Laravel 12.52.0 Shift

[ogorzalka]

This pull request includes updates for the recent minor version release of Laravel as well as bumps your package dependencies. You may review the full list of changes in the Laravel Release Notes, or highlighted changes and tips in the weekly Shifty Bits newsletter.

Before merging, you need to:

• Checkout the shift-ci-v12.52.0 branch
• Review all pull request comments for additional changes
• Run composer update
• Thoroughly test your application (no tests?, no CI?)

---

Note

Medium Risk
Dependency-only update, but it upgrades multiple framework/runtime packages (Laravel/Symfony/WordPress), which can introduce behavior changes or PHP/version-constraint issues at runtime.

Overview
Updates core dependencies, primarily bumping Laravel from 12.49 to 12.52, and refreshes composer.lock with newer versions across the stack (e.g., WordPress 6.9.0 → 6.9.1, Symfony components 7.4.4/7.4.1 → 7.4.5 and yaml → 8.0.1, plus various dev tooling updates like Pint, Sail, PHPUnit, Collision, Termwind).

No application/source code changes are included; this PR is purely a dependency lockfile refresh and version alignment.

^{Written by Cursor Bugbot for commit 35faff7. This will update automatically on new commits. Configure here.}

[ogorzalka]

⚠️ The Shift build servers run PHP 8.4. If you are running a different version of PHP, you should run composer update to ensure you have the proper versions of your dependencies for your environment.

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{Bugbot Autofix is OFF. To automatically fix reported issues with Cloud Agents, enable Autofix in the Cursor dashboard.}

This is the final PR Bugbot will review for you during this billing cycle

Your free Bugbot reviews will reset on March 3

Details

You are on the Bugbot Free tier. On this plan, Bugbot will review limited PRs each billing cycle.

To receive Bugbot reviews on all of your PRs, visit the Cursor dashboard to activate Pro and start your 14-day free trial.

[cursor]

Locked symfony/yaml v8 requires PHP 8.4, project supports 8.2

High Severity

The composer.lock pins symfony/yaml to v8.0.1, which requires php: ">=8.4". However, the project declares "php": "^8.2" in composer.json and the lock file's platform section. Any developer or CI environment running PHP 8.2 or 8.3 will fail on composer install because the locked version is incompatible. This was resolved on the Shift build server running PHP 8.4, but the lock file is now broken for all other supported PHP versions.

Additional Locations (1)

• composer.json#L18-L19