Skip to content

Bump the composer-production-dependencies group across 1 directory with 8 updates#148

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/composer/src/quote/composer-production-dependencies-bb1622db2a
Open

Bump the composer-production-dependencies group across 1 directory with 8 updates#148
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/composer/src/quote/composer-production-dependencies-bb1622db2a

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Jan 26, 2026 •
edited
Loading

Updates the requirements on monolog/monolog, open-telemetry/exporter-otlp, open-telemetry/detector-container, open-telemetry/opentelemetry-logger-monolog, guzzlehttp/guzzle, php-di/php-di, slim/psr7 and slim/slim to permit the latest version.
Updates monolog/monolog to 3.10.0

Release notes

Sourced from monolog/monolog's releases.

3.10.0

  • Added automatic directory cleanup in RotatingFileHandler (#2000)
  • Added timezone-aware file rotation to RotatingFileHandler (#1982)
  • Added support for mongodb/mongodb 2.0+ (#1998)
  • Added NoDiscard attribute to TestHandler methods to ensure the result is used (#2013)
  • Fixed JsonFormatter crashing if __toString throws while normalizing data (#1968)
  • Fixed PHP 8.5 deprecation warnings (#1997, #2009)
  • Fixed DeduplicatingHandler collecting duplicate logs if the file cannot be locked (2e97231)
  • Fixed GelfMessageFormatter to use integers instead of bool for gelf 1.1 support (#1973)
  • Fixed empty stack traces being output anyway (#1979)
  • Fixed StreamHandler not reopening the file if the inode changed (#1963)
  • Fixed TelegramBotHandler sending empty messages (#1992)
  • Fixed file paths in stack traces containing backslashes on windows, always using / now to unify logs (#1980)
  • Fixed RotatingFileHandler unlink errors not being suppressed correctly (#1999)

Full Changelog: Seldaek/monolog@3.9.0...3.10.0

Changelog

Sourced from monolog/monolog's changelog.

3.10.0 (2026-01-02)

  • Added automatic directory cleanup in RotatingFileHandler (#2000)
  • Added timezone-aware file rotation to RotatingFileHandler (#1982)
  • Added support for mongodb/mongodb 2.0+ (#1998)
  • Added NoDiscard attribute to TestHandler methods to ensure the result is used (#2013)
  • Fixed JsonFormatter crashing if __toString throws while normalizing data (#1968)
  • Fixed PHP 8.5 deprecation warnings (#1997, #2009)
  • Fixed DeduplicatingHandler collecting duplicate logs if the file cannot be locked (2e97231)
  • Fixed GelfMessageFormatter to use integers instead of bool for gelf 1.1 support (#1973)
  • Fixed empty stack traces being output anyway (#1979)
  • Fixed StreamHandler not reopening the file if the inode changed (#1963)
  • Fixed TelegramBotHandler sending empty messages (#1992)
  • Fixed file paths in stack traces containing backslashes on windows, always using / now to unify logs (#1980)
  • Fixed RotatingFileHandler unlink errors not being suppressed correctly (#1999)

3.9.0 (2025-03-24)

  • BC Warning: Fixed SendGridHandler to use the V3 API as V2 is now shut down, but this requires a new API key (#1952)
  • Deprecated Monolog\Test\TestCase in favor of Monolog\Test\MonologTestCase (#1953)
  • Added extension point for NativeMailerHandler::mail (#1948)
  • Added setHandler method to BufferHandler to modify the nested handler at runtime (#1946)
  • Fixed date format in ElasticsearchFormatter to use +00:00 vs +0000 tz identifiers (#1942)
  • Fixed GelfMessageFormatter handling numeric context/extra keys (#1932)

3.8.1 (2024-12-05)

  • Deprecated Monolog\DateTimeImmutable in favor of Monolog\JsonSerializableDateTimeImmutable (#1928)
  • Fixed gelf keys not being valid when context/extra data keys have spaces in them (#1927)
  • Fixed empty lines appearing in the stack traces when a custom formatter returned null (#1925)

3.8.0 (2024-11-12)

  • Added $fileOpenMode param to StreamHandler to define a custom fopen mode to open the log file (#1913)
  • Fixed PHP 8.4 deprecation notices (#1903)
  • Added ability to extend/override IntrospectionProcessor (#1899)
  • Added $timeout param to ProcessHandler to configure the stream_select() timeout to avoid blocking too long (default is 1.0 sec) (#1916)
  • Fixed JsonFormatter batch handling to normalize records individually to make sure they look the same as if they were handled one by one (#1906)
  • Fixed StreamHandler handling of write failures so that it now closes/reopens the stream and retries the write once before failing (#1882)
  • Fixed StreamHandler error handler causing issues if a stream handler triggers an error (#1866)
  • Fixed StreamHandler::reset not closing the stream, so that it would fail to write in some cases with long running processes (#1862)
  • Fixed RotatingFileHandler issue where rotation does not happen in some long running processes (#1905)
  • Fixed JsonFormatter handling of incomplete classes (#1834)
  • Fixed RotatingFileHandler bug where rotation could sometimes not happen correctly (#1905)

3.7.0 (2024-06-28)

  • Added NormalizerFormatter->setBasePath(...) (and JsonFormatter by extension) that allows removing the project's path from the stack trace output (47e301d3e)
  • Fixed JsonFormatter handling of incomplete classes (#1834)
  • Fixed private error handlers causing problems with custom StreamHandler implementations (#1866)

... (truncated)

Commits

Updates open-telemetry/exporter-otlp to 1.3.4

Release notes

Sourced from open-telemetry/exporter-otlp's releases.

Release 1.3.4

What's Changed:

Full Changelog: opentelemetry-php/exporter-otlp@1.3.3...1.3.4

Commits

Updates open-telemetry/detector-container to 1.1.0

Release notes

Sourced from open-telemetry/detector-container's releases.

Release 1.1.0

What's Changed:

Full Changelog: opentelemetry-php/contrib-detector-container@1.0.0...1.1.0

Commits

Updates open-telemetry/opentelemetry-logger-monolog to 1.1.0

Release notes

Sourced from open-telemetry/opentelemetry-logger-monolog's releases.

Release 1.1.0

What's Changed:

Full Changelog: opentelemetry-php/contrib-logger-monolog@1.0.0...1.1.0

Commits

Updates guzzlehttp/guzzle to 7.10.0

Release notes

Sourced from guzzlehttp/guzzle's releases.

Release 7.10.0

Added

  • Support for PHP 8.5

Changed

  • Adjusted guzzlehttp/promises version constraint to ^2.3
  • Adjusted guzzlehttp/psr7 version constraint to ^2.8
Changelog

Sourced from guzzlehttp/guzzle's changelog.

7.10.0 - 2025-08-23

Added

  • Support for PHP 8.5

Changed

  • Adjusted guzzlehttp/promises version constraint to ^2.3
  • Adjusted guzzlehttp/psr7 version constraint to ^2.8

7.9.3 - 2025-03-27

Changed

  • Remove explicit content-length header for GET requests
  • Improve compatibility with bad servers for boolean cookie values

7.9.2 - 2024-07-24

Fixed

  • Adjusted handler selection to use cURL if its version is 7.21.2 or higher, rather than 7.34.0

7.9.1 - 2024-07-19

Fixed

  • Fix TLS 1.3 check for HTTP/2 requests

7.9.0 - 2024-07-18

Changed

  • Improve protocol version checks to provide feedback around unsupported protocols
  • Only select the cURL handler by default if 7.34.0 or higher is linked
  • Improved CurlMultiHandler to avoid busy wait if possible
  • Dropped support for EOL guzzlehttp/psr7 v1
  • Improved URI user info redaction in errors

7.8.2 - 2024-07-18

Added

  • Support for PHP 8.4

... (truncated)

Commits

Updates php-di/php-di to 7.1.1

Release notes

Sourced from php-di/php-di's releases.

7.1.1

What's Changed

New Contributors

Full Changelog: PHP-DI/PHP-DI@7.1.0...7.1.1

Commits
  • f88054c Merge pull request #919 from vhd/master
  • 664ff75 Update createProxy method to return object instead of LazyLoadingInterface to...
  • 0543ee1 Merge pull request #917 from BusterNeece/feat/native-lazy-proxies
  • ae3ef96 Update docs on lazy injection.
  • e3ecb61 Wrap class instantiators in parenthesis for <8.4 compat.
  • 78a6e42 Revert style changes.
  • 751d6f5 Make native proxies default for 8.4+ users and update tests accordingly.
  • c1a56f9 Add support for native PHP 8.4+ lazy proxies.
  • 32f111a Merge pull request #914 from PHP-DI/revert-912-container-get-conditional-return
  • bf369f7 Revert "Added conditional return on container::get so static analysers unders...
  • Additional commits viewable in compare view

Updates slim/psr7 to 1.8.0

Release notes

Sourced from slim/psr7's releases.

1.8.0

What's Changed

New Contributors

Full Changelog: slimphp/Slim-Psr7@1.7.1...1.8.0

Commits
  • 76e7e3b Correct cookie expiration date format (#336)
  • 3b2fb2a Merge pull request #341 from slimphp/dependabot/composer/php-http/psr7-integr...
  • 652c019 Update php-http/psr7-integration-tests requirement from ^1.4 to ^1.5
  • 11ccdc9 Support PHP 8.5 (#340)
  • cce9c0d Merge pull request #337 from williamdes/phpunit-12
  • 3724f06 Add missing PHPUnit annotations
  • 80aa3e1 Merge pull request #334 from akrabat/update-composer-dependencies
  • 5b0886f Run analysis on PHP 8.4 in CI
  • 054c5e9 Remove symfony/ppolyfill-php80
  • a10f2b0 Update adriansuter/php-autoload-override constraints
  • Additional commits viewable in compare view

Updates slim/slim to 4.15.1

Release notes

Sourced from slim/slim's releases.

4.15.1

Fixed

  • Allow PHPUnit 10, 11 and 12 when testing Slim itself (#3411)

Added

  • Add support for PHP 8.5 (#3415)

Full Changelog: slimphp/Slim@4.15.0...4.15.1

Changelog

Sourced from slim/slim's changelog.

4.15.1 - 2025-11-21

Fixed

  • Allow PHPUnit 10, 11 and 12 when testing Slim itself (#3411)

Added

  • Add support for PHP 8.5 (#3415)

Full Changelog: slimphp/Slim@4.15.0...4.15.1

4.15.0 - 2025-08-24

Fixed

  • Fix DocBlocks for callable route handlers (#3389)
  • Change class keyword to lowercase (#3346)
  • Fix tests for PHP 8.3
  • Fixes the build status badge in Readme (#3331)
  • Fix text and eol attributes for * selector in .gitattributes (#3391)
  • Deprecate setArgument/s (#3383)

Added

  • Add support for PHP 8.4
  • Add phpstan v2

Changed

  • Update http urls in composer.json (#3399)

Full Changelog: slimphp/Slim@4.14.0...4.15.0

4.14.0 - 2024-06-13

Changed

Type hinting with template generics

With the introduction of template generics, if you type-hint Slim\App instance variable using /** @var \Slim\App $app */, then you will need to change it to either:

  • /** @var \Slim\App<null> $app */ if you are not using a DI container, or

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the composer-production-dependencies group across 1 directory wi…
dcbb89c 
…th 8 updates

Updates the requirements on [monolog/monolog](https://github.com/Seldaek/monolog), [open-telemetry/exporter-otlp](https://github.com/opentelemetry-php/exporter-otlp), [open-telemetry/detector-container](https://github.com/opentelemetry-php/contrib-detector-container), [open-telemetry/opentelemetry-logger-monolog](https://github.com/opentelemetry-php/contrib-logger-monolog), [guzzlehttp/guzzle](https://github.com/guzzle/guzzle), [php-di/php-di](https://github.com/PHP-DI/PHP-DI), [slim/psr7](https://github.com/slimphp/Slim-Psr7) and [slim/slim](https://github.com/slimphp/Slim) to permit the latest version.

Updates `monolog/monolog` to 3.10.0
- [Release notes](https://github.com/Seldaek/monolog/releases)
- [Changelog](https://github.com/Seldaek/monolog/blob/main/CHANGELOG.md)
- [Commits](Seldaek/monolog@3.8.1...3.10.0)

Updates `open-telemetry/exporter-otlp` to 1.3.4
- [Release notes](https://github.com/opentelemetry-php/exporter-otlp/releases)
- [Commits](opentelemetry-php/exporter-otlp@1.2.1...1.3.4)

Updates `open-telemetry/detector-container` to 1.1.0
- [Release notes](https://github.com/opentelemetry-php/contrib-detector-container/releases)
- [Commits](opentelemetry-php/contrib-detector-container@1.0.0...1.1.0)

Updates `open-telemetry/opentelemetry-logger-monolog` to 1.1.0
- [Release notes](https://github.com/opentelemetry-php/contrib-logger-monolog/releases)
- [Commits](opentelemetry-php/contrib-logger-monolog@1.0.0...1.1.0)

Updates `guzzlehttp/guzzle` to 7.10.0
- [Release notes](https://github.com/guzzle/guzzle/releases)
- [Changelog](https://github.com/guzzle/guzzle/blob/7.10/CHANGELOG.md)
- [Commits](guzzle/guzzle@7.9.2...7.10.0)

Updates `php-di/php-di` to 7.1.1
- [Release notes](https://github.com/PHP-DI/PHP-DI/releases)
- [Commits](PHP-DI/PHP-DI@7.0.9...7.1.1)

Updates `slim/psr7` to 1.8.0
- [Release notes](https://github.com/slimphp/Slim-Psr7/releases)
- [Commits](slimphp/Slim-Psr7@1.7.0...1.8.0)

Updates `slim/slim` to 4.15.1
- [Release notes](https://github.com/slimphp/Slim/releases)
- [Changelog](https://github.com/slimphp/Slim/blob/4.x/CHANGELOG.md)
- [Commits](slimphp/Slim@4.14.0...4.15.1)

---
updated-dependencies:
- dependency-name: monolog/monolog
  dependency-version: 3.10.0
  dependency-type: direct:production
  dependency-group: composer-production-dependencies
- dependency-name: open-telemetry/exporter-otlp
  dependency-version: 1.3.4
  dependency-type: direct:production
  dependency-group: composer-production-dependencies
- dependency-name: open-telemetry/detector-container
  dependency-version: 1.1.0
  dependency-type: direct:production
  dependency-group: composer-production-dependencies
- dependency-name: open-telemetry/opentelemetry-logger-monolog
  dependency-version: 1.1.0
  dependency-type: direct:production
  dependency-group: composer-production-dependencies
- dependency-name: guzzlehttp/guzzle
  dependency-version: 7.10.0
  dependency-type: direct:production
  dependency-group: composer-production-dependencies
- dependency-name: php-di/php-di
  dependency-version: 7.1.1
  dependency-type: direct:production
  dependency-group: composer-production-dependencies
- dependency-name: slim/psr7
  dependency-version: 1.8.0
  dependency-type: direct:production
  dependency-group: composer-production-dependencies
- dependency-name: slim/slim
  dependency-version: 4.15.1
  dependency-type: direct:production
  dependency-group: composer-production-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file php Pull requests that update php code labels Jan 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file php Pull requests that update php code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants