Update dependency monolog/monolog to v3.12.1

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
monolog/monolog	3.10.0 → 3.12.1

---

Release Notes

Seldaek/monolog (monolog/monolog)

v3.12.1

Compare Source

• Fixed Logger silently dropping every record for the rest of the process once the infinite loop guard aborted a nested logging cycle, which could hit long-running workers (#​2072)
  • Fixed RedactingFormatter letting secrets containing &, < or > through when wrapping an HtmlFormatter (#​2069)
  • Fixed SocketHandler throwing the writing timeout immediately when the first write made no progress, instead of waiting for the configured timeout (#​2071)
  • Fixed RotatingFileHandler computing the first rotation in the default timezone instead of the $timezone passed to the constructor (#​2070)

v3.12.0

Compare Source

• Added support for reading the timestamp of new records from a PSR-20 clock, via a new $clock constructor param and Logger::setClock() (#​2065)
  • Added support for #[WithMonologChannel] on constructor/method parameters, so a channel can be bound to a single argument instead of the whole class (#​2068)
  • Fixed TelegramBotHandler breaking HTML markup when truncating or splitting long messages, open tags are now closed at the end of a chunk and reopened in the next one (#​2066)
  • Fixed RedactingFormatter not redacting secrets nested inside array values of sensitive keys (#​2067)

v3.11.0

Compare Source

• Security: Fixed potential XSS in BrowserConsoleHandler when logging user provided content
  • Added RedactingFormatter to automatically redact sensitive data from records, based on key names, #[SensitiveParameter] constructor params and/or regex patterns (#​2041)
  • Added FrankenPhpHandler to log records via FrankenPHP's frankenphp_log() function (#​2056)
  • Added LogMonsterHandler which complains if the code did not log enough records before the process/request ends, like a dead man's switch for logs (#​2039)
  • Added FILE_PER_HOUR rotation mode to RotatingFileHandler (#​2040)
  • Added ErrorHandler::captureStackTraces() to attach the stack trace of PHP errors to the records it generates (#​2060)
  • Added NormalizerFormatter::setMaxTraceLength() to limit how many stack trace frames are included when normalizing exceptions (#​2015)
  • Added extension points to TelegramBotHandler to change the API URL (e.g. for a self-hosted Bot API server) and to send extra curl headers (#​2029)
  • Added ability to override IntrospectionProcessor's SKIP_FUNCTIONS in subclasses (#​2050)
  • Added $maxLength param to SyslogUdpHandler/UdpSocket to keep datagrams below the path MTU, as fragmented UDP packets are often dropped (#​2049)
  • Fixed StreamHandler truncating writes on non-blocking streams, it now loops until the whole record is written (#​2016)
  • Fixed stack trace frames without file/line being skipped, they are now reported as internal[function] entries so traces are not truncated or empty (#​2061)
  • Fixed RotatingFileHandler cleanup not finding files behind stream wrappers (e.g. private://) as glob() cannot see through those (#​2058)
  • Fixed RotatingFileHandler not using the configured timezone when computing the next rotation time (#​2022)
  • Fixed scalars being replaced by the "Over N levels deep" message instead of being output when the max normalization depth is reached (#​2042)
  • Fixed DeduplicationHandler failing with an undefined array key error when the store file is written to concurrently (#​2020)
  • Fixed TelegramBotHandler swallowing errors when the API returns a non-JSON response (#​2030)
  • Fixed AbstractProcessingHandler::handle() reading $bubble directly instead of calling getBubble(), so overrides of it were ignored (#​2031)
  • Fixed warning on PHP 8.5 when ErrorHandler sets the HTTP response code and a status line was already registered (#​2027)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[gitar-bot]

Code Review ✅ Approved

🟡 Medium risk · Updating Monolog from 3.10.0 to 3.12.1 changes logging and formatter behavior, which could affect emitted records or handler integrations.

Bumps the monolog/monolog dependency from 3.10.0 to 3.12.1 in the lockfile, picking up fixes to Logger, RedactingFormatter, SocketHandler, and RotatingFileHandler. No issues found.

Review coverage

📋 Rules No rules evaluated

🧪 Functional validation Not enabled · Set up

Options

Auto-apply is off → Gitar will not commit updates to this branch.
Display: compact → Counting what did not apply, without listing it.

Comment with these commands to change the behavior for this request:

Auto-apply	Compact
gitar auto-apply:on	gitar display:verbose

_{Was this helpful? React with 👍 / 👎 | Gitar}