Chore(deps): bump phpoffice/phpspreadsheet from 1.30.0 to 1.30.4

[dependabot]

Questions	Answers
Branch?	develop
Description?	Dependabot update
Type?	improvement
Category?	CO
BC breaks?	no
Deprecations?	no
Fixed ticket?	~
How to test?	~

Bumps phpoffice/phpspreadsheet from 1.30.0 to 1.30.4.

Release notes

Sourced from phpoffice/phpspreadsheet's releases.

1.30.4

Fixed

• Security patches.

1.30.3

Fixed

• Security patches.
• Option to whitelist external images. Security-related backport of [PR #4793](PHPOffice/PhpSpreadsheet#4793)

1.30.2

Changed

• Evaluation of WEBSERVICE no longer requires external client, but will use oldCalculatedValue unless the request is for a domain in a user-supplied whitelist. Security-related backport of [PR #4751](PHPOffice/PhpSpreadsheet#4751)

Deprecated

• Settings methods setHttpClient, unsetHttpClient, getHttpClient, and getRequestFactory are no longer used. No replacement.

Fixed

• Changes to WEBSERVICE. Backport of [PR #4751](PHPOffice/PhpSpreadsheet#4751)

1.30.1

Functionally Frozen

• Except for security changes, no further maintenance will be applied to this branch. You are encouraged to upgrade to a maintained branch as soon as possible. Maintained branches are master (preferred - version is 5.2.0 as of the date when this is being written), release390 (current version is 3.10.1), and release222 (2.4.1).
• Of particular note is that this branch should not run under Php 8.5+, and will not be updated to avoid deprecation notices introduced with Php 8.5.

Changelog

Sourced from phpoffice/phpspreadsheet's changelog.

2026-04-19 - 1.30.4

Fixed

• Security patches.

2026-04-09 - 1.30.3

Fixed

• Security patches.
• Option to whitelist external images. Security-related backport of [PR #4793](PHPOffice/PhpSpreadsheet#4793)

2026-01-10 - 1.30.2

Changed

• Evaluation of WEBSERVICE no longer requires external client, but will use oldCalculatedValue unless the request is for a domain in a user-supplied whitelist. Security-related backport of [PR #4751](PHPOffice/PhpSpreadsheet#4751)

Deprecated

• Settings methods setHttpClient, unsetHttpClient, getHttpClient, and getRequestFactory are no longer used. No replacement.

Fixed

• Changes to WEBSERVICE. Backport of [PR #4751](PHPOffice/PhpSpreadsheet#4751)

2025-10-25 - 1.30.1

Functionally Frozen

• Except for security changes, no further maintenance will be applied to this branch. You are encouraged to upgrade to a maintained branch as soon as possible. Maintained branches are master (preferred - version is 5.4.0 as of the date when this is being written), 3.10.x (current version is 3.10.3), and 2.4.x (2.4.3).
• Of particular note is that this branch should not run under Php 8.5+, and will not be updated to avoid deprecation notices introduced with Php 8.5.

Commits

• 0297038 Security Patches
• d28d482 Prepare Changelog for New Release
• 87a0eb5 Option to Whitelist External Images r129 (#4854)
• b6c44a4 Security Patches
• 7919868 Update License 1.30.x
• 09cdde5 Instantiator Problem (#4778)
• 4ad82d2 Prepare Changelog for New Release
• 1ca2b80 Changes to WEBSERVICE R129 (#4758)
• e862463 Update README With New Branch Names
• fa8257a Prep Work for 1.30.1
• Additional commits viewable in compare view