Skip to content

Update dependency phpoffice/phpspreadsheet to v5#4096

Closed
renovate[bot] wants to merge 1 commit intodevelopfrom
renovate/phpoffice-phpspreadsheet-5.x
Closed

Update dependency phpoffice/phpspreadsheet to v5#4096
renovate[bot] wants to merge 1 commit intodevelopfrom
renovate/phpoffice-phpspreadsheet-5.x

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Aug 21, 2025

This PR contains the following updates:

Package Change Age Confidence
phpoffice/phpspreadsheet ~1.29 -> ~5.0 age confidence

Release Notes

PHPOffice/PhpSpreadsheet (phpoffice/phpspreadsheet)

v5.0.0

Compare Source

Breaking Changes
  • Images will be loaded from an external source (e.g. http://example.com/img.png) only if the reader is explicitly set to allow it via $reader->setAllowExternalImages(true). We do not believe that loading of external images is a widely used feature.
  • Deletion of items deprecated in Release 4. See "removed" below.
  • Move some properties from Base Reader to Html Reader. PR #​4551
  • DefaultValueBinder will treat integers with more than 15 digits as strings. Issue #​4522 PR #​4527
Removed
  • Theme public constants COLOR_SCHEME_2013_PLUS_NAME (use COLOR_SCHEME_2013_2022_NAME) and COLOR_SCHEME_2013_PLUS (use COLOR_SCHEME_2013_2022).
Fixed

v4.5.0

Compare Source

Added
  • Add to all readers the option to allow or forbid fetching external images. This is unconditionally allowed now. The default will be set to "allow", so no code changes are necessary. However, we are giving consideration to changing the default. PR #​4543
  • Address Excel Inappropriate Number Format Substitution. PR #​4532
Fixed

v4.4.0

Compare Source

Added
Deprecated
  • Theme constants COLOR_SCHEME_2013_PLUS_NAME (use COLOR_SCHEME_2013_2022_NAME) and COLOR_SCHEME_2013_PLUS (use COLOR_SCHEME_2013_2022).
Fixed

v4.3.1

Compare Source

Fixed

v4.3.0

Compare Source

Added
Changed
  • Phpstan Level 10.
Fixed

v4.2.0

Compare Source

Added
Changed
  • Phpstan Version 2. PR #​4384
  • Start migration to Phpstan level 9. PR #​4396
  • Calculation locale logic moved to separate class. PR #​4398
  • TREND_POLYNOMIAL_* and TREND_BEST_FIT do not work, and are changed to throw Exceptions if attempted. (TREND_BEST_FIT_NO_POLY works.) An attempt to use an unknown trend type will now also throw an exception. Issue #​4400 PR #​4339
  • Month parameter of DATE function will now return VALUE if an ordinal string (e.g. '3rd') is used, but will accept bool or null. PR #​4420
Fixed

v4.1.0

Compare Source

Added
Changed
Fixed

v4.0.0

Compare Source

BREAKING CHANGES
  • Data Validations will be stored by worksheet, not cell. Index can be one or more cells or cell ranges. Issue #​797 Issue #​4091 Issue #​4206 PR #​4240
  • Conditional Formatting adds Priority property and handles overlapping ranges better. Issue #​4312 Issue #​4318 PR #​4314
  • Csv Reader will no longer auto-detect Mac line endings by default. Prior behavior can be explicitly enabled via setTestAutoDetect(true), and it will not be possible at all with Php9+. Issue #​4092 PR #​4340
  • Html Writer will now use "better boolean" logic. Booleans will now be output by default as TRUE/FALSE rather than 1/null-string. Prior behavior can be explicitly enabled via setBetterBoolean(false). PR #​4340
  • Xlsx Writer will now use false as the default for forceFullCalc. This affects writes with preCalculateFormulas set to false. Prior behavior can be explicitly enabled via setForceFullCalc(null).PR #​4340
  • Deletion of items deprecated in Release 3. See "removed" below.
Added
Removed
  • Worksheet::getStyles - no replacement. PR #​4330
  • The following items were deprecated in release 3 and are now removed.
  • Drawing::setIsUrl - no replacement.
  • Settings::setLibXmlLoaderOptions() and Settings::getLibXmlLoaderOptions() - no replacement.
  • Worksheet::getHashCode - no replacement.
  • IReader::SKIP_EMPTY_CELLS - use its alias IGNORE_EMPTY_CELLS instead.
  • Worksheet::getProtectedCells - use getProtectedCellRanges instead.
  • Writer/Html::isMpdf property - use instanceof Mpdf instead.
Changed
  • Nothing yet.
Moved
  • Nothing yet.
Deprecated
  • Nothing yet.
Fixed
  • Xls writer Parser Mishandling True/False Argument. Issue #​4331 PR #​4333
  • Xls writer Parser Parse By Character Not Byte. PR #​4344
  • Minor changes to dynamic array calculations exposed by using explicit array return types in some tests. PR #​4328

v3.10.0

Compare Source

Breaking Changes
  • Images will be loaded from an external source (e.g. http://example.com/img.png) only if the reader is explicitly set to allow it via $reader->setAllowExternalImages(true). We do not believe that loading of external images is a widely used feature. This is a necessary change for security purposes. It unfortunately breaks Semantic Versioning for reasons described above; there is no way to start a new major version for this branch.

v3.9.3

Compare Source

Added
  • Add to all readers the option to allow or forbid fetching external images. This is unconditionally allowed now. The default will be set to "allow", so no code changes are necessary. However, we are giving consideration to changing the default. PR #​4548

v3.9.2

Compare Source

Changed
  • Allow php-cs-fixer to Handle Implicit Backslashes.
Added
Fixed

v3.9.1

Compare Source

Fixed
  • Xls writer Parser Mishandling True/False Argument. Backport of PR #​4333
  • Xls writer Parser Parse By Character Not Byte. Backport of PR #​4344

v3.9.0

Compare Source

Added
  • Methods to get style for row or column. PR #​4317
  • Method for duplicating worksheet in spreadsheet. PR #​4315
Fixed

v3.8.0

Compare Source

Added
  • CHOOSECOLS, CHOOSEROWS, DROP, TAKE, and EXPAND. PR #​4286
Fixed

v3.7.0

Compare Source

Deprecated
  • Drawing::setIsUrl is unneeded. The property is set when setPath determines whether path is a url.
Fixed

v3.6.0

Compare Source

Added
  • Nothing yet.
Changed
  • Nothing yet.
Moved
  • Nothing yet.
Deprecated
  • Nothing yet.
Fixed

v3.5.0

Compare Source

Added
  • Nothing yet.
Changed
  • Settings::libXmlLoaderOptions is ignored. PR #​4233
Moved
  • Nothing yet.
Deprecated
  • Settings::setLibXmlLoaderOptions() and Settings::getLibXmlLoaderOptions() are no longer needed - no replacement.
  • Worksheet::getHashCode is no longer needed.
Fixed

v3.4.0

Compare Source

Security Fix
  • Several security patches.
Added
Changed
Deprecated
  • IReader::SKIP_EMPTY_CELLS - use its alias IGNORE_EMPTY_CELLS instead.
  • Worksheet::getProtectedCells was deprecated in release 2, but was not properly documented, and not removed in release 3. Use getProtectedCellRanges instead.
  • Writer/Html::isMpdf property was deprecated in release 2, but was not properly documented, and not removed in release 3. Use instanceof Mpdf instead.
Moved
  • Nothing yet.
Fixed

v3.3.0

Compare Source

Dynamic Arrays
  • Support for Excel dynamic arrays is added. It is an opt-in feature, so our hope is that there will be no BC breaks, but it is a very large change. Full support is added for Xlsx. It is emulated as Ctrl-Shift-Enter arrays for Ods read and write and Excel2003 and Gnumeric read. Html/Pdf and Csv writers will populate cells on output if they are the result of array formulas. No support is added for Xls or Slk.
Added
Changed
  • Xlsx Reader default datatype when none is specified in Xml is changed from string to numeric, which is how Excel treats it. There is expected to be little impact because DefaultValueBinder and AdvancedValueBinder correct mis-identification as string, and StringValueBinder usually expects string. PR #​4139
  • Currency and Accounting Wizards are changed to act like Excel, and a new CurrencyBase Wizard is added for for non-Excel formats. Issue #​4125 Issue #​4124 PR #​4127
  • Images will not be added to spreadsheet if they cannot be validated as images.
Deprecated
  • Nothing yet.
Removed
  • The following items were deprecated in release 2 and are now removed.
  • Writer\Xls\Style\ColorMap (no longer needed).
  • Reader\Xml::trySimpleXMLLoadString (should not have been public, no public replacement).
  • Calculation\Calculation::_translateFormulaToLocale (use method name translateFormulaToLocale without leading underscore).
  • Calculation\Calculation::_translateFormulaToEnglish (use method name translateFormulaToEnglish without leading underscore).
Moved
  • Nothing yet.
Fixed

v2.4.0

Compare Source

Breaking Changes
  • Images will be loaded from an external source (e.g. http://example.com/img.png) only if the reader is explicitly set to allow it via $reader->setAllowExternalImages(true). We do not believe that loading of external images is a widely used feature. This is a necessary change for security purposes. It unfortunately breaks Semantic Versioning for reasons described above; there is no way to start a new major version for this branch.

v2.3.10

Compare Source

Added
  • Add to all readers the option to allow or forbid fetching external images. This is unconditionally allowed now. The default will be set to "allow", so no code changes are necessary. However, we are giving consideration to changing the default. PR #​4547

v2.3.9

Compare Source

Changed
  • Allow php-cs-fixer to Handle Implicit Backslashes.
Added
Fixed

v2.3.8

Compare Source

Fixed
  • Xls writer Parser Mishandling True/False Argument. Backport of PR #​4333
  • Xls writer Parser Parse By Character Not Byte. Backport of PR #​4344

v2.3.7

Compare Source

Fixed
  • Backported security patch for control characters in protocol.
  • Use Composer\Pcre in Xls/Parser. Partial backport of PR #​4203

v2.3.6

Compare Source

Deprecated
  • Worksheet::getHashCode is no longer needed.
Fixed
  • Backported security patch for Html navigation.
  • Change hash code for worksheet. Backport of PR #​4207
  • Retitling cloned worksheets. Backport of PR #​4302

v2.3.5

Compare Source

Deprecated
  • Drawing::setIsUrl is unneeded. The property is set when setPath determines whether path is a url.
Fixed
  • More context options may be needed for http(s) image. Backport of PR #​4276
  • Backported security patches for Samples.
  • Backported security patches for Html Writer.

v2.3.4

Compare Source

2024-12-08 - 2.3.4

Fixed
  • Fix Minor Break Handling Drawings. Backport of PR #​4244
  • Swapped Row and Column Indexes in Reference Helper. Backport of PR #​4247
  • Upgrade locked version of Dompdf (Php8.4 compatibility).
  • Remove unnecessary files from Composer package.

v2.3.3

Compare Source

2024-11-22 - 2.3.3

Changed
  • Settings::libXmlLoaderOptions is ignored. Backport of PR #​4233
Deprecated
  • Settings::setLibXmlLoaderOptions() and Settings::getLibXmlLoaderOptions() are no longer needed - no replacement.

v2.3.2

Compare Source

2024-11-10 - 2.3.2

Possible error in release process for 2.3.1.

Fixed
  • 2.3.1 omitted.
  • Backported security patches.
  • Write ignoredErrors Tag Before Drawings. Backport of PR #​4212 intended for 3.4.0.
  • Changes to ROUNDDOWN/ROUNDUP/TRUNC. Backport of PR #​4214 intended for 3.4.0.
Added
  • Method to Test Whether Csv Will Be Affected by Php9. Backport of PR #​4189 intended for 3.4.0.

v2.3.0

Compare Source

2024-09-29 - 2.3.0

Fixed
  • Backported security patches.
  • Improve Xlsx Reader speed (backport of PR #​4153 intended for 3.0.0). Issue #​3917
  • Change to Csv Reader (see below under Deprecated). Backport of PR #​4162 intended for 3.0.0. Issue #​4161
  • Tweak to AMORDEGRC. Backport of PR #​4164 intended for 3.0.0.
Changed
  • Images will not be added to spreadsheet if they cannot be validated as images.
Deprecated
  • Php8.4 will deprecate the escape parameter of fgetcsv. Csv Reader is affected by this; code is changed to be unaffected, but this will mean a breaking change is coming with Php9. Any code which uses the default escape value of backslash will fail in Php9. It is recommended to explicitly set the escape value to null string before then.

v2.2.2

Compare Source

Added
  • Nothing yet.
Changed
  • Nothing yet.
Deprecated
  • Nothing yet.
Moved
  • Nothing yet.
Fixed

v2.2.1

Compare Source

Security Fix
Fixed

v2.2.0

Compare Source

Added
Changed
  • On read, Xlsx Reader had been breaking up union ranges into separate individual ranges. It will now try to preserve range as it was read in. PR #​4042
  • Xlsx/Xls spreadsheet calculation and formatting of dates will use base date of spreadsheet even when spreadsheets with different base dates are simultaneously open. Issue #​1036 Issue #​1635 PR #​4071
Deprecated
  • Writer\Xls\Style\ColorMap is no longer needed.
Moved
  • Nothing
Fixed

v2.1.12

Compare Source

Breaking Changes
  • Images will be loaded from an external source (e.g. http://example.com/img.png) only if the reader is explicitly set to allow it via $reader->setAllowExternalImages(true). We do not believe that loading of external images is a widely used feature. This is a necessary change for security purposes. It unfortunately breaks Semantic Versioning for reasons described above; there is no way to start a new major version for this branch.

v2.1.11

Compare Source

Added
  • Add to all readers the option to allow or forbid fetching external images. This is unconditionally allowed now. The default will be set to "allow", so no code changes are necessary. However, we are giving consideration to changing the default. PR #​4546

v2.1.10

Compare Source

Changed
  • Allow php-cs-fixer to Handle Implicit Backslashes.
Added
Fixed

v2.1.9

Compare Source

Fixed
  • Xls writer Parser Mishandling True/False Argument. Backport of PR #​4333
  • Xls writer Parser Parse By Character Not Byte. Backport of PR #​4344

v2.1.8

Compare Source

Fixed
  • Backported security patch for control characters in protocol.
  • Use Composer\Pcre in Xls/Parser. Partial backport of PR #​4203

v2.1.7

Compare Source

Deprecated
  • Worksheet::getHashCode is no longer needed..
Fixed
  • Backported security patch for Html navigation.
  • Change hash code for worksheet. Backport of PR #​4207
  • Retitling cloned worksheets. Backport of PR #​4302

v2.1.6

Compare Source

Deprecated
  • Drawing::setIsUrl is unneeded. The property is set when setPath determines whether path is a url.
Fixed
  • More context options may be needed for http(s) image. Backport of PR #​4276
  • Backported security patches for Samples.
  • Backported security patches for Html Writer.

v2.1.5

Compare Source

2024-12-08 - 2.1.5

Fixed
  • Fix Minor Break Handling Drawings. Backport of PR #​4244
  • Swapped Row and Column Indexes in Reference Helper. Backport of PR #​4247
  • Upgrade locked version of Tcpdf (security advisory).
  • Upgrade locked version of Dompdf (Php8.4 compatibility).
  • Remove unnecessary files from Composer package.

v2.1.4

Compare Source

2024-11-22 - 2.1.4

Changed
  • Settings::libXmlLoaderOptions is ignored. Back

Configuration

📅 Schedule: Branch creation - "after 10pm on thursday and friday,before 5am on thursday and friday" in timezone Europe/Rome, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies Pull requests that update a dependency file label Aug 21, 2025
@renovate
Copy link
Copy Markdown
Contributor Author

renovate Bot commented Aug 21, 2025

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: composer.lock
Command failed: composer update phpoffice/phpspreadsheet:5.0.0 --with-dependencies --ignore-platform-req='ext-*' --ignore-platform-req='lib-*' --no-ansi --no-interaction --no-scripts --no-autoloader --no-plugins --minimal-changes
Loading composer repositories with package information
Dependency symfony/console is also a root requirement. Package has not been listed as an update argument, so keeping locked at old version. Use --with-all-dependencies (-W) to include root dependencies.
Dependency psr/log is also a root requirement. Package has not been listed as an update argument, so keeping locked at old version. Use --with-all-dependencies (-W) to include root dependencies.
Updating dependencies
Your requirements could not be resolved to an installable set of packages.

  Problem 1
    - phptal/phptal is locked to version 1.6.0 and an update of this package was not requested.
    - phptal/phptal 1.6.0 requires php ~7.4.0 || ~8.0.0 || ~8.1.0 -> your php version (8.4.11) does not satisfy that requirement.

@riccio82 riccio82 closed this Aug 21, 2025
@renovate
Copy link
Copy Markdown
Contributor Author

renovate Bot commented Aug 21, 2025

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update. You will not get PRs for any future 5.x releases. But if you manually upgrade to 5.x then Renovate will re-enable minor and patch updates automatically.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.

@renovate renovate Bot deleted the renovate/phpoffice-phpspreadsheet-5.x branch August 21, 2025 07:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@riccio82