Skip to content

fix(deps): update dependency phpoffice/phpspreadsheet to v5 (next)#2397

Closed
renovate[bot] wants to merge 1 commit into
nextfrom
renovate/next-phpoffice-phpspreadsheet-5.x
Closed

fix(deps): update dependency phpoffice/phpspreadsheet to v5 (next)#2397
renovate[bot] wants to merge 1 commit into
nextfrom
renovate/next-phpoffice-phpspreadsheet-5.x

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented May 19, 2026 •
edited
Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
phpoffice/phpspreadsheet ^1.0 → ^5.0 age confidence
phpoffice/phpspreadsheet ^1.30 → ^5.0 age confidence

Release Notes

PHPOffice/PhpSpreadsheet (phpoffice/phpspreadsheet)

v5.7.0

Compare Source

Fixed
  • Security patches.

v5.6.0

Compare Source

Added
Removed
  • Nothing yet.
Changed
  • Nothing yet.
Moved
  • Nothing yet.
Deprecated
  • Collection/Cells::MAX_COLUMN_ID - use Cell/AddressRange::MAX_COLUMN_INT.
  • Writer/Xls/Worksheet constants MAX_XLS_COLUMN, MAX_XLS_COLUMN_STRING, MAX_XLS_ROW - use Cell/AddressRange MAX_COLUMN_INT_XLS, MAX_COLUMN_XLS, MAX_ROW_XLS
Fixed

v5.5.0

Compare Source

Added
  • Much improved handling of Styles by Ods Reader. The relevant changes are listed at the end of the "Fixed" section below.
  • Option to use OldCalculatedValue in ToArray and Relatives. Issue #​1810 PR #​4787
  • Add checkbox style (Xlsx and Html). PR #​4781
  • Option to whitelist external images. PR #​4793
  • Writer/Html add ability to set line ending. PR #​4779
  • Writer/Html optionally save formulas as data attributes. PR #​4783
  • User-supplied headers and footers in PDF. Issue #​3159 PR #​4789
Deprecated
  • Writer/Html constant BODY_LINE no longer makes sense with a configurable line ending. No replacement.
  • Calculation classes FormulaParser and FormulaToken are unused. No replacement.
  • Writer/Xls/Worksheet methods insertBitMap, positionImage, writeObjPicture, processBitmapGd, and processBitmap are unused. No replacement.
Fixed

v5.4.0

Compare Source

Added
Changed
  • Evaluation of WEBSERVICE no longer requires external client, but will use oldCalculatedValue unless the request is for a domain in a user-supplied whitelist. PR #​4751
Moved
  • Code to merge cell base style with table and conditional styles moved from Html Writer to its own class. Issue #​1058 PR #​4763
Deprecated
  • Settings methods setHttpClient, unsetHttpClient, getHttpClient, and getRequestFactory are no longer used. No replacement.
  • Reader/Html protected property dataArray, described as used only for testing, is not used for testing. No replacement.
Fixed

v5.3.0

Compare Source

Added
Deprecated
  • $dataType, the second parameter of Cell::setValueExplicit, is currently optional. Omitting it is deprecated, and it will be required in a future release.
Fixed

v5.2.0

Compare Source

Added
  • This release should be usable with Php8.5 Release Candidates without deprecation messages.
  • Option to display numbers with less precision. Issue #​4626 PR #​4640
  • Offer Tcpdf Interface which throws exception rather than die. PR #​4666
  • Xls Reader ListWorksheetDimensions method. PR #​4689
Deprecated
  • Worksheet::getHashInt serves no useful purpose. No replacement.
  • Spreadsheet::getId serves no useful purpose. No replacement.
Fixed

v5.1.0

Compare Source

Added
Fixed

v5.0.0

Compare Source

Breaking Changes
  • Images will be loaded from an external source (e.g. http://example.com/img.png) only if the reader is explicitly set to allow it via $reader->setAllowExternalImages(true). We do not believe that loading of external images is a widely used feature.
  • Deletion of items deprecated in Release 4. See "removed" below.
  • Move some properties from Base Reader to Html Reader. PR #​4551
  • DefaultValueBinder will treat integers with more than 15 digits as strings. Issue #​4522 PR #​4527
Removed
  • Theme public constants COLOR_SCHEME_2013_PLUS_NAME (use COLOR_SCHEME_2013_2022_NAME) and COLOR_SCHEME_2013_PLUS (use COLOR_SCHEME_2013_2022).
Fixed

v4.5.0

Compare Source

Added
  • Add to all readers the option to allow or forbid fetching external images. This is unconditionally allowed now. The default will be set to "allow", so no code changes are necessary. However, we are giving consideration to changing the default. PR #​4543
  • Address Excel Inappropriate Number Format Substitution. PR #​4532
Fixed

v4.4.0

Compare Source

Added
Deprecated
  • Theme constants COLOR_SCHEME_2013_PLUS_NAME (use COLOR_SCHEME_2013_2022_NAME) and COLOR_SCHEME_2013_PLUS (use COLOR_SCHEME_2013_2022).
Fixed

v4.3.1

Compare Source

Fixed

v4.3.0

Compare Source

Added
Changed
  • Phpstan Level 10.
Fixed

v4.2.0

Compare Source

Added
Changed
  • Phpstan Version 2. PR #​4384
  • Start migration to Phpstan level 9. PR #​4396
  • Calculation locale logic moved to separate class. PR #​4398
  • TREND_POLYNOMIAL_* and TREND_BEST_FIT do not work, and are changed to throw Exceptions if attempted. (TREND_BEST_FIT_NO_POLY works.) An attempt to use an unknown trend type will now also throw an exception. Issue #​4400 PR #​4339
  • Month parameter of DATE function will now return VALUE if an ordinal string (e.g. '3rd') is used, but will accept bool or null. PR #​4420
Fixed

v4.1.0

Compare Source

Added
Changed
Fixed

v4.0.0

Compare Source

BREAKING CHANGES
  • Data Validations will be stored by worksheet, not cell. Index can be one or more cells or cell ranges. Issue #​797 Issue #​4091 Issue #​4206 PR #​4240
  • Conditional Formatting adds Priority property and handles overlapping ranges better. Issue #​4312 Issue #​4318 PR #​4314
  • Csv Reader will no longer auto-detect Mac line endings by default. Prior behavior can be explicitly enabled via setTestAutoDetect(true), and it will not be possible at all with Php9+. Issue #​4092 PR #​4340
  • Html Writer will now use "better boolean" logic. Booleans will now be output by default as TRUE/FALSE rather than 1/null-string. Prior behavior can be explicitly enabled via setBetterBoolean(false). PR #​4340
  • Xlsx Writer will now use false as the default for forceFullCalc. This affects writes with preCalculateFormulas set to false. Prior behavior can be explicitly enabled via setForceFullCalc(null).PR #​4340
  • Deletion of items deprecated in Release 3. See "removed" below.
Added
Removed
  • Worksheet::getStyles - no replacement. PR #​4330
  • The following items were deprecated in release 3 and are now removed.
  • Drawing::setIsUrl - no replacement.
  • Settings::setLibXmlLoaderOptions() and Settings::getLibXmlLoaderOptions() - no replacement.
  • Worksheet::getHashCode - no replacement.
  • IReader::SKIP_EMPTY_CELLS - use its alias IGNORE_EMPTY_CELLS instead.
  • Worksheet::getProtectedCells - use getProtectedCellRanges instead.
  • Writer/Html::isMpdf property - use instanceof Mpdf instead.
Changed
  • Nothing yet.
Moved
  • Nothing yet.
Deprecated
  • Nothing yet.
Fixed
  • Xls writer Parser Mishandling True/False Argument. Issue #​4331 PR #​4333
  • Xls writer Parser Parse By Character Not Byte. PR #​4344
  • Minor changes to dynamic array calculations exposed by using explicit array return types in some tests. PR #​4328

v3.10.5

Compare Source

Fixed
  • Security patches.

v3.10.4

Compare Source

Fixed
  • Security patches.
  • Option to whitelist external images. Security-related backport of PR #​4793

v3.10.3

Compare Source

Changed
  • Evaluation of WEBSERVICE no longer requires external client, but will use oldCalculatedValue unless the request is for a domain in a user-supplied whitelist. Security-related backport of PR #​4751
Deprecated
  • Settings methods setHttpClient, unsetHttpClient, getHttpClient, and getRequestFactory are no longer used. No replacement.
Fixed

v3.10.2

Compare Source

Added
  • Formal support for Php8.5.
Fixed

v3.10.1

Compare Source

Added
  • Option for Readers to create a new blank sheet if none match LoadSheetsOnly list. PR #​4623 Backport of PR #​4618.
  • Remove imagedestroy from MemoryDrawing. Backport of PR #​4625.
Fixed

v3.10.0

Compare Source

Breaking Changes
  • Images will be loaded from an external source (e.g. http://example.com/img.png) only if the reader is explicitly set to allow it via $reader->setAllowExternalImages(true). We do not believe that loading of external images is a widely used feature. This is a necessary change for security purposes. It unfortunately breaks Semantic Versioning for reasons described above; there is no way to start a new major version for this branch.

v3.9.3

Compare Source

Added
  • Add to all readers the option to allow or forbid fetching external images. This is unconditionally allowed now. The default will be set to "allow", so no code changes are necessary. However, we are giving consideration to changing the default. PR #​4548

v3.9.2

Compare Source

Changed
  • Allow php-cs-fixer to Handle Implicit Backslashes.
Added
Fixed

v3.9.1

Compare Source

Fixed
  • Xls writer Parser Mishandling True/False Argument. Backport of PR #​4333
  • Xls writer Parser Parse By Character Not Byte. Backport of PR #​4344

v3.9.0

Compare Source

Added
  • Methods to get style for row or column. PR #​4317
  • Method for duplicating worksheet in spreadsheet. PR #​4315
Fixed

v3.8.0

Compare Source

Added
  • CHOOSECOLS, CHOOSEROWS, DROP, TAKE, and EXPAND. PR #​4286
Fixed

v3.7.0

Compare Source

Deprecated
  • Drawing::setIsUrl is unneeded. The property is set when setPath determines whether path is a url.
Fixed

v3.6.0

Compare Source

Added
  • Nothing yet.
Changed
  • Nothing yet.
Moved
  • Nothing yet.
Deprecated
  • Nothing yet.
Fixed

v3.5.0

Compare Source

Added
  • Nothing yet.
Changed
  • Settings::libXmlLoaderOptions is ignored. PR #​4233
Moved
  • Nothing yet.
Deprecated
  • Settings::setLibXmlLoaderOptions() and Settings::getLibXmlLoaderOptions() are no longer needed - no replacement.
  • Worksheet::getHashCode is no longer needed.
Fixed

v3.4.0

Compare Source

Security Fix
  • Several security patches.
Added
Changed
Deprecated
  • IReader::SKIP_EMPTY_CELLS - use its alias IGNORE_EMPTY_CELLS instead.
  • Worksheet::getProtectedCells was deprecated in release 2, but was not properly documented, and not removed in release 3. Use getProtectedCellRanges instead.
  • Writer/Html::isMpdf property was deprecated in release 2, but was not properly documented, and not removed in release 3. Use instanceof Mpdf instead.
Moved
  • Nothing yet.
Fixed

[v3.3.0](https://redirect.github.com/PHPOffice

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (in timezone Europe/Berlin)

  • Branch creation
    • Between 12:00 AM and 04:59 AM (* 0-4 * * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

ThomasAFink
ThomasAFink previously approved these changes May 19, 2026
View reviewed changes
@renovate renovate Bot force-pushed the renovate/next-phpoffice-phpspreadsheet-5.x branch 3 times, most recently from 9de604f to f5f6d9b Compare May 27, 2026 07:51
@renovate renovate Bot force-pushed the renovate/next-phpoffice-phpspreadsheet-5.x branch 3 times, most recently from 26faa8a to dfcf4bb Compare May 31, 2026 11:06
@renovate
Copy link
Copy Markdown
Contributor Author

renovate Bot commented May 31, 2026

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: zmsadmin/composer.lock
Command failed: composer update phpoffice/phpspreadsheet:5.7.0 --with-dependencies --ignore-platform-req=ext-* --ignore-platform-req=lib-* --no-ansi --no-interaction --no-scripts --no-autoloader --no-plugins --minimal-changes
Loading composer repositories with package information
Dependency psr/http-message is also a root requirement. Package has not been listed as an update argument, so keeping locked at old version. Use --with-all-dependencies (-W) to include root dependencies.
Dependency vimeo/psalm is also a root requirement. Package has not been listed as an update argument, so keeping locked at old version. Use --with-all-dependencies (-W) to include root dependencies.
Updating dependencies
Your requirements could not be resolved to an installable set of packages.

  Problem 1
    - vimeo/psalm is locked to version 6.5.0 and an update of this package was not requested.
    - vimeo/psalm 6.5.0 requires php ~8.1.17 || ~8.2.4 || ~8.3.0 || ~8.4.0 -> your php version (8.5.6) does not satisfy that requirement.
File name: zmsstatistic/composer.lock
Command failed: composer update phpoffice/phpspreadsheet:5.7.0 --with-dependencies --ignore-platform-req=ext-* --ignore-platform-req=lib-* --no-ansi --no-interaction --no-scripts --no-autoloader --no-plugins --minimal-changes
Loading composer repositories with package information
Dependency vimeo/psalm is also a root requirement. Package has not been listed as an update argument, so keeping locked at old version. Use --with-all-dependencies (-W) to include root dependencies.
Updating dependencies
Your requirements could not be resolved to an installable set of packages.

  Problem 1
    - vimeo/psalm is locked to version 6.5.0 and an update of this package was not requested.
    - vimeo/psalm 6.5.0 requires php ~8.1.17 || ~8.2.4 || ~8.3.0 || ~8.4.0 -> your php version (8.5.6) does not satisfy that requirement.

@renovate renovate Bot force-pushed the renovate/next-phpoffice-phpspreadsheet-5.x branch from dfcf4bb to f2b7201 Compare June 1, 2026 05:29
@ThomasAFink ThomasAFink closed this Jun 1, 2026
@renovate
Copy link
Copy Markdown
Contributor Author

renovate Bot commented Jun 1, 2026

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update. You will not get PRs for any future 5.x releases. But if you manually upgrade to 5.x then Renovate will re-enable minor and patch updates automatically.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.

@renovate renovate Bot deleted the renovate/next-phpoffice-phpspreadsheet-5.x branch June 1, 2026 14:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@ThomasAFink ThomasAFink ThomasAFink left review comments

Assignees

No one assigned

Labels

Module: zmsadmin Module: zmsstatistic

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@ThomasAFink