Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

• ⚠️ WARN: Package lookup failures

Note

These dependencies have not received updates for an extended period and may be unmaintained:

View abandoned dependencies (21)

Datasource	Name	Last Updated
composer	mikey179/vfsstream	2024-08-29
composer	nyholm/psr7-server	2023-11-08
composer	php-http/mock-client	2024-10-31
composer	psr/http-client	2023-09-23
composer	psr/http-message	2023-04-04
composer	psr/log	2024-09-11
composer	symfony/polyfill-mbstring	2024-12-23
composer	symfony/polyfill-php82	2024-09-09
github-actions	actions/configure-pages	2024-03-30

Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release.
Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• chore(deps): update nginx:alpine docker digest to 8491795
• chore(deps): update prom/prometheus docker digest to 1f0f50f
• chore(deps): update redis docker digest to 47200b0
• chore(deps): update dependency infection/infection to ^0.32.0
• chore(deps): update docker/setup-buildx-action action to v3.12.0
• chore(deps): update actions/cache action to v5
• chore(deps): update actions/upload-artifact action to v6
• chore(deps): update dependency phpdocumentor/reflection-docblock to v6
• chore(deps): update phpstan packages to v2 (major) (phpstan/phpstan, phpstan/phpstan-mockery, phpstan/phpstan-phpunit)
• fix(deps): update symfony packages to v8 (major) (symfony/config, symfony/http-client, symfony/var-exporter, symfony/yaml)
• 🔐 Create all rate-limited PRs at once 🔐

---

Warning

Renovate failed to look up the following dependencies: Failed to look up packagist package psr/http-client-implementation, Failed to look up packagist package psr/http-factory-implementation, Failed to look up packagist package php-http/async-client-implementation.

Files affected: composer.json, src/Contrib/Zipkin/composer.json, src/Contrib/composer.json, src/SDK/composer.json

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update composer:2.9 docker digest to f746ca1
• chore(deps): update debian:bullseye docker digest to 3bbe51d
• chore(deps): update otel/opentelemetry-collector-contrib docker digest to f051aff
• chore(deps): update all patch versions (actions/checkout, codecov/codecov-action, github/codeql-action)
• chore(deps): update shivammathur/cache-extensions action to v1.13.0
• chore(deps): update shivammathur/setup-php action to v2.36.0
• chore(deps): update actions/checkout action to v6
• chore(deps): update debian docker tag to v13
• chore(deps): update dependency phpunit/phpunit to v12
• chore(deps): update dependency rector/rector to v2
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

composer (22)

composer.json (38)

• php ^8.1
• google/protobuf ^3.22 || ^4.0
• nyholm/psr7-server ^1.1
• php-http/discovery ^1.14
• psr/http-client ^1.0
• psr/http-client-implementation ^1.0
• psr/http-factory-implementation ^1.0
• psr/http-message ^1.0.1|^2.0
• psr/log ^1.1|^2.0|^3.0
• ramsey/uuid ^3.0 || ^4.0
• symfony/config ^5.4 || ^6.4 || ^7.0 → [Updates: ^5.4 || ^6.4 || ^7.0 || ^8.0]
• symfony/polyfill-mbstring ^1.23
• symfony/polyfill-php82 ^1.26
• symfony/polyfill-php83 ^1.32
• symfony/polyfill-php84 ^1.32
• tbachert/spi ^1.0.1
• amphp/amp ^3
• bamarni/composer-bin-plugin ^1.8
• dg/bypass-finals ^1.4
• grpc/grpc ^1.30
• guzzlehttp/guzzle ^7.4
• guzzlehttp/psr7 ^2.1
• mikey179/vfsstream ^1.6.11
• mockery/mockery ^1.5.1
• monolog/monolog ^3.0
• nyholm/psr7 ^1.4
• php-http/mock-client ^1.5
• phpdocumentor/reflection-docblock ^5.3 → [Updates: ^6.0]
• phpspec/prophecy ^1.22
• phpspec/prophecy-phpunit ^2
• phpstan/phpstan ^1.10.13 → [Updates: ^2.0.0]
• phpstan/phpstan-mockery ^1.1 → [Updates: ^2.0]
• phpstan/phpstan-phpunit ^1.3 → [Updates: ^2.0]
• phpunit/phpunit ^10 || ^11 → [Updates: ^10 || ^11 || ^12]
• sebastian/exporter <= 6.0.1 || >= 6.1.3
• symfony/http-client ^5.2 → [Updates: ^8.0]
• symfony/var-exporter ^5.4 || ^6.4 || ^7.0 → [Updates: ^5.4 || ^6.4 || ^7.0 || ^8.0]
• symfony/yaml ^5.4 || ^6.4 || ^7.0 → [Updates: ^5.4 || ^6.4 || ^7.0 || ^8.0]

proto/otel/composer.json (2)

• php ^8.0
• google/protobuf ^3.22 || ^4.0

src/API/composer.json (4)

• php ^8.1
• open-telemetry/context ^1.4
• psr/log ^1.1|^2.0|^3.0
• symfony/polyfill-php82 ^1.26

src/Config/SDK/composer.json (5)

• php ^8.1
• open-telemetry/context ^1.4
• open-telemetry/sdk ^1.8
• symfony/config ^5.4 || ^6.4 || ^7.0 → [Updates: ^5.4 || ^6.4 || ^7.0 || ^8.0]
• tbachert/spi ^1.0.5

src/Context/composer.json (2)

• php ^8.1
• symfony/polyfill-php82 ^1.26

src/Contrib/composer.json (12)

• php ^8.1
• open-telemetry/api ^1.0
• open-telemetry/context ^1.0
• open-telemetry/gen-otlp-protobuf ^1.2
• open-telemetry/sdk ^1.0
• open-telemetry/sem-conv ^1.0
• php-http/async-client-implementation ^1.0
• php-http/discovery ^1.14
• psr/http-factory-implementation ^1.0
• psr/log ^1.1|^2.0|^3.0
• symfony/polyfill-mbstring ^1.23
• symfony/polyfill-php82 ^1.26

src/Contrib/Grpc/composer.json (3)

• php ^8.1
• grpc/grpc *
• open-telemetry/sdk ^1.0

src/Contrib/Otlp/composer.json (5)

• php ^8.1
• php-http/discovery ^1.14
• open-telemetry/gen-otlp-protobuf ^1.1
• open-telemetry/api ^1.0
• open-telemetry/sdk ^1.0

src/Contrib/Zipkin/composer.json (6)

• php ^8.1
• open-telemetry/api ^1.0
• open-telemetry/sdk ^1.0
• php-http/async-client-implementation ^1.0
• php-http/discovery ^1.14
• psr/http-factory-implementation ^1.0

src/Extension/Propagator/B3/composer.json (3)

• php ^8.1
• open-telemetry/api ^1.0
• open-telemetry/context ^1.0

src/Extension/Propagator/CloudTrace/composer.json (3)

• php ^8.1
• open-telemetry/api ^1.0
• open-telemetry/context ^1.0

src/Extension/Propagator/Jaeger/composer.json (3)

• php ^8.1
• open-telemetry/api ^1.0
• open-telemetry/context ^1.0

src/SDK/composer.json (15)

• php ^8.1
• nyholm/psr7-server ^1.1
• open-telemetry/api ^1.7
• open-telemetry/context ^1.4
• open-telemetry/sem-conv ^1.0
• php-http/discovery ^1.14
• psr/http-client-implementation ^1.0
• psr/http-factory-implementation ^1.0
• psr/http-client ^1.0
• psr/http-message ^1.0.1|^2.0
• psr/log ^1.1|^2.0|^3.0
• ramsey/uuid ^3.0 || ^4.0
• symfony/polyfill-mbstring ^1.23
• symfony/polyfill-php82 ^1.26
• tbachert/spi ^1.0.5

src/SemConv/composer.json (1)

• php ^8.0

vendor-bin/deptrac/composer.json (1)

• qossmic/deptrac-shim ^1.0

vendor-bin/infection/composer.json (1)

• infection/infection ^0.31.0 → [Updates: ^0.32.0]

vendor-bin/phan/composer.json (1)

• phan/phan ^5.4

vendor-bin/php-cs-fixer/composer.json (1)

• friendsofphp/php-cs-fixer ^3.54

vendor-bin/phpbench/composer.json (1)

• phpbench/phpbench ^1.2

vendor-bin/phpmetrics/composer.json (1)

• phpmetrics/phpmetrics ^2.8

vendor-bin/psalm/composer.json (3)

• vimeo/psalm ^6
• psalm/plugin-mockery ^1
• psalm/plugin-phpunit ^0.19

vendor-bin/rector/composer.json (1)

• rector/rector ^1.0 → [Updates: ^2.0]

docker-compose (7)

docker-compose.collector.yaml (3)

• openzipkin/zipkin-slim sha256:d951994017185bce1c859b62e13adf640e26c37e08b90ca2e4de2669dc1aad87
• jaegertracing/all-in-one sha256:ab6f1a1f0fb49ea08bcd19f6b84f6081d0d44b364b6de148e1798eb5816bacac
• otel/opentelemetry-collector-contrib sha256:004ecfe36ed8d3a5785adb8740024cdba1c546b3ae357a9db7a3e7b05c3bd160 → [Updates: undefined]

docker-compose.fiber-ffi.yaml (1)

• nginx alpine@sha256:b3c656d55d7ad751196f21b7fd2e8d4da9cb430e32f646adcf92441b72f82b14 → [Updates: alpine]

docker-compose.phpDocumentor.yaml (2)

• phpdoc/phpdoc 3@sha256:2b36e4f74937e40246d54ed12dfa4f988f21ed8d19e46f426ac3dc32eac2ff1d
• nginx alpine@sha256:b3c656d55d7ad751196f21b7fd2e8d4da9cb430e32f646adcf92441b72f82b14 → [Updates: alpine]

docker-compose.prometheus.yaml (3)

• prom/prometheus sha256:d936808bdea528155c0154a922cd42fd75716b8bb7ba302641350f9f3eaeba09 → [Updates: undefined]
• redis sha256:43355efd22490e31ca14b9d569367d05121e2be61fd8e47937563ae2a80952ae → [Updates: undefined]
• nginx alpine@sha256:b3c656d55d7ad751196f21b7fd2e8d4da9cb430e32f646adcf92441b72f82b14 → [Updates: alpine]

docker-compose.w3cTraceContext.yaml

docker-compose.yaml (3)

• openzipkin/zipkin-slim sha256:d951994017185bce1c859b62e13adf640e26c37e08b90ca2e4de2669dc1aad87
• jaegertracing/all-in-one sha256:ab6f1a1f0fb49ea08bcd19f6b84f6081d0d44b364b6de148e1798eb5816bacac
• otel/opentelemetry-collector-contrib sha256:004ecfe36ed8d3a5785adb8740024cdba1c546b3ae357a9db7a3e7b05c3bd160 → [Updates: undefined]

docker/gitsplit/docker-compose.yaml (1)

• jderusse/gitsplit sha256:ca619e08d0608d7ab8067be02db13409ec63a0e241c6308be42593f0c0ac705d

dockerfile (1)

docker/Dockerfile (2)

• composer 2.9@sha256:1997db9e43fde2a5a20f32fcfd50f26f698d951b3787334ebd6493d0562de97f → [Updates: 2.9]
• debian bullseye@sha256:ee239c601913c0d3962208299eef70dcffcb7aac1787f7a02f6d3e2b518755e6 → [Updates: trixie, bullseye]

github-actions (7)

.github/workflows/fossa.yml (2)

• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 → [Updates: v6.0.1]
• fossas/fossa-action v1.7.0@3ebcea1862c6ffbd5cf1b4d0bd6b3fe7bd6f2cac

.github/workflows/ossf-scorecard.yml (4)

• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 → [Updates: v6.0.1]
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• actions/upload-artifact v5.0.0@330a01c490aca151604b8cf639adc76d48f6c5d4 → [Updates: v6.0.0]
• github/codeql-action v4.31.6@fe4161a26a8629af62121b670040955b330f9af2 → [Updates: v4.31.9]

.github/workflows/php.yml (9)

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.1]
• gacts/run-and-post-run v1.4.3@81b6ce503cde93862cec047c54652e45c5dca991
• shivammathur/cache-extensions v1@4595bea7d6630821b0a3a4894f816402faaf324c → [Updates: 1.13.0]
• actions/cache v4.3.0@0057852bfaa89a56745cba8c7296529d2fc39830 → [Updates: v5.0.1]
• shivammathur/setup-php v2@44454db4f0199b8b9685a5d763dc37cbf79108e1 → [Updates: 2.36.0]
• actions/cache v4.3.0@0057852bfaa89a56745cba8c7296529d2fc39830 → [Updates: v5.0.1]
• actions/cache v4.3.0@0057852bfaa89a56745cba8c7296529d2fc39830 → [Updates: v5.0.1]
• codecov/codecov-action v5.5.1@5a1091511ad55cbe89839c7260b706298ca349f7 → [Updates: v5.5.2]
• opentelemetry-php/gh-workflows main

.github/workflows/phpdoc-to-github-pages.yml (5)

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.1]
• phpDocumentor/phpDocumentor v3.9.1@4d3daedcffb747791b212545da819bfc81252ea9
• actions/configure-pages v5@983d7736d9b0ae728b81ab479565c72886d7745b
• actions/upload-pages-artifact v4@7b1f4a764d45c48632c6b24a0339c27f5614fb0b
• actions/deploy-pages v4.0.5@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e

.github/workflows/publish-otel-php-base-docker-image.yml (5)

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.1]
• docker/setup-buildx-action v3.11.1@e468171a9de216ec08956ac3ada2f0791b6bd435 → [Updates: v3.12.0]
• docker/login-action v3.6.0@5e57cd118135c172c3672efd75eb46360885c0ef
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83

.github/workflows/shellcheck.yml (1)

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.1]

.github/workflows/split-monorepo.yaml (1)

• jderusse/gitsplit latest@sha256:ca619e08d0608d7ab8067be02db13409ec63a0e241c6308be42593f0c0ac705d

---

• Check this box to trigger a request for Renovate to run again on this repository