- Update all non-major dependencies with digest and pinDigest

[blumilk-renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
composer	stage	patch	2.8.3 -> 2.8.4
composer/composer	stage	patch	2.8.3-bin -> 2.8.4-bin
docker/setup-buildx-action	action	minor	v3.7.1 -> v3.8.0
dompurify	dependencies	patch	^3.2.2 -> ^3.2.3
laravel/framework (source)	require	minor	^11.25.0 -> ^11.36.1	11.37.0
laravel/sanctum	require	patch	^4.0.6 -> ^4.0.7
php	final	minor	8.3.14-fpm-bullseye -> 8.4.2-fpm-bullseye
phpunit/phpunit (source)	require-dev	patch	^11.5.0 -> ^11.5.2
sentry/sentry-laravel (source)	require	patch	^4.10.1 -> ^4.10.2
shivammathur/setup-php	action	minor	2.31.1 -> 2.32.0
tailwindcss (source)	dependencies	patch	^3.4.16 -> ^3.4.17

---

Release Notes

docker/setup-buildx-action (docker/setup-buildx-action)

v3.8.0

Compare Source

• Make cloud prefix optional to download buildx if driver is cloud by @​crazy-max in https://github.com/docker/setup-buildx-action/pull/390
• Bump @​actions/core from 1.10.1 to 1.11.1 in https://github.com/docker/setup-buildx-action/pull/370
• Bump @​docker/actions-toolkit from 0.39.0 to 0.48.0 in https://github.com/docker/setup-buildx-action/pull/389
• Bump cross-spawn from 7.0.3 to 7.0.6 in https://github.com/docker/setup-buildx-action/pull/382

Full Changelog: docker/setup-buildx-action@v3.7.1...v3.8.0

laravel/framework (laravel/framework)

v11.36.1

Compare Source

• Once Remember Null Values by @​dbpolito in https://github.com/laravel/framework/pull/53949
• [11.x] Add wildcard directory discovery to the EventServiceProvider by @​jared-cannon in https://github.com/laravel/framework/pull/53932
• [11.x] Add getJob() method to PendingDispatch class + Introduced tests by @​pascalbaljet in https://github.com/laravel/framework/pull/53951
• Avoid writing multiple keys when using redis in cluster mode by @​bentleyo in https://github.com/laravel/framework/pull/53940
• Revert "[11.x] fix: allows injection using multiple interfaces with the same concrete implementation" by @​taylorotwell in https://github.com/laravel/framework/pull/53955
• Revert "[11.x] No need to redeclare variables" by @​crynobone in https://github.com/laravel/framework/pull/53954

v11.36.0

Compare Source

• [11.x] Update config/mail.php with supported configuration by @​crynobone in https://github.com/laravel/framework/pull/53874
• [11.x] Allows enum_value() to be use in standalone illuminate/collections by @​crynobone in https://github.com/laravel/framework/pull/53871
• [11.x] Uri and UriQueryString implement Stringable by @​cosmastech in https://github.com/laravel/framework/pull/53873
• [11.x] Prefer new Stringable over Str::of and str() by @​lucasmichot in https://github.com/laravel/framework/pull/53883
• [11.x] No need to redeclare variables by @​lucasmichot in https://github.com/laravel/framework/pull/53887
• [11.x] Add PHP 8.4 with herd to passthrough variables by @​lucasmichot in https://github.com/laravel/framework/pull/53885
• Add new Uri class to default, global aliases by @​jasonmccreary in https://github.com/laravel/framework/pull/53884
• [11.x] Fix attribute mutator access in loadMissing by @​SychO9 in https://github.com/laravel/framework/pull/53879
• [11.x] Fix numericAggregate on eloquent builder by @​AmirRezaM75 in https://github.com/laravel/framework/pull/53880
• [11.x] Prefer new Fluent over fluent() helper by @​lucasmichot in https://github.com/laravel/framework/pull/53890
• Patch by @​angelej in https://github.com/laravel/framework/pull/53869
• [11.x] Collection::wrap by @​lucasmichot in https://github.com/laravel/framework/pull/53891
• [11.x] Bump minimum league/commonmark by @​ah-rahimi in https://github.com/laravel/framework/pull/53899
• [11.x] Collection::range by @​lucasmichot in https://github.com/laravel/framework/pull/53895
• [11.x] Added an event that reports files being deleted when calling the schema:dump --prune command by @​andrey-helldar in https://github.com/laravel/framework/pull/53870
• [11.x] fix: allows injection using multiple interfaces with the same concrete implementation by @​jamiethorpe in https://github.com/laravel/framework/pull/53275
• [11.x] Early return in Factory::modelName() by @​shaedrich in https://github.com/laravel/framework/pull/53912
• [11.x] Prevent blank Helper from Serializing Eloquent Models by @​SanderMuller in https://github.com/laravel/framework/pull/53911
• [11.x] Add word-break to mail links by @​seblavoie in https://github.com/laravel/framework/pull/53906
• Preserve dynamic database connections on reconnect by @​nickakitch in https://github.com/laravel/framework/pull/53914
• Fix mutexName inconsistency caused by different PHP binary paths on multiple servers by @​waska14 in https://github.com/laravel/framework/pull/53811
• [11.x] Add Fluent::set method by @​stevebauman in https://github.com/laravel/framework/pull/53946
• [11.x] Fix inspecting columns of raw indexes by @​hafezdivandari in https://github.com/laravel/framework/pull/53945
• [11.x] Allow easier overriding of the exception thrown by invalid ID in route binding by @​cosmastech in https://github.com/laravel/framework/pull/53944
• [11.x] Fix client path value in file uploads by @​gyaaniguy in https://github.com/laravel/framework/pull/53941

v11.35.1

Compare Source

• [11.x] Fix incorrect typechange in Illuminate\Database\Query\Builder by @​jnoordsij in https://github.com/laravel/framework/pull/53841
• Fixed Enum usage in whereHasMorph condition when morph attribute casting by @​Outsidaz in https://github.com/laravel/framework/pull/53839
• [11.x] Fix unescaped table names issue of DatabaseTruncation trait by introducing Connection::withoutTablePrefix() method by @​hafezdivandari in https://github.com/laravel/framework/pull/53842
• Specify node when sending scan to RedisCluster by @​bentleyo in https://github.com/laravel/framework/pull/53837
• [11.x] fix: cast session lifetime to int by @​calebdw in https://github.com/laravel/framework/pull/53846
• [11.x] allow sub second timeout value for http requests by @​mihaileu in https://github.com/laravel/framework/pull/53850
• Revert "set schema to smtps if MAIL_ENCRYPTION === tls" by @​crynobone in https://github.com/laravel/framework/pull/53863

laravel/sanctum (laravel/sanctum)

v4.0.7

Compare Source

• [4.x] Add tokenCant() helper function to HasApiTokens by @​chester-sykes in https://github.com/laravel/sanctum/pull/552

sebastianbergmann/phpunit (phpunit/phpunit)

v11.5.2: PHPUnit 11.5.2

Compare Source

Fixed

• #​6082: assertArrayHasKey(), assertArrayNotHasKey(), arrayHasKey(), and ArrayHasKey::__construct() do not support all possible key types
• #​6087: --migrate-configuration does not remove beStrictAboutTodoAnnotatedTests attribute from XML configuration file

---

How to install or update PHPUnit

getsentry/sentry-laravel (sentry/sentry-laravel)

v4.10.2

Compare Source

The Sentry SDK team is happy to announce the immediate availability of Sentry Laravel SDK v4.10.2.

Bug Fixes

• Fixed a PHP 8.4 deprecation notice when running php artisan sentry:test (#​963)

shivammathur/setup-php (shivammathur/setup-php)

v2.32.0

Compare Source

Changelog

• Added support for PHP 8.4 as the default stable PHP version.

- name: Setup PHP
  uses: shivammathur/setup-php@v2

• Added support for PHP 8.5 as the nightly version. (#​867)

- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.5'

• Added support for pre-installed in php-version input. (#​872)
  It will setup the pre-installed PHP version on the runner as per the docs here
  https://github.com/shivammathur/setup-php?tab=readme-ov-file#github-hosted-runners. If the runner does not have a pre-installed PHP version, it will fail.
  Please note: It is not recommended to use this unless you are doing something trivial, the pre-installed PHP versions on GitHub hosted runners are old patch versions.

- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version: pre-installed

• Added support for .tool-versions file format in php-version-file input. (#​883)
  If you have an asdf .tool-versions file in your project.
  For example, you can specify .tool-versions now in the php-version-file input and the action would setup the correct PHP version.

ruby 3.4
php 8.4
nodejs 23.5

- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version-file: .tool-versions

• Added support for to specify the path for composer file in the project to read the PHP version using COMPOSER_PROJECT_DIR env value. (#​894)

- name: Setup PHP
  uses: shivammathur/setup-php@v2
  env:
    COMPOSER_PROJECT_DIR: php  

• Added support for macos-15 GitHub hosted environment.

• Added support for windows-2025 GitHub hosted environment.

• Added support for composer-dependency-analyser tool (#​859, #​897)

- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.4'
    tools: composer-dependency-analyser

• Added support for relay extension for PHP 8.4 and 8.5. (#​892)

- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.4'
    extensions: relay

• Added information on how an extension is loaded in the wiki extension lists. (#​887)
  https://github.com/shivammathur/setup-php/wiki

• Fixed support for debug builds. (#​880)

- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.4'
  env:
    debug: true  

• Fixed support for zts buids on self-hosted runners.

- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.4'
  env:
    phpts: ts

• Fixed support for oci extensions for PHP 8.4 and PHP 8.5.

- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.4'
    extensions: pdo_oci, oci8

• Fixed support for zephir_parser extension.

- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.4'
    extensions: zephir_parser

• Fixed support for couchbase extension on old PHP versions.

- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version: '7.1'
    extensions: couchbase

• Fixed support for pdo_firebird extension on macos-15.

### runs-on: macos-15
- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.4'
    extensions: pdo_firebird

• Improved support to install tools in a multi-user self-hosted environment.
• Dropped support for macos-12 GitHub hosted environments.
• Dropped support for Debian 10 based self-hosted environments.
• Update Node.js dependencies.

Thanks @​janedbal, @​alexmerlin and @​tillkruss for the contributions 🎉

Thanks @​desrosj, @​bloodynumen and @​eliashaeussler for the sponsorship ❤️

For the complete list of changes, please refer to the Full Changelog

Follow for updates

tailwindlabs/tailwindcss (tailwindcss)

v3.4.17

Compare Source

Fixed

• Work around Node v22.12+ issue (#​15421)

---

Configuration

📅 Schedule: Branch creation - "after 7am on the first day of the month,before 3pm on the first day of the month" in timezone Europe/Warsaw, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.