Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

View abandoned dependencies (9)

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Datasource	Package	Last Updated
composer	mikey179/vfsstream	2024-08-29
composer	nyholm/psr7-server	2023-11-08
composer	php-http/mock-client	2024-10-31
composer	psalm/plugin-mockery	2025-03-20
composer	psr/http-client	2023-09-23
composer	psr/http-message	2023-04-04

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update actions/cache action to v4.3.0
• chore(deps): update actions/checkout action to v4.3.1
• chore(deps): update fossas/fossa-action action to v1.9.0
• chore(deps): update github/codeql-action action to v4.35.4
• chore(deps): update actions/cache action to v5
• chore(deps): update actions/checkout action to v6
• chore(deps): update actions/configure-pages action to v6
• chore(deps): update actions/deploy-pages action to v5
• chore(deps): update actions/upload-pages-artifact action to v5
• chore(deps): update codecov/codecov-action action to v6
• chore(deps): update dependency phpunit/phpunit to v13
• chore(deps): update docker/build-push-action action to v7
• chore(deps): update docker/login-action action to v4
• chore(deps): update docker/setup-buildx-action action to v4
• chore(deps): update phpstan packages to v2 (major) (phpstan/phpstan, phpstan/phpstan-mockery, phpstan/phpstan-phpunit)
• fix(deps): update dependency google/protobuf to v5
• chore(deps): lock file maintenance
• 🔐 Create all awaiting schedule PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Failed to look up packagist package psr/http-client-implementation: no-result, Failed to look up packagist package psr/http-factory-implementation: no-result, Failed to look up packagist package php-http/async-client-implementation: no-result.

Files affected: composer.json, src/Contrib/Zipkin/composer.json, src/Contrib/composer.json, src/SDK/composer.json

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update redis docker digest to 25dbb04

Detected Dependencies

composer (21)

composer.json (38)

• php ^8.1
• google/protobuf ^3.22 || ^4.0 || ^5.0
• nyholm/psr7-server ^1.1
• php-http/discovery ^1.14
• psr/http-client ^1.0
• psr/http-client-implementation ^1.0
• psr/http-factory-implementation ^1.0
• psr/http-message ^1.0.1|^2.0
• psr/log ^1.1|^2.0|^3.0
• ramsey/uuid ^3.0 || ^4.0
• symfony/config ^5.4 || ^6.4 || ^7.0 || ^8.0
• symfony/polyfill-mbstring ^1.23
• symfony/polyfill-php82 ^1.26
• symfony/polyfill-php83 ^1.32
• symfony/polyfill-php84 ^1.32
• tbachert/spi ^1.0.x-dev
• amphp/amp ^3
• bamarni/composer-bin-plugin ^1.8
• dg/bypass-finals ^1.4
• grpc/grpc ^1.30
• guzzlehttp/guzzle ^7.4
• guzzlehttp/psr7 ^2.1
• mikey179/vfsstream ^1.6.11
• mockery/mockery ^1.5.1
• monolog/monolog ^3.0
• nyholm/psr7 ^1.4
• php-http/mock-client ^1.5
• phpdocumentor/reflection-docblock ^6.0
• phpspec/prophecy 1.26.*
• phpspec/prophecy-phpunit ^2
• phpstan/phpstan ^1.10.13 → [Updates: ^2.0.0]
• phpstan/phpstan-mockery ^1.1 → [Updates: ^2.0]
• phpstan/phpstan-phpunit ^1.3 → [Updates: ^2.0]
• phpunit/phpunit ^10 || ^11 → [Updates: ^10 || ^11 || ^13]
• sebastian/exporter <= 6.0.1 || >= 6.1.3
• symfony/http-client ^5.2 || ^6.4 || ^7.0 || ^8.0
• symfony/var-exporter ^5.4 || ^6.4 || ^7.0 || ^8.0
• symfony/yaml ^5.4 || ^6.4 || ^7.0 || ^8.0

proto/otel/composer.json (2)

• php ^8.0
• google/protobuf ^3.22 || ^4.0 → [Updates: ^3.22 || ^4.0 || ^5.0]

src/API/composer.json (4)

• php ^8.1
• open-telemetry/context ^1.4
• psr/log ^1.1|^2.0|^3.0
• symfony/polyfill-php82 ^1.26

src/Config/SDK/composer.json (6)

• php ^8.1
• open-telemetry/api ^1.8
• open-telemetry/context ^1.4
• open-telemetry/sdk ^1.14
• symfony/config ^5.4 || ^6.4 || ^7.0 || ^8.0
• tbachert/spi ^1.0.5

src/Context/composer.json (2)

• php ^8.1
• symfony/polyfill-php82 ^1.26

src/Contrib/composer.json (12)

• php ^8.1
• open-telemetry/api ^1.0
• open-telemetry/context ^1.0
• open-telemetry/gen-otlp-protobuf ^1.2
• open-telemetry/sdk ^1.0
• open-telemetry/sem-conv ^1.0
• php-http/async-client-implementation ^1.0
• php-http/discovery ^1.14
• psr/http-factory-implementation ^1.0
• psr/log ^1.1|^2.0|^3.0
• symfony/polyfill-mbstring ^1.23
• symfony/polyfill-php82 ^1.26

src/Contrib/Grpc/composer.json (3)

• php ^8.1
• grpc/grpc *
• open-telemetry/sdk ^1.0

src/Contrib/Otlp/composer.json (5)

• php ^8.1
• php-http/discovery ^1.14
• open-telemetry/gen-otlp-protobuf ^1.1
• open-telemetry/api ^1.0
• open-telemetry/sdk ^1.0

src/Contrib/Zipkin/composer.json (6)

• php ^8.1
• open-telemetry/api ^1.0
• open-telemetry/sdk ^1.0
• php-http/async-client-implementation ^1.0
• php-http/discovery ^1.14
• psr/http-factory-implementation ^1.0

src/Extension/Propagator/B3/composer.json (3)

• php ^8.1
• open-telemetry/api ^1.0
• open-telemetry/context ^1.0

src/Extension/Propagator/CloudTrace/composer.json (3)

• php ^8.1
• open-telemetry/api ^1.0
• open-telemetry/context ^1.0

src/SDK/composer.json (15)

• php ^8.1
• nyholm/psr7-server ^1.1
• open-telemetry/api ^1.8
• open-telemetry/context ^1.4
• open-telemetry/sem-conv ^1.0
• php-http/discovery ^1.14
• psr/http-client-implementation ^1.0
• psr/http-factory-implementation ^1.0
• psr/http-client ^1.0
• psr/http-message ^1.0.1|^2.0
• psr/log ^1.1|^2.0|^3.0
• ramsey/uuid ^3.0 || ^4.0
• symfony/polyfill-mbstring ^1.23
• symfony/polyfill-php82 ^1.26
• tbachert/spi ^1.0.5

src/SemConv/composer.json (1)

• php ^8.0

vendor-bin/deptrac/composer.json (1)

• qossmic/deptrac-shim ^1.0

vendor-bin/infection/composer.json (1)

• infection/infection ^0.32.0

vendor-bin/phan/composer.json (1)

• phan/phan ^6.0

vendor-bin/php-cs-fixer/composer.json (1)

• friendsofphp/php-cs-fixer ^3.54

vendor-bin/phpbench/composer.json (1)

• phpbench/phpbench ^1.2

vendor-bin/phpmetrics/composer.json (1)

• phpmetrics/phpmetrics ^2.8

vendor-bin/psalm/composer.json (3)

• vimeo/psalm ^6
• psalm/plugin-mockery ^1
• psalm/plugin-phpunit ^0.20

vendor-bin/rector/composer.json (1)

• rector/rector ^2.0

docker-compose (7)

docker-compose.collector.yaml (3)

• openzipkin/zipkin-slim sha256:fc29b9862c14f4fc241cf0259c585e1cfd4e9b18f01ad36d86adaabb7d01815c
• jaegertracing/all-in-one sha256:ab6f1a1f0fb49ea08bcd19f6b84f6081d0d44b364b6de148e1798eb5816bacac
• otel/opentelemetry-collector-contrib sha256:d57bfe8eee2378f31cb1193239fbcac521d54a5a071fca2bfc106916a32b892d

docker-compose.fiber-ffi.yaml (1)

• nginx alpine@sha256:5616878291a2eed594aee8db4dade5878cf7edcb475e59193904b198d9b830de

docker-compose.phpDocumentor.yaml (2)

• phpdoc/phpdoc 3@sha256:2b36e4f74937e40246d54ed12dfa4f988f21ed8d19e46f426ac3dc32eac2ff1d
• nginx alpine@sha256:5616878291a2eed594aee8db4dade5878cf7edcb475e59193904b198d9b830de

docker-compose.prometheus.yaml (3)

• prom/prometheus sha256:e4254400b85610324913f0dc4acf92603d9984e7519414c5a12811aa6146acc3
• redis sha256:832d7785830f3f4b559300e6191fc914b15642c1935252338825cf4332200148 → [Updates: undefined]
• nginx alpine@sha256:5616878291a2eed594aee8db4dade5878cf7edcb475e59193904b198d9b830de

docker-compose.w3cTraceContext.yaml

docker-compose.yaml (3)

• openzipkin/zipkin-slim sha256:fc29b9862c14f4fc241cf0259c585e1cfd4e9b18f01ad36d86adaabb7d01815c
• jaegertracing/all-in-one sha256:ab6f1a1f0fb49ea08bcd19f6b84f6081d0d44b364b6de148e1798eb5816bacac
• otel/opentelemetry-collector-contrib sha256:d57bfe8eee2378f31cb1193239fbcac521d54a5a071fca2bfc106916a32b892d

docker/gitsplit/docker-compose.yaml (1)

• jderusse/gitsplit sha256:ca619e08d0608d7ab8067be02db13409ec63a0e241c6308be42593f0c0ac705d

dockerfile (1)

docker/Dockerfile (2)

• composer 2.9@sha256:dc292c5c0f95f526b051d4c341bf08e7e2b18504c74625e3203d7f123050e318
• debian trixie-20260421@sha256:35b8ff74ead4880f22090b617372daff0ccae742eb5674455d542bef71ef1999

github-actions (8)

.github/workflows/fossa.yml (2)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• fossas/fossa-action v1.8.0@c414b9ad82eaad041e47a7cf62a4f02411f427a0 → [Updates: v1.9.0]

.github/workflows/mago.yml (3)

• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5 → [Updates: v4.3.1, v6.0.2]
• actions/cache v4@0057852bfaa89a56745cba8c7296529d2fc39830 → [Updates: v4.3.0, v5.0.5]
• nhedger/setup-mago v1@b1b8f89862e133daf595f9ec95c7193c36ccfc14

.github/workflows/ossf-scorecard.yml (4)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• github/codeql-action v4.34.0@c6f931105cb2c34c8f901cc885ba1e2e259cf745 → [Updates: v4.35.4]

.github/workflows/php.yml (9)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• gacts/run-and-post-run v1.4.4@598d7a875d5620e0457490555b5e18e46082aa47
• shivammathur/cache-extensions 1.14.5@256729b5fef535345e27904657f78048c0990f81
• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• shivammathur/setup-php 2.37.0@accd6127cb78bee3e8082180cb391013d204ef9f
• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• actions/cache v5.0.5@27d5ce7f107fe9357f9df03efb73ab90386fccae
• codecov/codecov-action v5.5.4@75cd11691c0faa626561e295848008c8a7dddffe → [Updates: v6.0.0]
• opentelemetry-php/gh-workflows main@21e75f4123f69dd6c0b3acda14b90044112a2538

.github/workflows/phpdoc-to-github-pages.yml (5)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• phpDocumentor/phpDocumentor v3.9.1@4d3daedcffb747791b212545da819bfc81252ea9
• actions/configure-pages v5@983d7736d9b0ae728b81ab479565c72886d7745b → [Updates: v6.0.0]
• actions/upload-pages-artifact v4@7b1f4a764d45c48632c6b24a0339c27f5614fb0b → [Updates: v5.0.0]
• actions/deploy-pages v4.0.5@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e → [Updates: v5.0.0]

.github/workflows/publish-otel-php-base-docker-image.yml (5)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd
• docker/setup-buildx-action v3.12.0@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f → [Updates: v4.0.0]
• docker/login-action v3.7.0@c94ce9fb468520275223c153574b00df6fe4bcc9 → [Updates: v4.1.0]
• docker/build-push-action v6.19.2@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 → [Updates: v7.1.0]
• docker/build-push-action v6.19.2@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 → [Updates: v7.1.0]

.github/workflows/shellcheck.yml (1)

• actions/checkout v6.0.2@de0fac2e4500dabe0009e67214ff5f5447ce83dd

.github/workflows/split-monorepo.yaml (1)

• jderusse/gitsplit latest@sha256:ca619e08d0608d7ab8067be02db13409ec63a0e241c6308be42593f0c0ac705d

---

• Check this box to trigger a request for Renovate to run again on this repository