Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Oct 18, 2025

This PR contains the following updates:

Package Change Age Confidence
spiral/roadrunner (source) 2025.1.2 -> 2025.1.5 age confidence

Release Notes

roadrunner-server/roadrunner (spiral/roadrunner)

v2025.1.5

Compare Source

🚀 v2025.1.5 🚀
Changelog
🎯 Core
  • SIGUSR2 Signal Support: Added support for the SIGUSR2 signal on Unix-like systems to enable graceful process restarts. When the configuration file is a symlink, RoadRunner will properly re-read the configuration from the symlink target after restart FR (thanks @​koren88)
  • Go Version: Updated minimum Go version to 1.25.4.
📦 Velox
  • Velox: Updated to version v2025.1.5 with an updated template that pinned third-party dep tablewriter that caused problems when building RR.

v2025.1.4

Compare Source

Changelog
🎯 Core
  • Fileserver Plugin: The Fileserver plugin has been restored to the standard bundle because of the resolution of all CVEs in its dependency, GoFiber.
  • Green Tea Garbage Collector: The Green Tea garbage collector has been disabled by default after receiving several bug reports related to its use. For more details, see the Go RFC.
  • Automaxprocs: The automaxprocs library from Uber has been removed, as Go 1.25 now includes this functionality natively.
📦 Velox
  • Velox: Updated to version v2025.1.4 with an updated template that removed the automaxprocs dependency.

v2025.1.3

Compare Source

📦 Temporal plugin
  • ✨ Support for the NO_PROXY environment variable to disable proxy usage FR (thanks @​jur3)
  • ✨ Support for setting the Workflow Versioning Behavior from the PHP Worker FR (thanks @​roxblnfk)
📦 Kafka driver
🎯 Core
  • ✨ The Fileserver plugin has been excluded from the standard bundle but is available to be built with Velox. This is because its dependency, GoFiber, has had too many CVEs in recent months.
  • ✨ Update dependencies and Go to the latest versions.
  • ✨ Use the new Green Tea garbage collector by default; see Go RFC

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot changed the title chore(deps): update dependency spiral/roadrunner to v2025.1.4 chore(deps): update dependency spiral/roadrunner to v2025.1.5 Nov 16, 2025
@renovate
Copy link
Contributor Author

renovate bot commented Nov 16, 2025

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: consumer-app/composer.lock
Command failed: composer update spiral/roadrunner:2025.1.5 --with-dependencies --ignore-platform-req='ext-*' --ignore-platform-req='lib-*' --no-ansi --no-interaction --no-scripts --no-autoloader --no-plugins --minimal-changes
Loading composer repositories with package information
Updating dependencies
Your requirements could not be resolved to an installable set of packages.

  Problem 1
    - laravel/framework is locked to version v12.20.0 and an update of this package was not requested.
    - laravel/framework v12.20.0 requires symfony/http-foundation ^7.2.0 -> found symfony/http-foundation[v7.2.0, ..., v7.3.7] but these were not loaded, because they are affected by security advisories. To ignore the advisories, add ("PKSA-365x-2zjk-pt47") to the audit "ignore" config. To turn the feature off entirely, you can set "block-insecure" to false in your "audit" config.
  Problem 2
    - laravel/sail is locked to version v1.43.1 and an update of this package was not requested.
    - laravel/framework v12.20.0 requires symfony/http-foundation ^7.2.0 -> found symfony/http-foundation[v7.2.0, ..., v7.3.7] but these were not loaded, because they are affected by security advisories. To ignore the advisories, add ("PKSA-365x-2zjk-pt47") to the audit "ignore" config. To turn the feature off entirely, you can set "block-insecure" to false in your "audit" config.
    - laravel/sail v1.43.1 requires illuminate/console ^9.52.16|^10.0|^11.0|^12.0 -> satisfiable by laravel/framework[v12.20.0].


File name: publisher-app/composer.lock
Command failed: composer update spiral/roadrunner:2025.1.5 --with-dependencies --ignore-platform-req='ext-*' --ignore-platform-req='lib-*' --no-ansi --no-interaction --no-scripts --no-autoloader --no-plugins --minimal-changes
Loading composer repositories with package information
Updating dependencies
Your requirements could not be resolved to an installable set of packages.

  Problem 1
    - laravel/framework is locked to version v12.20.0 and an update of this package was not requested.
    - laravel/framework v12.20.0 requires symfony/http-foundation ^7.2.0 -> found symfony/http-foundation[v7.2.0, ..., v7.3.7] but these were not loaded, because they are affected by security advisories. To ignore the advisories, add ("PKSA-365x-2zjk-pt47") to the audit "ignore" config. To turn the feature off entirely, you can set "block-insecure" to false in your "audit" config.
  Problem 2
    - laravel/sail is locked to version v1.43.1 and an update of this package was not requested.
    - laravel/framework v12.20.0 requires symfony/http-foundation ^7.2.0 -> found symfony/http-foundation[v7.2.0, ..., v7.3.7] but these were not loaded, because they are affected by security advisories. To ignore the advisories, add ("PKSA-365x-2zjk-pt47") to the audit "ignore" config. To turn the feature off entirely, you can set "block-insecure" to false in your "audit" config.
    - laravel/sail v1.43.1 requires illuminate/console ^9.52.16|^10.0|^11.0|^12.0 -> satisfiable by laravel/framework[v12.20.0].


Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant