Skip to content

(chore): bump the composer group with 2 updates#32

Merged
yard-bot merged 1 commit into
mainfrom
dependabot/composer/composer-adab98eec6
May 11, 2026
Merged

(chore): bump the composer group with 2 updates#32
yard-bot merged 1 commit into
mainfrom
dependabot/composer/composer-adab98eec6

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 11, 2026

Bumps the composer group with 2 updates: spatie/laravel-data and yard/data.

Updates spatie/laravel-data from 4.22.1 to 4.23.0

Release notes

Sourced from spatie/laravel-data's releases.

4.23.0

A round of bug fixes for validation rules, install resolution, and rule overrides.

Run rules() overrides regardless of property defaults (#1187)

Properties with a default value were silently dropping rules declared in the rules() method when the property was missing from the payload, so conditional rules like required, required_if, and prohibited_if never fired. The skip in DataValidationRulesResolver was originally there to stop auto-generated rules from rejecting empty payloads on all-default data classes (#441), but it also short-circuited explicit overrides.

Overrides are now resolved upfront, and the default-value skip only applies when no override exists for that property. #[WithoutValidation] no longer suppresses an override for the same key. If you wrote rules(), you own them. Thanks @​rubenvanassche.

Fix install conflict on PHP 8.4 with Pest installed (#1186)

composer require spatie/laravel-data failed when Pest was already installed, because Pest's chain pulls phpdocumentor/reflection-docblock 6.0.3 while the phpdocumentor/reflection ^6.0 meta package hard-pinned reflection-docblock ^5. The meta package is now dropped in favour of direct dependencies on the three sub-packages we use, with widened constraints:

-        "phpdocumentor/reflection" : "^6.0",
+        "phpdocumentor/type-resolver" : "^1.7 || ^2.0",
+        "phpdocumentor/reflection-common" : "^2.2",
+        "phpdocumentor/reflection-docblock" : "^5.3 || ^6.0",

The phpDocumentor APIs we call are identical across both majors, so no code changes are required. Thanks @​rubenvanassche.

Allow float values for Min, Max and Size validation attributes (#1185)

The constructors typed their value as int|ExternalReference, and because those classes don't declare strict types, PHP silently coerced floats to int. #[Min(0.01)] became min:0, letting 0 pass validation, even though Laravel's validator accepts floats for these rules. Types are now widened to int|float|ExternalReference, mirroring MultipleOf:

#[Min(0.01), Max(99.99)]
public float $price;

Digit-count rules (Digits, MinDigits, MaxDigits, DigitsBetween) and Password length stay int. Thanks @​rubenvanassche.

What's Changed

Full Changelog: spatie/laravel-data@4.22.1...4.23.0

Changelog

Sourced from spatie/laravel-data's changelog.

4.23.0 - 2026-05-08

A round of bug fixes for validation rules, install resolution, and rule overrides.

Run rules() overrides regardless of property defaults (#1187)

Properties with a default value were silently dropping rules declared in the rules() method when the property was missing from the payload, so conditional rules like required, required_if, and prohibited_if never fired. The skip in DataValidationRulesResolver was originally there to stop auto-generated rules from rejecting empty payloads on all-default data classes (#441), but it also short-circuited explicit overrides.

Overrides are now resolved upfront, and the default-value skip only applies when no override exists for that property. #[WithoutValidation] no longer suppresses an override for the same key. If you wrote rules(), you own them. Thanks @​rubenvanassche.

Fix install conflict on PHP 8.4 with Pest installed (#1186)

composer require spatie/laravel-data failed when Pest was already installed, because Pest's chain pulls phpdocumentor/reflection-docblock 6.0.3 while the phpdocumentor/reflection ^6.0 meta package hard-pinned reflection-docblock ^5. The meta package is now dropped in favour of direct dependencies on the three sub-packages we use, with widened constraints:

-        "phpdocumentor/reflection" : "^6.0",
+        "phpdocumentor/type-resolver" : "^1.7 || ^2.0",
+        "phpdocumentor/reflection-common" : "^2.2",
+        "phpdocumentor/reflection-docblock" : "^5.3 || ^6.0",

The phpDocumentor APIs we call are identical across both majors, so no code changes are required. Thanks @​rubenvanassche.

Allow float values for Min, Max and Size validation attributes (#1185)

The constructors typed their value as int|ExternalReference, and because those classes don't declare strict types, PHP silently coerced floats to int. #[Min(0.01)] became min:0, letting 0 pass validation, even though Laravel's validator accepts floats for these rules. Types are now widened to int|float|ExternalReference, mirroring MultipleOf:

#[Min(0.01), Max(99.99)]
public float $price;

Digit-count rules (Digits, MinDigits, MaxDigits, DigitsBetween) and Password length stay int. Thanks @​rubenvanassche.

What's Changed

Full Changelog: spatie/laravel-data@4.22.1...4.23.0

Commits
  • 2305437 Run rules() overrides regardless of property defaults (#1187)
  • ba02934 Fix install conflict on PHP 8.4 with Pest installed (#1186)
  • de6404a Merge pull request #1185 from spatie/fix/min-max-size-float-values
  • c50ca60 Allow float values for Min, Max and Size validation attributes
  • 71d9a10 Update CHANGELOG
  • See full diff in compare view

Updates yard/data from 1.5.0 to 1.5.1

Release notes

Sourced from yard/data's releases.

v1.5.1

What's Changed

Full Changelog: yardinternet/wp-data@v1.5.0...v1.5.1

Commits
  • 2f97117 fix: checks for zero value before retrieving objects
  • a415537 (chore): bump spatie/laravel-data in the composer group
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the composer group with 2 updates: [spatie/laravel-data](https://github.com/spatie/laravel-data) and [yard/data](https://github.com/yardinternet/wp-data).


Updates `spatie/laravel-data` from 4.22.1 to 4.23.0
- [Release notes](https://github.com/spatie/laravel-data/releases)
- [Changelog](https://github.com/spatie/laravel-data/blob/main/CHANGELOG.md)
- [Commits](spatie/laravel-data@4.22.1...4.23.0)

Updates `yard/data` from 1.5.0 to 1.5.1
- [Release notes](https://github.com/yardinternet/wp-data/releases)
- [Commits](yardinternet/wp-data@v1.5.0...v1.5.1)

---
updated-dependencies:
- dependency-name: spatie/laravel-data
  dependency-version: 4.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: composer
- dependency-name: yard/data
  dependency-version: 1.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: composer
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update php code labels May 11, 2026
@yard-bot yard-bot merged commit 7d63cf5 into main May 11, 2026
4 checks passed
@yard-bot yard-bot deleted the dependabot/composer/composer-adab98eec6 branch May 11, 2026 05:46
@github-actions
Copy link
Copy Markdown

Composer package changes
Prod Packages Operation Base Target Link License
spatie/laravel-data Upgraded 4.22.1 4.23.0 Compare MIT
symfony/deprecation-contracts Upgraded v3.6.0 v3.7.0 Compare MIT
symfony/event-dispatcher-contracts Upgraded v3.6.0 v3.7.0 Compare MIT
symfony/http-kernel Upgraded v6.4.36 v6.4.38 Compare MIT
symfony/service-contracts Upgraded v3.6.1 v3.7.0 Compare MIT
symfony/translation Upgraded v6.4.34 v6.4.38 Compare MIT
symfony/translation-contracts Upgraded v3.6.1 v3.7.0 Compare MIT
yard/data Upgraded v1.5.0 v1.5.1 Compare MIT
nikic/php-parser Removed v5.7.0 - Compare BSD-3-Clause
phpdocumentor/reflection Removed 6.6.0 - Compare MIT
Dev Packages Operation Base Target Link License
nikic/php-parser New - v5.7.0 Compare BSD-3-Clause

@github-actions
Copy link
Copy Markdown

Coverage report for commit: e14b3a9
File: coverage.xml

Cover ┌─────────────────────────┐ Freq.
   0% │ ███████████████████████ │ 100.0%
  10% │ ░░░░░░░░░░░░░░░░░░░░░░░ │  0.0%
  20% │ ░░░░░░░░░░░░░░░░░░░░░░░ │  0.0%
  30% │ ░░░░░░░░░░░░░░░░░░░░░░░ │  0.0%
  40% │ ░░░░░░░░░░░░░░░░░░░░░░░ │  0.0%
  50% │ ░░░░░░░░░░░░░░░░░░░░░░░ │  0.0%
  60% │ ░░░░░░░░░░░░░░░░░░░░░░░ │  0.0%
  70% │ ░░░░░░░░░░░░░░░░░░░░░░░ │  0.0%
  80% │ ░░░░░░░░░░░░░░░░░░░░░░░ │  0.0%
  90% │ ░░░░░░░░░░░░░░░░░░░░░░░ │  0.0%
 100% │ ░░░░░░░░░░░░░░░░░░░░░░░ │  0.0%
      └─────────────────────────┘
 *Legend:* █ = Current Distribution 
Summary - Lines: - | Methods: -
FilesLinesMethodsBranches
src
   DatabaseServiceProvider.php--100.00%
src/Model
   Post.php--100.00%
src/Traits
   Related.php--100.00%

🤖 comment via lucassabreu/comment-coverage-clover

1 similar comment
@github-actions
Copy link
Copy Markdown

Coverage report for commit: e14b3a9
File: coverage.xml

Cover ┌─────────────────────────┐ Freq.
   0% │ ███████████████████████ │ 100.0%
  10% │ ░░░░░░░░░░░░░░░░░░░░░░░ │  0.0%
  20% │ ░░░░░░░░░░░░░░░░░░░░░░░ │  0.0%
  30% │ ░░░░░░░░░░░░░░░░░░░░░░░ │  0.0%
  40% │ ░░░░░░░░░░░░░░░░░░░░░░░ │  0.0%
  50% │ ░░░░░░░░░░░░░░░░░░░░░░░ │  0.0%
  60% │ ░░░░░░░░░░░░░░░░░░░░░░░ │  0.0%
  70% │ ░░░░░░░░░░░░░░░░░░░░░░░ │  0.0%
  80% │ ░░░░░░░░░░░░░░░░░░░░░░░ │  0.0%
  90% │ ░░░░░░░░░░░░░░░░░░░░░░░ │  0.0%
 100% │ ░░░░░░░░░░░░░░░░░░░░░░░ │  0.0%
      └─────────────────────────┘
 *Legend:* █ = Current Distribution 
Summary - Lines: - | Methods: -
FilesLinesMethodsBranches
src
   DatabaseServiceProvider.php--100.00%
src/Model
   Post.php--100.00%
src/Traits
   Related.php--100.00%

🤖 comment via lucassabreu/comment-coverage-clover

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file php Pull requests that update php code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant