chore(deps): bump the composer group with 3 updates by dependabot[bot] · Pull Request #1226 · SMEWebify/WebErpMesv2

dependabot · 2026-11-02T02:23:09Z

Bumps the composer group with 3 updates: horstoeko/zugferd, laravel/framework and milon/barcode.

Updates horstoeko/zugferd from 1.0.133 to 1.0.134

Release notes

Sourced from horstoeko/zugferd's releases.

v1.0.134

[ENH] Allow passing in optional Smalot\PdfParser config (#395) (Stefan Linke)

[FIX] XRECHNUNG3 reader example asset for the current KoSIT rules (#392) (ThirdCoffe3)

Changelog

Sourced from horstoeko/zugferd's changelog.

v1.0.134

Previous version v1.0.133

Type Hash Date Author Subject Issue(s)

🌑 3ced211 2026-10-29 10:21:40 CET Stefan Linke Allow passing in optional Smalot\PdfParser config () #395

🐛 2ac2246 2026-10-21 05:06:20 CEST ThirdCoffe3 [FIX] XRECHNUNG3 reader example asset for the current KoSIT rules () #392

❗ There are 2 internal commit(s)

Commits

3ced211 Allow passing in optional Smalot\PdfParser config (#395)
0120ad4 [DOC] Added Teaser for VAMPIRE PHP to README.md
2ac2246 [FIX] XRECHNUNG3 reader example asset for the current KoSIT rules (#392)
25563d7 [DOC] Update CHANGELOG.md
See full diff in compare view

Updates laravel/framework from 13.38.0 to 13.39.0

Release notes

Sourced from laravel/framework's releases.

v13.39.0

[13.x] Rebuild the phpredis client when a broken pipe surfaces as a warning by @aleedhillon in laravel/framework#62111

[13.x] Resolve view namespace hints like view locations by @fgilio in laravel/framework#62005

[13.x] feat(database): allow disabling primary key via #[Table(key: false)] by @calebdw in laravel/framework#62113

[13.x] add duration to JobAttempted event by @jackbayliss in laravel/framework#62118

[13.x] Write config, route and event cache files atomically by @xurshudyan in laravel/framework#62117

[13.x] Fix database cache lock aborting the transaction on PostgreSQL by @xurshudyan in laravel/framework#62114

Fix assertSeeText('0') silently passes for zero as string by @crynobone in laravel/framework#62126

[13.x] Fix incorrect docblocks by @xurshudyan in laravel/framework#62125

[13.x] Don't let a job with a deleted model stop queue:retry by @xurshudyan in laravel/framework#62124

[13.x] Fix the previous route leaking into 404 requests under Octane by @xurshudyan in laravel/framework#62123

[13.x] Fix cache:prune-stale-tags with the phpredis SCAN_PREFIX option by @xurshudyan in laravel/framework#62122

[13.x] Fix Http::batch() treating retry() and throw() failures as successes by @mkantautas in laravel/framework#62120

[13.x] Create SessionGarbageCollectCommand by @browner12 in laravel/framework#62104

Bump vite from 8.0.16 to 8.3.5 in /src/Illuminate/Foundation/resources/exceptions/renderer by @dependabot[bot] in laravel/framework#62132

[13.x] Add withoutDispatchingAfterResponses to BusFake by @xurshudyan in laravel/framework#62130

[13.x] Fix pagination counts for grouped union queries by @mkantautas in laravel/framework#62131

[13.x] Fix simple paginator ignoring page name by @xurshudyan in laravel/framework#62128

[13.x] Qualify pivot columns in wherePivot closures by @xurshudyan in laravel/framework#62137

[13.x] Add forceCreate and forceCreateQuietly to BelongsToMany by @xurshudyan in laravel/framework#62136

Apply fixes from StyleCI by @taylorotwell in laravel/framework#62140

[13.x] remember token is nullable by @browner12 in laravel/framework#62105

[13.x] Fix dimensions of JXL images by @xurshudyan in laravel/framework#62151

[13.x] Fix latest() and oldest() with a join from a subquery by @xurshudyan in laravel/framework#62149

[13.x] Register the session:garbage-collect command by @xurshudyan in laravel/framework#62150

[13.x] Ensure _error_bag input is a string in Handler::invalid() by @manavu in laravel/framework#62147

[13.x] Cloud exceptions follow-ups by @timacdonald in laravel/framework#62142

[13.x] Don't fail database queue jobs on concurrency errors while reserving by @xurshudyan in laravel/framework#62145

[13.x] Fix N+1 queries on JSON:API resource collection includes by @xurshudyan in laravel/framework#62152

[13.x] Fix once() returning a cached value for a different object by @xurshudyan in laravel/framework#62121

[13.x] Fix Rule::anyOf() passing associative arrays against plain rule lists by @xurshudyan in laravel/framework#62171

[13.x] Fix withoutMiddleware() not excluding middleware with parameters by @xurshudyan in laravel/framework#62166

[13.x] Block phar:// stream wrapper in Filesystem::exists() and isFile() by @AsahiSoftWareEngineer in laravel/framework#62164

[13.x] Embed images once in markdown notifications by @xurshudyan in laravel/framework#62163

[13.x] Fake html() and plain() on MailFake by @xurshudyan in laravel/framework#62162

[12.x] Test SessionGuard::user() with recaller cookie that has an empty remember token by @crynobone with @Copilot in laravel/framework#62156

[13.x] Fix restoreOrCreate() and createOrRestore() on relations by @xurshudyan in laravel/framework#62146

[13.x] ensure sync queue passes duration too by @jackbayliss in laravel/framework#62155

Bump RedCrafter07/release-notes-action from 1.0.1 to 1.0.2 in the github-actions group by @dependabot[bot] in laravel/framework#62196

[13.x] Roll back all transaction levels after each test in RefreshDatabase by @xurshudyan in laravel/framework#62194

[13.x] Fix Request::route() return type when no route is resolved by @yoannblot in laravel/framework#62191

[13.x] Convert the down --retry datetime to GMT by @xurshudyan in laravel/framework#62190

[13.x] Cloud exceptions improvements by @timacdonald in laravel/framework#62189

[13.x] Fix illuminate/bus fatal error without illuminate/queue by @xurshudyan in laravel/framework#62182

[13.x] Add size methods to the array rule builder by @riesjart in laravel/framework#62179

[13.x] Fix distinct:ignore_case throwing on values that are not valid UTF-8 by @sumaiazaman in laravel/framework#62178

[13.x] Use the CI MySQL port in ApiAuthenticationWithEloquentTest by @xurshudyan in laravel/framework#62176

[13.x] Throw on unencodable JSON path values by @xurshudyan in laravel/framework#62175

[13.x] Allow reading files from the running phar by @xurshudyan in laravel/framework#62174

[13.x] Fail schedule:interrupt when interruption polling is disabled by @jackbayliss in laravel/framework#62183

... (truncated)

Changelog

Sourced from laravel/framework's changelog.

v13.39.0 - 2026-10-27

[13.x] Rebuild the phpredis client when a broken pipe surfaces as a warning by @aleedhillon in laravel/framework#62111

[13.x] Resolve view namespace hints like view locations by @fgilio in laravel/framework#62005

[13.x] feat(database): allow disabling primary key via #[Table(key: false)] by @calebdw in laravel/framework#62113

[13.x] add duration to JobAttempted event by @jackbayliss in laravel/framework#62118

[13.x] Write config, route and event cache files atomically by @xurshudyan in laravel/framework#62117

[13.x] Fix database cache lock aborting the transaction on PostgreSQL by @xurshudyan in laravel/framework#62114

Fix assertSeeText('0') silently passes for zero as string by @crynobone in laravel/framework#62126

[13.x] Fix incorrect docblocks by @xurshudyan in laravel/framework#62125

[13.x] Don't let a job with a deleted model stop queue:retry by @xurshudyan in laravel/framework#62124

[13.x] Fix the previous route leaking into 404 requests under Octane by @xurshudyan in laravel/framework#62123

[13.x] Fix cache:prune-stale-tags with the phpredis SCAN_PREFIX option by @xurshudyan in laravel/framework#62122

[13.x] Fix Http::batch() treating retry() and throw() failures as successes by @mkantautas in laravel/framework#62120

[13.x] Create SessionGarbageCollectCommand by @browner12 in laravel/framework#62104

Bump vite from 8.0.16 to 8.3.5 in /src/Illuminate/Foundation/resources/exceptions/renderer by @dependabot[bot] in laravel/framework#62132

[13.x] Add withoutDispatchingAfterResponses to BusFake by @xurshudyan in laravel/framework#62130

[13.x] Fix pagination counts for grouped union queries by @mkantautas in laravel/framework#62131

[13.x] Fix simple paginator ignoring page name by @xurshudyan in laravel/framework#62128

[13.x] Qualify pivot columns in wherePivot closures by @xurshudyan in laravel/framework#62137

[13.x] Add forceCreate and forceCreateQuietly to BelongsToMany by @xurshudyan in laravel/framework#62136

Apply fixes from StyleCI by @taylorotwell in laravel/framework#62140

[13.x] remember token is nullable by @browner12 in laravel/framework#62105

[13.x] Fix dimensions of JXL images by @xurshudyan in laravel/framework#62151

[13.x] Fix latest() and oldest() with a join from a subquery by @xurshudyan in laravel/framework#62149

[13.x] Register the session:garbage-collect command by @xurshudyan in laravel/framework#62150

[13.x] Ensure _error_bag input is a string in Handler::invalid() by @manavu in laravel/framework#62147

[13.x] Cloud exceptions follow-ups by @timacdonald in laravel/framework#62142

[13.x] Don't fail database queue jobs on concurrency errors while reserving by @xurshudyan in laravel/framework#62145

[13.x] Fix N+1 queries on JSON:API resource collection includes by @xurshudyan in laravel/framework#62152

[13.x] Fix once() returning a cached value for a different object by @xurshudyan in laravel/framework#62121

[13.x] Fix Rule::anyOf() passing associative arrays against plain rule lists by @xurshudyan in laravel/framework#62171

[13.x] Fix withoutMiddleware() not excluding middleware with parameters by @xurshudyan in laravel/framework#62166

[13.x] Block phar:// stream wrapper in Filesystem::exists() and isFile() by @AsahiSoftWareEngineer in laravel/framework#62164

[13.x] Embed images once in markdown notifications by @xurshudyan in laravel/framework#62163

[13.x] Fake html() and plain() on MailFake by @xurshudyan in laravel/framework#62162

[12.x] Test SessionGuard::user() with recaller cookie that has an empty remember token by @crynobone with @Copilot in laravel/framework#62156

[13.x] Fix restoreOrCreate() and createOrRestore() on relations by @xurshudyan in laravel/framework#62146

[13.x] ensure sync queue passes duration too by @jackbayliss in laravel/framework#62155

Bump RedCrafter07/release-notes-action from 1.0.1 to 1.0.2 in the github-actions group by @dependabot[bot] in laravel/framework#62196

[13.x] Roll back all transaction levels after each test in RefreshDatabase by @xurshudyan in laravel/framework#62194

[13.x] Fix Request::route() return type when no route is resolved by @yoannblot in laravel/framework#62191

[13.x] Convert the down --retry datetime to GMT by @xurshudyan in laravel/framework#62190

[13.x] Cloud exceptions improvements by @timacdonald in laravel/framework#62189

[13.x] Fix illuminate/bus fatal error without illuminate/queue by @xurshudyan in laravel/framework#62182

[13.x] Add size methods to the array rule builder by @riesjart in laravel/framework#62179

[13.x] Fix distinct:ignore_case throwing on values that are not valid UTF-8 by @sumaiazaman in laravel/framework#62178

[13.x] Use the CI MySQL port in ApiAuthenticationWithEloquentTest by @xurshudyan in laravel/framework#62176

[13.x] Throw on unencodable JSON path values by @xurshudyan in laravel/framework#62175

[13.x] Allow reading files from the running phar by @xurshudyan in laravel/framework#62174

... (truncated)

Commits

d52c3b3 Update version to v13.39.0
41840cf Fix install:broadcasting with app.jsx and app.js (#62202)
f10b9a1 Fix process fake shorthands when starting processes (#62200)
e093e46 [13.x] Add WithoutMigrationEvents attribute (#62201)
c4a246e Add restoreOrCreate and createOrRestore to through relations (#62204)
07279a6 [13.x] Throw on unencodable JSON in object casts (#62203)
723b151 Disable incrementing for models without a primary key (#62205)
377f5ce [13.x] Roll back transactions manager when commit fails (#62206)
2ff984f Cast failed job ids to strings (#62208)
f3adacd Ensure schedule:interrupt errors if its not interruptible (#62183)
Additional commits viewable in compare view

Updates milon/barcode from 13.5.1 to 13.6.0

Release notes

Sourced from milon/barcode's releases.

v13.6.0

What's Changed

Fix EAN/UPC HTML barcode rendering with showCode by @siarheipashkevich in milon/barcode#217

Encode Standard 2 of 5 digit 8 as its own bars by @SashaMIT in milon/barcode#214

Write Code 11 check digit K as a dash when the value is 10 by @SashaMIT in milon/barcode#215

New Contributors

@siarheipashkevich made their first contribution in milon/barcode#217

@SashaMIT made their first contribution in milon/barcode#214

Full Changelog: milon/barcode@v13.5.1...v13.6.0

Commits

aff97c2 Merge pull request #215 from SashaMIT/codered-code11-k-digit
e6e95ec Merge pull request #214 from SashaMIT/codered-s25-digit-eight
a0cf8c5 Merge pull request #217 from siarheipashkevich/fix/ean-html-retail-hri
3f38a40 Change the docs site url
c21735a Change the docs site url
71e8c8d Fix EAN/UPC HTML barcode rendering with showCode
1382da7 Fix CI
e855c86 Write Code 11 check digit K as a dash when the value is 10.
de26191 Encode Standard 2 of 5 digit 8 as its own bars.
2efddff Build docs with Papyrus 1.5.0 PHAR in CI.
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the composer group with 3 updates: [horstoeko/zugferd](https://github.com/horstoeko/zugferd), [laravel/framework](https://github.com/laravel/framework) and [milon/barcode](https://github.com/milon/barcode). Updates `horstoeko/zugferd` from 1.0.133 to 1.0.134 - [Release notes](https://github.com/horstoeko/zugferd/releases) - [Changelog](https://github.com/horstoeko/zugferd/blob/master/CHANGELOG.md) - [Commits](horstoeko/zugferd@v1.0.133...v1.0.134) Updates `laravel/framework` from 13.38.0 to 13.39.0 - [Release notes](https://github.com/laravel/framework/releases) - [Changelog](https://github.com/laravel/framework/blob/13.x/CHANGELOG.md) - [Commits](laravel/framework@v13.38.0...v13.39.0) Updates `milon/barcode` from 13.5.1 to 13.6.0 - [Release notes](https://github.com/milon/barcode/releases) - [Commits](milon/barcode@v13.5.1...v13.6.0) --- updated-dependencies: - dependency-name: horstoeko/zugferd dependency-version: 1.0.134 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: composer - dependency-name: laravel/framework dependency-version: 13.39.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: composer - dependency-name: milon/barcode dependency-version: 13.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: composer ... Signed-off-by: dependabot[bot] <support@github.com>

SMEWebify · 2026-11-02T19:36:30Z

@dependabot rebase

SMEWebify · 2026-11-02T22:16:59Z

@dependabot rebase

SMEWebify · 2026-11-02T22:36:09Z

@dependabot rebase

SMEWebify · 2026-11-02T22:49:23Z

https://github.com/dependabot rebase

dependabot · 2026-11-02T22:50:30Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update Php code labels Nov 2, 2026

SMEWebify self-assigned this Nov 2, 2026

SMEWebify added this to WEM Nov 2, 2026

dependabot Bot closed this Nov 2, 2026

github-project-automation Bot moved this to Done in WEM Nov 2, 2026

dependabot Bot deleted the dependabot/composer/composer-864eaca0d8 branch November 2, 2026 22:50

github-actions Bot locked and limited conversation to collaborators Nov 2, 2026

Navigation Menu

Repository navigation

chore(deps): bump the composer group with 3 updates - #1226

chore(deps): bump the composer group with 3 updates#1226
dependabot[bot] wants to merge 1 commit into
WEM-2.0from
dependabot/composer/composer-864eaca0d8

dependabot Bot commented on behalf of github Nov 2, 2026 •

edited

Loading

Uh oh!

SMEWebify commented Nov 2, 2026

Uh oh!

SMEWebify commented Nov 2, 2026

Uh oh!

SMEWebify commented Nov 2, 2026

Uh oh!

SMEWebify commented Nov 2, 2026

Uh oh!

dependabot Bot commented on behalf of github Nov 2, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Type	Hash	Date	Author	Subject	Issue(s)
🌑	3ced211	2026-10-29 10:21:40 CET	Stefan Linke	Allow passing in optional Smalot\PdfParser config ()	#395
🐛	2ac2246	2026-10-21 05:06:20 CEST	ThirdCoffe3	[FIX] XRECHNUNG3 reader example asset for the current KoSIT rules ()	#392

Conversation

dependabot Bot commented on behalf of github Nov 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.0.134

v1.0.134

v13.39.0

v13.39.0 - 2026-10-27

v13.6.0

What's Changed

New Contributors

Uh oh!

SMEWebify commented Nov 2, 2026

Uh oh!

SMEWebify commented Nov 2, 2026

Uh oh!

SMEWebify commented Nov 2, 2026

Uh oh!

SMEWebify commented Nov 2, 2026

Uh oh!

dependabot Bot commented on behalf of github Nov 2, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Nov 2, 2026 •

edited

Loading