Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository problems

These problems occurred while renovating this repository. View logs.

• WARN: Package lookup failures

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update dependency friendsofphp/php-cs-fixer to v3.89.2
• chore(deps): update step-security/harden-runner action to v2.13.2

---

Warning

Renovate failed to look up the following dependencies: Failed to look up packagist package psr/http-client-implementation, Failed to look up packagist package psr/http-factory-implementation, Failed to look up packagist package psr/http-message-implementation.

Files affected: composer.json

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update ghcr.io/psalm/psalm-github-actions docker digest to e890065
• chore(deps): update dependency pestphp/pest to v4.1.3
• chore(deps): update dependency rector/rector to v2.2.7
• chore(deps): update dependency symfony/finder to v7.3.5
• chore(deps): update dependency twig/twig to v3.22.0
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

asdf

.tool-versions

• php 8.4.14

composer

composer.json

• php ^8.3
• psr-discovery/all ^1
• psr/http-client-implementation ^1
• psr/http-factory-implementation ^1
• psr/http-message-implementation ^1
• ergebnis/composer-normalize ^2
• friendsofphp/php-cs-fixer ^3
• kriswallsmith/buzz ^1.3
• nyholm/psr7 ^1.8
• open-telemetry/api ^1.1
• open-telemetry/sdk ^1.1
• pestphp/pest ^4
• phpmd/phpmd ^2.15
• phpstan/phpstan ^2
• phpstan/phpstan-strict-rules ^2
• psr-mock/http-client-implementation ^1
• psr-mock/http-factory-implementation ^1
• psr-mock/http-message-implementation ^1
• rector/rector ^2
• vimeo/psalm ^6
• wikimedia/composer-merge-plugin ^2

tools/docs/composer.json

• php ^8.0
• twig/twig ^3.0
• symfony/finder ^7.0

docker-compose

docker-compose.integration.yml

dockerfile

Dockerfile.integration

• php 8.4.8-cli-alpine3.20@sha256:8d60c4303cfc7aad89ab800e9603096c8f630bcb552697401f4761caaec03cfb
• composer 2.8

github-actions

.github/workflows/docker-publish.yml

• actions/checkout v5
• docker/setup-qemu-action v3
• docker/setup-buildx-action v3
• docker/login-action v3
• docker/login-action v3
• docker/metadata-action v5
• docker/build-push-action v6
• docker/login-action v3
• docker/login-action v3
• docker/metadata-action v5

.github/workflows/quality-commit-standards.yml

• step-security/harden-runner v2.13.1@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• amannn/action-semantic-pull-request v6.1.1@48f256284bd46cdaab1048c3721360e808335d50

.github/workflows/quality-static-analysis.yml

• step-security/harden-runner v2.13.1@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• shivammathur/setup-php 2.35.5@bf6b4fbd49ca58e4608c9c89fba0b8d90bd2a39f
• step-security/harden-runner v2.13.1@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• shivammathur/setup-php 2.35.5@bf6b4fbd49ca58e4608c9c89fba0b8d90bd2a39f

.github/workflows/security-code-analysis.yml

• step-security/harden-runner v2.13.1@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• ghcr.io/psalm/psalm-github-actions sha256:a6047d926ab9412430194feef1cc87a733f25637dfd1c52df07c9a28700d2c25
• github/codeql-action codeql-bundle-v2.21.3@15bce5bb14748fcfd6fe32738ca1cba36e5f218f
• step-security/harden-runner v2.13.1@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• shivammathur/setup-php 2.35.5@bf6b4fbd49ca58e4608c9c89fba0b8d90bd2a39f
• symfonycorp/security-checker-action v5@258311ef7ac571f1310780ef3d79fc5abef642b5

.github/workflows/security-dependencies.yml

• step-security/harden-runner v2.13.1@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• shivammathur/setup-php 2.35.5@bf6b4fbd49ca58e4608c9c89fba0b8d90bd2a39f

.github/workflows/security-dependency-review.yml

• step-security/harden-runner v2.13.1@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/dependency-review-action v4.8.1@40c09b7dc99638e5ddb0bfd91c1673effc064d8a

.github/workflows/security-sbom.yml

• step-security/harden-runner v2.13.1@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• shivammathur/setup-php 2.35.5@bf6b4fbd49ca58e4608c9c89fba0b8d90bd2a39f
• actions/upload-artifact v5.0.0@330a01c490aca151604b8cf639adc76d48f6c5d4
• svenstaro/upload-release-action 2.11.2@81c65b7cd4de9b2570615ce3aad67a41de5b1a13

.github/workflows/test-contract.yml

• step-security/harden-runner v2.13.1@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• shivammathur/setup-php 2.35.5@bf6b4fbd49ca58e4608c9c89fba0b8d90bd2a39f
• codecov/codecov-action v5.5.1@5a1091511ad55cbe89839c7260b706298ca349f7
• codecov/test-results-action v1.1.1@47f89e9acb64b76debcd5ea40642d25a4adced9f

.github/workflows/test-integration.yml

• step-security/harden-runner v2.13.1@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• shivammathur/setup-php 2.35.5@bf6b4fbd49ca58e4608c9c89fba0b8d90bd2a39f
• codecov/codecov-action v5.5.1@5a1091511ad55cbe89839c7260b706298ca349f7
• codecov/test-results-action v1.1.1@47f89e9acb64b76debcd5ea40642d25a4adced9f

.github/workflows/test-unit.yml

• step-security/harden-runner v2.13.1@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• shivammathur/setup-php 2.35.5@bf6b4fbd49ca58e4608c9c89fba0b8d90bd2a39f
• codecov/codecov-action v5.5.1@5a1091511ad55cbe89839c7260b706298ca349f7
• codecov/test-results-action v1.1.1@47f89e9acb64b76debcd5ea40642d25a4adced9f

---

• Check this box to trigger a request for Renovate to run again on this repository