Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• Update actions/cache action to v6
• Update actions/checkout action to v7
• Update codecov/codecov-action action to v7
• Update dependency phpunit/phpunit to v13
• 🔐 Create all pending approval PRs at once 🔐

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

⚙️ GitHub Actions

• Update actions/setup-java action to v5.5.0

Others

• Update actions/setup-node digest to 2499707

All

• 🔐 Create all awaiting schedule PRs at once 🔐

Pending Status Checks

The following updates await pending status checks. To force their creation now, click on a checkbox below.

• Update actions/setup-node action to v7

Pending Branch Automerge

The following updates await pending status checks before automerging. To abort the branch automerge and create a PR instead, click on a checkbox below.

• Lock file maintenance

---

Warning

Renovate failed to look up the following dependencies: Failed to look up packagist package beste/clock: no-result, Failed to look up packagist package beste/in-memory-cache: no-result, Failed to look up packagist package beste/json: no-result, Failed to look up packagist package fig/http-message-util: no-result.

Files affected: composer.json

---

Vulnerabilities

Renovate has not found any CVEs on osv.dev.

Detected Dependencies

composer (3)

composer.json (23)

• beste/clock ^3.0
• beste/in-memory-cache ^1.3.1
• beste/json ^1.5.1
• cuyz/valinor ^2.2.1
• fig/http-message-util ^1.1.5
• firebase/php-jwt ^6.10.2 || ^7.0.2
• google/auth ^1.45
• google/cloud-storage ^1.50.0 || ^2.0.0
• guzzlehttp/guzzle ^7.9.2
• guzzlehttp/promises ^2.0.4
• guzzlehttp/psr7 ^2.7
• kreait/firebase-tokens ^5.2
• lcobucci/jwt ^5.3
• mtdowling/jmespath.php ^2.8.0
• psr/cache ^2.0 || ^3.0
• psr/clock ^1.0
• psr/http-client ^1.0.3
• psr/http-factory ^1.1
• psr/http-message ^1.1 || ^2.0
• google/cloud-firestore ^1.55.0 || ^2.0
• psr/log ^3.0.2
• symfony/var-dumper ^7.4.4 || ^8.0.8
• vlucas/phpdotenv ^5.6.3

tools/.phpstan/composer.json (7)

• phpstan/extension-installer ^1.4.3
• phpstan/phpstan ^2.2.2
• phpstan/phpstan-deprecation-rules ^2.0.4
• phpstan/phpstan-phpunit ^2.0.16
• phpstan/phpstan-strict-rules ^2.0.11
• phpunit/phpunit ^12.5.29 → [Updates: ^12.5.29 || ^13.0.0]
• rector/type-perfect ^2.1.4

tools/.rector/composer.json (2)

• phpunit/phpunit ^12.5.29 → [Updates: ^12.5.29 || ^13.0.0]
• rector/rector ^2.4.5

github-actions (4)

.github/workflows/ci.yml (25)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• shivammathur/setup-php v2@f3e473d116dcccaddc5834248c87452386958240
• actions/cache v5@caa296126883cff596d87d8935842f9db880ef25 → [Updates: v6]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• shivammathur/setup-php v2@f3e473d116dcccaddc5834248c87452386958240
• actions/cache v5@caa296126883cff596d87d8935842f9db880ef25 → [Updates: v6]
• actions/cache v5@caa296126883cff596d87d8935842f9db880ef25 → [Updates: v6]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• shivammathur/setup-php v2@f3e473d116dcccaddc5834248c87452386958240
• actions/cache v5@caa296126883cff596d87d8935842f9db880ef25 → [Updates: v6]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• shivammathur/setup-php v2@f3e473d116dcccaddc5834248c87452386958240
• actions/cache v5@caa296126883cff596d87d8935842f9db880ef25 → [Updates: v6]
• actions/cache v5@caa296126883cff596d87d8935842f9db880ef25 → [Updates: v6]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• shivammathur/setup-php v2@f3e473d116dcccaddc5834248c87452386958240
• actions/cache v5@caa296126883cff596d87d8935842f9db880ef25 → [Updates: v6]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• shivammathur/setup-php v2@f3e473d116dcccaddc5834248c87452386958240
• actions/cache v5@caa296126883cff596d87d8935842f9db880ef25 → [Updates: v6]
• actions/cache v5@caa296126883cff596d87d8935842f9db880ef25 → [Updates: v6]
• codecov/codecov-action v6@fb8b3582c8e4def4969c97caa2f19720cb33a72f → [Updates: v7]
• codecov/codecov-action v6@fb8b3582c8e4def4969c97caa2f19720cb33a72f → [Updates: v7]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• nyholm/roave-bc-check-ga sha256:a9d3d932a4d3ba6a5a0563ef3788918a538198ee9c061a153f9b55caa8d3625f

.github/workflows/docs.yml (2)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• lycheeverse/lychee-action v2@e7477775783ea5526144ba13e8db5eec57747ce8

.github/workflows/secure-tests.yml (23)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• shivammathur/setup-php v2@f3e473d116dcccaddc5834248c87452386958240
• actions/cache v5@caa296126883cff596d87d8935842f9db880ef25 → [Updates: v6]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• shivammathur/setup-php v2@f3e473d116dcccaddc5834248c87452386958240
• actions/cache v5@caa296126883cff596d87d8935842f9db880ef25 → [Updates: v6]
• codecov/codecov-action v6@fb8b3582c8e4def4969c97caa2f19720cb33a72f → [Updates: v7]
• codecov/codecov-action v6@fb8b3582c8e4def4969c97caa2f19720cb33a72f → [Updates: v7]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• shivammathur/setup-php v2@f3e473d116dcccaddc5834248c87452386958240
• actions/cache v5@caa296126883cff596d87d8935842f9db880ef25 → [Updates: v6]
• actions/setup-node v6@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e → [Updates: v7, v6]
• actions/setup-java v5.4.0@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 → [Updates: v5.5.0]
• codecov/codecov-action v6@fb8b3582c8e4def4969c97caa2f19720cb33a72f → [Updates: v7]
• codecov/codecov-action v6@fb8b3582c8e4def4969c97caa2f19720cb33a72f → [Updates: v7]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• shivammathur/cache-extensions v1@9b476298b44f2e4d4268dd103ff4c3e216314e27
• actions/cache v5.1.0@caa296126883cff596d87d8935842f9db880ef25 → [Updates: v6.1.0]
• shivammathur/setup-php v2@f3e473d116dcccaddc5834248c87452386958240
• actions/cache v5@caa296126883cff596d87d8935842f9db880ef25 → [Updates: v6]
• codecov/codecov-action v6@fb8b3582c8e4def4969c97caa2f19720cb33a72f → [Updates: v7]
• codecov/codecov-action v6@fb8b3582c8e4def4969c97caa2f19720cb33a72f → [Updates: v7]
• node 24

.github/workflows/security-analysis.yml (3)

• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• actions/checkout v6@df4cb1c069e1874edd31b4311f1884172cec0e10 → [Updates: v7]
• zizmorcore/zizmor-action v0.5.7@192e21d79ab29983730a13d1382995c2307fbcaa → [Updates: v0.6.0]

pep621 (1)

docs/pyproject.toml (12)

• python >=3.12
• furo >=2025.12.19
• linkify-it-py >=2.1.0
• matplotlib >=3.10.9
• myst-parser >=5.1.0
• sphinx ==9.1.0
• sphinx-autobuild >=2025.8.25
• sphinx-copybutton >=0.5.2
• sphinx-design >=0.6.1
• sphinx-inline-tabs >=2023.4.21
• sphinx-sitemap >=2.8.0
• sphinxext-opengraph >=0.13.0

pyenv (1)

docs/.python-version (1)

• python 3.14

renovate-config (1)

renovate.json

---

• Check this box to trigger a request for Renovate to run again on this repository