Skip to content

Bump larastan/larastan from 3.13.2 to 3.14.0 - #242

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/composer/larastan/larastan-3.14.0
Nov 9, 2026
Merged

github-actions[bot] merged 1 commit into
mainfrom
dependabot/composer/larastan/larastan-3.14.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 9, 2026

Copy link
Copy Markdown
Contributor

Bumps larastan/larastan from 3.13.2 to 3.14.0.

Release notes

Sourced from larastan/larastan's releases.

3.14.0

What's Changed

The new Arr::get() and Arr::pull() key check is enabled by default. Calls with definitely missing keys now report offsetAccess.notFound, including calls that provide a default value. PHP, Laravel, and PHPStan requirements are unchanged.

Added

  • Infer return types for Arr::get() and Arr::pull(), including dot notation and default values, and track array keys removed by Arr::pull(), by @​canvural in #2635.
  • Report definitely missing keys in Arr::get() and Arr::pull() by @​canvural in #2635.
  • Load Redis facade and connection stubs for the configured PhpRedis or Predis driver, with a redisDriver override, by @​canvural in #2626.
  • Re-analyse affected files when config files, migrations, or schema dumps are created, changed, or deleted by @​canvural in #2631.

Fixed

  • Resolve config values in the config file's own scope, including local variables and imports, by @​canvural in aefbc03.
  • Resolve config file @return PHPDocs using that file's imports, and avoid incorrect inference for missing keys or files with multiple returns, by @​canvural in f0e6e1c, 73cd4c3, and 10e955b.
  • Preserve env()'s possible return types when its default is null and generalizeEnvReturnType is enabled by @​canvural in bfcc01e.
  • Rerun unused-view and missing-translation checks when their input files change by @​SanderMuller in #2630.
  • Preserve Arrayable<TKey, TValue> types in toArray() and correct model array key types by @​liamduckett in #2254.
  • Support union and intersection return types from model newCollection() methods by @​ybai08 in #2604.
  • Accept unions of array shapes in FormRequest::safe() by @​aran112000 in #2637.
  • Only evaluate closures passed to value(), preserving other callable values, by @​APX403 in #2632.
  • Read #[UseEloquentBuilder] from parent models and traits on Laravel 13.31 and newer by @​APX403 in #2621.
  • Resolve a model subclass's factory using its own conventional factory name by @​SanderMuller in #2625.
  • Infer group key types for higher-order groupBy calls by @​mkantautas in #2620.
  • Accept a per-page callback in Eloquent paginate() by @​mkantautas in #2619.
  • Accept a Cursor object in relation cursorPaginate() calls by @​mkantautas in #2627.
  • Check model properties in fillAndInsert(), fillAndInsertOrIgnore(), fillAndInsertGetId(), and fillForInsert() by @​uchimaki-vensley in #2601.
  • Read migration columns declared in arrow-function callbacks by @​aka-tpayne in #2608.
  • Resolve custom generic PHPDoc names through the TypeNode API by @​Xauele in 1509cc6.
  • Keep dispatch argument checking compatible with PHPStan's updated FunctionCallParametersCheck API by @​canvural in #2633.

New Contributors

Full Changelog: v3.13.2...v3.14.0

Commits
  • d8fabc3 test: make migration cache timestamps deterministic
  • 9eadf82 feat: infer Arr::get() and Arr::pull() types and report missing keys (#2635)
  • ab9b54a fix: support union and intersection return types of newCollection() (#2604)
  • 83f9065 fix: accept a union of constant arrays in FormRequest::safe() (#2637)
  • 762646b fix: arrayable generics (#2254)
  • aefbc03 fix: type config values in the config file's own scope instead of the caller's
  • 10e955b fix: read config values only from a config file's single top-level return
  • f0e6e1c fix: resolve config file @​return PHPDocs with the config file's imports
  • bfcc01e fix: keep env()'s set-variable types for a null default with generalizeEnvRet...
  • 73cd4c3 fix: give no config() type for keys missing from or below a scalar in the con...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [larastan/larastan](https://github.com/larastan/larastan) from 3.13.2 to 3.14.0.
- [Release notes](https://github.com/larastan/larastan/releases)
- [Changelog](https://github.com/larastan/larastan/blob/3.x/RELEASE.md)
- [Commits](larastan/larastan@v3.13.2...v3.14.0)

---
updated-dependencies:
- dependency-name: larastan/larastan
  dependency-version: 3.14.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update Php code labels Nov 9, 2026
@github-actions
github-actions Bot merged commit e81864e into main Nov 9, 2026
6 of 7 checks passed
@github-actions
github-actions Bot deleted the dependabot/composer/larastan/larastan-3.14.0 branch November 9, 2026 02:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file php Pull requests that update Php code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants