build(deps): bump monolog/monolog from 3.10.0 to 3.11.0

[dependabot]

Bumps monolog/monolog from 3.10.0 to 3.11.0.

Release notes

Sourced from monolog/monolog's releases.

3.11.0

• Security: Fixed potential XSS in BrowserConsoleHandler when logging user provided content
• Added RedactingFormatter to automatically redact sensitive data from records, based on key names, #[SensitiveParameter] constructor params and/or regex patterns (#2041)
• Added FrankenPhpHandler to log records via FrankenPHP's frankenphp_log() function (#2056)
• Added LogMonsterHandler which complains if the code did not log enough records before the process/request ends, like a dead man's switch for logs (#2039)
• Added FILE_PER_HOUR rotation mode to RotatingFileHandler (#2040)
• Added ErrorHandler::captureStackTraces() to attach the stack trace of PHP errors to the records it generates (#2060)
• Added NormalizerFormatter::setMaxTraceLength() to limit how many stack trace frames are included when normalizing exceptions (#2015)
• Added extension points to TelegramBotHandler to change the API URL (e.g. for a self-hosted Bot API server) and to send extra curl headers (#2029)
• Added ability to override IntrospectionProcessor's SKIP_FUNCTIONS in subclasses (#2050)
• Added $maxLength param to SyslogUdpHandler/UdpSocket to keep datagrams below the path MTU, as fragmented UDP packets are often dropped (#2049)
• Fixed StreamHandler truncating writes on non-blocking streams, it now loops until the whole record is written (#2016)
• Fixed stack trace frames without file/line being skipped, they are now reported as internal[function] entries so traces are not truncated or empty (#2061)
• Fixed RotatingFileHandler cleanup not finding files behind stream wrappers (e.g. private://) as glob() cannot see through those (#2058)
• Fixed RotatingFileHandler not using the configured timezone when computing the next rotation time (#2022)
• Fixed scalars being replaced by the "Over N levels deep" message instead of being output when the max normalization depth is reached (#2042)
• Fixed DeduplicationHandler failing with an undefined array key error when the store file is written to concurrently (#2020)
• Fixed TelegramBotHandler swallowing errors when the API returns a non-JSON response (#2030)
• Fixed AbstractProcessingHandler::handle() reading $bubble directly instead of calling getBubble(), so overrides of it were ignored (#2031)
• Fixed warning on PHP 8.5 when ErrorHandler sets the HTTP response code and a status line was already registered (#2027)

Full Changelog: Seldaek/monolog@3.10.0...3.11.0

Changelog

Sourced from monolog/monolog's changelog.

3.11.0 (2026-09-02)

• Security: Fixed potential XSS in BrowserConsoleHandler when logging user provided content
• Added RedactingFormatter to automatically redact sensitive data from records, based on key names, #[SensitiveParameter] constructor params and/or regex patterns (#2041)
• Added FrankenPhpHandler to log records via FrankenPHP's frankenphp_log() function (#2056)
• Added LogMonsterHandler which complains if the code did not log enough records before the process/request ends, like a dead man's switch for logs (#2039)
• Added FILE_PER_HOUR rotation mode to RotatingFileHandler (#2040)
• Added ErrorHandler::captureStackTraces() to attach the stack trace of PHP errors to the records it generates (#2060)
• Added NormalizerFormatter::setMaxTraceLength() to limit how many stack trace frames are included when normalizing exceptions (#2015)
• Added extension points to TelegramBotHandler to change the API URL (e.g. for a self-hosted Bot API server) and to send extra curl headers (#2029)
• Added ability to override IntrospectionProcessor's SKIP_FUNCTIONS in subclasses (#2050)
• Added $maxLength param to SyslogUdpHandler/UdpSocket to keep datagrams below the path MTU, as fragmented UDP packets are often dropped (#2049)
• Fixed StreamHandler truncating writes on non-blocking streams, it now loops until the whole record is written (#2016)
• Fixed stack trace frames without file/line being skipped, they are now reported as internal[function] entries so traces are not truncated or empty (#2061)
• Fixed RotatingFileHandler cleanup not finding files behind stream wrappers (e.g. private://) as glob() cannot see through those (#2058)
• Fixed RotatingFileHandler not using the configured timezone when computing the next rotation time (#2022)
• Fixed scalars being replaced by the "Over N levels deep" message instead of being output when the max normalization depth is reached (#2042)
• Fixed DeduplicationHandler failing with an undefined array key error when the store file is written to concurrently (#2020)
• Fixed TelegramBotHandler swallowing errors when the API returns a non-JSON response (#2030)
• Fixed AbstractProcessingHandler::handle() reading $bubble directly instead of calling getBubble(), so overrides of it were ignored (#2031)
• Fixed warning on PHP 8.5 when ErrorHandler sets the HTTP response code and a status line was already registered (#2027)

Commits

• 147f303 Update changelog
• 7bbffd0 Report stack trace frames that have no file/line instead of skipping them (#2...
• 567b630 Bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 (#2063)
• a3a2046 Align FrankenPhpHandler's level scale with OpenTelemetry's mapping (#2062)
• d1d7def Fix warning when setting the http response code in case a status has already ...
• 6949404 Add a way to turn on stack traces for ErrorHandler-generated records (#2060)
• a4c5f65 Add LogMonsterHandler that requires at least some amount of logging or it log...
• e7508d8 Replace glob() with RecursiveDirectoryIterator in RotatingFileHandler cleanup...
• 9435605 Add RedactingFormatter to automatically redact keys/sensitive data before log...
• fde8b93 Add FrankenPhpHandler (#2056)
• Additional commits viewable in compare view

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 191146ad-706e-4322-a177-672f1d02574d

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}