Skip to content

Conversation

@ogorzalka
Copy link
Member

@ogorzalka ogorzalka commented Feb 10, 2026

This pull request includes updates for the recent minor version release of Laravel as well as bumps your package dependencies. You may review the full list of changes in the Laravel Release Notes, or highlighted changes and tips in the weekly Shifty Bits newsletter.

Before merging, you need to:

  • Checkout the shift-ci-v12.51.0 branch
  • Review all pull request comments for additional changes
  • Run composer update
  • Thoroughly test your application (no tests?, no CI?)

Note

Medium Risk
Updates core runtime dependencies (Laravel framework, Sanctum, WordPress core, Symfony components), which can introduce subtle behavior changes despite being mostly minor/patch bumps.

Overview
Upgrades the application’s dependency set, notably bumping laravel/framework to v12.51.0 and refreshing composer.lock with newer transitive versions.

Also bumps WordPress (johnpbloch/wordpress/core to 6.9.1), several Symfony components (mostly 7.4.5, with symfony/yaml moving to v8.0.1), and developer tooling/test deps like phpunit, pint, sail, and pail.

Written by Cursor Bugbot for commit 254926f. This will update automatically on new commits. Configure here.

@ogorzalka
Copy link
Member Author

⚠️ The Shift build servers run PHP 8.4. If you are running a different version of PHP, you should run composer update to ensure you have the proper versions of your dependencies for your environment.

Copy link

@cursor cursor bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Bugbot Autofix is OFF. To automatically fix reported issues with Cloud Agents, enable Autofix in the Cursor dashboard.

This PR is being reviewed by Cursor Bugbot

Details

You are on the Bugbot Free tier. On this plan, Bugbot will review limited PRs each billing cycle.

To receive Bugbot reviews on all of your PRs, visit the Cursor dashboard to activate Pro and start your 14-day free trial.

"require": {
"php": ">=8.2",
"symfony/deprecation-contracts": "^2.5|^3",
"php": ">=8.4",
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

symfony/yaml v8.0 requires PHP 8.4, breaking PHP 8.2/8.3

High Severity

The composer.lock pins symfony/yaml to v8.0.1, which requires php >= 8.4, but the project's composer.json declares php ^8.2. Running composer install on PHP 8.2 or 8.3 will fail because the lock file forces this incompatible version. This was resolved because the Shift build servers run PHP 8.4, which allowed Composer to select the v8.0 major version. The lock file needs to be regenerated on a PHP 8.2-compatible environment to avoid pinning to symfony/yaml v8.x.

Additional Locations (1)

Fix in Cursor Fix in Web

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants