.6.1

v4.6.0

v4.5.2

v4.5.1

v4.5.0

v4.4.0

v4.3.0

v4.2.3

Changelog

Sourced from laravel/ui's changelog.

v4.6.3 - 2026-03-17

v4.6.2 - 2026-03-10

v4.6.1 - 2025-01-28

v4.6.0 - 2024-11-21

v4.5.2 - 2024-05-08

v4.5.1 - 2024-03-21

v4.5.0 - 2024-03-04

v4.4.0 - 2024-01-12

v4.3.0 - 2023-12-19

v4.2.3 - 2023-11-23

Commits

Updates maatwebsite/excel from 3.1.50 to 3.1.69

Release notes

Sourced from maatwebsite/excel's releases.

3.1.69

What's Changed

New Contributors

Full Changelog: SpartnerNL/Laravel-Excel@3.1.68...3.1.69

3.1.68

What's Changed

New Contributors

Full Changelog: SpartnerNL/Laravel-Excel@3.1.67...3.1.68

3.1.67

Phpspreadsheet 1.30 update

Full Changelog: SpartnerNL/Laravel-Excel@3.1.66...3.1.67

3.1.66

What's Changed

New Contributors

Full Changelog: SpartnerNL/Laravel-Excel@3.1.65...3.1.66

3.1.65

What's Changed

New Contributors

... (truncated)

Commits
  • ae5d65b Remove PHP 8.5 from test matrix
  • b32b31a Update minimum phpspreadsheet version to 1.30.4 (#4355)
  • 1854739 feat: Update composer.json for Laravel 13 support (#4348)
  • 94cdb04 Fix TSV processing, queued export crashes, and interface parameter consistenc...
  • b31b6f4 Add PHP 8.5 to test matrix in CI workflow (#4332)
  • 294808c Update README.md (#4327)
  • 607fa20 Update README.md (#4321)
  • 4769d49 Fix: correct Laravel version range from 11.x to 12.x in compatibility table (...
  • e508e34 Bump minimum phpspreadsheet version to latest secure version of 1.30
  • 3b29c24 fix: preserve RemoteTemporaryFile type when working with remote storage (#4290)
  • Additional commits viewable in compare view

Updates php-http/guzzle7-adapter from 1.0.0 to 1.1.0

Release notes

Sourced from php-http/guzzle7-adapter's releases.

1.1.0

Changed

  • Add support for PHP 8.4, drop support for PHP version 7.2

Fixed

  • Add missing composer test command and use it in CI
  • Fix deprecated usage of prophesize in phpunit tests
Changelog

Sourced from php-http/guzzle7-adapter's changelog.

[1.1.0] - 2024-11-26

Changed

  • Add support for PHP 8.4, drop support for PHP version 7.2

Fixed

  • Add missing composer test command and use it in CI
  • Fix deprecated usage of prophesize in phpunit tests
Commits
  • 03a415f prepare release
  • 93243a3 Merge pull request #17 from ruudk/patch-1
  • f6efdfc Add PHP 8.4 to CI matrix
  • 3b623a6 Merge pull request #16 from php-http/housekeeping
  • b88310d psalm stop complaining about unused method
  • dc4da39 chore: feat ci deprecations
  • 513f508 add test for createWithConfig
  • c6975e5 latest cs fixes
  • 427e734 cleanup branch alias and explicitly require legacy message-factory
  • 0332804 chore: add ci-tests for php 8.2, bump github action verions (#13)
  • Additional commits viewable in compare view

Updates phpoffice/phpspreadsheet from 1.29.0 to 1.30.5

Release notes

Sourced from phpoffice/phpspreadsheet's releases.

1.30.5

Security Note

  • File::prohibitWrappers and Drawing::setPath now reject phar paths with extra leading slashes (e.g. phar:///…) that escaped the prior parse_url-based filter.

Fixed

  • Third-party security patches.

1.30.4

Fixed

  • Security patches.

1.30.3

Fixed

1.30.2

Changed

  • Evaluation of WEBSERVICE no longer requires external client, but will use oldCalculatedValue unless the request is for a domain in a user-supplied whitelist. Security-related backport of [PR #4751](PHPOffice/PhpSpreadsheet#4751)

Deprecated

  • Settings methods setHttpClient, unsetHttpClient, getHttpClient, and getRequestFactory are no longer used. No replacement.

Fixed

1.30.1

Functionally Frozen

  • Except for security changes, no further maintenance will be applied to this branch. You are encouraged to upgrade to a maintained branch as soon as possible. Maintained branches are master (preferred - version is 5.2.0 as of the date when this is being written), release390 (current version is 3.10.1), and release222 (2.4.1).
  • Of particular note is that this branch should not run under Php 8.5+, and will not be updated to avoid deprecation notices introduced with Php 8.5.

1.30.0

Breaking Changes

  • Images will be loaded from an external source (e.g. http://example.com/img.png) only if the reader is explicitly set to allow it via $reader->setAllowExternalImages(true). We do not believe that loading of external images is a widely used feature. This is a necessary change for security purposes. It unfortunately breaks Semantic Versioning for reasons described above; there is no way to start a new major version for this branch.

1.29.12

Added

  • Add to all readers the option to allow or forbid fetching external images. This is unconditionally allowed now. The default will be set to "allow", so no code changes are necessary. However, we are giving consideration to changing the default.[PR #4545](PHPOffice/PhpSpreadsheet#4545)

... (truncated)

Changelog

Sourced from phpoffice/phpspreadsheet's changelog.

2026-05-30 - 1.30.5

Security Note

  • File::prohibitWrappers and Drawing::setPath now reject phar paths with extra leading slashes (e.g. phar:///…) that escaped the prior parse_url-based filter.

Fixed

  • Third-party security patches.

2026-04-19 - 1.30.4

Fixed

  • Security patches.

2026-04-09 - 1.30.3

Fixed

2026-01-10 - 1.30.2

Changed

  • Evaluation of WEBSERVICE no longer requires external client, but will use oldCalculatedValue unless the request is for a domain in a user-supplied whitelist. Security-related backport of [PR #4751](PHPOffice/PhpSpreadsheet#4751)

Deprecated

  • Settings methods setHttpClient, unsetHttpClient, getHttpClient, and getRequestFactory are no longer used. No replacement.

Fixed

2025-10-25 - 1.30.1

Functionally Frozen

  • Except for security changes, no further maintenance will be applied to this branch. You are encouraged to upgrade to a maintained branch as soon as possible. Maintained branches are master (preferred - version is 5.4.0 as of the date when this is being written), 3.10.x (current version is 3.10.3), and 2.4.x (2.4.3).
  • Of particular note is that this branch should not run under Php 8.5+, and will not be updated to avoid deprecation notices introduced with Php 8.5.

2025-08-10 - 1.30.0

Breaking Changes

... (truncated)

Commits

Updates spatie/laravel-blade-javascript from 2.7.1 to 2.9.0

Release notes

Sourced from spatie/laravel-blade-javascript's releases.

2.9.0

Add Laravel 13 support

2.8.1

What's Changed

Full Changelog: spatie/laravel-blade-javascript@2.8.0...2.8.1

2.8.0

What's Changed

New Contributors

Full Changelog: spatie/laravel-blade-javascript@2.7.1...2.8.0

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update Php code labels Mar 22, 2026
@dependabot dependabot Bot force-pushed the dependabot/composer/prod-dependencies-9c63a754a7 branch from b0b5cb7 to bf124c7 Compare April 5, 2026 16:03
@dependabot dependabot Bot requested a review from a team as a code owner April 5, 2026 16:03
@dependabot dependabot Bot force-pushed the dependabot/composer/prod-dependencies-9c63a754a7 branch from bf124c7 to 92dd42f Compare April 19, 2026 16:03
@dependabot dependabot Bot force-pushed the dependabot/composer/prod-dependencies-9c63a754a7 branch from 92dd42f to d5028d2 Compare May 24, 2026 16:03
@dependabot dependabot Bot force-pushed the dependabot/composer/prod-dependencies-9c63a754a7 branch from d5028d2 to c9c8d8d Compare May 31, 2026 16:03
@dependabot dependabot Bot force-pushed the dependabot/composer/prod-dependencies-9c63a754a7 branch from c9c8d8d to 376c42a Compare June 7, 2026 16:03
Bumps the prod-dependencies group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [laravel/helpers](https://github.com/laravel/helpers) | `1.6.0` | `1.8.3` |
| [laravel/legacy-factories](https://github.com/laravel/legacy-factories) | `1.3.2` | `1.4.2` |
| [laravel/ui](https://github.com/laravel/ui) | `4.2.2` | `4.6.3` |
| [maatwebsite/excel](https://github.com/SpartnerNL/Laravel-Excel) | `3.1.50` | `3.1.69` |
| [php-http/guzzle7-adapter](https://github.com/php-http/guzzle7-adapter) | `1.0.0` | `1.1.0` |
| [spatie/laravel-blade-javascript](https://github.com/spatie/laravel-blade-javascript) | `2.7.1` | `2.9.0` |



Updates `laravel/helpers` from 1.6.0 to 1.8.3
- [Release notes](https://github.com/laravel/helpers/releases)
- [Changelog](https://github.com/laravel/helpers/blob/master/CHANGELOG.md)
- [Commits](laravel/helpers@v1.6.0...v1.8.3)

Updates `laravel/legacy-factories` from 1.3.2 to 1.4.2
- [Release notes](https://github.com/laravel/legacy-factories/releases)
- [Commits](laravel/legacy-factories@v1.3.2...v1.4.2)

Updates `laravel/ui` from 4.2.2 to 4.6.3
- [Release notes](https://github.com/laravel/ui/releases)
- [Changelog](https://github.com/laravel/ui/blob/4.x/CHANGELOG.md)
- [Commits](laravel/ui@v4.2.2...v4.6.3)

Updates `maatwebsite/excel` from 3.1.50 to 3.1.69
- [Release notes](https://github.com/SpartnerNL/Laravel-Excel/releases)
- [Changelog](https://github.com/SpartnerNL/Laravel-Excel/blob/3.1/CHANGELOG.md)
- [Commits](SpartnerNL/Laravel-Excel@3.1.50...3.1.69)

Updates `php-http/guzzle7-adapter` from 1.0.0 to 1.1.0
- [Release notes](https://github.com/php-http/guzzle7-adapter/releases)
- [Changelog](https://github.com/php-http/guzzle7-adapter/blob/1.x/CHANGELOG.md)
- [Commits](php-http/guzzle7-adapter@1.0.0...1.1.0)

Updates `phpoffice/phpspreadsheet` from 1.29.0 to 1.30.5
- [Release notes](https://github.com/PHPOffice/PhpSpreadsheet/releases)
- [Changelog](https://github.com/PHPOffice/PhpSpreadsheet/blob/1.30.5/CHANGELOG.md)
- [Commits](PHPOffice/PhpSpreadsheet@1.29.0...1.30.5)

Updates `spatie/laravel-blade-javascript` from 2.7.1 to 2.9.0
- [Release notes](https://github.com/spatie/laravel-blade-javascript/releases)
- [Changelog](https://github.com/spatie/laravel-blade-javascript/blob/master/CHANGELOG.md)
- [Commits](spatie/laravel-blade-javascript@2.7.1...2.9.0)

---
updated-dependencies:
- dependency-name: laravel/helpers
  dependency-version: 1.8.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: laravel/legacy-factories
  dependency-version: 1.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: laravel/ui
  dependency-version: 4.6.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: maatwebsite/excel
  dependency-version: 3.1.68
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: php-http/guzzle7-adapter
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: phpoffice/phpspreadsheet
  dependency-version: 1.30.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: spatie/laravel-blade-javascript
  dependency-version: 2.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/composer/prod-dependencies-9c63a754a7 branch from 376c42a to 8afe1c2 Compare June 14, 2026 16:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file php Pull requests that update Php code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants