chore(deps): Update Composer dependencies (security-patch)

[nielsdrost7]

Composer Dependency Update

This PR updates Composer dependencies.

Update Type: security-patch
Triggered by: schedule

Updated Packages

## Direct Dependencies (from composer.json)

awcodes/mason: v3.1.1 → v3.3.0
filament/actions: v5.7.6 → v5.8.4
filament/filament: v5.7.6 → v5.8.4
laravel/framework: v13.25.0 → v13.32.0
maatwebsite/excel: 4.0.0 → 4.0.3
barryvdh/laravel-debugbar: v4.4.1 → v4.4.3
brianium/paratest: v7.24.0 → v7.24.1
driftingly/rector-laravel: 2.5.0 → 2.6.2
larastan/larastan: v3.10.0 → v3.12.2
laravel/boost: v2.5.3 → v2.9.1
laravel/pint: v1.30.5 → v1.32.1
laravel/sail: v1.66.0 → v1.67.0
mockery/mockery: 1.6.13 → 1.6.15
phpunit/phpunit: 13.3.1 → 13.3.4
rector/rector: 2.6.2 → 2.6.7

## Transient Dependencies (indirect)

anourvalar/eloquent-serialize: 1.3.11 → 1.3.12
brick/math: 0.18.0 → 0.19.1
carbonphp/carbon-doctrine-types: 3.2.0 → 3.2.1
danharrin/livewire-rate-limiting: v2.2.1 → v2.3.0
doctrine/lexer: 3.0.1 → 3.0.2
filament/forms: v5.7.6 → v5.8.4
filament/infolists: v5.7.6 → v5.8.4
filament/notifications: v5.7.6 → v5.8.4
filament/query-builder: v5.7.6 → v5.8.4
filament/schemas: v5.7.6 → v5.8.4
filament/support: v5.7.6 → v5.8.4
filament/tables: v5.7.6 → v5.8.4
filament/widgets: v5.7.6 → v5.8.4
graham-campbell/result-type: v1.1.4 → v1.2.0
guzzlehttp/guzzle: 7.15.3 → 8.2.0
guzzlehttp/promises: 2.5.2 → 3.0.2
guzzlehttp/psr7: 2.13.0 → 3.1.0
guzzlehttp/uri-template: v1.0.10 → v2.0.1
laravel/prompts: v0.3.22 → v0.3.24
laravel/serializable-closure: v2.0.15 → v2.0.16
league/commonmark: 2.10.0 → 2.10.3
league/flysystem: 3.35.2 → 3.36.0
league/flysystem-local: 3.31.0 → 3.35.3
livewire/livewire: v4.4.0 → v4.4.5
masterminds/html5: 2.10.1 → 2.11.0
monolog/monolog: 3.10.0 → 3.12.0
nesbot/carbon: 3.13.2 → 3.14.0
nette/schema: v1.3.5 → v1.3.6
phpoffice/phpspreadsheet: 5.9.0 → 5.10.0
phpoption/phpoption: 1.9.5 → 1.10.0
ramsey/uuid: 4.9.3 → 4.9.4
sabberworm/php-css-parser: v9.4.0 → v9.5.0
spatie/invade: 2.1.0 → 2.1.1
spatie/laravel-package-tools: 1.93.1 → 1.93.2
symfony/console: v8.1.4 → v8.1.7
symfony/css-selector: v8.1.0 → v8.1.6
symfony/error-handler: v8.1.2 → v8.1.5
symfony/event-dispatcher: v8.1.2 → v8.1.5
symfony/finder: v8.1.1 → v8.1.7
symfony/html-sanitizer: v8.1.1 → v8.1.7
symfony/http-foundation: v8.1.4 → v8.1.7
symfony/http-kernel: v8.1.4 → v8.1.7
symfony/mailer: v8.1.2 → v8.1.7
symfony/mime: v8.1.4 → v8.1.7
symfony/polyfill-intl-idn: v1.38.1 → v1.42.0
symfony/polyfill-intl-normalizer: v1.38.0 → v1.42.0
symfony/polyfill-php82: (new) → v1.38.1
symfony/process: v8.1.0 → v8.1.7
symfony/routing: v8.1.2 → v8.1.6
symfony/service-contracts: v3.7.1 → v3.7.3
symfony/string: v8.1.2 → v8.1.7
symfony/translation: v8.1.4 → v8.1.5
symfony/uid: v8.1.4 → v8.1.5
symfony/var-dumper: v8.1.2 → v8.1.7
ueberdosis/tiptap-php: 2.1.1 → 2.2.0
vlucas/phpdotenv: v5.6.4 → v5.7.0
filp/whoops: 2.18.4 → 2.18.5
laravel/mcp: v0.9.3 → v1.0.0
nikic/php-parser: v5.8.0 → v5.9.0
phpstan/phpstan: 2.2.8 → 2.2.14
phpunit/php-code-coverage: 14.3.0 → 14.3.3
phpunit/php-file-iterator: 7.0.1 → 7.0.2
sebastian/diff: 9.0.0 → 9.0.1
symfony/yaml: v8.1.2 → v8.1.6
symplify/rule-doc-generator-contracts: (new) → 11.2.0
ralouphie/getallheaders: 3.0.3 → (removed)
thecodingmachine/safe: v3.4.0 → (removed)

Checks Performed

• Unit tests passed (commented out until further notice)
• Static analysis completed (commented out until further notice)
• Code formatting checked (commented out until further notice)

Security Audit

Security vulnerabilities detected. Please review audit-report.json.

Review Checklist

• Review updated packages and their changelogs
• Verify all tests pass
• Check for breaking changes
• Update documentation if needed
• Test manually in development environment

---

This PR was automatically created by the Composer Update workflow.

Summary by CodeRabbit

• Maintenance
  • Updated underlying application components and supporting tools.
  • Refreshed the testing environment configuration to improve compatibility with the current database setup.
  • Included routine updates to framework, interface, networking, and quality-assurance components.
  • Added support packages required by the updated software stack and removed obsolete supporting packages.

[coderabbitai]

Understand this PR’s impact

Explore downstream dependencies and potential security impact with Blast Radius.

View blast radius →

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: e71938dd-4ec9-41ee-bcee-6a8ecec55e8e

📥 Commits

Reviewing files that changed from the base of the PR and between 563200e and 9502c39.

⛔ Files ignored due to path filters (1)

• composer.lock is excluded by !**/*.lock

📒 Files selected for processing (2)

• .env.testing
• updated-packages.txt

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.

---

📝 Walkthrough

Walkthrough

The testing environment now uses a rotated application key and MariaDB. The dependency update manifest lists upgrades, additions, and removals across application and development packages.

Changes

Environment and dependency updates

Layer / File(s)	Summary
Testing environment configuration .env.testing	The testing configuration uses a new APP_KEY and changes DB_CONNECTION from mysql to mariadb.
Dependency update manifest updated-packages.txt	The manifest lists direct and indirect dependency upgrades, adds two packages, and marks two packages as removed.

Priority: ➖ Normal

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely identifies the Composer dependency updates and the security-patch purpose. It matches the primary changes in the pull request.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}