chore(deps): bump mobiledetect/mobiledetectlib from 2.8.45 to 4.11.0

[dependabot]

Bumps mobiledetect/mobiledetectlib from 2.8.45 to 4.11.0.

Release notes

Sourced from mobiledetect/mobiledetectlib's releases.

4.11.0

What's Changed

• perf(bench): overhaul phpbench suite + advisory CI + release hygiene by @​serbanghita in serbanghita/Mobile-Detect#1015

Full Changelog: serbanghita/Mobile-Detect@4.10.0...4.11.0

4.10.0

What's Changed

• fix(cache): restore PSR-16 v1/v2 LSP compatibility (#989) by @​serbanghita in serbanghita/Mobile-Detect#1014

Full Changelog: serbanghita/Mobile-Detect@4.9.0...4.10.0

4.9.0

Minor release.

Added

• Lenovo: broad Lenovo TB prefix match for modern tablets (#1013).
• Samsung: 2025 tablet models (Tab S11, S10 Lite, A11).
• MobileDetect::VERSION_TYPE_STRING and VERSION_TYPE_FLOAT constants promoted to public (#991).

Changed

• Consistent late static binding for subclass extensibility (#1012).
• Dropped PHP 8.0 and 8.1 from the CI matrix.

Fixed

• PHP 8.4 compatibility: explicit type hints where the engine now requires them.
• Cache::getTimestamp() method name typo (was getTimeStamp) (#1007).
• Version regex now accepts multi-char pre-release suffixes.
• Pinned composer dependencies to exact versions.
• GitHub Actions workflow actions updated to their latest versions.

Full changelog: serbanghita/Mobile-Detect@4.8.10...4.9.0

Empty userAgent string doesn't throw an Exception anymore, instead it returns false.

• [bug] No user-agent has been set serbanghita/Mobile-Detect#946
• added docker-compose.yml with images: setup (composer), runUnitTests, runPerfTests, runLinting, generateModel

Added back implicit $_SERVER scanning for setting the User-Agent string.

• added optional $config to MobileDetect constructor.
• added autoInitOfHttpHeaders configuration which is by default true. This enabled the old behavior from 3.x and 2.x that allows automatic detection of HTTP headers and User Agent from $_SERVER.
• refactored internal CloudFront related methods and the way setHttpHeaders work. It no longer falls back on $_SERVER. The method still calls setUserAgent in case HTTP_USER_AGENT and friends are present.
• added maximumUserAgentLength to the $config, by default the limit is 500.

4.8.01: MobileDetect version with PSR-16 Cache support.

• Support for PHP>=8.x
• PSR-16 cache support https://github.com/php-fig/simple-cache
• Run benchmark tests with https://github.com/phpbench/phpbench
• Split regex strings into array of strings. The main reason for this is future performance improvements, cross-platform compatibility and overall readability.

... (truncated)

Changelog

Sourced from mobiledetect/mobiledetectlib's changelog.

4.11.0

Security

• GHSA-mgj4-qjmw-v56v — the bundled Detection\Cache\Cache is now bounded (default 1000 entries, FIFO eviction). Prevents unbounded in-memory growth when one MobileDetect instance is reused across many distinct User-Agents in a long-running PHP runtime (RoadRunner, Laravel Octane, FrankenPHP worker mode, Swoole, ReactPHP, queue workers). Not applicable to classic PHP-FPM / mod_php deployments — the cache dies with the request. Custom PSR-16 adapters (Redis, APCu, Memcached, Filesystem) are out of scope; their eviction policy is the operator's responsibility.

Added

• Detection\Cache\Cache::__construct(int $maxEntries = Cache::DEFAULT_MAX_ENTRIES) — tune the in-memory cap via new MobileDetect(new Cache($n)).
• Cache::DEFAULT_MAX_ENTRIES constant (1000) and Cache::getMaxEntries() accessor.

Changed

• README-EXAMPLES.md "Long-Running Processes" — worker example now uses clear() (was evictExpired(), which is a no-op against fresh entries under the default 86 400 s TTL); added explicit note framing in-memory cache bounding as a systems-level concern with the bundled cap, and pointing operators at their own adapter's eviction for custom PSR-16 backends.
• Cache::evictExpired() docblock — clarified that it bounds by expiration, not by cardinality. Method behavior is unchanged.

4.10.0

Changed

• Detection\Cache\Cache method signatures widened to be Liskov-compatible with psr/simple-cache v1, v2, and v3 simultaneously. Resolves #989 — the class no longer fatals at load time on hosts where another package has already registered an older CacheInterface (common in WordPress stacks).
• composer.json: psr/simple-cache constraint widened to ^1.0 || ^2.0 || ^3.0.
• Minimum PHP version raised to 8.2 in composer.json (was >=8.0). PHP 8.0 and 8.1 are both end-of-life and had already been dropped from CI in 4.9.0 because phpbench/phpbench: 1.6.1 requires PHP ^8.2.

Added

• psr16-compat CI matrix that verifies Cache remains LSP-compatible with every supported major of psr/simple-cache (1.x, 2.x, 3.x).

BC note

• Subclasses of Detection\Cache\Cache that overrode get/set/has/delete/getMultiple/setMultiple/deleteMultiple (or protected checkKey) with narrowed parameter types (e.g. function get(string $key, …)) will fatal at class load on this version. Drop the scalar type from the override, or widen to mixed, to restore LSP compatibility.

4.9.0

Added

• Lenovo: broad Lenovo TB prefix match for modern tablets (#1013).
• Samsung: 2025 tablet models (Tab S11, S10 Lite, A11).
• MobileDetect::VERSION_TYPE_STRING and VERSION_TYPE_FLOAT constants promoted to public (#991).

Changed

• Consistent late static binding for subclass extensibility (#1012).
• Dropped PHP 8.0 and 8.1 from the CI matrix.

Fixed

• PHP 8.4 compatibility: explicit type hints where the engine now requires them.
• Cache::getTimestamp() method name typo (was getTimeStamp) (#1007).
• Version regex now accepts multi-char pre-release suffixes.
• Pinned composer dependencies to exact versions.
• GitHub Actions workflow actions updated to their latest versions.

4.8.10

Fixed

• Cache::has() now properly checks TTL expiration before returning true (PSR-16 compliance fix). Previously, has() returned true for expired items.

Added

... (truncated)

Commits

• ab39168 fix(cache): bound in-memory Cache to prevent unbounded growth (GHSA-mgj4-qjmw...
• 6e6937e perf(bench): overhaul phpbench suite + advisory CI + release hygiene (#1015)
• 21277ca docs(known-limitations): add full-page edge cache incompatibility note
• c91cc4b docs(readme): point 2.x/3.x Tests badges at the renamed workflows
• 55bdfab docs(readme): restore badge links, add packagist version + workflow badges
• 1473bd9 chore(release): 4.10.0
• 7d8c146 Merge pull request #1014 from serbanghita/fix/989-psr16-v1-compat
• f701e9f chore: adopt rolling 4.x branch scheme (one branch per major)
• e7744fe ci: auto-publish GitHub Release on tag push
• 8d43ac8 docs(readme): add 4.9.x row, mark 4.8.x as maintenance, update main CI badge
• Additional commits viewable in compare view

[dotani1111]

念の為。PC・モバイルの表示をみてみる。