🇺🇦
5 min read

DepLog.dev weekly dependency digest: Mar 30, 2026 to Apr 05, 2026

Weekly digest for Mar 30, 2026 to Apr 05, 2026. We tracked 10 package updates, linked the notable packages and sorted the list by risk.

weekly digestdependency updatesrisk scorerelease monitoring

Week overview

This weekly dependency digest covers Mar 30, 2026 to Apr 05, 2026 and tracks 10 package updates across composer (7), go (2), npm (1).

Open laravel/framework (composer) first. R32 means a risk score of 32 out of 100, so it is a fast way to sort upgrades from low review effort to urgent review.

High risk updates

Start the review queue with laravel/framework (composer) R32, google.golang.org/grpc (go) R0, and go.opentelemetry.io/otel (go) R0. These packages are the best candidates for a human changelog read before you move them into an upgrade PR.

DepLog combines release type, version delta and changelog signals into one score. Use the score to sort the queue, then open the linked package page for the actual release details.

  • laravel/framework (composer) sits at R32/100. Latest stable release: 13.4.0. Review the package page before moving it into an upgrade PR.
  • google.golang.org/grpc (go) sits at R0/100. Latest stable release: 1.80.0. Review the package page before moving it into an upgrade PR.
  • go.opentelemetry.io/otel (go) sits at R0/100. Latest stable release: 1.43.0. Review the package page before moving it into an upgrade PR.
  • symfony/http-kernel (composer) sits at R0/100. Latest stable release: 8.0.8. Review the package page before moving it into an upgrade PR.
  • symfony/console (composer) sits at R0/100. Latest stable release: 8.0.8. Review the package page before moving it into an upgrade PR.

Fresh releases this week

The most recent releases we saw were livewire/livewire (composer), go.opentelemetry.io/otel (go), and phpunit/phpunit (composer). This section is the fastest way to understand what shipped most recently across your monitored ecosystems.

  • livewire/livewire (composer) published 3.7.15 on 2026-04-03. Use the package page to scan changelog highlights and version delta.
  • go.opentelemetry.io/otel (go) published 1.43.0 on 2026-04-03. Use the package page to scan changelog highlights and version delta.
  • phpunit/phpunit (composer) published 13.1.0 on 2026-04-03. Use the package page to scan changelog highlights and version delta.
  • doctrine/orm (composer) published 3.6.3 on 2026-04-02. Use the package page to scan changelog highlights and version delta.
  • laravel/framework (composer) published 13.4.0 on 2026-04-01. Use the package page to scan changelog highlights and version delta.

What to check next

Use this digest as a shortlist, not as the final approval step.

The package page should be your next click because it holds the changelog summary, score and package-manager specific context.

  • Open every package above R20 before you batch upgrades.
  • Group upgrades by manager when several packages moved in the same ecosystem.
  • Check whether the latest version changed only by patch, minor or major release type.
  • Copy the linked package names into your release notes or upgrade ticket so the context stays attached.
  • If the week was quiet, keep monitor filters in place and review again after the next release window.

Related links

Frequently asked questions

What does this weekly digest include?
It covers package activity from 2026-03-30 to 2026-04-05, explains how to read risk codes and links each notable package to its package page.
What does the R code next to a package mean?
It is a risk score on a 0 to 100 scale that helps you prioritize review. Higher scores usually combine bigger version jumps, riskier release types or stronger changelog signals.
Why are package managers shown next to the package name?
The manager label tells you which ecosystem shipped the update, for example composer, go, and npm. That matters when similar names exist across registries.
Why are some packages not listed here?
This digest is a shortlist of notable updates. Open your monitors or linked package pages for the full package set.