[dependabot]

Bumps the composer-minor-and-patch group with 3 updates: filament/filament, spatie/laravel-permission and spatie/laravel-ignition.

Updates filament/filament from 5.10.2 to 5.10.3

Commits

• 4869a15 Merge branch 4.x into 5.x for explicit documentation tabs
• See full diff in compare view

Updates spatie/laravel-permission from 8.3.0 to 8.3.2

Release notes

Sourced from spatie/laravel-permission's releases.

8.3.2

Performance

• Speed up repeated cached permission lookups by name and ID without changing lookup semantics (#2969).
• Preserve loose comparisons, guard isolation, first-match ordering, shared model identity, and mutations of returned models. Custom models and keyed collections continue to use the original filter.
• Keep lookup indexes tied to cache invalidation, including saved changes, deletion, explicit resets, and cache/tenant reinitialization.

Verification

• Add regression coverage for numeric comparisons, custom accessors and keys, collection ordering, runtime casts, invalidation, strict missing-attribute handling, and release of cached model references.
• Add an opt-in benchmark covering warm hits/misses, hydration, and retained memory. Indexing trades some hydration work and memory for faster repeated lookups; performance depends on the workload and is not unconditionally O(1).

No breaking changes. Public APIs, persistent cache format, and PHP/Laravel support are unchanged.

Full Changelog: spatie/laravel-permission@8.3.1...8.3.2

8.3.1

Fixes

• Respect the explicit guard when hasRole() and hasAllRoles() receive a role model, including model-array checks. Fixes #2977 via #2978.
• Refresh the cache manager when reinitializing permission caches, preventing stale stores after tenant or cache configuration switches (#2973).
• Exclude pint.json from distribution archives (#2972).

Maintenance

• Update test tooling to Pest 5.3.3, with Pest 4.7.8 for compatible PHP 8.3 and Laravel 12 stacks.
• Test PHP 8.3–8.6 and Laravel 12/13 with appropriate lowest and highest dependencies (#2975, #2976, #2978).

No breaking changes. PHP and Laravel support are unchanged.

Full Changelog: spatie/laravel-permission@8.3.0...8.3.1

Changelog

Sourced from spatie/laravel-permission's changelog.

8.3.2 - 2026-10-19

Performance

• Speed up repeated cached permission lookups by name and ID without changing lookup semantics (#2969).
• Preserve loose comparisons, guard isolation, first-match ordering, shared model identity, and mutations of returned models. Custom models and keyed collections continue to use the original filter.
• Keep lookup indexes tied to cache invalidation, including saved changes, deletion, explicit resets, and cache/tenant reinitialization.

Verification

• Add regression coverage for numeric comparisons, custom accessors and keys, collection ordering, runtime casts, invalidation, strict missing-attribute handling, and release of cached model references.
• Add an opt-in benchmark covering warm hits/misses, hydration, and retained memory. Indexing trades some hydration work and memory for faster repeated lookups; performance depends on the workload and is not unconditionally O(1).

No breaking changes. Public APIs, persistent cache format, and PHP/Laravel support are unchanged.

Full Changelog: spatie/laravel-permission@8.3.1...8.3.2

8.3.1 - 2026-10-19

Fixes

• Respect the explicit guard when hasRole() and hasAllRoles() receive a role model, including model-array checks. Fixes #2977 via #2978.
• Refresh the cache manager when reinitializing permission caches, preventing stale stores after tenant or cache configuration switches (#2973).
• Exclude pint.json from distribution archives (#2972).

Maintenance

• Update test tooling to Pest 5.3.3, with Pest 4.7.8 for compatible PHP 8.3 and Laravel 12 stacks.
• Test PHP 8.3–8.6 and Laravel 12/13 with appropriate lowest and highest dependencies (#2975, #2976, #2978).

No breaking changes. PHP and Laravel support are unchanged.

Full Changelog: spatie/laravel-permission@8.3.0...8.3.1

Commits

• e4e906f Merge pull request #2969: optimize cached permission lookups safely
• c74c94e Preserve permission lookup semantics while indexing cached models
• 17c93a2 Merge remote-tracking branch 'origin/main' into perf/index-permission-lookups
• e868d6a Update CHANGELOG
• 1ab5d33 Merge pull request #2978 from sean0407/codex/spatie-2977-role-guard-20261019
• 1a43000 Strengthen role guard checks and update Pest tooling
• b5570d5 fix: respect guard when checking role models
• 182889d Test on PHP 8.6 (#2975)
• da7bb6c Merge pull request #2976 from jnoordsij/consistent-composer-ci
• 2d162c9 Use Pest 4 with the Laravel 12 Testbench stack
• Additional commits viewable in compare view

Updates spatie/laravel-ignition from 2.12.0 to 2.12.1

Release notes

Sourced from spatie/laravel-ignition's releases.

2.12.1

What’s Changed

• Fix Blade exception mapping with multiple nested view-engine decorators, including Sentry and OpenTelemetry combinations, in #257.
• Resolve compiled paths through the underlying compiler instead of requiring decorators to forward getCompiler().
• Preserve the original exception for cyclic or unsupported decorator chains and view exceptions without a view-path suffix.
• Add regression coverage and fix stale PHPStan suppressions.

No breaking changes or changes to supported PHP/Laravel versions.

Thanks to @​hayleyberryl2s for the original fix.

Full Changelog: spatie/laravel-ignition@2.12.0...2.12.1

Changelog

Sourced from spatie/laravel-ignition's changelog.

2.12.1 - 2026-10-19

What’s Changed

• Fix Blade exception mapping with multiple nested view-engine decorators, including Sentry and OpenTelemetry combinations, in #257.
• Resolve compiled paths through the underlying compiler instead of requiring decorators to forward getCompiler().
• Preserve the original exception for cyclic or unsupported decorator chains and view exceptions without a view-path suffix.
• Add regression coverage and fix stale PHPStan suppressions.

No breaking changes or changes to supported PHP/Laravel versions.

Thanks to @​hayleyberryl2s for the original fix.

Full Changelog: spatie/laravel-ignition@2.12.0...2.12.1

1.7.2 - 2026-03-17

• Fix a dependency issue

Commits

• 0d49228 Fix ViewExceptionMapper::getKnownPaths() to unwrap multiple View\Engine l...
• a4cf043 Bump actions/cache from 5 to 6 (#256)
• c0a8b10 Bump actions/checkout from 6 to 7 (#255)
• 1a662ab Harden Dependabot auto-merge actor check
• 64f2b83 Bump dependabot/fetch-metadata from 2 to 3 (#254)
• 10fcb82 Update CHANGELOG
• fe67e82 Update CHANGELOG
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions