Skip to content

Bump the composer-all group with 3 updates#754

Merged
allella merged 2 commits into
developfrom
dependabot/composer/composer-all-92e74eb91a
Jul 2, 2026
Merged

Bump the composer-all group with 3 updates#754
allella merged 2 commits into
developfrom
dependabot/composer/composer-all-92e74eb91a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 30, 2026

Copy link
Copy Markdown
Contributor

Bumps the composer-all group with 3 updates: guzzlehttp/guzzle, mallardduck/blade-lucide-icons and laravel/sail.

Updates guzzlehttp/guzzle from 7.12.1 to 7.13.1

Release notes

Sourced from guzzlehttp/guzzle's releases.

7.13.1

Fixed

  • Allow middleware to rewrite partial URIs before transports validate them

7.13.0

Added

  • Added the crypto_method_max request option to cap the maximum TLS protocol version
  • Added HTTP QUERY redirect support, preserving method and body on 301 and 302

Changed

  • Section proxy tunnel connection reuse by credential so distinct credentials never share a tunnel
  • Isolate concurrent foreign cURL proxy tunnels added while another owner's tunnel is active
  • Route credentialed HTTP(S) proxy Proxy-Authorization headers through cURL proxy header handling
  • Reject request-level CURLOPT_SHARE when combined with authenticated HTTP/HTTPS proxy tunnel configuration
  • Remove deprecation for raw cURL CURLOPT_PREREQFUNCTION callbacks when defined by PHP cURL
  • Route TLS 1.2 crypto_method requests to the stream handler when cURL cannot select TLS 1.2
  • Reject final request URIs missing a scheme or host before transfer

Deprecated

  • Deprecate invalid protocols, force_ip_resolve, delay, cookies, and allow_redirects values

7.12.3

Changed

  • Adjusted guzzlehttp/psr7 version constraint to ^2.12.3

Security

7.12.2

Fixed

  • Clamp out-of-range Max-Age so a very large value no longer overflows to an already-expired timestamp
  • Use strict comparison in CookieJar conflict resolution so distinct numeric-string names don't overwrite
  • Store a cookie whose Domain has a trailing dot on the origin host instead of silently discarding it
  • Fix StreamHandler hard-failing on bracketed IPv6 literal hosts when force_ip_resolve is set
  • Use strict cookie Path comparison so CookieJar::clear() with a numeric path keeps a distinct-path cookie
  • Fixed cookie handling for falsey Domain, Max-Age, path, and name values
  • Fixed decode_content handling for falsey string values
  • Fixed deprecated request option values reaching built-in handlers before normalization
Changelog

Sourced from guzzlehttp/guzzle's changelog.

7.13.1 - 2026-06-29

Fixed

  • Allow middleware to rewrite partial URIs before transports validate them

7.13.0 - 2026-06-29

Added

  • Added the crypto_method_max request option to cap the maximum TLS protocol version
  • Added HTTP QUERY redirect support, preserving method and body on 301 and 302

Changed

  • Section proxy tunnel connection reuse by credential so distinct credentials never share a tunnel
  • Isolate concurrent foreign cURL proxy tunnels added while another owner's tunnel is active
  • Route credentialed HTTP(S) proxy Proxy-Authorization headers through cURL proxy header handling
  • Reject request-level CURLOPT_SHARE when combined with authenticated HTTP/HTTPS proxy tunnel configuration
  • Remove deprecation for raw cURL CURLOPT_PREREQFUNCTION callbacks when defined by PHP cURL
  • Route TLS 1.2 crypto_method requests to the stream handler when cURL cannot select TLS 1.2
  • Reject final request URIs missing a scheme or host before transfer

Deprecated

  • Deprecate invalid protocols, force_ip_resolve, delay, cookies, and allow_redirects values

7.12.3 - 2026-06-23

Changed

  • Adjusted guzzlehttp/psr7 version constraint to ^2.12.3

Security

7.12.2 - 2026-06-23

Fixed

  • Clamp out-of-range Max-Age so a very large value no longer overflows to an already-expired timestamp
  • Use strict comparison in CookieJar conflict resolution so distinct numeric-string names don't overwrite
  • Store a cookie whose Domain has a trailing dot on the origin host instead of silently discarding it
  • Fix StreamHandler hard-failing on bracketed IPv6 literal hosts when force_ip_resolve is set
  • Use strict cookie Path comparison so CookieJar::clear() with a numeric path keeps a distinct-path cookie
  • Fixed cookie handling for falsey Domain, Max-Age, path, and name values

... (truncated)

Commits

Updates mallardduck/blade-lucide-icons from 1.26.25 to 1.26.26

Release notes

Sourced from mallardduck/blade-lucide-icons's releases.

v1.26.26

Updated Lucide icons to version 1.22.0.

Changes

✨ New Icons

  • 1 new icon(s) added
Changelog

Sourced from mallardduck/blade-lucide-icons's changelog.

1.26.26 - (2026-06-29)

Added

  • Added 1 new icon(s): bone-fracture

Updates

  • Update Lucide to v1.22.0
Commits

Updates laravel/sail from 1.62.0 to 1.63.0

Release notes

Sourced from laravel/sail's releases.

v1.63.0

Changelog

Sourced from laravel/sail's changelog.

v1.63.0 - 2026-06-18

Commits
  • 51bbce3 Bump shivammathur/setup-php in the github-actions group (#880)
  • a796693 [1.x] Add PHP_EXTENSIONS build arg to install extra extensions (#879)
  • e1a9884 Bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions group (#878)
  • fe212b1 Enable Dependabot auto-merge (#877)
  • 4a48c67 Add Dependabot cooldown of 5 days (#876)
  • 1959dbc Update CHANGELOG
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the composer-all group with 3 updates
713aea2 
Bumps the composer-all group with 3 updates: [guzzlehttp/guzzle](https://github.com/guzzle/guzzle), [mallardduck/blade-lucide-icons](https://github.com/mallardduck/blade-lucide-icons) and [laravel/sail](https://github.com/laravel/sail).


Updates `guzzlehttp/guzzle` from 7.12.1 to 7.13.1
- [Release notes](https://github.com/guzzle/guzzle/releases)
- [Changelog](https://github.com/guzzle/guzzle/blob/7.13/CHANGELOG.md)
- [Commits](guzzle/guzzle@7.12.1...7.13.1)

Updates `mallardduck/blade-lucide-icons` from 1.26.25 to 1.26.26
- [Release notes](https://github.com/mallardduck/blade-lucide-icons/releases)
- [Changelog](https://github.com/mallardduck/blade-lucide-icons/blob/main/CHANGELOG.md)
- [Commits](mallardduck/blade-lucide-icons@1.26.25...1.26.26)

Updates `laravel/sail` from 1.62.0 to 1.63.0
- [Release notes](https://github.com/laravel/sail/releases)
- [Changelog](https://github.com/laravel/sail/blob/1.x/CHANGELOG.md)
- [Commits](laravel/sail@v1.62.0...v1.63.0)

---
updated-dependencies:
- dependency-name: guzzlehttp/guzzle
  dependency-version: 7.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: composer-all
- dependency-name: mallardduck/blade-lucide-icons
  dependency-version: 1.26.26
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: composer-all
- dependency-name: laravel/sail
  dependency-version: 1.63.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: composer-all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update Php code labels Jun 30, 2026
@allella
allella merged commit 8981a2c into develop Jul 2, 2026
3 checks passed
@dependabot
dependabot Bot deleted the dependabot/composer/composer-all-92e74eb91a branch July 2, 2026 16:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file php Pull requests that update Php code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@allella