Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository problems

These problems occurred while renovating this repository. View logs.

• WARN: Package lookup failures

Note

These dependencies have not received updates for an extended period and may be unmaintained:

View abandoned dependencies (23)

Datasource	Name	Last Updated
composer	mikey179/vfsstream	2024-08-29
composer	nyholm/psr7-server	2023-11-08
composer	php-http/discovery	2024-10-02
composer	php-http/mock-client	2024-10-31
composer	psr/http-client	2023-09-23
composer	psr/http-message	2023-04-04
composer	psr/log	2024-09-11
composer	symfony/polyfill-php82	2024-09-09
github-actions	actions/configure-pages	2024-03-30

Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release.
Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): update shivammathur/cache-extensions action to v1.13.0
• chore(deps): update shivammathur/setup-php action to v2.36.0
• chore(deps): update actions/checkout action to v6
• chore(deps): update debian docker tag to v13
• chore(deps): update dependency phpunit/phpunit to v12
• chore(deps): update dependency rector/rector to v2
• chore(deps): update phpdoc/phpdoc docker tag to v20250608075158860000
• chore(deps): update phpstan packages to v2 (major) (phpstan/phpstan, phpstan/phpstan-mockery, phpstan/phpstan-phpunit)
• fix(deps): update symfony packages to v8 (major) (symfony/config, symfony/http-client, symfony/var-exporter, symfony/yaml)

---

Warning

Renovate failed to look up the following dependencies: Failed to look up packagist package psr/http-client-implementation, Failed to look up packagist package psr/http-factory-implementation, Failed to look up packagist package php-http/async-client-implementation.

Files affected: composer.json, src/Contrib/Zipkin/composer.json, src/Contrib/composer.json, src/SDK/composer.json

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update otel/opentelemetry-collector-contrib docker digest to b14234c
• chore(deps): update actions/checkout action to v6.0.1
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

composer

composer.json

• php ^8.1
• google/protobuf ^3.22 || ^4.0
• nyholm/psr7-server ^1.1
• php-http/discovery ^1.14
• psr/http-client ^1.0
• psr/http-client-implementation ^1.0
• psr/http-factory-implementation ^1.0
• psr/http-message ^1.0.1|^2.0
• psr/log ^1.1|^2.0|^3.0
• ramsey/uuid ^3.0 || ^4.0
• symfony/config ^5.4 || ^6.4 || ^7.0
• symfony/polyfill-mbstring ^1.23
• symfony/polyfill-php82 ^1.26
• symfony/polyfill-php83 ^1.32
• symfony/polyfill-php84 ^1.32
• tbachert/spi ^1.0.1
• amphp/amp ^3
• bamarni/composer-bin-plugin ^1.8
• dg/bypass-finals ^1.4
• grpc/grpc ^1.30
• guzzlehttp/guzzle ^7.4
• guzzlehttp/psr7 ^2.1
• mikey179/vfsstream ^1.6.11
• mockery/mockery ^1.5.1
• monolog/monolog ^3.0
• nyholm/psr7 ^1.4
• php-http/mock-client ^1.5
• phpdocumentor/reflection-docblock ^5.3
• phpspec/prophecy ^1.22
• phpspec/prophecy-phpunit ^2
• phpstan/phpstan ^1.10.13
• phpstan/phpstan-mockery ^1.1
• phpstan/phpstan-phpunit ^1.3
• phpunit/phpunit ^10 || ^11
• sebastian/exporter <= 6.0.1 || >= 6.1.3
• symfony/http-client ^5.2
• symfony/var-exporter ^5.4 || ^6.4 || ^7.0
• symfony/yaml ^5.4 || ^6.4 || ^7.0

proto/otel/composer.json

• php ^8.0
• google/protobuf ^3.22 || ^4.0

src/API/composer.json

• php ^8.1
• open-telemetry/context ^1.4
• psr/log ^1.1|^2.0|^3.0
• symfony/polyfill-php82 ^1.26

src/Config/SDK/composer.json

• php ^8.1
• open-telemetry/context ^1.4
• open-telemetry/sdk ^1.8
• symfony/config ^5.4 || ^6.4 || ^7.0
• tbachert/spi ^1.0.5

src/Context/composer.json

• php ^8.1
• symfony/polyfill-php82 ^1.26

src/Contrib/composer.json

• php ^8.1
• open-telemetry/api ^1.0
• open-telemetry/context ^1.0
• open-telemetry/gen-otlp-protobuf ^1.2
• open-telemetry/sdk ^1.0
• open-telemetry/sem-conv ^1.0
• php-http/async-client-implementation ^1.0
• php-http/discovery ^1.14
• psr/http-factory-implementation ^1.0
• psr/log ^1.1|^2.0|^3.0
• symfony/polyfill-mbstring ^1.23
• symfony/polyfill-php82 ^1.26

src/Contrib/Grpc/composer.json

• php ^8.1
• grpc/grpc *
• open-telemetry/sdk ^1.0

src/Contrib/Otlp/composer.json

• php ^8.1
• php-http/discovery ^1.14
• open-telemetry/gen-otlp-protobuf ^1.1
• open-telemetry/api ^1.0
• open-telemetry/sdk ^1.0

src/Contrib/Zipkin/composer.json

• php ^8.1
• open-telemetry/api ^1.0
• open-telemetry/sdk ^1.0
• php-http/async-client-implementation ^1.0
• php-http/discovery ^1.14
• psr/http-factory-implementation ^1.0

src/Extension/Propagator/B3/composer.json

• php ^8.1
• open-telemetry/api ^1.0
• open-telemetry/context ^1.0

src/Extension/Propagator/CloudTrace/composer.json

• php ^8.1
• open-telemetry/api ^1.0
• open-telemetry/context ^1.0

src/Extension/Propagator/Jaeger/composer.json

• php ^8.1
• open-telemetry/api ^1.0
• open-telemetry/context ^1.0

src/SDK/composer.json

• php ^8.1
• nyholm/psr7-server ^1.1
• open-telemetry/api ^1.7
• open-telemetry/context ^1.4
• open-telemetry/sem-conv ^1.0
• php-http/discovery ^1.14
• psr/http-client-implementation ^1.0
• psr/http-factory-implementation ^1.0
• psr/http-client ^1.0
• psr/http-message ^1.0.1|^2.0
• psr/log ^1.1|^2.0|^3.0
• ramsey/uuid ^3.0 || ^4.0
• symfony/polyfill-mbstring ^1.23
• symfony/polyfill-php82 ^1.26
• tbachert/spi ^1.0.5

src/SemConv/composer.json

• php ^8.0

vendor-bin/deptrac/composer.json

• qossmic/deptrac-shim ^1.0

vendor-bin/infection/composer.json

• infection/infection ^0.31.0

vendor-bin/phan/composer.json

• phan/phan ^5.4

vendor-bin/php-cs-fixer/composer.json

• friendsofphp/php-cs-fixer ^3.54

vendor-bin/phpbench/composer.json

• phpbench/phpbench ^1.2

vendor-bin/phpmetrics/composer.json

• phpmetrics/phpmetrics ^2.8

vendor-bin/psalm/composer.json

• vimeo/psalm ^6
• psalm/plugin-mockery ^1
• psalm/plugin-phpunit ^0.19

vendor-bin/rector/composer.json

• rector/rector ^1.0

docker-compose

docker-compose.collector.yaml

• openzipkin/zipkin-slim sha256:d951994017185bce1c859b62e13adf640e26c37e08b90ca2e4de2669dc1aad87
• jaegertracing/all-in-one sha256:e493bff54e457ba5827f82418d744a322165cd5d46146607fb76489bfb2a8885
• otel/opentelemetry-collector-contrib sha256:004ecfe36ed8d3a5785adb8740024cdba1c546b3ae357a9db7a3e7b05c3bd160

docker-compose.fiber-ffi.yaml

• nginx alpine@sha256:b3c656d55d7ad751196f21b7fd2e8d4da9cb430e32f646adcf92441b72f82b14

docker-compose.phpDocumentor.yaml

• phpdoc/phpdoc 3@sha256:2b36e4f74937e40246d54ed12dfa4f988f21ed8d19e46f426ac3dc32eac2ff1d
• nginx alpine@sha256:b3c656d55d7ad751196f21b7fd2e8d4da9cb430e32f646adcf92441b72f82b14

docker-compose.prometheus.yaml

• prom/prometheus sha256:d936808bdea528155c0154a922cd42fd75716b8bb7ba302641350f9f3eaeba09
• redis sha256:43355efd22490e31ca14b9d569367d05121e2be61fd8e47937563ae2a80952ae
• nginx alpine@sha256:b3c656d55d7ad751196f21b7fd2e8d4da9cb430e32f646adcf92441b72f82b14

docker-compose.w3cTraceContext.yaml

docker-compose.yaml

• openzipkin/zipkin-slim sha256:d951994017185bce1c859b62e13adf640e26c37e08b90ca2e4de2669dc1aad87
• jaegertracing/all-in-one sha256:e493bff54e457ba5827f82418d744a322165cd5d46146607fb76489bfb2a8885
• otel/opentelemetry-collector-contrib sha256:004ecfe36ed8d3a5785adb8740024cdba1c546b3ae357a9db7a3e7b05c3bd160

docker/gitsplit/docker-compose.yaml

• jderusse/gitsplit sha256:ca619e08d0608d7ab8067be02db13409ec63a0e241c6308be42593f0c0ac705d

dockerfile

docker/Dockerfile

• composer 2.9@sha256:8f3b7d97cd7436dae41d6af0dd6a53853779040ecac26e65544fc31746035705
• debian bullseye@sha256:ee239c601913c0d3962208299eef70dcffcb7aac1787f7a02f6d3e2b518755e6

github-actions

.github/workflows/fossa.yml

• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3
• fossas/fossa-action v1.7.0@3ebcea1862c6ffbd5cf1b4d0bd6b3fe7bd6f2cac

.github/workflows/ossf-scorecard.yml

• actions/checkout v6.0.0@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• actions/upload-artifact v5.0.0@330a01c490aca151604b8cf639adc76d48f6c5d4
• github/codeql-action v4.31.6@fe4161a26a8629af62121b670040955b330f9af2

.github/workflows/php.yml

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd
• gacts/run-and-post-run v1.4.3@81b6ce503cde93862cec047c54652e45c5dca991
• shivammathur/cache-extensions v1@4595bea7d6630821b0a3a4894f816402faaf324c
• actions/cache v4.3.0@0057852bfaa89a56745cba8c7296529d2fc39830
• shivammathur/setup-php v2@44454db4f0199b8b9685a5d763dc37cbf79108e1
• actions/cache v4.3.0@0057852bfaa89a56745cba8c7296529d2fc39830
• actions/cache v4.3.0@0057852bfaa89a56745cba8c7296529d2fc39830
• codecov/codecov-action v5.5.1@5a1091511ad55cbe89839c7260b706298ca349f7
• opentelemetry-php/gh-workflows main

.github/workflows/phpdoc-to-github-pages.yml

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd
• phpDocumentor/phpDocumentor v3.9.1@4d3daedcffb747791b212545da819bfc81252ea9
• actions/configure-pages v5@983d7736d9b0ae728b81ab479565c72886d7745b
• actions/upload-pages-artifact v4@7b1f4a764d45c48632c6b24a0339c27f5614fb0b
• actions/deploy-pages v4.0.5@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e

.github/workflows/publish-otel-php-base-docker-image.yml

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd
• docker/setup-buildx-action v3.11.1@e468171a9de216ec08956ac3ada2f0791b6bd435
• docker/login-action v3.6.0@5e57cd118135c172c3672efd75eb46360885c0ef
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83
• docker/build-push-action v6.18.0@263435318d21b8e681c14492fe198d362a7d2c83

.github/workflows/shellcheck.yml

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd

.github/workflows/split-monorepo.yaml

• jderusse/gitsplit latest@sha256:ca619e08d0608d7ab8067be02db13409ec63a0e241c6308be42593f0c0ac705d

---

• Check this box to trigger a request for Renovate to run again on this repository