chore(deps): update dependency phpstan/phpstan to v2.3.1

Picks up PHP 8.4.27 for CVE-2026-109618 and CVE-2026-109619 (critical RCE)
via the floating 1-php8.4-alpine tag.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

.gitea/workflows/docker-publish.yml

@@ -77,6 +77,7 @@ jobs:
           target: final
           platforms: linux/amd64,linux/arm64
           push: true
+          pull: true
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}
           # Registry-based layer cache — survives between runs without a separate cache store.

CHANGELOG.md

@@ -7,6 +7,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.2.2] - 2026-10-22
+
 ### Changed
 
 - Added `symfony/flex` so `extra.symfony.require: "7.4.*"` is enforced — every Symfony component, including transitive ones, now stays on 7.4 LTS
@@ -19,6 +21,14 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
   - `phpstan/phpstan` 2.2.5 → 2.2.16
 - Docker builds copy `symfony.lock` so Flex doesn't re-apply recipes during `composer install`
 
+### Fixed
+
+- Renovate no longer pins `symfony/monolog-bundle` to `~7.4` — it is versioned independently (4.x) and was blocked from updates (#39)
+
+### Security
+
+- Release images are built against the latest PHP 8.4.27 for CVE-2026-109618 and CVE-2026-109619 (critical RCE)
+
 ## [0.2.1] - 2026-07-31
 
 ### Added

composer.lock

@@ -3396,11 +3396,11 @@
         },
         {
             "name": "phpstan/phpstan",
-            "version": "2.2.16",
+            "version": "2.3.1",
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/phpstan/phpstan/zipball/46a6d9060e5a7763adfcc21ebcb8b504ebdbcb92",
+                "url": "https://api.github.com/repos/phpstan/phpstan/zipball/6155239b488e95d26d1ebd95c6b4bb294d7f09db",
-                "reference": "46a6d9060e5a7763adfcc21ebcb8b504ebdbcb92",
+                "reference": "6155239b488e95d26d1ebd95c6b4bb294d7f09db",
                 "shasum": ""
             },
             "require": {
@@ -3456,7 +3456,7 @@
                     "type": "github"
                 }
             ],
-            "time": "2026-09-25T09:31:51+00:00"
+            "time": "2026-10-08T21:09:11+00:00"
         },
         {
             "name": "phpunit/php-code-coverage",

renovate.json

@@ -15,6 +15,7 @@
       "matchPackageNames": [
         "/^symfony//",
         "!symfony/flex",
+        "!symfony/monolog-bundle",
         "!/^symfony/polyfill-/",
         "!/-contracts$/"
       ]