Conversation
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 4 to 8. - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@v4...v8) --- updated-dependencies: - dependency-name: actions/download-artifact dependency-version: '8' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 5.5.1 to 5.5.3. - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](codecov/codecov-action@v5.5.1...v5.5.3) --- updated-dependencies: - dependency-name: codecov/codecov-action dependency-version: 5.5.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [phpseclib/phpseclib](https://github.com/phpseclib/phpseclib) from 3.0.49 to 3.0.50. - [Release notes](https://github.com/phpseclib/phpseclib/releases) - [Changelog](https://github.com/phpseclib/phpseclib/blob/master/CHANGELOG.md) - [Commits](phpseclib/phpseclib@3.0.49...3.0.50) --- updated-dependencies: - dependency-name: phpseclib/phpseclib dependency-version: 3.0.50 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [league/commonmark](https://github.com/thephpleague/commonmark) from 2.8.1 to 2.8.2. - [Release notes](https://github.com/thephpleague/commonmark/releases) - [Changelog](https://github.com/thephpleague/commonmark/blob/2.8/CHANGELOG.md) - [Commits](thephpleague/commonmark@2.8.1...2.8.2) --- updated-dependencies: - dependency-name: league/commonmark dependency-version: 2.8.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
…mmonmark-2.8.2 Bump league/commonmark from 2.8.1 to 2.8.2
…/phpseclib-3.0.50 Bump phpseclib/phpseclib from 3.0.49 to 3.0.50
…n/codecov/codecov-action-5.5.3 Bump codecov/codecov-action from 5.5.1 to 5.5.3
…n/actions/download-artifact-8 Bump actions/download-artifact from 4 to 8
Bumps [flatted](https://github.com/WebReflection/flatted) from 3.4.1 to 3.4.2. - [Commits](WebReflection/flatted@v3.4.1...v3.4.2) --- updated-dependencies: - dependency-name: flatted dependency-version: 3.4.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
…ed-3.4.2 Bump flatted from 3.4.1 to 3.4.2
There was a problem hiding this comment.
Pull request overview
This PR primarily updates dependency lockfiles (npm + Composer) and refreshes a couple of CI workflow action versions, with one application-level configuration change to the default timezone.
Changes:
- Bump multiple Node dependencies in
package-lock.json(Babel, TanStack Query, TypeScript ESLint, etc.). - Bump multiple PHP dependencies in
composer.lock(Laravel framework and various packages). - Change Laravel app default timezone to
UTCand update CI workflow action versions.
Reviewed changes
Copilot reviewed 3 out of 5 changed files in this pull request and generated 1 comment.
Show a summary per file
| File | Description |
|---|---|
| package-lock.json | Updates locked npm dependency versions. |
| config/app.php | Changes application default timezone from Europe/Zurich to UTC. |
| composer.lock | Updates locked Composer dependency versions (incl. Laravel framework and ecosystem packages). |
| .github/workflows/playwright.yml | Updates actions/download-artifact version used for merging Playwright blob reports. |
| .github/workflows/phpunit.yml | Updates Codecov GitHub Action patch version. |
Comments suppressed due to low confidence (1)
.github/workflows/playwright.yml:121
- This job now uses
actions/download-artifact@v8while the workflow still usesactions/upload-artifact@v4. If the download-artifact major bump changes supported inputs/behavior, thepattern+merge-multipleoptions here could break report merging. Consider aligning upload/download-artifact to the same major and verifying the required inputs are supported for the chosen version.
- name: "Download blob reports"
uses: actions/download-artifact@v8
with:
path: all-blob-reports
pattern: blob-report-*
merge-multiple: true
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| */ | ||
|
|
||
| 'timezone' => 'Europe/Zurich', | ||
| 'timezone' => 'UTC', |
There was a problem hiding this comment.
Changing the application default timezone from Europe/Zurich to UTC is a behavior change that affects all PHP date/time operations when a user-specific timezone isn’t explicitly applied (e.g., queue/cron timestamps, log timestamps, scheduled tasks, default Carbon parsing). If the goal is just to standardize, consider making this configurable via an env var (e.g., env('APP_TIMEZONE', 'UTC')) so environments can override without code changes, and document the expected default.
| 'timezone' => 'UTC', | |
| 'timezone' => env('APP_TIMEZONE', 'UTC'), |
No description provided.