chore(deps): update dependency monolog/monolog to v3.12.0 #29

Merged
haylan merged 2 commits from renovate/monolog-monolog-3.x-lockfile into main 2026-09-09 22:19:00 +00:00
Collaborator

This PR contains the following updates:

Package Change Age Confidence
monolog/monolog 3.10.03.12.0 age confidence

Release Notes

Seldaek/monolog (monolog/monolog)

v3.12.0

Compare Source

  • Added support for reading the timestamp of new records from a PSR-20 clock, via a new $clock constructor param and Logger::setClock() (#​2065)
    • Added support for #[WithMonologChannel] on constructor/method parameters, so a channel can be bound to a single argument instead of the whole class (#​2068)
    • Fixed TelegramBotHandler breaking HTML markup when truncating or splitting long messages, open tags are now closed at the end of a chunk and reopened in the next one (#​2066)
    • Fixed RedactingFormatter not redacting secrets nested inside array values of sensitive keys (#​2067)

v3.11.0

Compare Source

  • Security: Fixed potential XSS in BrowserConsoleHandler when logging user provided content
    • Added RedactingFormatter to automatically redact sensitive data from records, based on key names, #[SensitiveParameter] constructor params and/or regex patterns (#​2041)
    • Added FrankenPhpHandler to log records via FrankenPHP's frankenphp_log() function (#​2056)
    • Added LogMonsterHandler which complains if the code did not log enough records before the process/request ends, like a dead man's switch for logs (#​2039)
    • Added FILE_PER_HOUR rotation mode to RotatingFileHandler (#​2040)
    • Added ErrorHandler::captureStackTraces() to attach the stack trace of PHP errors to the records it generates (#​2060)
    • Added NormalizerFormatter::setMaxTraceLength() to limit how many stack trace frames are included when normalizing exceptions (#​2015)
    • Added extension points to TelegramBotHandler to change the API URL (e.g. for a self-hosted Bot API server) and to send extra curl headers (#​2029)
    • Added ability to override IntrospectionProcessor's SKIP_FUNCTIONS in subclasses (#​2050)
    • Added $maxLength param to SyslogUdpHandler/UdpSocket to keep datagrams below the path MTU, as fragmented UDP packets are often dropped (#​2049)
    • Fixed StreamHandler truncating writes on non-blocking streams, it now loops until the whole record is written (#​2016)
    • Fixed stack trace frames without file/line being skipped, they are now reported as internal[function] entries so traces are not truncated or empty (#​2061)
    • Fixed RotatingFileHandler cleanup not finding files behind stream wrappers (e.g. private://) as glob() cannot see through those (#​2058)
    • Fixed RotatingFileHandler not using the configured timezone when computing the next rotation time (#​2022)
    • Fixed scalars being replaced by the "Over N levels deep" message instead of being output when the max normalization depth is reached (#​2042)
    • Fixed DeduplicationHandler failing with an undefined array key error when the store file is written to concurrently (#​2020)
    • Fixed TelegramBotHandler swallowing errors when the API returns a non-JSON response (#​2030)
    • Fixed AbstractProcessingHandler::handle() reading $bubble directly instead of calling getBubble(), so overrides of it were ignored (#​2031)
    • Fixed warning on PHP 8.5 when ErrorHandler sets the HTTP response code and a status line was already registered (#​2027)

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [monolog/monolog](https://github.com/Seldaek/monolog) | `3.10.0` → `3.12.0` | ![age](https://developer.mend.io/api/mc/badges/age/packagist/monolog%2fmonolog/3.12.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/packagist/monolog%2fmonolog/3.10.0/3.12.0?slim=true) | --- ### Release Notes <details> <summary>Seldaek/monolog (monolog/monolog)</summary> ### [`v3.12.0`](https://github.com/Seldaek/monolog/blob/HEAD/CHANGELOG.md#3120-2026-09-09) [Compare Source](https://github.com/Seldaek/monolog/compare/3.11.0...3.12.0) - Added support for reading the timestamp of new records from a PSR-20 clock, via a new `$clock` constructor param and `Logger::setClock()` ([#&#8203;2065](https://github.com/Seldaek/monolog/issues/2065)) - Added support for `#[WithMonologChannel]` on constructor/method parameters, so a channel can be bound to a single argument instead of the whole class ([#&#8203;2068](https://github.com/Seldaek/monolog/issues/2068)) - Fixed `TelegramBotHandler` breaking HTML markup when truncating or splitting long messages, open tags are now closed at the end of a chunk and reopened in the next one ([#&#8203;2066](https://github.com/Seldaek/monolog/issues/2066)) - Fixed `RedactingFormatter` not redacting secrets nested inside array values of sensitive keys ([#&#8203;2067](https://github.com/Seldaek/monolog/issues/2067)) ### [`v3.11.0`](https://github.com/Seldaek/monolog/blob/HEAD/CHANGELOG.md#3110-2026-09-02) [Compare Source](https://github.com/Seldaek/monolog/compare/3.10.0...3.11.0) - Security: Fixed potential XSS in `BrowserConsoleHandler` when logging user provided content - Added `RedactingFormatter` to automatically redact sensitive data from records, based on key names, `#[SensitiveParameter]` constructor params and/or regex patterns ([#&#8203;2041](https://github.com/Seldaek/monolog/issues/2041)) - Added `FrankenPhpHandler` to log records via FrankenPHP's frankenphp\_log() function ([#&#8203;2056](https://github.com/Seldaek/monolog/issues/2056)) - Added `LogMonsterHandler` which complains if the code did not log enough records before the process/request ends, like a dead man's switch for logs ([#&#8203;2039](https://github.com/Seldaek/monolog/issues/2039)) - Added `FILE_PER_HOUR` rotation mode to `RotatingFileHandler` ([#&#8203;2040](https://github.com/Seldaek/monolog/issues/2040)) - Added `ErrorHandler::captureStackTraces()` to attach the stack trace of PHP errors to the records it generates ([#&#8203;2060](https://github.com/Seldaek/monolog/issues/2060)) - Added `NormalizerFormatter::setMaxTraceLength()` to limit how many stack trace frames are included when normalizing exceptions ([#&#8203;2015](https://github.com/Seldaek/monolog/issues/2015)) - Added extension points to `TelegramBotHandler` to change the API URL (e.g. for a self-hosted Bot API server) and to send extra curl headers ([#&#8203;2029](https://github.com/Seldaek/monolog/issues/2029)) - Added ability to override `IntrospectionProcessor`'s `SKIP_FUNCTIONS` in subclasses ([#&#8203;2050](https://github.com/Seldaek/monolog/issues/2050)) - Added `$maxLength` param to `SyslogUdpHandler`/`UdpSocket` to keep datagrams below the path MTU, as fragmented UDP packets are often dropped ([#&#8203;2049](https://github.com/Seldaek/monolog/issues/2049)) - Fixed `StreamHandler` truncating writes on non-blocking streams, it now loops until the whole record is written ([#&#8203;2016](https://github.com/Seldaek/monolog/issues/2016)) - Fixed stack trace frames without file/line being skipped, they are now reported as `internal[function]` entries so traces are not truncated or empty ([#&#8203;2061](https://github.com/Seldaek/monolog/issues/2061)) - Fixed `RotatingFileHandler` cleanup not finding files behind stream wrappers (e.g. private://) as glob() cannot see through those ([#&#8203;2058](https://github.com/Seldaek/monolog/issues/2058)) - Fixed `RotatingFileHandler` not using the configured timezone when computing the next rotation time ([#&#8203;2022](https://github.com/Seldaek/monolog/issues/2022)) - Fixed scalars being replaced by the "Over N levels deep" message instead of being output when the max normalization depth is reached ([#&#8203;2042](https://github.com/Seldaek/monolog/issues/2042)) - Fixed `DeduplicationHandler` failing with an undefined array key error when the store file is written to concurrently ([#&#8203;2020](https://github.com/Seldaek/monolog/issues/2020)) - Fixed `TelegramBotHandler` swallowing errors when the API returns a non-JSON response ([#&#8203;2030](https://github.com/Seldaek/monolog/issues/2030)) - Fixed `AbstractProcessingHandler::handle()` reading `$bubble` directly instead of calling `getBubble()`, so overrides of it were ignored ([#&#8203;2031](https://github.com/Seldaek/monolog/issues/2031)) - Fixed warning on PHP 8.5 when `ErrorHandler` sets the HTTP response code and a status line was already registered ([#&#8203;2027](https://github.com/Seldaek/monolog/issues/2027)) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNC43IiwidXBkYXRlZEluVmVyIjoiNDQuMTQuNyIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
renovate-bot added 1 commit 2026-09-09 10:03:44 +00:00
chore(deps): update dependency monolog/monolog to v3.12.0
Tests / build-dev (push) Skipped
Tests / build-prod (push) Skipped
Tests / build-dev (pull_request) Successful in 2m49s
Tests / build-prod (pull_request) Successful in 3m24s
00e32aa81d
renovate-bot force-pushed renovate/monolog-monolog-3.x-lockfile from 41539ed4a1 to 00e32aa81d 2026-09-09 10:03:44 +00:00 Compare
renovate-bot changed title from chore(deps): update dependency monolog/monolog to v3.11.0 to chore(deps): update dependency monolog/monolog to v3.12.0 2026-09-09 10:03:45 +00:00
Owner

/review

/review
haylan added 1 commit 2026-09-09 22:07:46 +00:00
Merge branch 'main' into renovate/monolog-monolog-3.x-lockfile
Tests / build-dev (push) Skipped
Tests / build-prod (push) Skipped
Tests / build-dev (pull_request) Successful in 3m51s
Tests / build-prod (pull_request) Successful in 7m9s
547bced88f
haylan scheduled this pull request to auto merge when all checks succeed 2026-09-09 22:08:21 +00:00
haylan merged commit e8c47d3cc7 into main 2026-09-09 22:19:00 +00:00
haylan deleted branch renovate/monolog-monolog-3.x-lockfile 2026-09-09 22:19:00 +00:00
Sign in to join this conversation.
No Reviewers
No labels
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: haylan/git-contribution-graph#29