Skip to content

Bump larastan/larastan from 3.10.0 to 3.14.0 - #18

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/composer/larastan/larastan-3.14.0
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/composer/larastan/larastan-3.14.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 6, 2026

Copy link
Copy Markdown

Bumps larastan/larastan from 3.10.0 to 3.14.0.

Release notes

Sourced from larastan/larastan's releases.

3.14.0

What's Changed

The new Arr::get() and Arr::pull() key check is enabled by default. Calls with definitely missing keys now report offsetAccess.notFound, including calls that provide a default value. PHP, Laravel, and PHPStan requirements are unchanged.

Added

  • Infer return types for Arr::get() and Arr::pull(), including dot notation and default values, and track array keys removed by Arr::pull(), by @​canvural in #2635.
  • Report definitely missing keys in Arr::get() and Arr::pull() by @​canvural in #2635.
  • Load Redis facade and connection stubs for the configured PhpRedis or Predis driver, with a redisDriver override, by @​canvural in #2626.
  • Re-analyse affected files when config files, migrations, or schema dumps are created, changed, or deleted by @​canvural in #2631.

Fixed

  • Resolve config values in the config file's own scope, including local variables and imports, by @​canvural in aefbc03.
  • Resolve config file @return PHPDocs using that file's imports, and avoid incorrect inference for missing keys or files with multiple returns, by @​canvural in f0e6e1c, 73cd4c3, and 10e955b.
  • Preserve env()'s possible return types when its default is null and generalizeEnvReturnType is enabled by @​canvural in bfcc01e.
  • Rerun unused-view and missing-translation checks when their input files change by @​SanderMuller in #2630.
  • Preserve Arrayable<TKey, TValue> types in toArray() and correct model array key types by @​liamduckett in #2254.
  • Support union and intersection return types from model newCollection() methods by @​ybai08 in #2604.
  • Accept unions of array shapes in FormRequest::safe() by @​aran112000 in #2637.
  • Only evaluate closures passed to value(), preserving other callable values, by @​APX403 in #2632.
  • Read #[UseEloquentBuilder] from parent models and traits on Laravel 13.31 and newer by @​APX403 in #2621.
  • Resolve a model subclass's factory using its own conventional factory name by @​SanderMuller in #2625.
  • Infer group key types for higher-order groupBy calls by @​mkantautas in #2620.
  • Accept a per-page callback in Eloquent paginate() by @​mkantautas in #2619.
  • Accept a Cursor object in relation cursorPaginate() calls by @​mkantautas in #2627.
  • Check model properties in fillAndInsert(), fillAndInsertOrIgnore(), fillAndInsertGetId(), and fillForInsert() by @​uchimaki-vensley in #2601.
  • Read migration columns declared in arrow-function callbacks by @​aka-tpayne in #2608.
  • Resolve custom generic PHPDoc names through the TypeNode API by @​Xauele in 1509cc6.
  • Keep dispatch argument checking compatible with PHPStan's updated FunctionCallParametersCheck API by @​canvural in #2633.

New Contributors

Full Changelog: v3.13.2...v3.14.0

3.13.2

What's Changed

Added

  • Read CREATE TABLE statements passed as string literals to DB::statement() and DB::unprepared() in migrations, using the same SQL parsers as schema dumps, by @​tiagoabsantos in #2564. Read more about it here.
  • Infer Arr::map() callback parameter types and the mapped array type by @​Gabrieljr42 in #2587.

Fixed

... (truncated)

Commits
  • d8fabc3 test: make migration cache timestamps deterministic
  • 9eadf82 feat: infer Arr::get() and Arr::pull() types and report missing keys (#2635)
  • ab9b54a fix: support union and intersection return types of newCollection() (#2604)
  • 83f9065 fix: accept a union of constant arrays in FormRequest::safe() (#2637)
  • 762646b fix: arrayable generics (#2254)
  • aefbc03 fix: type config values in the config file's own scope instead of the caller's
  • 10e955b fix: read config values only from a config file's single top-level return
  • f0e6e1c fix: resolve config file @​return PHPDocs with the config file's imports
  • bfcc01e fix: keep env()'s set-variable types for a null default with generalizeEnvRet...
  • 73cd4c3 fix: give no config() type for keys missing from or below a scalar in the con...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [larastan/larastan](https://github.com/larastan/larastan) from 3.10.0 to 3.14.0.
- [Release notes](https://github.com/larastan/larastan/releases)
- [Changelog](https://github.com/larastan/larastan/blob/3.x/RELEASE.md)
- [Commits](larastan/larastan@v3.10.0...v3.14.0)

---
updated-dependencies:
- dependency-name: larastan/larastan
  dependency-version: 3.14.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update php code labels Nov 6, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file php Pull requests that update php code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants