- Update all non-major dependencies with digest and pinDigest

.github/workflows/check.php.yml

@@ -47,7 +47,7 @@ jobs:
           restore-keys: ${{ runner.os }}-composer-dependencies
 
       - name: Setup PHP
-        uses: shivammathur/setup-php@c541c155eee45413f5b09a52248675b1a2575231 # 2.31.1 # https://github.com/shivammathur/setup-php
+        uses: shivammathur/setup-php@9e72090525849c5e82e596468b86eb55e9cc5401 # 2.32.0 # https://github.com/shivammathur/setup-php
         with:
           php-version: 8.3
           extensions: dom, curl, libxml, mbstring, zip, pcntl, pdo, pdo_pgsql, intl

.github/workflows/deploy-to-beta.yml

@@ -39,7 +39,7 @@ jobs:
         run: echo "DEPLOYMENT_PROJECT_VERSION=$(bash ./environment/prod/deployment/scripts/version.sh --long)" >> $GITHUB_ENV
 
       - name: set up Docker Buildx
-        uses: docker/setup-buildx-action@c47758b77c9736f4b2ef4073d4d51994fabfe349 # v3.7.1
+        uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # v3.8.0
 
       - name: login to GitHub Container Registry
         uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
@@ -61,7 +61,7 @@ jobs:
           context: workflow
 
       - name: build and push image
-        uses: docker/build-push-action@48aba3b46d1b1fec4febb7c5d0c644b249a11355 # v6.10.0
+        uses: docker/build-push-action@b32b51a8eda65d6793cd0494a773d4f6bcef32dc # v6.11.0
         with:
           context: .
           file: ./environment/prod/app/Dockerfile

.github/workflows/deploy-to-prod.yml

@@ -42,7 +42,7 @@ jobs:
         run: echo "DEPLOYMENT_PROJECT_VERSION=$(bash ./environment/prod/deployment/scripts/version.sh --long)" >> $GITHUB_ENV
 
       - name: set up Docker Buildx
-        uses: docker/setup-buildx-action@c47758b77c9736f4b2ef4073d4d51994fabfe349 # v3.7.1
+        uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # v3.8.0
 
       - name: login to GitHub Container Registry
         uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
@@ -65,7 +65,7 @@ jobs:
           context: workflow
 
       - name: build and push image
-        uses: docker/build-push-action@48aba3b46d1b1fec4febb7c5d0c644b249a11355 # v6.10.0
+        uses: docker/build-push-action@b32b51a8eda65d6793cd0494a773d4f6bcef32dc # v6.11.0
         with:
           context: .
           file: ./environment/prod/app/Dockerfile

composer.json

@@ -11,23 +11,23 @@
         "ext-pdo": "*",
         "codezero/laravel-localized-routes": "^4.0.1",
         "codezero/laravel-unique-translation": "^4.3.1",
-        "filament/filament": "^3.2.128",
-        "filament/spatie-laravel-translatable-plugin": "^3.2.128",
+        "filament/filament": "^3.2.132",
+        "filament/spatie-laravel-translatable-plugin": "^3.2.133",
         "guzzlehttp/guzzle": "^7.9.2",
-        "laravel/framework": "^11.34.2",
-        "laravel/sanctum": "^4.0.5",
+        "laravel/framework": "^11.37.0",
+        "laravel/sanctum": "^4.0.7",
         "laravel/tinker": "^2.10.0",
         "mvenghaus/filament-plugin-translatable-inline": "^3.0.8",
         "nesbot/carbon": "^3.8.2",
-        "sentry/sentry-laravel": "^4.10.1"
+        "sentry/sentry-laravel": "^4.10.2"
     },
     "require-dev": {
-        "blumilksoftware/codestyle": "^4.0.0",
+        "blumilksoftware/codestyle": "^4.0.1",
         "fakerphp/faker": "^1.24.1",
         "mockery/mockery": "^1.6.12",
         "nunomaduro/collision": "^8.5.0",
         "larastan/larastan": "^3.0.2",
-        "phpunit/phpunit": "^11.5.0",
+        "phpunit/phpunit": "^11.5.2",
         "spatie/laravel-ignition": "^2.9.0"
     },
     "autoload": {

docker-compose.yml

@@ -66,7 +66,7 @@ services:
         restart: unless-stopped
 
     mailpit:
-      image: axllent/mailpit:v1.21.5@sha256:67143952f5f123692b922bced8ab2cea8947292576011a6b22d2cb2649dbcf78
+      image: axllent/mailpit:v1.21.8@sha256:81370195cd4a0eab9604d17c2617a7525b0486f9365555253b6c5376c6350f1a
       container_name: website-mailpit-dev
       labels:
         - "traefik.enable=true"

environment/dev/app/Dockerfile

@@ -1,5 +1,5 @@
 # https://hub.docker.com/_/alpine
-FROM alpine:3.21.0@sha256:21dc6063fd678b478f57c0e13f47560d0ea4eeba26dfc947b2a4f81f686b9f45 AS secops-tools
+FROM alpine:3.21.1@sha256:b97e2a89d0b9e4011bb88c02ddf01c544b8c781acf1f4d559e7c8f12f1047ac3 AS secops-tools
 
 # https://github.com/FiloSottile/age/releases
 ARG AGE_VERSION="1.1.1"
@@ -15,13 +15,13 @@ RUN wget --output-document age.tar.gz "https://github.com/FiloSottile/age/releas
     && chmod +x /usr/local/bin/sops
 
 # For other versions check: https://hub.docker.com/_/composer/tags
-FROM composer/composer:2.8.3-bin@sha256:9f83907ae037ada989775f462a19932cdd388fefcbf3b697780363bba1767f94 AS composer-bin
+FROM composer/composer:2.8.4-bin@sha256:af1a9adfadcbc0a8befb5c41bb18bbde34a63fafb2524470a2886e8043647b43 AS composer-bin
 
 # For other versions check: https://hub.docker.com/_/node/tags
-FROM node:22.6.0-bullseye-slim@sha256:a4b9a4773f239be06956f24fdf0b371ef87da3ad2d3eb877669254da947fa8b2 AS node
+FROM node:22.12.0-bullseye-slim@sha256:52e4282a01d63eb4cfce7a395364d366cee488c278079110d3aa49dd21b2bf18 AS node
 
 # For other versions check: https://hub.docker.com/_/php/tags
-FROM php:8.3.12-fpm-bookworm@sha256:833fd3764a6e9a69e829d95344596ffe921735c9f96b0e864edc326be15c6175
+FROM php:8.4.2-fpm-bookworm@sha256:4c8b6976c635245f7646e575ccd53b4cc8e80d8c0997a4d3a50ef3f68f6457d5
 
 COPY --from=composer-bin ./composer /usr/bin/composer
 COPY --from=secops-tools /usr/local/bin/age /usr/local/bin/age

environment/prod/app/Dockerfile

@@ -15,7 +15,7 @@ RUN composer install \
 
 ### FRONTEND ###
 # https://hub.docker.com/_/node/tags
-FROM node:22.6.0-bullseye-slim@sha256:a4b9a4773f239be06956f24fdf0b371ef87da3ad2d3eb877669254da947fa8b2 AS frontend
+FROM node:22.12.0-bullseye-slim@sha256:52e4282a01d63eb4cfce7a395364d366cee488c278079110d3aa49dd21b2bf18 AS frontend
 
 WORKDIR /app_frontend_dependencies
 
@@ -32,7 +32,7 @@ RUN npm run build
 
 ### APPLICATION ###
 # https://hub.docker.com/_/php/tags
-FROM php:8.3.12-fpm-bookworm@sha256:833fd3764a6e9a69e829d95344596ffe921735c9f96b0e864edc326be15c6175 AS app
+FROM php:8.4.2-fpm-bookworm@sha256:4c8b6976c635245f7646e575ccd53b4cc8e80d8c0997a4d3a50ef3f68f6457d5 AS app
 
 COPY --from=vendor /usr/bin/composer /usr/local/bin/composer