Bump the composer group across 1 directory with 7 updates

[dependabot]

Bumps the composer group with 6 updates in the / directory:

Package	From	To
geoip2/geoip2	3.3.0	3.4.0
laravel/fortify	1.37.2	1.38.0
laravel/sanctum	4.3.2	4.3.3
livewire/livewire	4.3.3	4.4.0
laravel/sail	1.63.0	1.66.0
nunomaduro/collision	8.9.4	8.9.5

Updates geoip2/geoip2 from 3.3.0 to 3.4.0

Release notes

Sourced from geoip2/geoip2's releases.

3.4.0

• A new residential property has been added to GeoIp2\Record\Anonymizer. This property is an instance of the new GeoIp2\Record\AnonymizerFeed class and provides residential proxy data for the network, including confidence, networkLastSeen, and providerName. This may be the only property with data even when the other anonymizer properties are unset. This data is available from the GeoIP Insights web service.
• Updated the GeoIp2\Model\City constructor to handle an empty subdivisions array. This provides compatibility with some third-party databases that publish empty subdivisions arrays. Pull request by Jarek Jakubowski. GitHub #290.
• The GeoIP2 prefix in web service error messages has been changed to GeoIP.

Changelog

Sourced from geoip2/geoip2's changelog.

3.4.0 (2026-07-16)

• A new residential property has been added to GeoIp2\Record\Anonymizer. This property is an instance of the new GeoIp2\Record\AnonymizerFeed class and provides residential proxy data for the network, including confidence, networkLastSeen, and providerName. This may be the only property with data even when the other anonymizer properties are unset. This data is available from the GeoIP Insights web service.
• Updated the GeoIp2\Model\City constructor to handle an empty subdivisions array. This provides compatibility with some third-party databases that publish empty subdivisions arrays. Pull request by Jarek Jakubowski. GitHub #290.
• The GeoIP2 prefix in web service error messages has been changed to GeoIP.

Commits

• 257a350 Update for v3.4.0
• 4479f9c Set release date
• a359bd3 Merge pull request #319 from maxmind/greg/stf-997-add-residential-to-anonymizer
• be47d40 Add residential property to Anonymizer record
• dc46114 Merge pull request #318 from maxmind/dependabot/github_actions/zizmorcore/ziz...
• a2dc60a Bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7
• d3c75cc Merge pull request #316 from maxmind/dependabot/github_actions/jdx/mise-actio...
• febf887 Merge pull request #317 from maxmind/dependabot/github_actions/actions/checko...
• e338414 Bump actions/checkout from 6.0.3 to 7.0.0
• 49be03e Bump jdx/mise-action from 4.1.0 to 4.2.0
• Additional commits viewable in compare view

Updates laravel/fortify from 1.37.2 to 1.38.0

Release notes

Sourced from laravel/fortify's releases.

v1.38.0

• Bump actions/checkout from 7.0.0 to 7.0.1 in the github-actions group by @​dependabot[bot] in laravel/fortify#690
• [1.x] Supports PHPStan 2 by @​crynobone in laravel/fortify#691
• Add option to override RecoveryCode class by @​TobiasNagel01 in laravel/fortify#694

v1.37.3

• Add Dependabot cooldown of 5 days by @​nunomaduro in laravel/fortify#679
• Enable Dependabot auto-merge by @​nunomaduro in laravel/fortify#680
• Bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions group by @​dependabot[bot] in laravel/fortify#681
• Bump shivammathur/setup-php from 2.37.1 to 2.37.2 in the github-actions group by @​dependabot[bot] in laravel/fortify#684
• Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group by @​dependabot[bot] in laravel/fortify#686
• [1.x] Use literal status code in LockoutResponse to fix PHPStan analysis by @​jklejczyk in laravel/fortify#688
• [1.x] Respect lowercase_usernames config when resetting password by @​jklejczyk in laravel/fortify#687

Changelog

Sourced from laravel/fortify's changelog.

v1.38.0 - 2026-08-07

• Bump actions/checkout from 7.0.0 to 7.0.1 in the github-actions group by @​dependabot[bot] in laravel/fortify#690
• [1.x] Supports PHPStan 2 by @​crynobone in laravel/fortify#691
• Add option to override RecoveryCode class by @​TobiasNagel01 in laravel/fortify#694

v1.37.3 - 2026-06-29

• Add Dependabot cooldown of 5 days by @​nunomaduro in laravel/fortify#679
• Enable Dependabot auto-merge by @​nunomaduro in laravel/fortify#680
• Bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions group by @​dependabot[bot] in laravel/fortify#681
• Bump shivammathur/setup-php from 2.37.1 to 2.37.2 in the github-actions group by @​dependabot[bot] in laravel/fortify#684
• Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group by @​dependabot[bot] in laravel/fortify#686
• [1.x] Use literal status code in LockoutResponse to fix PHPStan analysis by @​jklejczyk in laravel/fortify#688
• [1.x] Respect lowercase_usernames config when resetting password by @​jklejczyk in laravel/fortify#687

Commits

• c04ca29 Add option to override RecoveryCode class (#694)
• 35037d8 [1.x] Supports PHPStan 2 (#691)
• f4f5b81 Bump actions/checkout from 7.0.0 to 7.0.1 in the github-actions group (#690)
• 5aaa27a Update CHANGELOG
• 66b9503 Respect lowercase_usernames config when resetting password (#687)
• 49de8fa Use literal status code in LockoutResponse to fix PHPStan analysis (#688)
• c15bb43 Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group (#686)
• 015a33f Bump shivammathur/setup-php in the github-actions group (#684)
• 0f0d1c6 Bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions group (#681)
• bcd918a Enable Dependabot auto-merge (#680)
• Additional commits viewable in compare view

Updates laravel/framework from 12.62.0 to 12.66.0

Release notes

Sourced from laravel/framework's releases.

v12.66.0

• [12.x] Isolate cloud agent requests from global HTTP client configuration by @​kieranbrown in laravel/framework#61068
• [12.x] Configure a socket timeout for the Cloud log driver by @​jessarcher in laravel/framework#61082
• [12.x] ColumnDefinition::unsigned takes a parameter, which should be documented by @​afk11 in laravel/framework#61123

v12.65.0

• [12.x] Prevent fatal errors when logging deprecations fails by @​GrahamCampbell in laravel/framework#60907
• [12.x] Fix Factory::insert() with a count of zero by @​alies-dev in laravel/framework#60911
• [12.x] Fix schedule:list timezone conversion for range, step, and wildcard cron expressions by @​xiCO2k in laravel/framework#60913
• [12.x] Fix getMigrationBatches return type annotation by @​wouterj in laravel/framework#60973

v12.64.0

• [12.x] Enum as queue overlap key by @​finagin in laravel/framework#60722
• [12.x] Add capitalize parameter to Stringable::initials() by @​irabbi360 in laravel/framework#60741

v12.63.0

• [12.x] Add new error messages for detecting lost connections by @​mfn in laravel/framework#60472
• [12.x] Ability to refresh cache locks by @​bytestream in laravel/framework#58349
• [12.x] Guard JsonSchema deserializer against unbounded $ref expansion by @​pushpak1300 in laravel/framework#60524
• [12.x] Fix Postgres whereDate/whereTime crash when column is Expression by @​irabbi360 in laravel/framework#60540
• [12.x] Pop managed queue jobs from the cloud-agent instead of SQS by @​kieranbrown in laravel/framework#60660
• [12.x] Terminate default style value with a semicolon in ComponentAttributeBag::merge() by @​Amirhf1 in laravel/framework#60665

Commits

• 82a5332 Update version to v12.66.0
• 4a4c476 ColumnDefinition::unsigned takes a parameter, which should be documneted (#61...
• 5260836 Configure a socket timeout for the Cloud log driver (#61082)
• 8f9502e Isolate cloud agent requests from global HTTP client configuration (#61068)
• e1f0c72 Update CHANGELOG
• 99a8fb3 Update version to v12.65.0
• 5839f3b fix url verification logic
• 01fd8c8 [12.x] Fix getMigrationBatches return type annotation (#60973)
• 40e7c23 wip (#60913)
• 16a974d Fix Factory::insert() with a count of zero (#60911)
• Additional commits viewable in compare view

Updates laravel/sanctum from 4.3.2 to 4.3.3

Release notes

Sourced from laravel/sanctum's releases.

v4.3.3

• Pin GitHub Actions to commit SHAs and add Dependabot config by @​joetannenbaum in laravel/sanctum#598
• Bump shivammathur/setup-php from 2.37.0 to 2.37.1 in the github-actions group by @​dependabot[bot] in laravel/sanctum#602
• Pin pull requests and issues workflows to latest laravel/.github by @​nunomaduro in laravel/sanctum#605
• Add Dependabot cooldown of 5 days by @​nunomaduro in laravel/sanctum#606
• Enable Dependabot auto-merge by @​nunomaduro in laravel/sanctum#610
• Bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions group by @​dependabot[bot] in laravel/sanctum#611
• Bump shivammathur/setup-php from 2.37.1 to 2.37.2 in the github-actions group by @​dependabot[bot] in laravel/sanctum#612
• Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group by @​dependabot[bot] in laravel/sanctum#613

Changelog

Sourced from laravel/sanctum's changelog.

v4.3.3 - 2026-06-23

• Pin GitHub Actions to commit SHAs and add Dependabot config by @​joetannenbaum in laravel/sanctum#598
• Bump shivammathur/setup-php from 2.37.0 to 2.37.1 in the github-actions group by @​dependabot[bot] in laravel/sanctum#602
• Pin pull requests and issues workflows to latest laravel/.github by @​nunomaduro in laravel/sanctum#605
• Add Dependabot cooldown of 5 days by @​nunomaduro in laravel/sanctum#606
• Enable Dependabot auto-merge by @​nunomaduro in laravel/sanctum#610
• Bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions group by @​dependabot[bot] in laravel/sanctum#611
• Bump shivammathur/setup-php from 2.37.1 to 2.37.2 in the github-actions group by @​dependabot[bot] in laravel/sanctum#612
• Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group by @​dependabot[bot] in laravel/sanctum#613

Commits

• fee27a5 Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group (#613)
• 56d3244 use strict comparison
• d8685e5 Bump shivammathur/setup-php in the github-actions group (#612)
• 6379253 Bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions group (#611)
• 8dd31a2 Enable Dependabot auto-merge (#610)
• 334353d Update dependabot.yml
• 634348c Add Dependabot cooldown of 5 days (#606)
• bfe1fb1 Merge pull request #605 from laravel/chore/pin-reusable-workflows-latest
• e1cda0e Pin pull requests and issues workflows to latest laravel/.github
• 596ee55 Bump shivammathur/setup-php in the github-actions group (#602)
• Additional commits viewable in compare view

Updates livewire/livewire from 4.3.3 to 4.4.0

Release notes

Sourced from livewire/livewire's releases.

v4.4.0

What's Changed

• [4.x] Fix component named Index resolving to an empty name by @​lazerg in livewire/livewire#10475
• [4.x] Fix server-side JS evaluation on mount running before the component is registered by @​lazerg in livewire/livewire#10494
• [4.x] Fix throttle requests get debounced by .live modifier by @​ghabriel25 in livewire/livewire#10492
• [4.x] Refactor SupportLifecycleHooks to use existing helper methods by @​ghabriel25 in livewire/livewire#10446
• [4.x] Fix a broken JS expression wedging the component by @​calebporzio in livewire/livewire#10500
• [4.x] Consolidate renderless setup to HandlesRenderless by @​ghabriel25 in livewire/livewire#10499
• [4.x] Handle empty successful responses by @​joshhanley in livewire/livewire#10456
• [4.x] Fix #[Authorize] attribute skip component exception hook by @​ghabriel25 in livewire/livewire#10510
• [4.x] Add assertOnlyHasErrors method by @​gdebrauwer in livewire/livewire#10393
• [4.x] Fix renderless calls incorrectly skipping render when batched with normal calls by @​ghabriel25 in livewire/livewire#10502
• [4.x] Discard stale live model responses after newer responses land by @​calebporzio in livewire/livewire#10513
• Bump postcss from 8.5.8 to 8.5.26 by @​dependabot[bot] in livewire/livewire#10515
• Prepare releases as drafts by @​calebporzio in livewire/livewire#10520
• Upmerge 3.x into 4.x for release prep by @​calebporzio in livewire/livewire#10516
• Backport navigate rejection fix to 4.x by @​calebporzio in livewire/livewire#10517
• Bump Alpine to 3.16.0 by @​calebporzio in livewire/livewire#10522

Full Changelog: livewire/livewire@v4.3.5...v4.4.0

v4.3.5

What's Changed

• [4.x] Fix SFC detection for PHP attribute array arguments by @​joshhanley in livewire/livewire#10480

Full Changelog: livewire/livewire@v4.3.4...v4.3.5

v4.3.4

What's Changed

• [3.x] Fix wire:model.blur recreating deleted array entries by @​people-sea in livewire/livewire#10370
• [4.x] Use dedicated feature for BaseRenderless by @​ghabriel25 in livewire/livewire#10346
• [4.x] Extract synth orchestration into a HandleSynths mechanism by @​joshhanley in livewire/livewire#10276
• [4.x] Fix stale reactive snapshots for overlapping wire:model.live requests by @​cyppe in livewire/livewire#10061
• [4.x] Prevent wire:model.live.blur from triggering redundant requests by @​people-sea in livewire/livewire#10284
• [4.x] Fix validation throwing TypeError when rules(), messages() or validationAttributes() return a Collection by @​joshhanley in livewire/livewire#10303
• [4.x] Honor scoped route bindings for mount() method injection by @​mateusjunges in livewire/livewire#10341
• [4.x] Fix writeToHistory() mutating the current history state by @​people-sea in livewire/livewire#10342
• [4.x] Remove stale $wire.$watch cleanups from the component when manually unwatched by @​joshhanley in livewire/livewire#10349
• Add renderless wire model by @​sohailahmad07 in livewire/livewire#10363
• [4.x] Skip Volt functional components during SFC detection by @​joshhanley in livewire/livewire#10367
• [4.x] Add support for @continue and @break in morph markers by @​joshhanley in livewire/livewire#10368
• [4.x] Fix fetch responses with a http redirect being parsed as Livewire payloads by @​joshhanley in livewire/livewire#10369
• [4.x] Fix SFC island imports by @​VernSG in livewire/livewire#10338
• [4.x] Fix form validateOnly() keeping previous field messages by @​billyonecan in livewire/livewire#10375
• [4.x] Refactor SupportAttributes by @​ghabriel25 in livewire/livewire#10378
• Fix PHP 8.5 null array offset deprecation in EloquentCollectionSynth::hydrate() by @​JulianGlueck in livewire/livewire#10380
• [4.x] Fix BaseAuthorze and BaseRenderless not triggered using event by @​ghabriel25 in livewire/livewire#10384
• [4.x] Extract renderless-related methods into a HandlesRenderless trait by @​ghabriel25 in livewire/livewire#10389

... (truncated)

Commits

• 514b29d Build assets for v4.4.0
• 86abedf Bump Alpine to 3.16.0 (#10522)
• 493ea80 Backport navigate rejection fix to 4.x (#10517)
• 6694967 Upmerge 3.x into 4.x for release prep (#10516)
• 30433e1 Prepare releases as drafts (#10520)
• df502d0 Remove remaining timing pauses from interaction tests
• 29a5bdc Synchronize poll cancellation tests on request events
• 6254f13 Wait for JavaScript modules before asserting
• 8042ad3 Wait for upload and dirty state transitions
• 7dd32ba Synchronize poll overlap tests on request events
• Additional commits viewable in compare view

Updates laravel/sail from 1.63.0 to 1.66.0

Release notes

Sourced from laravel/sail's releases.

v1.66.0

• Add CPX command support by @​wilsenhc in laravel/sail#895

v1.65.0

• Bump actions/checkout from 7.0.0 to 7.0.1 in the github-actions group by @​dependabot[bot] in laravel/sail#891
• Enable dumpless upgrades for Meilisearch by @​CasEbb in laravel/sail#892
• Fix background scheduled commands when using Sail by @​drewmt in laravel/sail#894

v1.64.0

• Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group by @​dependabot[bot] in laravel/sail#881
• [1.x] Fix MongoDB failing to restart by persisting the configdb volume by @​lazerg in laravel/sail#883
• Make phpunit.xml DB_DATABASE replacement whitespace-tolerant by @​d-takeuchi in laravel/sail#885

Changelog

Sourced from laravel/sail's changelog.

v1.66.0 - 2026-08-10

• Add CPX command support by @​wilsenhc in laravel/sail#895

v1.65.0 - 2026-08-03

• Bump actions/checkout from 7.0.0 to 7.0.1 in the github-actions group by @​dependabot[bot] in laravel/sail#891
• Enable dumpless upgrades for Meilisearch by @​CasEbb in laravel/sail#892
• Fix background scheduled commands when using Sail by @​drewmt in laravel/sail#894

v1.64.0 - 2026-07-17

• Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group by @​dependabot[bot] in laravel/sail#881
• [1.x] Fix MongoDB failing to restart by persisting the configdb volume by @​lazerg in laravel/sail#883
• Make phpunit.xml DB_DATABASE replacement whitespace-tolerant by @​d-takeuchi in laravel/sail#885

Commits

• ebf2861 Add CPX command support and update Dockerfiles for PHP 8.2+ (#895)
• 973d77a Update CHANGELOG
• d4b9213 Fix background scheduled commands when using Sail (#894)
• a7ee940 Enable dumpless upgrades for Meilisearch (#892)
• e8f6458 Bump actions/checkout from 7.0.0 to 7.0.1 in the github-actions group (#891)
• b50e432 Update CHANGELOG
• 08cacd3 Make phpunit.xml DB_DATABASE replacement whitespace-tolerant (#885)
• 4bc5b4c Fix MongoDB failing to restart by persisting the configdb volume (#883)
• ab7b38d Merge pull request #881 from laravel/dependabot/github_actions/github-actions...
• ad83fbb Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group
• Additional commits viewable in compare view

Updates nunomaduro/collision from 8.9.4 to 8.9.5

Commits

• fb53eac chore: paratest dep
• 046ef18 chore: bumps deps
• 930ac94 chore: style changes
• 05d18b2 chore(deps): bump shivammathur/setup-php from 2.37.0 to 2.37.1 (#352)
• 1593eb6 chore: style
• f990d01 chore: security actions
• 62db0fc Revert "wip"
• 825f7fa wip
• d90252f Merge pull request #350 from nunomaduro/fix/test-case-boundary-on-pre-prep-ev...
• b279c0a bump dependencies
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies, php. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[sanmaxdev]

Reviewed the Composer lockfile update. composer validate --strict, composer install --no-interaction --prefer-dist --no-progress, php artisan test, and vendor/bin/pint --test pass.