Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
composer	doctrine/annotations

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• Update metcalfc/changelog-generator action to v4.8.0

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (github-tags package ramsey/composer-install).

Files affected: .github/workflows/build.yml

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update astral-sh/setup-uv action to v9
• Update root-composer (major) (cweagans/composer-patches, doctrine/collections, doctrine/dbal, doctrine/orm, doctrine/persistence, nesbot/carbon, phpunit/phpunit, symfony/cache, symfony/uid)
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

composer (1)

composer.json (24)

• php ^7.4 || ^8.0
• phpstan/phpstan ^2.2.2
• cache/array-adapter ^1.1
• composer/semver ^3.3.2
• cweagans/composer-patches ^1.7.3 → [Updates: ^2.0.0]
• doctrine/annotations ^2.0
• doctrine/collections ^1.6 || ^2.1 → [Updates: ^3.0]
• doctrine/common ^2.7 || ^3.0
• doctrine/dbal ^3.3.8 → [Updates: ^4.0.0]
• doctrine/lexer ^2.0 || ^3.0
• doctrine/mongodb-odm ^2.4.3
• doctrine/orm ^2.16.0 → [Updates: ^3.0.0]
• doctrine/persistence ^2.2.1 || ^3.4.3 → [Updates: ^4.0.0]
• gedmo/doctrine-extensions ^3.8
• nesbot/carbon ^2.49 → [Updates: ^3.0]
• php-parallel-lint/php-parallel-lint ^1.2
• phpstan/phpstan-deprecation-rules ^2.0.2
• phpstan/phpstan-phpunit ^2.0.8
• phpstan/phpstan-strict-rules ^2.0
• phpunit/phpunit ^9.6.20 → [Updates: ^13.0.0]
• ramsey/uuid ^4.2
• shipmonk/name-collision-detector ^2.1
• symfony/cache ^5.4 → [Updates: ^8.0]
• symfony/uid ^5.4 || ^6.4 || ^7.3 → [Updates: ^8.0]

github-actions (9)

.github/workflows/build.yml (21)

• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• shivammathur/setup-php v2@f3e473d116dcccaddc5834248c87452386958240
• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• shivammathur/setup-php v2@f3e473d116dcccaddc5834248c87452386958240
• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• shivammathur/setup-php v2@f3e473d116dcccaddc5834248c87452386958240
• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• shivammathur/setup-php v2@f3e473d116dcccaddc5834248c87452386958240
• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• shivammathur/setup-php v2@f3e473d116dcccaddc5834248c87452386958240
• ramsey/composer-install v4.0.0@65e4f84970763564f46a70b8a54b90d033b3bdda

.github/workflows/create-tag.yml (6)

• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• WyriHaximus/github-action-get-previous-tag v2.0.0@61819f33034117e6c686e6a31dba995a85afc9de
• WyriHaximus/github-action-next-semvers v1.2.1@18aa9ed4152808ab99b88d71f5481e41f8d89930
• rickstaa/action-create-tag v1.7.2@a1c7777fcb2fee4f19b0f283ba888afa11678b72
• rickstaa/action-create-tag v1.7.2@a1c7777fcb2fee4f19b0f283ba888afa11678b72

.github/workflows/lint-workflows.yml (14)

• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• synacktiv/action-octoscan v1.0.0@6b1cf2343893dfb9e5f75652388bd2dc83f456b0
• github/codeql-action v4.37.6@5595ccaf912efad79be6eef63a5619ff05969be3
• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• boostsecurityio/poutine-action v1.1.4@e240ebd3eff8b2db5a8e5f6b28f58739d7db2247
• github/codeql-action v4.37.6@5595ccaf912efad79be6eef63a5619ff05969be3
• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• astral-sh/setup-uv v8.3.2@11f9893b081a58869d3b5fccaea48c9e9e46f990 → [Updates: v9.0.0]
• github/codeql-action v4.37.6@5595ccaf912efad79be6eef63a5619ff05969be3

.github/workflows/lock-closed-issues.yml (2)

• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40
• dessant/lock-threads v6.0.2@89ae32b08ed1a541efecbab17912962a5e38981c

.github/workflows/platform-test.yml (3)

• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• shivammathur/setup-php v2@f3e473d116dcccaddc5834248c87452386958240

.github/workflows/release-toot.yml (2)

• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40
• cbrgm/mastodon-github-action v2.2.3@7fcc3650150fc062d707eeffb50e8f7a2704fd0f

.github/workflows/release-tweet.yml (2)

• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40
• Eomm/why-don-t-you-tweet v2.0.0@d9ec12835f4d494dda920f95f885df3dba380493

.github/workflows/release.yml (4)

• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• metcalfc/changelog-generator v4.7.0@0440d0932f9a0dd1cc9ecd8412830761351323bd → [Updates: v4.8.0]
• softprops/action-gh-release v3.0.2@3d0d9888cb7fd7b750713d6e236d1fcb99157228

.github/workflows/test-projects.yml (2)

• step-security/harden-runner v2.20.1@b09bb98e06d4d774595224525879c09bc6e98c40
• peter-evans/repository-dispatch v4.0.1@28959ce8df70de7be546dd1250a005dd32156697

---

• Check this box to trigger a request for Renovate to run again on this repository