[dependabot]

Bumps the all group with 5 updates:

Package	From	To
laravel/framework	13.35.0	13.39.0
nuwave/lighthouse	6.71.0	6.74.0
ergebnis/composer-normalize	2.54.0	2.56.0
larastan/larastan	3.13.0	3.13.2
phpunit/phpunit	12.5.38	13.4.5

Updates laravel/framework from 13.35.0 to 13.39.0

Release notes

Sourced from laravel/framework's releases.

v13.39.0

• [13.x] Rebuild the phpredis client when a broken pipe surfaces as a warning by @​aleedhillon in laravel/framework#62111
• [13.x] Resolve view namespace hints like view locations by @​fgilio in laravel/framework#62005
• [13.x] feat(database): allow disabling primary key via #[Table(key: false)] by @​calebdw in laravel/framework#62113
• [13.x] add duration to JobAttempted event by @​jackbayliss in laravel/framework#62118
• [13.x] Write config, route and event cache files atomically by @​xurshudyan in laravel/framework#62117
• [13.x] Fix database cache lock aborting the transaction on PostgreSQL by @​xurshudyan in laravel/framework#62114
• Fix assertSeeText('0') silently passes for zero as string by @​crynobone in laravel/framework#62126
• [13.x] Fix incorrect docblocks by @​xurshudyan in laravel/framework#62125
• [13.x] Don't let a job with a deleted model stop queue:retry by @​xurshudyan in laravel/framework#62124
• [13.x] Fix the previous route leaking into 404 requests under Octane by @​xurshudyan in laravel/framework#62123
• [13.x] Fix cache:prune-stale-tags with the phpredis SCAN_PREFIX option by @​xurshudyan in laravel/framework#62122
• [13.x] Fix Http::batch() treating retry() and throw() failures as successes by @​mkantautas in laravel/framework#62120
• [13.x] Create SessionGarbageCollectCommand by @​browner12 in laravel/framework#62104
• Bump vite from 8.0.16 to 8.3.5 in /src/Illuminate/Foundation/resources/exceptions/renderer by @​dependabot[bot] in laravel/framework#62132
• [13.x] Add withoutDispatchingAfterResponses to BusFake by @​xurshudyan in laravel/framework#62130
• [13.x] Fix pagination counts for grouped union queries by @​mkantautas in laravel/framework#62131
• [13.x] Fix simple paginator ignoring page name by @​xurshudyan in laravel/framework#62128
• [13.x] Qualify pivot columns in wherePivot closures by @​xurshudyan in laravel/framework#62137
• [13.x] Add forceCreate and forceCreateQuietly to BelongsToMany by @​xurshudyan in laravel/framework#62136
• Apply fixes from StyleCI by @​taylorotwell in laravel/framework#62140
• [13.x] remember token is nullable by @​browner12 in laravel/framework#62105
• [13.x] Fix dimensions of JXL images by @​xurshudyan in laravel/framework#62151
• [13.x] Fix latest() and oldest() with a join from a subquery by @​xurshudyan in laravel/framework#62149
• [13.x] Register the session:garbage-collect command by @​xurshudyan in laravel/framework#62150
• [13.x] Ensure _error_bag input is a string in Handler::invalid() by @​manavu in laravel/framework#62147
• [13.x] Cloud exceptions follow-ups by @​timacdonald in laravel/framework#62142
• [13.x] Don't fail database queue jobs on concurrency errors while reserving by @​xurshudyan in laravel/framework#62145
• [13.x] Fix N+1 queries on JSON:API resource collection includes by @​xurshudyan in laravel/framework#62152
• [13.x] Fix once() returning a cached value for a different object by @​xurshudyan in laravel/framework#62121
• [13.x] Fix Rule::anyOf() passing associative arrays against plain rule lists by @​xurshudyan in laravel/framework#62171
• [13.x] Fix withoutMiddleware() not excluding middleware with parameters by @​xurshudyan in laravel/framework#62166
• [13.x] Block phar:// stream wrapper in Filesystem::exists() and isFile() by @​AsahiSoftWareEngineer in laravel/framework#62164
• [13.x] Embed images once in markdown notifications by @​xurshudyan in laravel/framework#62163
• [13.x] Fake html() and plain() on MailFake by @​xurshudyan in laravel/framework#62162
• [12.x] Test SessionGuard::user() with recaller cookie that has an empty remember token by @​crynobone with @​Copilot in laravel/framework#62156
• [13.x] Fix restoreOrCreate() and createOrRestore() on relations by @​xurshudyan in laravel/framework#62146
• [13.x] ensure sync queue passes duration too by @​jackbayliss in laravel/framework#62155
• Bump RedCrafter07/release-notes-action from 1.0.1 to 1.0.2 in the github-actions group by @​dependabot[bot] in laravel/framework#62196
• [13.x] Roll back all transaction levels after each test in RefreshDatabase by @​xurshudyan in laravel/framework#62194
• [13.x] Fix Request::route() return type when no route is resolved by @​yoannblot in laravel/framework#62191
• [13.x] Convert the down --retry datetime to GMT by @​xurshudyan in laravel/framework#62190
• [13.x] Cloud exceptions improvements by @​timacdonald in laravel/framework#62189
• [13.x] Fix illuminate/bus fatal error without illuminate/queue by @​xurshudyan in laravel/framework#62182
• [13.x] Add size methods to the array rule builder by @​riesjart in laravel/framework#62179
• [13.x] Fix distinct:ignore_case throwing on values that are not valid UTF-8 by @​sumaiazaman in laravel/framework#62178
• [13.x] Use the CI MySQL port in ApiAuthenticationWithEloquentTest by @​xurshudyan in laravel/framework#62176
• [13.x] Throw on unencodable JSON path values by @​xurshudyan in laravel/framework#62175
• [13.x] Allow reading files from the running phar by @​xurshudyan in laravel/framework#62174
• [13.x] Fail schedule:interrupt when interruption polling is disabled by @​jackbayliss in laravel/framework#62183

... (truncated)

Changelog

Sourced from laravel/framework's changelog.

v13.39.0 - 2026-10-27

• [13.x] Rebuild the phpredis client when a broken pipe surfaces as a warning by @​aleedhillon in laravel/framework#62111
• [13.x] Resolve view namespace hints like view locations by @​fgilio in laravel/framework#62005
• [13.x] feat(database): allow disabling primary key via #[Table(key: false)] by @​calebdw in laravel/framework#62113
• [13.x] add duration to JobAttempted event by @​jackbayliss in laravel/framework#62118
• [13.x] Write config, route and event cache files atomically by @​xurshudyan in laravel/framework#62117
• [13.x] Fix database cache lock aborting the transaction on PostgreSQL by @​xurshudyan in laravel/framework#62114
• Fix assertSeeText('0') silently passes for zero as string by @​crynobone in laravel/framework#62126
• [13.x] Fix incorrect docblocks by @​xurshudyan in laravel/framework#62125
• [13.x] Don't let a job with a deleted model stop queue:retry by @​xurshudyan in laravel/framework#62124
• [13.x] Fix the previous route leaking into 404 requests under Octane by @​xurshudyan in laravel/framework#62123
• [13.x] Fix cache:prune-stale-tags with the phpredis SCAN_PREFIX option by @​xurshudyan in laravel/framework#62122
• [13.x] Fix Http::batch() treating retry() and throw() failures as successes by @​mkantautas in laravel/framework#62120
• [13.x] Create SessionGarbageCollectCommand by @​browner12 in laravel/framework#62104
• Bump vite from 8.0.16 to 8.3.5 in /src/Illuminate/Foundation/resources/exceptions/renderer by @​dependabot[bot] in laravel/framework#62132
• [13.x] Add withoutDispatchingAfterResponses to BusFake by @​xurshudyan in laravel/framework#62130
• [13.x] Fix pagination counts for grouped union queries by @​mkantautas in laravel/framework#62131
• [13.x] Fix simple paginator ignoring page name by @​xurshudyan in laravel/framework#62128
• [13.x] Qualify pivot columns in wherePivot closures by @​xurshudyan in laravel/framework#62137
• [13.x] Add forceCreate and forceCreateQuietly to BelongsToMany by @​xurshudyan in laravel/framework#62136
• Apply fixes from StyleCI by @​taylorotwell in laravel/framework#62140
• [13.x] remember token is nullable by @​browner12 in laravel/framework#62105
• [13.x] Fix dimensions of JXL images by @​xurshudyan in laravel/framework#62151
• [13.x] Fix latest() and oldest() with a join from a subquery by @​xurshudyan in laravel/framework#62149
• [13.x] Register the session:garbage-collect command by @​xurshudyan in laravel/framework#62150
• [13.x] Ensure _error_bag input is a string in Handler::invalid() by @​manavu in laravel/framework#62147
• [13.x] Cloud exceptions follow-ups by @​timacdonald in laravel/framework#62142
• [13.x] Don't fail database queue jobs on concurrency errors while reserving by @​xurshudyan in laravel/framework#62145
• [13.x] Fix N+1 queries on JSON:API resource collection includes by @​xurshudyan in laravel/framework#62152
• [13.x] Fix once() returning a cached value for a different object by @​xurshudyan in laravel/framework#62121
• [13.x] Fix Rule::anyOf() passing associative arrays against plain rule lists by @​xurshudyan in laravel/framework#62171
• [13.x] Fix withoutMiddleware() not excluding middleware with parameters by @​xurshudyan in laravel/framework#62166
• [13.x] Block phar:// stream wrapper in Filesystem::exists() and isFile() by @​AsahiSoftWareEngineer in laravel/framework#62164
• [13.x] Embed images once in markdown notifications by @​xurshudyan in laravel/framework#62163
• [13.x] Fake html() and plain() on MailFake by @​xurshudyan in laravel/framework#62162
• [12.x] Test SessionGuard::user() with recaller cookie that has an empty remember token by @​crynobone with @​Copilot in laravel/framework#62156
• [13.x] Fix restoreOrCreate() and createOrRestore() on relations by @​xurshudyan in laravel/framework#62146
• [13.x] ensure sync queue passes duration too by @​jackbayliss in laravel/framework#62155
• Bump RedCrafter07/release-notes-action from 1.0.1 to 1.0.2 in the github-actions group by @​dependabot[bot] in laravel/framework#62196
• [13.x] Roll back all transaction levels after each test in RefreshDatabase by @​xurshudyan in laravel/framework#62194
• [13.x] Fix Request::route() return type when no route is resolved by @​yoannblot in laravel/framework#62191
• [13.x] Convert the down --retry datetime to GMT by @​xurshudyan in laravel/framework#62190
• [13.x] Cloud exceptions improvements by @​timacdonald in laravel/framework#62189
• [13.x] Fix illuminate/bus fatal error without illuminate/queue by @​xurshudyan in laravel/framework#62182
• [13.x] Add size methods to the array rule builder by @​riesjart in laravel/framework#62179
• [13.x] Fix distinct:ignore_case throwing on values that are not valid UTF-8 by @​sumaiazaman in laravel/framework#62178
• [13.x] Use the CI MySQL port in ApiAuthenticationWithEloquentTest by @​xurshudyan in laravel/framework#62176
• [13.x] Throw on unencodable JSON path values by @​xurshudyan in laravel/framework#62175
• [13.x] Allow reading files from the running phar by @​xurshudyan in laravel/framework#62174

... (truncated)

Commits

• d52c3b3 Update version to v13.39.0
• 41840cf Fix install:broadcasting with app.jsx and app.js (#62202)
• f10b9a1 Fix process fake shorthands when starting processes (#62200)
• e093e46 [13.x] Add WithoutMigrationEvents attribute (#62201)
• c4a246e Add restoreOrCreate and createOrRestore to through relations (#62204)
• 07279a6 [13.x] Throw on unencodable JSON in object casts (#62203)
• 723b151 Disable incrementing for models without a primary key (#62205)
• 377f5ce [13.x] Roll back transactions manager when commit fails (#62206)
• 2ff984f Cast failed job ids to strings (#62208)
• f3adacd Ensure schedule:interrupt errors if its not interruptible (#62183)
• Additional commits viewable in compare view

Updates nuwave/lighthouse from 6.71.0 to 6.74.0

Release notes

Sourced from nuwave/lighthouse's releases.

v6.74.0

Added

• Support JSON operators in @whereConditions nuwave/lighthouse#2793

v6.73.0

Added

• Allow injecting into every element of a list using an asterisk * wildcard path segment in @inject nuwave/lighthouse#2280

v6.72.5

Changed

• QueryCache::requireOPcacheFile() returns null for invalid cache files nuwave/lighthouse#2800

Fixed

• Rebuild query and schema cache files that do not return an array or fail to parse, e.g. when empty or truncated after a failed write, instead of failing every request nuwave/lighthouse#2800

v6.72.4

Fixed

• Fix UTF-8 encoding errors when paginated relation directives such as @belongsToMany(type: PAGINATOR) load related models with binary column values nuwave/lighthouse#2790

v6.72.3

Fixed

• Pass the value to result handlers such as @globalId when the field resolves to a chained promise, such as with @with nuwave/lighthouse#2794

v6.72.2

Fixed

• Fix @delete, @forceDelete and @restore rejecting arguments with builder directives that follow an input argument without builder directives nuwave/lighthouse#2797

v6.72.1

Fixed

• Fix ambiguous or doubly qualified columns in HAS conditions nuwave/lighthouse#1472

v6.72.0

Changed

• Omit locations from errors of queries served from query_cache.mode: store, as opcache and hybrid modes already do nuwave/lighthouse#2785

Fixed

• Cache the query AST as an array in query_cache.mode: store, so it no longer requires allowing AST classes in cache.serializable_classes nuwave/lighthouse#2785

v6.71.2

Fixed

... (truncated)

Changelog

Sourced from nuwave/lighthouse's changelog.

v6.74.0

Added

• Support JSON operators in @whereConditions nuwave/lighthouse#2793

v6.73.0

Added

• Allow injecting into every element of a list using an asterisk * wildcard path segment in @inject nuwave/lighthouse#2280

v6.72.5

Changed

• QueryCache::requireOPcacheFile() returns null for invalid cache files nuwave/lighthouse#2800

Fixed

• Rebuild query and schema cache files that do not return an array or fail to parse, e.g. when empty or truncated after a failed write, instead of failing every request nuwave/lighthouse#2800

v6.72.4

Fixed

• Fix UTF-8 encoding errors when paginated relation directives such as @belongsToMany(type: PAGINATOR) load related models with binary column values nuwave/lighthouse#2790

v6.72.3

Fixed

• Pass the value to result handlers such as @globalId when the field resolves to a chained promise, such as with @with nuwave/lighthouse#2794

v6.72.2

Fixed

• Fix @delete, @forceDelete and @restore rejecting arguments with builder directives that follow an input argument without builder directives nuwave/lighthouse#2797

v6.72.1

Fixed

• Fix ambiguous or doubly qualified columns in HAS conditions nuwave/lighthouse#1472

v6.72.0

Changed

... (truncated)

Commits

• 0fad2bf v6.74.0
• 2045e74 Add JSON SQL operators to where conditions (#2793)
• d3691a1 v6.73.0
• 8599bf3 Add wildcard to inject directive (#2280)
• 9488df8 Simplify pagination fallback in RelationDirective
• e5cf1d9 Remove PHPStan ignores that match nothing in any CI job
• 4272b0b Restore algolia/algoliasearch-client-php for PHPStan
• 788d420 Link the PHPStan level TODO to its tracking issue
• 603d834 Define the shared job matrix once in validate workflow
• 9777abd Share proto update and install steps between Makefile and workflows
• Additional commits viewable in compare view

Updates ergebnis/composer-normalize from 2.54.0 to 2.56.0

Release notes

Sourced from ergebnis/composer-normalize's releases.

2.56.0

What's Changed

• Fix: Require ergebnis/json-normalizer:^4.12.0 by @​localheinz in ergebnis/composer-normalize#1749

Full Changelog: ergebnis/composer-normalize@2.55.0...2.56.0

2.55.0

What's Changed

• composer(deps-dev): Bump ergebnis/php-cs-fixer-config from 6.63.2 to 6.63.3 by @​dependabot[bot] in ergebnis/composer-normalize#1707
• github-actions(deps): Bump ergebnis/.github/actions/github/pull-request/add-assignee from 1.13.2 to 1.13.4 by @​dependabot[bot] in ergebnis/composer-normalize#1711
• github-actions(deps): Bump ergebnis/.github/actions/github/release/create from 1.13.2 to 1.13.4 by @​dependabot[bot] in ergebnis/composer-normalize#1713
• github-actions(deps): Bump ergebnis/.github/actions/github/pull-request/add-label-based-on-branch-name from 1.13.2 to 1.13.4 by @​dependabot[bot] in ergebnis/composer-normalize#1710
• github-actions(deps): Bump ergebnis/.github/actions/composer/determine-cache-directory from 1.13.2 to 1.13.4 by @​dependabot[bot] in ergebnis/composer-normalize#1709
• github-actions(deps): Bump ergebnis/.github/actions/phive/install from 1.13.0 to 1.13.4 by @​dependabot[bot] in ergebnis/composer-normalize#1712
• github-actions(deps): Bump codecov/codecov-action from 7.0.0 to 7.1.1 by @​dependabot[bot] in ergebnis/composer-normalize#1714
• github-actions(deps): Bump ergebnis/.github/actions/github/pull-request/merge from 1.13.2 to 1.13.4 by @​dependabot[bot] in ergebnis/composer-normalize#1715
• Fix: Remove note about sponsoring by @​localheinz in ergebnis/composer-normalize#1717
• Enhancement: Group updates of actions provided by ergebnis/.github by @​localheinz in ergebnis/composer-normalize#1719
• composer(deps-dev): Bump ergebnis/license from 2.7.0 to 2.8.0 by @​dependabot[bot] in ergebnis/composer-normalize#1720
• composer(deps-dev): Bump ergebnis/phpunit-slow-test-detector from 2.25.0 to 2.26.0 by @​dependabot[bot] in ergebnis/composer-normalize#1725
• github-actions(deps): Bump the ergebnis group with 2 updates by @​dependabot[bot] in ergebnis/composer-normalize#1726
• composer(deps-dev): Bump ergebnis/rector-rules from 1.18.3 to 1.18.5 by @​dependabot[bot] in ergebnis/composer-normalize#1721
• composer(deps-dev): Bump ergebnis/phpstan-rules from 2.13.1 to 2.14.0 by @​dependabot[bot] in ergebnis/composer-normalize#1723
• composer(deps-dev): Bump ergebnis/php-cs-fixer-config from 6.63.3 to 6.64.0 by @​dependabot[bot] in ergebnis/composer-normalize#1722
• Enhancement: Update schema.json by @​ergebnis-bot in ergebnis/composer-normalize#1718
• Fix: Adjust branch name prefix by @​localheinz in ergebnis/composer-normalize#1727
• Enhancement: Enable auto-merge for pull requests opened by Dependabot by @​localheinz in ergebnis/composer-normalize#1728
• Fix: Use emoji by @​localheinz in ergebnis/composer-normalize#1729
• Fix: Refer to X instead of Twitter by @​localheinz in ergebnis/composer-normalize#1730
• Fix: Rename step for posting release to X by @​localheinz in ergebnis/composer-normalize#1731
• composer(deps-dev): Bump phpstan/phpstan-phpunit from 2.0.18 to 2.0.19 by @​dependabot[bot] in ergebnis/composer-normalize#1732
• composer(deps-dev): Bump phpstan/phpstan-phpunit from 2.0.19 to 2.0.21 by @​dependabot[bot] in ergebnis/composer-normalize#1734
• github-actions(deps): Bump the ergebnis group with 9 updates by @​dependabot[bot] in ergebnis/composer-normalize#1736
• composer(deps-dev): Bump phpstan/phpstan-strict-rules from 2.0.12 to 2.1.0 by @​dependabot[bot] in ergebnis/composer-normalize#1735
• composer(deps-dev): Bump ergebnis/php-cs-fixer-config from 6.64.0 to 6.64.1 by @​dependabot[bot] in ergebnis/composer-normalize#1733
• Enhancement: Use ubuntu-26.04 instead of ubuntu-24.04 by @​localheinz in ergebnis/composer-normalize#1737
• github-actions(deps): Bump shivammathur/setup-php from 2.37.2 to 2.40.0 by @​dependabot[bot] in ergebnis/composer-normalize#1739
• composer(deps-dev): Bump phpstan/phpstan-phpunit from 2.0.21 to 2.1.1 by @​dependabot[bot] in ergebnis/composer-normalize#1738
• composer(deps-dev): Bump rector/rector from 2.6.7 to 2.7.0 by @​dependabot[bot] in ergebnis/composer-normalize#1740
• Enhancement: Fail on warnings and risky tests by @​localheinz in ergebnis/composer-normalize#1741
• composer(deps-dev): Bump ergebnis/phpstan-rules from 2.14.0 to 2.14.2 by @​dependabot[bot] in ergebnis/composer-normalize#1743
• github-actions(deps): Bump zizmorcore/zizmor-action from 0.6.4 to 0.7.1 by @​dependabot[bot] in ergebnis/composer-normalize#1745
• composer(deps-dev): Bump ergebnis/phpunit-slow-test-detector from 2.26.0 to 2.27.0 by @​dependabot[bot] in ergebnis/composer-normalize#1744
• github-actions(deps): Bump stefanzweifel/git-auto-commit-action from 7.2.0 to 7.2.1 by @​dependabot[bot] in ergebnis/composer-normalize#1746
• Enhancement: Update schema.json by @​ergebnis-bot in ergebnis/composer-normalize#1742

... (truncated)

Changelog

Sourced from ergebnis/composer-normalize's changelog.

[2.56.0][2.56.0]

For a full diff see [2.55.0...2.56.0][2.55.0...2.56.0].

Fixed

• Required ergebnis/json-normalizer:^4.12.0 to keep an empty only-branches list in a repository (#1749), by [@​localheinz]

[2.55.0][2.55.0]

For a full diff see [2.54.0...2.55.0][2.54.0...2.55.0].

Changed

• Updated schema.json (#1718), by [@​ergebnis-bot]
• Updated schema.json (#1742), by [@​ergebnis-bot]
• Updated composer/composer (#1747), by [@​localheinz]

Commits

• 36df55b Enhancement: Prepare release
• 48e1e9f Merge pull request #1749 from ergebnis/fix/require-ergebnis-json-normalizer-4...
• 8ec78ff Fix: Require ergebnis/json-normalizer:^4.12.0
• a550c09 Enhancement: Prepare release
• c67511d Merge pull request #1747 from ergebnis/enhancement/update-composer-composer
• 0a4cd10 Enhancement: Update composer/composer
• b4c8589 Merge pull request #1742 from ergebnis/enhancement/schema
• 0d540d1 Merge pull request #1746 from ergebnis/dependabot/github_actions/stefanzweife...
• d2122a5 github-actions(deps): Bump stefanzweifel/git-auto-commit-action
• 094d5a2 Fix: Update CHANGELOG.md
• Additional commits viewable in compare view

Updates larastan/larastan from 3.13.0 to 3.13.2

Release notes

Sourced from larastan/larastan's releases.

3.13.2

What's Changed

Added

• Read CREATE TABLE statements passed as string literals to DB::statement() and DB::unprepared() in migrations, using the same SQL parsers as schema dumps, by @​tiagoabsantos in #2564. Read more about it here.
• Infer Arr::map() callback parameter types and the mapped array type by @​Gabrieljr42 in #2587.

Fixed

• Check model properties in fill() and forceFill() by @​uchimaki-vensley in #2618.
• Check model properties in withAttributes() by @​uchimaki-vensley in #2599.
• Check model properties in forceCreateMany() and forceCreateManyQuietly() by @​uchimaki-vensley in #2600.
• Apply model casts to date columns such as created_at instead of always reading them as dates by @​canvural in 453bff0.
• Resolve the enum type of AsEnumCollection and AsEnumArrayObject casts by @​lazerg in #2590.
• Return int|false from model increment() and decrement(), since an updating listener can cancel the update, by @​canvural in 0293dbc.
• Resolve factory() from the HasFactory generic, including models that set their factory with the $factory property or #[UseFactory], by @​mkantautas in #2615 and @​canvural in 6dfe581.
• Keep the model template type in forwarded static calls on a class-string<T>, such as $class::findOrFail($id), by @​mkantautas in #2616.
• Read #[CollectedBy] from parent models on Laravel 13.4 and newer by @​APX403 in #2586. Read more about it here.
• Keep the relation type after calling when() and unless() on a relation by @​APX403 in #2603.
• Accept deeper nesting and closures in nested eager-load arrays passed to with(), withOnly(), load(), and loadMissing() by @​lazerg in #2583.
• Read columns from ulidMorphs(), numericMorphs(), and their nullable variants in migrations by @​mkantautas in #2614.
• Treat rememberToken() columns as nullable by @​lazerg in #2611.
• Fall back to the bundled SQL parser when phpmyadmin/sql-parser can't parse a schema dump, instead of losing every table in it, by @​Cayan in #2588.
• Resolve EventFake methods such as dispatched() and hasDispatched() on the Event facade by @​lazerg in #2574.
• Resolve QueueFake methods such as pushed() and hasPushed() on the Queue facade by @​canvural in 9c1d4f4.
• Detect container, request, and config injection in OctaneCompatibilityRule through any constructor argument, make(), get(), and makeWith() calls, and class-string references by @​Gabrieljr42 in #2609.
• Avoid NoEnvCallsOutsideOfConfigRule false positives when a config file is analysed in editor mode by @​billypoke in #2482.
• Only count Laravel's view() helper when detecting unused views, and report static::make(), self::make(), and parent::make() in NoModelMakeRule, by @​GTS-MEGHNI in #2598.

New Contributors

• @​billypoke made their first contribution in #2482.
• @​tiagoabsantos made their first contribution in #2564.
• @​APX403 made their first contribution in #2586.
• @​Gabrieljr42 made their first contribution in #2587.
• @​GTS-MEGHNI made their first contribution in #2598.
• @​mkantautas made their first contribution in #2614.

Full Changelog: v3.13.1...v3.13.2

3.13.1

What's Changed

Fixed

• Type argument() and option() calls and check argument and option names in commands registered through the console kernel, including the kernel's $commands property, withCommands(), and app/Console/Commands on Laravel 13.36 and newer, by @​robsonek in #2585.
• Infer callback parameter types in map() and mapWithKeys() on Eloquent collections again, so mapped values are no longer mixed, by @​canvural in dea9faf.
• Check model properties in incrementEach() and decrementEach() by @​uchimaki-vensley in #2573.
• Check model properties in incrementOrCreate() by @​uchimaki-vensley in #2581.

... (truncated)

Commits

• 0de9aec fix: keep the template type in forwarded static calls on a model class-string...
• bd8d022 fix: check model properties in fill() and forceFill() (#2618)
• 6dfe581 refactor: fall back to factory() return type when resolving model factories
• 3a6aa17 fix: resolve factory() from the HasFactory generic when newFactory() is not o...
• 51c47c2 fix: read columns from ulidMorphs() and numericMorphs() migrations (#2614)
• 453bff0 fix: check for casts on date columns too
• b862d19 chore: fix tests
• 61403ec fix: treat rememberToken() columns as nullable (#2611)
• cd61813 fix: keep the relation type after when() and unless() (#2603)
• 3c8bc5d fix: check model properties in forceCreateMany() and forceCreateManyQuietly()...
• Additional commits viewable in compare view

Updates phpunit/phpunit from 12.5.38 to 13.4.5

Release notes

Sourced from phpunit/phpunit's releases.

PHPUnit 13.4.5

Fixed

• The static analysis cache directory that is automatically created in the operating system's path used for temporary files when no cache directory is configured is not used when the POSIX extension is not loaded

---

Learn how to install or update PHPUnit 13.4 in the documentation.

Keep up to date with PHPUnit:

• You can follow @​phpunit@phpc.social to stay up to date with PHPUnit's development.
• You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

PHPUnit 13.4.4

Fixed

• The TeamCity logger writes testSuiteFinished twice for a test class when one of its before-first-test methods errors or fails
• The TestDox output shows a less important outcome of a test that has more than one outcome, for instance the failure in tearDown() of a test that errored
• When the test run is interrupted by a signal while a test is run in process isolation, the result of the test is discarded and the test is counted as passed, and the TestDox output cannot be printed
• When no static analysis cache directory is configured, the cache directory that is automatically created in the operating system's path used for temporary files is also used when it was created by another user or can be written to by other users
• The directory in the operating system's path used for temporary files in which the temporary files for collecting code coverage for a PHPT test are created has a fixed name, and is also used when it was created by another user, who can then replace the code of the PHPT test before it is executed

---

Learn how to install or update PHPUnit 13.4 in the documentation.

Keep up to date with PHPUnit:

• You can follow @​phpunit@phpc.social to stay up to date with PHPUnit's development.
• You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

PHPUnit 13.4.3

Fixed

• The dependencies of a test that are listed after a dependency on a test that does not return a value, or after a dependency on a larger test, were not checked, so the test was run instead of being skipped when one of these dependencies had not passed
• Tests could not be run in process isolation when the namespace of the test class begins with a name that the code of the child process imports, for instance CodeCoverage or Facade
• A test that is run in process isolati...

  Description has been truncated