[dependabot]

Bumps the composer-minor-patch group with 3 updates in the / directory: firebase/php-jwt, larastan/larastan and laravel/sail.

Updates firebase/php-jwt from 7.2.0 to 7.2.1

Release notes

Sourced from firebase/php-jwt's releases.

firebase/php-jwt v7.2.1

Miscellaneous Chores

Commits

• 0501f57 chore(main): release 0.347.0 (#9709)
• 76b35c4 chore: redirect issues and PRs on the Auth, Gax and Jwt (#9717)
• See full diff in compare view

Updates larastan/larastan from 3.12.2 to 3.13.0

Release notes

Sourced from larastan/larastan's releases.

3.13.0

What's Changed

Larastan 3.13.0 requires PHPStan 2.3.0 or newer within the 2.x series. Update PHPStan alongside Larastan when upgrading. The PHP and Laravel requirements are unchanged.

Added

• Add relation-of<Model, Relationship> and infer concrete relationship types in eager-loading arrays passed to with(), withOnly(), load(), and loadMissing() by @​canvural in #2562.
• Support PHPStan 2.3's opt-in bleeding-edge inference for empty collections and closures from their usage by @​canvural in #2562.

Fixed

• Correct collection key types for methods that append or renumber keys, including concat(), merge(), shift(), and splice(), by @​canvural in #2562.
• Report invalid eager-loading column selections paired with callbacks, such as with(['posts:id' => $callback]), by @​canvural in #2562.
• Handle a null package manifest path when bootstrapping the application by @​canvural in #2562.
• Resolve forwarded Eloquent builder calls using the custom query builder returned by toBase(), including passthru return types, by @​Wirone in #2575.

New Contributors

• @​Wirone made their first contribution in #2575.

Full Changelog: v3.12.3...v3.13.0

3.12.3

What's Changed

Fixed

• Preserve collection key types in Eloquent queries and paginators, with an optional key type in collection-of, by @​canvural in 397c6df. Read more about it here.
• Infer chunk() and each() callback types on BelongsToMany and through relations, including pivot types, by @​canvural in 726e7a8
• Check model properties in forceCreateQuietly() by @​midhunmonachan in #2558
• Check model properties in quiet and force relation create methods by @​Cayan in #2560
• Accept save() options such as touch instead of model properties by @​Cayan in #2561
• Resolve config keys using paths relative to their config directory and expand glob patterns in configDirectories by @​canvural in f9b491b, fe7154b
• Preserve the config value type when a default is passed to config() by @​canvural in f2a79f7
• Preserve $this in where() and global scope methods on Eloquent builders by @​SanderMuller in #2567
• Prevent index methods from overwriting or creating migration columns by @​Cayan in #2566
• Refine Laravel API types for events, query logs, migrations, mail, notifications, routing, and reflection by @​canvural in 8fc1821
• Resolve class constants used as migration column names by @​Cayan in #2565
• Accept numeric strings, integers, and floats when writing decimal casts by @​matical in #2570
• Infer named guard types from their configured driver by @​antoinelame in #2571

Performance

• Cache object types in helper extensions and builder names in BuilderHelper by @​haratake22 in #2553
• Load migrations only once when no tables are found by @​ryanshepherd in #2569

New Contributors

• @​midhunmonachan made their first contribution in #2558

... (truncated)

Commits

• 24ee69a chore: update E2E baselines
• 8901aa1 chore: update E2E commit hashes
• e6154e3 fix query builder passthru (#2575)
• 619e671 feat: phpstan 2.3.0 (#2562)
• 792628d fix: type named guards from their configured driver (#2571)
• c95b4d3 fix: accept numeric strings, ints and floats when writing decimal casts (#2570)
• 84bb905 feat: resolve class constants used as migration column names (#2565)
• 8fc1821 fix: refine Laravel API types
• 128814f fix: stop index methods from overwriting or creating migration columns (#2566)
• 4b8971f fix: return $this from where() and the global scope methods in the builder st...
• Additional commits viewable in compare view

Updates laravel/sail from 1.68.0 to 1.69.0

Release notes

Sourced from laravel/sail's releases.

v1.69.0

• Bump redhat-plumbers-in-action/differential-shellcheck from 5.5.6 to 5.5.7 in the github-actions group by @​dependabot[bot] in laravel/sail#901
• Fix and improve the MongoDB service by @​GromNaN in laravel/sail#902

Changelog

Sourced from laravel/sail's changelog.

v1.69.0 - 2026-10-08

• Bump redhat-plumbers-in-action/differential-shellcheck from 5.5.6 to 5.5.7 in the github-actions group by @​dependabot[bot] in laravel/sail#901
• Fix and improve the MongoDB service by @​GromNaN in laravel/sail#902

Commits

• 3587ac9 Fix and improve the MongoDB service (#902)
• 603f570 Bump redhat-plumbers-in-action/differential-shellcheck (#901)
• a7174a1 Update CHANGELOG
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions