Skip to content

Bump the composer group across 1 directory with 22 updates - #460

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/composer/composer-452c52722b
Open

Bump the composer group across 1 directory with 22 updates#460
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/composer/composer-452c52722b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the composer group with 22 updates in the / directory:

Package From To
vlucas/phpdotenv 5.6.4 5.7.0
roots/wordpress 7.0.3 7.1
kinsta/kinsta-mu-plugins 3.1.1 3.7.0
spatie/laravel-google-fonts 1.6.0 1.7.0
wpackagist-plugin/limit-login-attempts-reloaded 3.2.0 3.3.7
generoi/advanced-custom-fields-pro 6.8.0.1 6.8.9
generoi/gravityforms 2.10.4 3.1.0.4
generoi/polylang-pro 3.8.2 3.8.7
wpackagist-plugin/wordpress-seo 27.4 28.4
wpackagist-plugin/google-tag-manager 1.0.3 1.0.4
wpackagist-plugin/woocommerce 10.9.1 11.0.1
generoi/genero-cmp 2.2.2 2.2.3
generoi/wp-image-resizer 1.5.1 1.5.2
spatie/laravel-csp 3.25.1 3.27.0
generoi/sage-cachetags 2.5.1 2.5.3
generoi/gds-assistant 0.1.16 0.5.0
wordpress/mcp-adapter 0.5.0 0.6.1
wpackagist-plugin/redirection 5.8.0 5.10.0
generoi/deployer-genero 0.3.2 0.4.3
staabm/annotate-pull-request-from-checkstyle 1.8.6 1.8.7
laravel/pint 1.29.0 1.30.5
wp-phpunit/wp-phpunit 6.9.4 7.1.0

Updates vlucas/phpdotenv from 5.6.4 to 5.7.0

Release notes

Sourced from vlucas/phpdotenv's releases.

v5.7.0

What's Changed

New Contributors

Full Changelog: vlucas/phpdotenv@v5.6.4...v5.7.0

Commits
  • 301c079 Resolve the remaining static analysis baseline entries (#614)
  • 5d0bb3b Document the real parsing, nesting, comment, escape and validation rules (#609)
  • 4426075 Stop comments from starting multiline values (#615)
  • eec19ee Add regression tests for existing behaviour (#608)
  • 226b4ed Improve diagnostics and messages (#607)
  • 4f84f7e Strip a leading UTF-8 byte order mark from string content (#606)
  • 4b900c5 Resolve nested variables without re-copying the value prefix (#605)
  • dd5b391 Remove quadratic value parsing (#604)
  • 46d5ce3 Skip environment writes and reads for names or values containing a null byte ...
  • 8bf174e Fix memory-safety crash on invalid UTF-8 variable names (#602)
  • Additional commits viewable in compare view

Updates roots/wordpress from 7.0.3 to 7.1

Release notes

Sourced from roots/wordpress's releases.

Version 7.1

Version notes available on WordPress.org Documentation.

Version 7.0.4

Sourced from WordPress.org Documentation.

... (truncated)

Commits

Updates kinsta/kinsta-mu-plugins from 3.1.1 to 3.7.0

Commits

Updates spatie/laravel-google-fonts from 1.6.0 to 1.7.0

Release notes

Sourced from spatie/laravel-google-fonts's releases.

1.7.0

What's Changed

New Contributors

Full Changelog: spatie/laravel-google-fonts@1.6.0...1.7.0

Changelog

Sourced from spatie/laravel-google-fonts's changelog.

1.7.0 - 2026-08-20

What's Changed

New Contributors

Full Changelog: spatie/laravel-google-fonts@1.6.0...1.7.0

Commits

Updates wpackagist-plugin/limit-login-attempts-reloaded from 3.2.0 to 3.3.7

Updates generoi/advanced-custom-fields-pro from 6.8.0.1 to 6.8.9

Commits

Updates generoi/gravityforms from 2.10.4 to 3.1.0.4

Commits

Updates generoi/polylang-pro from 3.8.2 to 3.8.7

Commits

Updates wpackagist-plugin/wordpress-seo from 27.4 to 28.4

Updates wpackagist-plugin/google-tag-manager from 1.0.3 to 1.0.4

Updates wpackagist-plugin/woocommerce from 10.9.1 to 11.0.1

Updates generoi/genero-cmp from 2.2.2 to 2.2.3

Release notes

Sourced from generoi/genero-cmp's releases.

v2.2.3

  • Unblock consent-gated content on consent change without a page reload
  • Fix null array offset access in the YouTube embed render filter
Commits
  • 74f9bd1 Fix null array offset access in youtube embed render filter
  • 279b1c6 unblock consent-gated content on consent change without page reload
  • See full diff in compare view

Updates generoi/wp-image-resizer from 1.5.1 to 1.5.2

Release notes

Sourced from generoi/wp-image-resizer's releases.

v1.5.2

Fix: make data-sizes="auto" object-fit aware (#3)

Lazyloaded images using data-sizes="auto" resolved sizes from the element's offsetWidth. For images rendered with object-fit: cover or object-fit: contain (e.g. fill images in core/media-text blocks), the painted image is scaled to a box with a different aspect ratio, so the box width underestimated the pixels actually needed and the browser picked a too-small, blurry srcset candidate.

Now the effective width is derived from the box dimensions and the image's intrinsic aspect ratio (read from width/height attributes so it works before decode):

  • fill/none → uses offsetWidth (unchanged)
  • cover → max(offsetWidth, offsetHeight * aspectRatio)
  • contain → min(offsetWidth, offsetHeight * aspectRatio)

This fixes blurry object-fit fill images out of the box without per-theme sizes/skip-lazyload workarounds.

Commits

Updates spatie/laravel-csp from 3.25.1 to 3.27.0

Release notes

Sourced from spatie/laravel-csp's releases.

3.27.0

What's Changed

Full Changelog: spatie/laravel-csp@3.26.0...3.27.0

3.26.0

What's Changed

Full Changelog: spatie/laravel-csp@3.25.1...3.26.0

Changelog

Sourced from spatie/laravel-csp's changelog.

3.27.0 - 2026-08-17

What's Changed

Full Changelog: spatie/laravel-csp@3.26.0...3.27.0

3.26.0 - 2026-06-26

What's Changed

Full Changelog: spatie/laravel-csp@3.25.1...3.26.0

Commits
  • ab5d537 Merge pull request #217 from spatie/add-pest-5-support
  • 7063be0 Add support for Pest 5
  • 08a7180 Merge pull request #215 from chinmaypurav/chore/add-firebase-csp
  • 4fbecc5 Merge pull request #216 from chinmaypurav/chore/update-snapshots-to-pest-v4
  • cc08da1 chore: update snapshots to Pest V4
  • cf3ad03 readme updated
  • ca1e9f1 test added
  • d9b71a9 chore: Firebase CSP added
  • 1c5bfee Update CHANGELOG
  • 4e0e029 Merge pull request #213 from freekmurze/add-there-there-preset
  • Additional commits viewable in compare view

Updates generoi/sage-cachetags from 2.5.1 to 2.5.3

Release notes

Sourced from generoi/sage-cachetags's releases.

v2.5.3

What's Changed

Full Changelog: generoi/sage-cachetags@v2.5.2...v2.5.3

v2.5.2

Fix

Create the cache_tags table for newly added multisite subsites.

The activation hook only provisions sites that exist at activation time, so subsites created later never got their cache_tags table. The plugin now listens for wp_initialize_site and creates the table in the new site's context.

See #12.

Commits
  • 6b35e41 Fix PHP warnings from production logs (#13)
  • 11e7910 create cache tags table for newly added multisite subsites
  • See full diff in compare view

Updates generoi/gds-assistant from 0.1.16 to 0.5.0

Release notes

Sourced from generoi/gds-assistant's releases.

v0.5.0 — Tool-call grouping, retry button, TypeScript migration

Features

  • Collapse runs of identical tool calls into a single group in the chat UI, reducing noise when a tool is invoked repeatedly. (#55)
  • Per-tool Retry button on errored client tool calls — re-run a failed tool without restarting the turn. (#38)

Fixes

  • SSE parser no longer drops large events when a chunk boundary lands between an event's header and its data.

Internal

  • TypeScript migration completed across components, hooks, editor/selection, the runtime adapter, and editor-bridge; TS toolchain enabled. (#47–#54)
  • ESLint warnings cleared and JSX lint enabled. (#36, #51)
  • PHPStan level raised 5 → 6 with baselines burned to 0 across Llm, Bridge, storage, credentials, providers, and compression. (#40–#46)
  • Broader test coverage on the SSE parser, MessageLoop token accounting, and providers. (#37)

Full changelog: generoi/gds-assistant@v0.4.3...v0.5.0

v0.4.3 — Foundation: PHPStan, security hardening, SSE parser + modal carve

No-behaviour-change maintenance release. Four small waves of cleanup that make the next round of feature work safer to touch.

Foundation (CI)

  • PHPStan level 5 added to the lint job, 52 pre-existing errors fixed (return-type narrowing on ToolProviderInterface::getTools, dead is_wp_error checks, ?? new \stdClass precedence). Builds now fail on new static-analysis regressions.
  • Jest wired up for client-side helpers; first suite covers editor/diff.js (17 tests).

Security hardening

  • Prompt-injection defence on selection context. ChatEndpoint::buildSelectionPreamble now strips control characters and wraps user-selected text in a labelled tilde fence so block content can't smuggle instructions into the system prompt path.
  • Try/finally on temp files in ImageGenerationToolProvider::sideloadBinary — orphan files no longer accumulate when the sideload fails mid-flight.

SSE parser consolidation

  • Extracted SseStreamReader (131 LOC) — every streaming provider was hand-rolling the same curl + line-buffered data: parser. Anthropic/OpenAI-compatible/Gemini now delegate, shedding ~150 LOC of duplication.
  • Fixed a real precedence bug in Gemini's mime-type guess ('image/' . pathinfo(...) ?: 'jpeg' defaulted to the whole string when no extension was present).

assistant-modal.jsx carve-up

  • 2577 LOC → 778 LOC (−70%) split across 8 focused modules: MicButton, ReadAloudController, UndoContext, ToolCallFallback, Messages, Composer, SidePanels, skills-cache. Render order, hook order, and ref identities preserved end-to-end; verified by manual smoke (list → edit → undo) on generogrowth.

Misc

  • Plugin::polylangVoiceLanguages bare catch replaced with logged \Throwable catch (was hiding silent failures).
  • MessageLoop token accumulators now cast through (int) so providers returning numeric strings can't poison the running total.
  • new static() → new self() in Plugin::getInstance for tighter typing.

Full changelog: generoi/gds-assistant@v0.4.2...v0.4.3

v0.4.2 — Lower min WP to 6.5

Metadata-only release on top of v0.4.1.

The only WP-7.0-specific API surface we use is the block-attribute shape change (HTML string → RichTextValue object), and attrToPlainText() in selection.js has always runtime-branched on typeof === 'string' vs obj.text. Abilities-API tools are gated behind function_exists('wp_get_abilities') in Plugin.php, so older WP just doesn't see those instead of erroring. The iframe canvas detection in write-at-cursor.jsx looks for iframe[name="editor-canvas"] and degrades cleanly when absent — that's been the canvas shape since WP 6.3.

So the change is the plugin header + a few comment touch-ups:

  • Requires at least: 7.0 → Requires at least: 6.5
  • Added Tested up to: 7.0 and explicit Requires PHP: 8.0 (matches composer.json)
  • 2 comments updated from "WP 7.0-only" to "runtime-branches on the shape"

... (truncated)

Commits
  • 4ea21bd fix(chat): SSE parser drops large events when chunk boundary lands between he...
  • 25aed07 feat(chat): collapse runs of identical tool calls into a group (#55)
  • 62cc3f0 chore(ts): finish the TypeScript migration (#54)
  • 982ac13 chore(ts): migrate remaining hooks + editor/selection to TypeScript (#53)
  • 00f57b6 chore(ts): migrate all components/ to TypeScript (#52)
  • f16bd83 chore(lint): clear all ESLint warnings across components + TS files (#51)
  • 17d3078 chore(ts): migrate use-runtime-adapter to TypeScript (#50)
  • c24b34a chore(ts): add shared types/runtime.ts module (#49)
  • 151e9ff chore(ts): migrate editor-bridge to TypeScript (#48)
  • 22d6023 chore(ts): enable TypeScript toolchain + migrate UndoContext as smoke test (#47)
  • Additional commits viewable in compare view

Updates wordpress/mcp-adapter from 0.5.0 to 0.6.1

Release notes

Sourced from wordpress/mcp-adapter's releases.

v0.6.1

MCP Adapter 0.6.1 repairs the production release ZIP. It contains no other changes.

Who should upgrade

Anyone running 0.6.0 from the mcp-adapter.zip release asset should upgrade. Installations built from source or required through Composer are unaffected.

Fixed

  • The release ZIP no longer ships a Jetpack Autoloader class map that points to files the ZIP omits. In 0.6.0 the class map listed test-only global classes, including WP_CLI and WP_CLI_Command, and mapped them to files under tests/phpunit/, which the release artifact excludes. Any plugin calling class_exists( 'WP_CLI' ) on a normal web request could therefore trigger an uncaught fatal error. class_exists( 'WP_CLI' ) now returns false when WP-CLI is unavailable.

No API, hook, or protocol behavior changed. Upgrading from 0.6.0 requires no migration.

Thank you to @​rebeccahum for reporting this in #283, their first contribution to MCP Adapter.

Full Changelog: WordPress/mcp-adapter@v0.6.0...v0.6.1

v0.6.0

MCP Adapter 0.6.0 improves protocol compatibility, resource metadata handling, session reliability, WP-CLI behavior, and coexistence with plugins that bundle their own copy of the adapter.

Before upgrading

  • WordPress 6.9 or newer is now required. The standalone Abilities API plugin is no longer a supported installation path.
  • Abilities with meta.public: true are now exposed through the default MCP server unless meta.mcp.public explicitly opts out. Existing permission callbacks and capability checks still apply.
  • On multisite only, active Streamable HTTP sessions must reconnect once after upgrading because session storage moves from a network-wide key to separate per-site keys. Single-site installations are unaffected.
  • The MIME validation helpers previously exposed by McpValidator have been removed. Integrations calling them directly should apply their own application-specific MIME validation.

MCP resources and metadata

  • Preserve _meta on resource contents, embedded resources, content blocks, and prompt messages.
  • Omit malformed _meta without discarding the payload it accompanies.
  • Emit mimeType exactly as declared, including values with parameters such as text/html;profile=mcp-app.
  • Correctly handle blob-only resource contents.
  • Support resources/templates/list, returning an empty template list when no templates are available.
  • Match resource URI schemes case-insensitively, so clients can read resources even when they normalize the scheme to lowercase.

These changes improve compatibility with MCP Apps and other clients that depend on resource metadata.

Reliability and compatibility

  • Protect concurrent session mutations with bounded retries, reducing the risk of one request overwriting another session.
  • Scope session storage by blog on WordPress multisite.
  • Use Jetpack Autoloader so the newest available WP\MCP classes win when the standalone adapter and another plugin bundle different versions.
  • Normalize empty arguments for schema-defining abilities, allowing valid zero-argument tool calls to execute correctly.

WP-CLI improvements

  • Keep JSON-RPC stdout clean when wp mcp-adapter serve selects the default server.
  • Use WP-CLI’s global --user argument instead of registering a conflicting local option.

... (truncated)

Changelog

Sourced from wordpress/mcp-adapter's changelog.

[0.6.1] - 2026-08-13

Fixed

  • The release ZIP no longer ships a Jetpack Autoloader class map pointing at files the ZIP omits. In 0.6.0 the class map listed test-only global classes, including WP_CLI and WP_CLI_Command, and mapped them to files under tests/phpunit/, which the release artifact excludes. Any plugin calling class_exists( 'WP_CLI' ) on a normal web request could therefore trigger an uncaught fatal error. class_exists( 'WP_CLI' ) now returns false when WP-CLI is unavailable (#283).

No API, hook, or protocol behavior changed. Upgrading from 0.6.0 requires no migration. Installations built from source or required through Composer were unaffected.

[0.6.0] - 2026-08-12

Breaking Changes

  • WordPress 6.9 or newer is now required. The standalone Abilities API plugin is no longer a supported installation path.
  • Abilities with meta.public: true are now exposed through the default MCP server unless meta.mcp.public explicitly opts out. Existing permission callbacks and capability checks still apply.
  • On multisite only, active Streamable HTTP sessions must reconnect once after upgrading, because session storage moves from a network-wide key to separate per-site keys. Single-site installations are unaffected.
  • The MIME validation helpers previously exposed by McpValidator have been removed. Integrations calling them directly should apply their own application-specific MIME validation.

Added

  • Support for resources/templates/list, returning an empty template list when no templates are available.
  • Blocked direct execution of plugin PHP files.
  • Expanded automated compatibility, dependency, and Plugin Check coverage.

Changed

  • Jetpack Autoloader is now used so the newest available WP\MCP classes win when the standalone adapter and another plugin bundle different versions.
  • Session storage is scoped by blog on WordPress multisite.
  • Concurrent session mutations are protected with bounded retries, reducing the risk of one request overwriting another session.
  • Documentation clarifies that the Abilities API is included in WordPress 6.9 and newer, documents the required ability category field, and improves examples throughout.

Fixed

  • _meta is preserved on resource contents, embedded resources, content blocks, and prompt messages.
  • Malformed _meta is omitted without discarding the payload it accompanies.
  • mimeType is emitted exactly as declared, including values with parameters such as text/html;profile=mcp-app.
  • Blob-only resource contents are handled correctly.
  • Resource URI schemes are matched case-insensitively, so clients can read resources even when they normalize the scheme to lowercase.
  • Empty arguments are normalized for schema-defining abilities, allowing valid zero-argument tool calls to execute.
  • wp mcp-adapter serve keeps JSON-RPC stdout clean when selecting the default server.
  • WP-CLI's global --user argument is used instead of registering a conflicting local option.
Commits
  • 23cb53e fix: prevent dangling release classmap entries (#284)
  • 073e2a9 Prepare the 0.6.0 release (#282)
  • c320a04 fix(deps-dev): bump the npm-dev-minor-patch group with 2 updates (#279)
  • 5b6642a fix(deps): bump automattic/jetpack-autoloader from 5.0.21 to 5.0.22 in the co...
  • a996566 fix: carry _meta through to every emitted DTO (#263)
  • 65ea934 fix: pin tag_name so release zip attaches to the correct release (#171)
  • 1b96b15 docs: clarify Abilities API is core in 6.9+ (fixes #150) (#223)
  • 6b85675 fix(deps-dev): update websocket-driver to 0.7.5 (#252)
  • 0a42274 chore(deps): bump wordpress/php-mcp-schema to v0.1.3 (#277)
  • 8cc81cf Fix warning of registering duplicate global flag --user (#275)
  • Additional commits viewable in compare view

Updates wpackagist-plugin/redirection from 5.8.0 to 5.10.0

Updates generoi/deployer-genero from 0.3.2 to 0.4.3

Release notes

Sourced from generoi/deployer-genero's releases.

v0.4.3

Patch: build_repository no longer uses a Deployer 8-only API.

v0.4.0 resolved it via Deployer\Support\deployer_root(), which does not exist in Deployer 7 — five of the nine adopting repos run 7.5.12, where build:setup died with Call to undefined function. The package declares ^7.0|^8.0, so it must work on both.

Now computes the root from the package's own install path, with getcwd() as a fallback.

v0.4.2

Patch: portable curl invocation when fetching the cachetool phar.

--retry-all-errors requires curl 7.71+. RHEL 8 hosts ship 7.61, where it is a hard error, so the download failed after deploy:symlink — leaving the release live with an unflushed opcache, exactly what cachetool is there to prevent. Now uses --retry 3 alone.

v0.4.1

Patch: fixes a regression in v0.4.0 that could break production deploys.

build:setup and build:composer run via runLocally() on the machine invoking dep, so they must use its own git and composer. v0.4.0 used {{bin/git}} / {{bin/composer}}, which Deployer resolves against the remote host even inside runLocally() — and {{bin/composer}} installs composer.phar onto the production server when composer is not in its PATH there. That failed nollge's deploy at the build stage.

Reverted to bare git / composer, which is what 41 of 47 repos already used, with a comment explaining why the {{bin/*}} form is wrong here.

Upgrade with composer update generoi/deployer-genero — ^0.4 already matches.

v0.4.0

Breaking: consumers must move from ^0.3 to ^0.4 and adjust deploy.php.

Under semver, 0.x treats the minor as the breaking position, and ^0.3 does not match 0.4.0 — so nothing upgrades by accident. Each repo opts in deliberately.

Added — build.php

Shared local-build implementation: build:setup, build:composer, build:artifact, the build_* settings, and a default build list. These were byte-identical across all 47 site repos apart from formatting.

Canonicalises the {{bin/git}} / {{bin/composer}} variant so Deployer resolves the binary instead of trusting PATH — previously the minority (6 repos), so 41 gain a small robustness fix.

build ships without build:theme, in the same spirit as recipe/common.php shipping a minimal deploy that recipe/laravel.php overrides. A project with a theme build overrides the list:

task('build', [
    'build:setup',
    'build:composer',
    'build:theme',
    'build:artifact',
]);

build:theme, cache:clear, deploy and deploy:update_code stay per project — the first two genuinely differ per site (16 and 14 variants), and the latter two document what a deploy does.

build_repository uses Deployer's deployer_root(), so it is correct even when dep runs from a subdirectory. Using __DIR__ inside the package would have resolved to vendor/generoi/deployer-genero.

Added — cachetool.php

Pins cachetool_version (10.0.0) in one place and caches the phar per version in {{deploy_path}}/.dep/ instead of downloading it into every release. On 2026-08-12 GitHub throttling broke production deploys through that per-release download.

... (truncated)

Commits
  • a9fa723 fix: build_repository must work on Deployer 7 (#10)
  • 10edfc7 fix: drop --retry-all-errors, unsupported on RHEL 8 curl (#9)
  • 31c337e fix: use local git/composer in the local build tasks (#8)
  • fe8b8ec style: pint
  • 02e2256 refactor: keep deploy:update_code per project
  • 346b206 feat: ship a default build task list
  • 8c816a7 refactor: use Deployer's deployer_root(), keep build/build:theme per project
  • b6b7d25 fix: resolve build_repository from the git root, not getcwd()
  • 229561f feat: add shared build recipe
  • ea5faa5 feat: add shared cachetool recipe, switch lint to pint
  • Additional commits viewable in compare view

Updates staabm/annotate-pull-request-from-checkstyle from 1.8.6 to 1.8.7

Release notes

Sourced from staabm/annotate-pull-request-from-checkstyle's releases.

1.8.7

What's Changed

New Contributors

Full Changelog: staabm/annotate-pull-request-from-checkstyle@1.8.6...1.8.7

Commits
  • 9cab4b0 prepare release (#126)
  • 1cddf69 Setup .gitattributes - in order to exclude tests and other dev files from d...
  • c7bc6c5 README: update schema link for checkstyle reports (#125)
  • 019c9e1 Docs: Update PHP_CodeSniffer repository link (#124)
  • See full diff in compare view

Updates laravel/pint from 1.29.0 to 1.30.5

Release notes

Sourced from laravel/pint's releases.

v1.30.5

What's Changed

Full Changelog: laravel/pint@v1.30.4...v1.30.5

v1.30.4

What's Changed

New Contributors

Full Changelog: laravel/pint@v1.30.3...v1.30.4

v1.30.3

Full Changelog: laravel/pint@v1.30.2...v1.30.3

v1.30.2

Full Changelog: laravel/pint@v1.30.1...v1.30.2

v1.30.1

Full Changelog: laravel/pint@v1.30.0...v1.30.1

v1.30.0

What's Changed

New Contributors

Full Changelog: laravel/pint@v1.29.3...v1.30.0

v1.29.3

Full Changelog: laravel/pint@v1.29.2...v1.29.3

v1.29.2

  • fix: no longer accepts loading a configuration over insecure http
  • fix: sends errors to stderr

... (truncated)

Changelog

Sourced from laravel/pint's changelog.

Release Notes

Unreleased

v1.29.2 - 2026-06-16

  • fix: no longer accepts loading a configuration over insecure http
  • fix: sends errors to stderr
  • chore: various actions regarding github security
  • chore: uses laravel/agent-detector

v1.29.1 - 2026-04-20

Commits
  • fe4148c release: v1.30.5
  • dd87a71 chore: migrates to laravel zero 13
  • bee580c Merge branch 'main' of github.com:laravel/pint
  • 63b86a9 fix: stdin with specific rules
  • dbe0435 Keep a wrapped attribute's body in place when collapsing the tag (#479)
  • a96cb6e release: v1.30.4
  • 8d2a8d1 build
  • 64cdd51 chore: bumps deps
  • 06455e8 Surface abort errors when --dirty or --diff is used without Git (#475)
  • 862096b Keep multiline Blade directive arguments stable across runs (#477)
  • Additional commits viewable in compare view

Updates wp-phpunit/wp-phpunit from 6.9.4 to 7.1.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the ...

Description has been truncated

@dependabot
Bump the composer group across 1 directory with 22 updates
1e556f3 
Bumps the composer group with 22 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [vlucas/phpdotenv](https://github.com/vlucas/phpdotenv) | `5.6.4` | `5.7.0` |
| [roots/wordpress](https://github.com/roots/wordpress) | `7.0.3` | `7.1` |
| [kinsta/kinsta-mu-plugins](https://github.com/generoi/kinsta-mu-plugins) | `3.1.1` | `3.7.0` |
| [spatie/laravel-google-fonts](https://github.com/spatie/laravel-google-fonts) | `1.6.0` | `1.7.0` |
| wpackagist-plugin/limit-login-attempts-reloaded | `3.2.0` | `3.3.7` |
| [generoi/advanced-custom-fields-pro](https://github.com/generoi/advanced-custom-fields-pro) | `6.8.0.1` | `6.8.9` |
| [generoi/gravityforms](https://github.com/generoi/gravityforms) | `2.10.4` | `3.1.0.4` |
| [generoi/polylang-pro](https://github.com/generoi/polylang-pro) | `3.8.2` | `3.8.7` |
| wpackagist-plugin/wordpress-seo | `27.4` | `28.4` |
| wpackagist-plugin/google-tag-manager | `1.0.3` | `1.0.4` |
| wpackagist-plugin/woocommerce | `10.9.1` | `11.0.1` |
| [generoi/genero-cmp](https://github.com/generoi/genero-cmp) | `2.2.2` | `2.2.3` |
| [generoi/wp-image-resizer](https://github.com/generoi/wp-image-resizer) | `1.5.1` | `1.5.2` |
| [spatie/laravel-csp](https://github.com/spatie/laravel-csp) | `3.25.1` | `3.27.0` |
| [generoi/sage-cachetags](https://github.com/generoi/sage-cachetags) | `2.5.1` | `2.5.3` |
| [generoi/gds-assistant](https://github.com/generoi/gds-assistant) | `0.1.16` | `0.5.0` |
| [wordpress/mcp-adapter](https://github.com/WordPress/mcp-adapter) | `0.5.0` | `0.6.1` |
| wpackagist-plugin/redirection | `5.8.0` | `5.10.0` |
| [generoi/deployer-genero](https://github.com/generoi/deployer-genero) | `0.3.2` | `0.4.3` |
| [staabm/annotate-pull-request-from-checkstyle](https://github.com/staabm/annotate-pull-request-from-checkstyle) | `1.8.6` | `1.8.7` |
| [laravel/pint](https://github.com/laravel/pint) | `1.29.0` | `1.30.5` |
| [wp-phpunit/wp-phpunit](https://github.com/wp-phpunit/wp-phpunit) | `6.9.4` | `7.1.0` |



Updates `vlucas/phpdotenv` from 5.6.4 to 5.7.0
- [Release notes](https://github.com/vlucas/phpdotenv/releases)
- [Commits](vlucas/phpdotenv@v5.6.4...v5.7.0)

Updates `roots/wordpress` from 7.0.3 to 7.1
- [Release notes](https://github.com/roots/wordpress/releases)
- [Commits](roots/wordpress@7.0.3...7.1)

Updates `kinsta/kinsta-mu-plugins` from 3.1.1 to 3.7.0
- [Release notes](https://github.com/generoi/kinsta-mu-plugins/releases)
- [Commits](generoi/kinsta-mu-plugins@3.1.1...3.7.0)

Updates `spatie/laravel-google-fonts` from 1.6.0 to 1.7.0
- [Release notes](https://github.com/spatie/laravel-google-fonts/releases)
- [Changelog](https://github.com/spatie/laravel-google-fonts/blob/main/CHANGELOG.md)
- [Commits](spatie/laravel-google-fonts@1.6.0...1.7.0)

Updates `wpackagist-plugin/limit-login-attempts-reloaded` from 3.2.0 to 3.3.7

Updates `generoi/advanced-custom-fields-pro` from 6.8.0.1 to 6.8.9
- [Commits](https://github.com/generoi/advanced-custom-fields-pro/commits)

Updates `generoi/gravityforms` from 2.10.4 to 3.1.0.4
- [Commits](https://github.com/generoi/gravityforms/commits)

Updates `generoi/polylang-pro` from 3.8.2 to 3.8.7
- [Commits](https://github.com/generoi/polylang-pro/commits)

Updates `wpackagist-plugin/wordpress-seo` from 27.4 to 28.4

Updates `wpackagist-plugin/google-tag-manager` from 1.0.3 to 1.0.4

Updates `wpackagist-plugin/woocommerce` from 10.9.1 to 11.0.1

Updates `generoi/genero-cmp` from 2.2.2 to 2.2.3
- [Release notes](https://github.com/generoi/genero-cmp/releases)
- [Commits](generoi/genero-cmp@v2.2.2...v2.2.3)

Updates `generoi/wp-image-resizer` from 1.5.1 to 1.5.2
- [Release notes](https://github.com/generoi/wp-image-resizer/releases)
- [Commits](generoi/wp-image-resizer@v1.5.1...v1.5.2)

Updates `spatie/laravel-csp` from 3.25.1 to 3.27.0
- [Release notes](https://github.com/spatie/laravel-csp/releases)
- [Changelog](https://github.com/spatie/laravel-csp/blob/main/CHANGELOG.md)
- [Commits](spatie/laravel-csp@3.25.1...3.27.0)

Updates `generoi/sage-cachetags` from 2.5.1 to 2.5.3
- [Release notes](https://github.com/generoi/sage-cachetags/releases)
- [Commits](generoi/sage-cachetags@v2.5.1...v2.5.3)

Updates `generoi/gds-assistant` from 0.1.16 to 0.5.0
- [Release notes](https://github.com/generoi/gds-assistant/releases)
- [Commits](generoi/gds-assistant@v0.1.16...v0.5.0)

Updates `wordpress/mcp-adapter` from 0.5.0 to 0.6.1
- [Release notes](https://github.com/WordPress/mcp-adapter/releases)
- [Changelog](https://github.com/WordPress/mcp-adapter/blob/trunk/CHANGELOG.md)
- [Commits](WordPress/mcp-adapter@v0.5.0...v0.6.1)

Updates `wpackagist-plugin/redirection` from 5.8.0 to 5.10.0

Updates `generoi/deployer-genero` from 0.3.2 to 0.4.3
- [Release notes](https://github.com/generoi/deployer-genero/releases)
- [Commits](generoi/deployer-genero@v0.3.2...v0.4.3)

Updates `staabm/annotate-pull-request-from-checkstyle` from 1.8.6 to 1.8.7
- [Release notes](https://github.com/staabm/annotate-pull-request-from-checkstyle/releases)
- [Commits](staabm/annotate-pull-request-from-checkstyle@1.8.6...1.8.7)

Updates `laravel/pint` from 1.29.0 to 1.30.5
- [Release notes](https://github.com/laravel/pint/releases)
- [Changelog](https://github.com/laravel/pint/blob/main/CHANGELOG.md)
- [Commits](laravel/pint@v1.29.0...v1.30.5)

Updates `wp-phpunit/wp-phpunit` from 6.9.4 to 7.1.0
- [Commits](wp-phpunit/wp-phpunit@6.9.4...7.1.0)

---
updated-dependencies:
- dependency-name: vlucas/phpdotenv
  dependency-version: 5.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: composer
- dependency-name: roots/wordpress
  dependency-version: '7.1'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: composer
- dependency-name: kinsta/kinsta-mu-plugins
  dependency-version: 3.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: composer
- dependency-name: spatie/laravel-google-fonts
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: composer
- dependency-name: wpackagist-plugin/limit-login-attempts-reloaded
  dependency-version: 3.3.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: composer
- dependency-name: generoi/advanced-custom-fields-pro
  dependency-version: 6.8.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: composer
- dependency-name: generoi/gravityforms
  dependency-version: 3.1.0.4
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: composer
- dependency-name: generoi/polylang-pro
  dependency-version: 3.8.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: composer
- dependency-name: wpackagist-plugin/wordpress-seo
  dependency-version: '28.4'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: composer
- dependency-name: wpackagist-plugin/google-tag-manager
  dependency-version: 1.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: composer
- dependency-name: wpackagist-plugin/woocommerce
  dependency-version: 11.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: composer
- dependency-name: generoi/genero-cmp
  dependency-version: 2.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: composer
- dependency-name: generoi/wp-image-resizer
  dependency-version: 1.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: composer
- dependency-name: spatie/laravel-csp
  dependency-version: 3.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: composer
- dependency-name: generoi/sage-cachetags
  dependency-version: 2.5.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: composer
- dependency-name: generoi/gds-assistant
  dependency-version: 0.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: composer
- dependency-name: wordpress/mcp-adapter
  dependency-version: 0.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: composer
- dependency-name: wpackagist-plugin/redirection
  dependency-version: 5.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: composer
- dependency-name: generoi/deployer-genero
  dependency-version: 0.4.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: composer
- dependency-name: staabm/annotate-pull-request-from-checkstyle
  dependency-version: 1.8.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: composer
- dependency-name: laravel/pint
  dependency-version: 1.30.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: composer
- dependency-name: wp-phpunit/wp-phpunit
  dependency-version: 7.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: composer
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update Php code labels Sep 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file php Pull requests that update Php code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants