Bump monolog/monolog from 3.10.0 to 3.12.0

[dependabot]

Bumps monolog/monolog from 3.10.0 to 3.12.0.

Release notes

Sourced from monolog/monolog's releases.

3.12.0

• Added support for reading the timestamp of new records from a PSR-20 clock, via a new $clock constructor param and Logger::setClock() (#2065)
• Added support for #[WithMonologChannel] on constructor/method parameters, so a channel can be bound to a single argument instead of the whole class (#2068)
• Fixed TelegramBotHandler breaking HTML markup when truncating or splitting long messages, open tags are now closed at the end of a chunk and reopened in the next one (#2066)
• Fixed RedactingFormatter not redacting secrets nested inside array values of sensitive keys (#2067)

Full Changelog: Seldaek/monolog@3.11.0...3.12.0

3.11.0

• Security: Fixed potential XSS in BrowserConsoleHandler when logging user provided content
• Added RedactingFormatter to automatically redact sensitive data from records, based on key names, #[SensitiveParameter] constructor params and/or regex patterns (#2041)
• Added FrankenPhpHandler to log records via FrankenPHP's frankenphp_log() function (#2056)
• Added LogMonsterHandler which complains if the code did not log enough records before the process/request ends, like a dead man's switch for logs (#2039)
• Added FILE_PER_HOUR rotation mode to RotatingFileHandler (#2040)
• Added ErrorHandler::captureStackTraces() to attach the stack trace of PHP errors to the records it generates (#2060)
• Added NormalizerFormatter::setMaxTraceLength() to limit how many stack trace frames are included when normalizing exceptions (#2015)
• Added extension points to TelegramBotHandler to change the API URL (e.g. for a self-hosted Bot API server) and to send extra curl headers (#2029)
• Added ability to override IntrospectionProcessor's SKIP_FUNCTIONS in subclasses (#2050)
• Added $maxLength param to SyslogUdpHandler/UdpSocket to keep datagrams below the path MTU, as fragmented UDP packets are often dropped (#2049)
• Fixed StreamHandler truncating writes on non-blocking streams, it now loops until the whole record is written (#2016)
• Fixed stack trace frames without file/line being skipped, they are now reported as internal[function] entries so traces are not truncated or empty (#2061)
• Fixed RotatingFileHandler cleanup not finding files behind stream wrappers (e.g. private://) as glob() cannot see through those (#2058)
• Fixed RotatingFileHandler not using the configured timezone when computing the next rotation time (#2022)
• Fixed scalars being replaced by the "Over N levels deep" message instead of being output when the max normalization depth is reached (#2042)
• Fixed DeduplicationHandler failing with an undefined array key error when the store file is written to concurrently (#2020)
• Fixed TelegramBotHandler swallowing errors when the API returns a non-JSON response (#2030)
• Fixed AbstractProcessingHandler::handle() reading $bubble directly instead of calling getBubble(), so overrides of it were ignored (#2031)
• Fixed warning on PHP 8.5 when ErrorHandler sets the HTTP response code and a status line was already registered (#2027)

Full Changelog: Seldaek/monolog@3.10.0...3.11.0

Changelog

Sourced from monolog/monolog's changelog.

3.12.0 (2026-09-09)

• Added support for reading the timestamp of new records from a PSR-20 clock, via a new $clock constructor param and Logger::setClock() (#2065)
• Added support for #[WithMonologChannel] on constructor/method parameters, so a channel can be bound to a single argument instead of the whole class (#2068)
• Fixed TelegramBotHandler breaking HTML markup when truncating or splitting long messages, open tags are now closed at the end of a chunk and reopened in the next one (#2066)
• Fixed RedactingFormatter not redacting secrets nested inside array values of sensitive keys (#2067)

3.11.0 (2026-09-02)

• Security: Fixed potential XSS in BrowserConsoleHandler when logging user provided content
• Added RedactingFormatter to automatically redact sensitive data from records, based on key names, #[SensitiveParameter] constructor params and/or regex patterns (#2041)
• Added FrankenPhpHandler to log records via FrankenPHP's frankenphp_log() function (#2056)
• Added LogMonsterHandler which complains if the code did not log enough records before the process/request ends, like a dead man's switch for logs (#2039)
• Added FILE_PER_HOUR rotation mode to RotatingFileHandler (#2040)
• Added ErrorHandler::captureStackTraces() to attach the stack trace of PHP errors to the records it generates (#2060)
• Added NormalizerFormatter::setMaxTraceLength() to limit how many stack trace frames are included when normalizing exceptions (#2015)
• Added extension points to TelegramBotHandler to change the API URL (e.g. for a self-hosted Bot API server) and to send extra curl headers (#2029)
• Added ability to override IntrospectionProcessor's SKIP_FUNCTIONS in subclasses (#2050)
• Added $maxLength param to SyslogUdpHandler/UdpSocket to keep datagrams below the path MTU, as fragmented UDP packets are often dropped (#2049)
• Fixed StreamHandler truncating writes on non-blocking streams, it now loops until the whole record is written (#2016)
• Fixed stack trace frames without file/line being skipped, they are now reported as internal[function] entries so traces are not truncated or empty (#2061)
• Fixed RotatingFileHandler cleanup not finding files behind stream wrappers (e.g. private://) as glob() cannot see through those (#2058)
• Fixed RotatingFileHandler not using the configured timezone when computing the next rotation time (#2022)
• Fixed scalars being replaced by the "Over N levels deep" message instead of being output when the max normalization depth is reached (#2042)
• Fixed DeduplicationHandler failing with an undefined array key error when the store file is written to concurrently (#2020)
• Fixed TelegramBotHandler swallowing errors when the API returns a non-JSON response (#2030)
• Fixed AbstractProcessingHandler::handle() reading $bubble directly instead of calling getBubble(), so overrides of it were ignored (#2031)
• Fixed warning on PHP 8.5 when ErrorHandler sets the HTTP response code and a status line was already registered (#2027)

Commits

• 72c534f Update changelog
• 7f81d36 Fix baseline
• 1ab1776 Add more mongodb version pins
• d3d822a Fix baseline
• c1dd221 Fix TelegramBotHandler breaking HTML tags when truncating or splitting long m...
• ddcd2b4 Fix mongodb version in phpstan build as well
• b8f218d Allow reading the timestamp of log records from a PSR-20 clock (#2065)
• 9e5649c Fix couchdb install warning
• f04a319 Pin a higher version of mongodb to avoid problems with outdated versions
• 2313cc7 Fix RedactingFormatter missing secrets nested in array-valued sensitive keys ...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

⚠️ CI-Report

1 Dateien geändert · +16 -14

Übersicht

Check	Status	Details
Build (PHP 8.3 – 8.4)	❌ Fehlgeschlagen
Unit Tests (8.3/8.4)	❌ Fehlgeschlagen	Fehlgeschlagen
Integration Tests	❌ Fehlgeschlagen	Fehlgeschlagen
Feature Tests (HTTP)	❌ Fehlgeschlagen	Fehlgeschlagen
Frontend Build	❌ Fehlgeschlagen	Assets nicht aktuell — npm run build fehlt
Security Audit	❌ Fehlgeschlagen
PHPStan	❌ Fehlgeschlagen

---

Unit Tests ❌

❌ Fehlgeschlagen — keine Details aus JUnit XML verfügbar.

Integration Tests ❌

❌ Fehlgeschlagen — keine Details aus JUnit XML verfügbar.

Feature Tests (HTTP) ❌

❌ Fehlgeschlagen — keine Details aus JUnit XML verfügbar.

Frontend Build ❌

Assets weichen vom Repo-Stand ab — lokal npm run build und committen.

PHPStan – Statische Analyse ❌

Ergebnis konnte nicht geladen werden.

Security Audit ❌

Ergebnis konnte nicht geladen werden.

---

Workflow-Log ansehen