Bump the composer group across 1 directory with 8 updates

[dependabot]

Bumps the composer group with 7 updates in the / directory:

Package	From	To
geoip2/geoip2	3.3.0	3.4.0
laravel/fortify	1.37.2	1.37.3
laravel/sanctum	4.3.2	4.3.3
livewire/livewire	4.3.3	4.3.5
laravel/pint	1.29.3	1.30.3
laravel/sail	1.63.0	1.65.0
nunomaduro/collision	8.9.4	8.9.5

Updates geoip2/geoip2 from 3.3.0 to 3.4.0

Release notes

Sourced from geoip2/geoip2's releases.

3.4.0

• A new residential property has been added to GeoIp2\Record\Anonymizer. This property is an instance of the new GeoIp2\Record\AnonymizerFeed class and provides residential proxy data for the network, including confidence, networkLastSeen, and providerName. This may be the only property with data even when the other anonymizer properties are unset. This data is available from the GeoIP Insights web service.
• Updated the GeoIp2\Model\City constructor to handle an empty subdivisions array. This provides compatibility with some third-party databases that publish empty subdivisions arrays. Pull request by Jarek Jakubowski. GitHub #290.
• The GeoIP2 prefix in web service error messages has been changed to GeoIP.

Changelog

Sourced from geoip2/geoip2's changelog.

3.4.0 (2026-07-16)

• A new residential property has been added to GeoIp2\Record\Anonymizer. This property is an instance of the new GeoIp2\Record\AnonymizerFeed class and provides residential proxy data for the network, including confidence, networkLastSeen, and providerName. This may be the only property with data even when the other anonymizer properties are unset. This data is available from the GeoIP Insights web service.
• Updated the GeoIp2\Model\City constructor to handle an empty subdivisions array. This provides compatibility with some third-party databases that publish empty subdivisions arrays. Pull request by Jarek Jakubowski. GitHub #290.
• The GeoIP2 prefix in web service error messages has been changed to GeoIP.

Commits

• 257a350 Update for v3.4.0
• 4479f9c Set release date
• a359bd3 Merge pull request #319 from maxmind/greg/stf-997-add-residential-to-anonymizer
• be47d40 Add residential property to Anonymizer record
• dc46114 Merge pull request #318 from maxmind/dependabot/github_actions/zizmorcore/ziz...
• a2dc60a Bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7
• d3c75cc Merge pull request #316 from maxmind/dependabot/github_actions/jdx/mise-actio...
• febf887 Merge pull request #317 from maxmind/dependabot/github_actions/actions/checko...
• e338414 Bump actions/checkout from 6.0.3 to 7.0.0
• 49be03e Bump jdx/mise-action from 4.1.0 to 4.2.0
• Additional commits viewable in compare view

Updates laravel/fortify from 1.37.2 to 1.37.3

Release notes

Sourced from laravel/fortify's releases.

v1.37.3

• Add Dependabot cooldown of 5 days by @​nunomaduro in laravel/fortify#679
• Enable Dependabot auto-merge by @​nunomaduro in laravel/fortify#680
• Bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions group by @​dependabot[bot] in laravel/fortify#681
• Bump shivammathur/setup-php from 2.37.1 to 2.37.2 in the github-actions group by @​dependabot[bot] in laravel/fortify#684
• Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group by @​dependabot[bot] in laravel/fortify#686
• [1.x] Use literal status code in LockoutResponse to fix PHPStan analysis by @​jklejczyk in laravel/fortify#688
• [1.x] Respect lowercase_usernames config when resetting password by @​jklejczyk in laravel/fortify#687

Changelog

Sourced from laravel/fortify's changelog.

v1.37.3 - 2026-06-29

• Add Dependabot cooldown of 5 days by @​nunomaduro in laravel/fortify#679
• Enable Dependabot auto-merge by @​nunomaduro in laravel/fortify#680
• Bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions group by @​dependabot[bot] in laravel/fortify#681
• Bump shivammathur/setup-php from 2.37.1 to 2.37.2 in the github-actions group by @​dependabot[bot] in laravel/fortify#684
• Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group by @​dependabot[bot] in laravel/fortify#686
• [1.x] Use literal status code in LockoutResponse to fix PHPStan analysis by @​jklejczyk in laravel/fortify#688
• [1.x] Respect lowercase_usernames config when resetting password by @​jklejczyk in laravel/fortify#687

Commits

• 66b9503 Respect lowercase_usernames config when resetting password (#687)
• 49de8fa Use literal status code in LockoutResponse to fix PHPStan analysis (#688)
• c15bb43 Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group (#686)
• 015a33f Bump shivammathur/setup-php in the github-actions group (#684)
• 0f0d1c6 Bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions group (#681)
• bcd918a Enable Dependabot auto-merge (#680)
• 4e3246a Add Dependabot cooldown of 5 days (#679)
• b9298bd Update CHANGELOG
• See full diff in compare view

Updates laravel/framework from 12.62.0 to 12.65.0

Release notes

Sourced from laravel/framework's releases.

v12.65.0

• [12.x] Prevent fatal errors when logging deprecations fails by @​GrahamCampbell in laravel/framework#60907
• [12.x] Fix Factory::insert() with a count of zero by @​alies-dev in laravel/framework#60911
• [12.x] Fix schedule:list timezone conversion for range, step, and wildcard cron expressions by @​xiCO2k in laravel/framework#60913
• [12.x] Fix getMigrationBatches return type annotation by @​wouterj in laravel/framework#60973

v12.64.0

• [12.x] Enum as queue overlap key by @​finagin in laravel/framework#60722
• [12.x] Add capitalize parameter to Stringable::initials() by @​irabbi360 in laravel/framework#60741

v12.63.0

• [12.x] Add new error messages for detecting lost connections by @​mfn in laravel/framework#60472
• [12.x] Ability to refresh cache locks by @​bytestream in laravel/framework#58349
• [12.x] Guard JsonSchema deserializer against unbounded $ref expansion by @​pushpak1300 in laravel/framework#60524
• [12.x] Fix Postgres whereDate/whereTime crash when column is Expression by @​irabbi360 in laravel/framework#60540
• [12.x] Pop managed queue jobs from the cloud-agent instead of SQS by @​kieranbrown in laravel/framework#60660
• [12.x] Terminate default style value with a semicolon in ComponentAttributeBag::merge() by @​Amirhf1 in laravel/framework#60665

Commits

• 99a8fb3 Update version to v12.65.0
• 5839f3b fix url verification logic
• 01fd8c8 [12.x] Fix getMigrationBatches return type annotation (#60973)
• 40e7c23 wip (#60913)
• 16a974d Fix Factory::insert() with a count of zero (#60911)
• 78d12bd [12.x] Prevent fatal errors when logging deprecations fails (#60907)
• 0088258 Update CHANGELOG
• 727a8ea Update version to v12.64.0
• 4a92cd3 [12.x] Add capitalize parameter to Stringable::initials() (#60741)
• 5207516 [12.x] Enum as queue overlap key (#60722)
• Additional commits viewable in compare view

Updates laravel/sanctum from 4.3.2 to 4.3.3

Release notes

Sourced from laravel/sanctum's releases.

v4.3.3

• Pin GitHub Actions to commit SHAs and add Dependabot config by @​joetannenbaum in laravel/sanctum#598
• Bump shivammathur/setup-php from 2.37.0 to 2.37.1 in the github-actions group by @​dependabot[bot] in laravel/sanctum#602
• Pin pull requests and issues workflows to latest laravel/.github by @​nunomaduro in laravel/sanctum#605
• Add Dependabot cooldown of 5 days by @​nunomaduro in laravel/sanctum#606
• Enable Dependabot auto-merge by @​nunomaduro in laravel/sanctum#610
• Bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions group by @​dependabot[bot] in laravel/sanctum#611
• Bump shivammathur/setup-php from 2.37.1 to 2.37.2 in the github-actions group by @​dependabot[bot] in laravel/sanctum#612
• Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group by @​dependabot[bot] in laravel/sanctum#613

Changelog

Sourced from laravel/sanctum's changelog.

v4.3.3 - 2026-06-23

• Pin GitHub Actions to commit SHAs and add Dependabot config by @​joetannenbaum in laravel/sanctum#598
• Bump shivammathur/setup-php from 2.37.0 to 2.37.1 in the github-actions group by @​dependabot[bot] in laravel/sanctum#602
• Pin pull requests and issues workflows to latest laravel/.github by @​nunomaduro in laravel/sanctum#605
• Add Dependabot cooldown of 5 days by @​nunomaduro in laravel/sanctum#606
• Enable Dependabot auto-merge by @​nunomaduro in laravel/sanctum#610
• Bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions group by @​dependabot[bot] in laravel/sanctum#611
• Bump shivammathur/setup-php from 2.37.1 to 2.37.2 in the github-actions group by @​dependabot[bot] in laravel/sanctum#612
• Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group by @​dependabot[bot] in laravel/sanctum#613

Commits

• fee27a5 Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group (#613)
• 56d3244 use strict comparison
• d8685e5 Bump shivammathur/setup-php in the github-actions group (#612)
• 6379253 Bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions group (#611)
• 8dd31a2 Enable Dependabot auto-merge (#610)
• 334353d Update dependabot.yml
• 634348c Add Dependabot cooldown of 5 days (#606)
• bfe1fb1 Merge pull request #605 from laravel/chore/pin-reusable-workflows-latest
• e1cda0e Pin pull requests and issues workflows to latest laravel/.github
• 596ee55 Bump shivammathur/setup-php in the github-actions group (#602)
• Additional commits viewable in compare view

Updates livewire/livewire from 4.3.3 to 4.3.5

Release notes

Sourced from livewire/livewire's releases.

v4.3.5

What's Changed

• [4.x] Fix SFC detection for PHP attribute array arguments by @​joshhanley in livewire/livewire#10480

Full Changelog: livewire/livewire@v4.3.4...v4.3.5

v4.3.4

What's Changed

• [3.x] Fix wire:model.blur recreating deleted array entries by @​people-sea in livewire/livewire#10370
• [4.x] Use dedicated feature for BaseRenderless by @​ghabriel25 in livewire/livewire#10346
• [4.x] Extract synth orchestration into a HandleSynths mechanism by @​joshhanley in livewire/livewire#10276
• [4.x] Fix stale reactive snapshots for overlapping wire:model.live requests by @​cyppe in livewire/livewire#10061
• [4.x] Prevent wire:model.live.blur from triggering redundant requests by @​people-sea in livewire/livewire#10284
• [4.x] Fix validation throwing TypeError when rules(), messages() or validationAttributes() return a Collection by @​joshhanley in livewire/livewire#10303
• [4.x] Honor scoped route bindings for mount() method injection by @​mateusjunges in livewire/livewire#10341
• [4.x] Fix writeToHistory() mutating the current history state by @​people-sea in livewire/livewire#10342
• [4.x] Remove stale $wire.$watch cleanups from the component when manually unwatched by @​joshhanley in livewire/livewire#10349
• Add renderless wire model by @​sohailahmad07 in livewire/livewire#10363
• [4.x] Skip Volt functional components during SFC detection by @​joshhanley in livewire/livewire#10367
• [4.x] Add support for @continue and @break in morph markers by @​joshhanley in livewire/livewire#10368
• [4.x] Fix fetch responses with a http redirect being parsed as Livewire payloads by @​joshhanley in livewire/livewire#10369
• [4.x] Fix SFC island imports by @​VernSG in livewire/livewire#10338
• [4.x] Fix form validateOnly() keeping previous field messages by @​billyonecan in livewire/livewire#10375
• [4.x] Refactor SupportAttributes by @​ghabriel25 in livewire/livewire#10378
• Fix PHP 8.5 null array offset deprecation in EloquentCollectionSynth::hydrate() by @​JulianGlueck in livewire/livewire#10380
• [4.x] Fix BaseAuthorze and BaseRenderless not triggered using event by @​ghabriel25 in livewire/livewire#10384
• [4.x] Extract renderless-related methods into a HandlesRenderless trait by @​ghabriel25 in livewire/livewire#10389
• Revert "[4.x] Move temporary file if disks are same" by @​joshhanley in livewire/livewire#10390
• [4.x] Handle exceptions from form lifecycle hooks by @​billyonecan in livewire/livewire#10376
• [4.x] docs: add missing $this->validate() calls to file upload examples by @​calebporzio in livewire/livewire#10395
• [3.x] Improve query string parsing and effect handling by @​joshhanley in livewire/livewire#10467

New Contributors

• @​VernSG made their first contribution in livewire/livewire#10338
• @​billyonecan made their first contribution in livewire/livewire#10375
• @​JulianGlueck made their first contribution in livewire/livewire#10380

Full Changelog: livewire/livewire@v4.3.3...v4.3.4

Commits

• 7ef4b2a Build assets for v4.3.5
• e95c773 [4.x] Fix SFC detection for PHP attribute array arguments (#10480)
• 0ee4bfb Update GitHub actions
• 6154d42 Merge branch '3.x' into 4.x
• 11ebe64 [3.x] Improve query string parsing and effect handling (#10467)
• c1103e1 [4.x] docs: add missing $this->validate() calls to file upload examples (#10395)
• 29e3d2c docs: format long inline nginx snippet as a code block
• 9baf7a9 [4.x] Handle exceptions from form lifecycle hooks (#10376)
• bfc87b7 Revert "[4.x] Move temporary file if disks are same" (#10390)
• 6901c90 [4.x] Extract renderless-related methods into a HandlesRenderless trait (#1...
• Additional commits viewable in compare view

Updates laravel/pint from 1.29.3 to 1.30.3

Release notes

Sourced from laravel/pint's releases.

v1.30.3

Full Changelog: laravel/pint@v1.30.2...v1.30.3

v1.30.2

Full Changelog: laravel/pint@v1.30.1...v1.30.2

v1.30.1

Full Changelog: laravel/pint@v1.30.0...v1.30.1

v1.30.0

What's Changed

• Bump shivammathur/setup-php from 2.37.1 to 2.37.2 in the github-actions group by @​dependabot[bot] in laravel/pint#445
• Include renamed files in --diff filter by @​MassimilianoLattanzio in laravel/pint#448
• Bump guzzlehttp/psr7 from 2.11.1 to 2.12.1 by @​dependabot[bot] in laravel/pint#451
• Bump guzzlehttp/guzzle from 7.11.2 to 7.12.1 by @​dependabot[bot] in laravel/pint#450
• Write Issues to Stderr When --quiet Is Set by @​lazerg in laravel/pint#449
• Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group by @​dependabot[bot] in laravel/pint#453
• Add in to pint.json by @​cosmastech in laravel/pint#454
• Bump actions/checkout from 7.0.0 to 7.0.1 in the github-actions group by @​dependabot[bot] in laravel/pint#456
• Bump guzzlehttp/psr7 from 2.12.1 to 2.13.0 by @​dependabot[bot] in laravel/pint#457

New Contributors

• @​MassimilianoLattanzio made their first contribution in laravel/pint#448
• @​lazerg made their first contribution in laravel/pint#449

Full Changelog: laravel/pint@v1.29.3...v1.30.0

Commits

• 19ca6de Release 1.30.3
• f4315f0 fix: directive trailing commas
• de44080 Release 1.30.2
• 39e9d22 fix: keeps unused imports on blade
• f6e9997 Release 1.30.1
• df78abc fix: formatting alpine mask + escaped @@
• 46a934b fix: never adds a comma to a directive that is not a call
• 77b4e80 chore: bumps deps
• 62ec017 fix: using cache
• 72a0540 Adjusts CI
• Additional commits viewable in compare view

Updates laravel/sail from 1.63.0 to 1.65.0

Release notes

Sourced from laravel/sail's releases.

v1.65.0

• Bump actions/checkout from 7.0.0 to 7.0.1 in the github-actions group by @​dependabot[bot] in laravel/sail#891
• Enable dumpless upgrades for Meilisearch by @​CasEbb in laravel/sail#892
• Fix background scheduled commands when using Sail by @​drewmt in laravel/sail#894

v1.64.0

• Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group by @​dependabot[bot] in laravel/sail#881
• [1.x] Fix MongoDB failing to restart by persisting the configdb volume by @​lazerg in laravel/sail#883
• Make phpunit.xml DB_DATABASE replacement whitespace-tolerant by @​d-takeuchi in laravel/sail#885

Changelog

Sourced from laravel/sail's changelog.

v1.65.0 - 2026-08-03

• Bump actions/checkout from 7.0.0 to 7.0.1 in the github-actions group by @​dependabot[bot] in laravel/sail#891
• Enable dumpless upgrades for Meilisearch by @​CasEbb in laravel/sail#892
• Fix background scheduled commands when using Sail by @​drewmt in laravel/sail#894

v1.64.0 - 2026-07-17

• Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group by @​dependabot[bot] in laravel/sail#881
• [1.x] Fix MongoDB failing to restart by persisting the configdb volume by @​lazerg in laravel/sail#883
• Make phpunit.xml DB_DATABASE replacement whitespace-tolerant by @​d-takeuchi in laravel/sail#885

Commits

• d4b9213 Fix background scheduled commands when using Sail (#894)
• a7ee940 Enable dumpless upgrades for Meilisearch (#892)
• e8f6458 Bump actions/checkout from 7.0.0 to 7.0.1 in the github-actions group (#891)
• b50e432 Update CHANGELOG
• 08cacd3 Make phpunit.xml DB_DATABASE replacement whitespace-tolerant (#885)
• 4bc5b4c Fix MongoDB failing to restart by persisting the configdb volume (#883)
• ab7b38d Merge pull request #881 from laravel/dependabot/github_actions/github-actions...
• ad83fbb Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group
• 34ad501 Update CHANGELOG
• See full diff in compare view

Updates nunomaduro/collision from 8.9.4 to 8.9.5

Commits

• fb53eac chore: paratest dep
• 046ef18 chore: bumps deps
• 930ac94 chore: style changes
• 05d18b2 chore(deps): bump shivammathur/setup-php from 2.37.0 to 2.37.1 (#352)
• 1593eb6 chore: style
• f990d01 chore: security actions
• 62db0fc Revert "wip"
• 825f7fa wip
• d90252f Merge pull request #350 from nunomaduro/fix/test-case-boundary-on-pre-prep-ev...
• b279c0a bump dependencies
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies, php. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[sanmaxdev]

Checked the dependency lock update. composer validate --strict, composer audit --locked, php artisan test (443 tests), and vendor/bin/pint --test pass. The diff is limited to composer.lock, and the repository checks are green.