chore: merge main back into develop after v13.40.0

CHANGELOG.md

@@ -5,7 +5,12 @@ All notable changes to the Pollora framework will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-## [Unreleased](https://github.com/Pollora/framework/compare/v13.39.3...develop)
+## [Unreleased](https://github.com/Pollora/framework/compare/v13.40.0...develop)
+
+## [v13.40.0](https://github.com/Pollora/framework/compare/v13.39.3...v13.40.0) - 2026-11-04
+
+### Changed
+- The framework requires Laravel 13.40 (`illuminate/*` `^13.40`)
 
 ## [v13.39.3](https://github.com/Pollora/framework/compare/v13.39.2...v13.39.3) - 2026-11-02
 

README.md

@@ -30,7 +30,7 @@ composer create-project pollora/pollora my-project
 Requirements:
 
 - PHP 8.4+ for a new project (the skeleton's lock file ships Symfony 8; this package alone accepts PHP 8.3)
-- Laravel 13.39 (Pollora's version numbers follow the Laravel release it is built on)
+- Laravel 13.40 (Pollora's version numbers follow the Laravel release it is built on)
 - WordPress 7.1+
 
 ## Quick start

composer.json

@@ -24,11 +24,11 @@
     "require": {
         "php": "^8.3",
         "pollora/helper-overrider": "^1.2",
-        "illuminate/auth": "^13.39",
-        "illuminate/support": "^13.39",
-        "illuminate/database": "^13.39",
-        "illuminate/routing": "^13.39",
-        "illuminate/console": "^13.39",
+        "illuminate/auth": "^13.40",
+        "illuminate/support": "^13.40",
+        "illuminate/database": "^13.40",
+        "illuminate/routing": "^13.40",
+        "illuminate/console": "^13.40",
         "pollora/abilities": "^1.0",
         "pollora/ajax": "^1.1",
         "pollora/assets": "^0.1",
@@ -54,7 +54,7 @@
         "coduo/php-humanizer": "5.0.3",
         "nwidart/laravel-modules": "^13.2",
         "symfony/process": "^7.4 || ^8.0",
-        "illuminate/config": "^13.39",
+        "illuminate/config": "^13.40",
         "laravel/prompts": "^0.3.26"
     },
     "autoload": {

tests/Feature/Doctor/InstallChecksTest.php

@@ -201,7 +201,7 @@ function writeLock(string $project, array $patches): void
 
     it('is skipped when the site cannot request itself', function (): void {
         config(['app.url' => 'http://pollora.test']);
-        Http::fake(fn () => throw new RuntimeException('timeout'));
+        Http::fake(fn (): never => throw new RuntimeException('timeout'));
 
         expect((new PublicRootCheck)->run(RunContext::Http)->status->value)->toBe('skipped');
     });

tests/Unit/Discovery/Infrastructure/Services/DiscoveryRegistrarTest.php

@@ -102,7 +102,7 @@ function createMockRegistrarEngine(): DiscoveryEngineInterface
     });
 
     it('gracefully handles unresolvable bindings', function (): void {
-        $this->container->singleton('App\\BrokenDiscovery', fn () => throw new RuntimeException('Cannot resolve'));
+        $this->container->singleton('App\\BrokenDiscovery', fn (): never => throw new RuntimeException('Cannot resolve'));
 
         $engine = createMockRegistrarEngine();
         $engine->shouldNotReceive('addDiscovery');

tests/Unit/Proxy/WordPressDatabaseTest.php

@@ -143,7 +143,7 @@ public function __construct(public string $dbuser, public string $dbpassword, pu
     it('throws RuntimeException on mysql_connect', function (): void {
         $proxy = new WordPressDatabase;
 
-        expect(fn () => $proxy->mysql_connect())
+        expect(fn (): never => $proxy->mysql_connect())
             ->toThrow(RuntimeException::class, 'Using mysql_connect is deprecated');
     });
 });