Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• Update actions/cache action to v6
• Update actions/checkout action to v7
• Update actions/setup-node action to v7
• Update codecov/codecov-action action to v7
• Update dependency phpunit/phpunit to v13
• 🔐 Create all pending approval PRs at once 🔐

Pending Branch Automerge

The following updates await pending status checks before automerging. To abort the branch automerge and create a PR instead, click on a checkbox below.

⚙️ GitHub Actions

• Update GitHub Actions non-major dependencies (actions/setup-java, zizmorcore/zizmor-action)

Others

• Lock file maintenance

---

Warning

Renovate failed to look up the following dependencies: Failed to look up packagist package beste/clock: no-result, Failed to look up packagist package beste/in-memory-cache: no-result.

Files affected: composer.json

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update actions/checkout digest to d23441a
• Update actions/setup-node digest to 2499707
• Click on this checkbox to rebase all open PRs at once

Vulnerabilities

Renovate has not found any CVEs on osv.dev.

Detected Dependencies

composer (3)

composer.json (23)

• beste/clock ^3.0
• beste/in-memory-cache ^1.3.1
• beste/json ^1.5.1
• cuyz/valinor ^2.2.1
• fig/http-message-util ^1.1.5
• firebase/php-jwt ^6.10.2 || ^7.0.2
• google/auth ^1.45
• google/cloud-storage ^1.50.0 || ^2.0.0
• guzzlehttp/guzzle ^7.9.2 || ^8.0
• guzzlehttp/promises ^2.0.4 || ^3.0
• guzzlehttp/psr7 ^2.7 || ^3.0
• kreait/firebase-tokens ^5.2
• lcobucci/jwt ^5.3
• mtdowling/jmespath.php ^2.9.2
• psr/cache ^2.0 || ^3.0
• psr/clock ^1.0
• psr/http-client ^1.0.3
• psr/http-factory ^1.1
• psr/http-message ^1.1 || ^2.0
• google/cloud-firestore ^1.55.0 || ^2.0
• psr/log ^3.0.2
• symfony/var-dumper ^7.4.4 || ^8.0.8
• vlucas/phpdotenv ^5.6.3

tools/.phpstan/composer.json (7)

• phpstan/extension-installer ^1.4.3
• phpstan/phpstan ^2.2.2
• phpstan/phpstan-deprecation-rules ^2.0.4
• phpstan/phpstan-phpunit ^2.0.16
• phpstan/phpstan-strict-rules ^2.0.11
• phpunit/phpunit ^12.5.29 → [Updates: ^12.5.29 || ^13.0.0]
• rector/type-perfect ^2.1.4

tools/.rector/composer.json (2)

• phpunit/phpunit ^12.5.29 → [Updates: ^12.5.29 || ^13.0.0]
• rector/rector ^2.4.5

github-actions (4)

.github/workflows/ci.yml (25)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• shivammathur/setup-php v2@f3e473d116dcccaddc5834248c87452386958240
• actions/cache v5@caa296126883cff596d87d8935842f9db880ef25 → [Updates: v6]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• shivammathur/setup-php v2@f3e473d116dcccaddc5834248c87452386958240
• actions/cache v5@caa296126883cff596d87d8935842f9db880ef25 → [Updates: v6]
• actions/cache v5@caa296126883cff596d87d8935842f9db880ef25 → [Updates: v6]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• shivammathur/setup-php v2@f3e473d116dcccaddc5834248c87452386958240
• actions/cache v5@caa296126883cff596d87d8935842f9db880ef25 → [Updates: v6]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• shivammathur/setup-php v2@f3e473d116dcccaddc5834248c87452386958240
• actions/cache v5@caa296126883cff596d87d8935842f9db880ef25 → [Updates: v6]
• actions/cache v5@caa296126883cff596d87d8935842f9db880ef25 → [Updates: v6]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• shivammathur/setup-php v2@f3e473d116dcccaddc5834248c87452386958240
• actions/cache v5@caa296126883cff596d87d8935842f9db880ef25 → [Updates: v6]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• shivammathur/setup-php v2@f3e473d116dcccaddc5834248c87452386958240
• actions/cache v5@caa296126883cff596d87d8935842f9db880ef25 → [Updates: v6]
• actions/cache v5@caa296126883cff596d87d8935842f9db880ef25 → [Updates: v6]
• codecov/codecov-action v6@fb8b3582c8e4def4969c97caa2f19720cb33a72f → [Updates: v7]
• codecov/codecov-action v6@fb8b3582c8e4def4969c97caa2f19720cb33a72f → [Updates: v7]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• nyholm/roave-bc-check-ga sha256:a9d3d932a4d3ba6a5a0563ef3788918a538198ee9c061a153f9b55caa8d3625f

.github/workflows/docs.yml (2)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• lycheeverse/lychee-action v2@e7477775783ea5526144ba13e8db5eec57747ce8

.github/workflows/secure-tests.yml (23)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• shivammathur/setup-php v2@f3e473d116dcccaddc5834248c87452386958240
• actions/cache v5@caa296126883cff596d87d8935842f9db880ef25 → [Updates: v6]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• shivammathur/setup-php v2@f3e473d116dcccaddc5834248c87452386958240
• actions/cache v5@caa296126883cff596d87d8935842f9db880ef25 → [Updates: v6]
• codecov/codecov-action v6@fb8b3582c8e4def4969c97caa2f19720cb33a72f → [Updates: v7]
• codecov/codecov-action v6@fb8b3582c8e4def4969c97caa2f19720cb33a72f → [Updates: v7]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• shivammathur/setup-php v2@f3e473d116dcccaddc5834248c87452386958240
• actions/cache v5@caa296126883cff596d87d8935842f9db880ef25 → [Updates: v6]
• actions/setup-node v6@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v7, v6]
• actions/setup-java v5.4.0@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 → [Updates: v5.6.0]
• codecov/codecov-action v6@fb8b3582c8e4def4969c97caa2f19720cb33a72f → [Updates: v7]
• codecov/codecov-action v6@fb8b3582c8e4def4969c97caa2f19720cb33a72f → [Updates: v7]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• shivammathur/cache-extensions v1@9b476298b44f2e4d4268dd103ff4c3e216314e27
• actions/cache v5.1.0@caa296126883cff596d87d8935842f9db880ef25 → [Updates: v6.1.0]
• shivammathur/setup-php v2@f3e473d116dcccaddc5834248c87452386958240
• actions/cache v5@caa296126883cff596d87d8935842f9db880ef25 → [Updates: v6]
• codecov/codecov-action v6@fb8b3582c8e4def4969c97caa2f19720cb33a72f → [Updates: v7]
• codecov/codecov-action v6@fb8b3582c8e4def4969c97caa2f19720cb33a72f → [Updates: v7]
• node 24

.github/workflows/security-analysis.yml (3)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7, v6]
• zizmorcore/zizmor-action v0.5.7@192e21d79ab29983730a13d1382995c2307fbcaa → [Updates: v0.6.0]

pep621 (1)

docs/pyproject.toml (12)

• python >=3.12
• furo >=2025.12.19
• linkify-it-py >=2.1.0
• matplotlib >=3.10.9
• myst-parser >=5.1.0
• sphinx ==9.1.0
• sphinx-autobuild >=2025.8.25
• sphinx-copybutton >=0.5.2
• sphinx-design >=0.6.1
• sphinx-inline-tabs >=2023.4.21
• sphinx-sitemap >=2.8.0
• sphinxext-opengraph >=0.13.0

pyenv (1)

docs/.python-version (1)

• python 3.14

renovate-config (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository