Bump metalogico/laravel-formello from 1.3.3 to 2.1.1

[dependabot]

Bumps metalogico/laravel-formello from 1.3.3 to 2.1.1.

Release notes

Sourced from metalogico/laravel-formello's releases.

v2.1.1

Security updates and updated composer packages

v2.1.0

Added

• Tailwind CSS 4 widgets
• Tom Select Widget: New TomSelectWidget using Tom Select for a modern, lightweight, and accessible select dropdown with features like search, pagination, and custom templates.
• Dependent Select: It's possible now to make a select field dependent on another select field (using the new tomselect widget).
• Separator Widget: New separator widget for dividing sections in your forms.
• Custom Widgets Config: config/formello.php now uses "custom_widgets" to alias your custom widgets.
• Reactive System: Callback-based field interdependency engine with two execution layers:
  • reactive.client — instant JS callbacks via window.FormelloReactive
  • reactive.server — async PHP callbacks via POST endpoint
• FormelloState (src/Support/FormelloState.php): State object with identical API in JS and PHP (get, set, setOptions, setAttributes)
• FormelloComputeController (src/Http/Controllers/FormelloComputeController.php): POST endpoint for server-side reactive callbacks
• formello-reactive.js: Client-side reactive engine with debounced input handling, widget-aware value setters (TomSelect, Flatpickr, Jodit), and initial state execution on page load
• Reactive config section in config/formello.php with compute_path and allowed_forms whitelist
• Reactive data attributes on <form> and field wrapper <div> elements for JS engine binding
• New methods on Formello.php: getFieldConfig(), hasReactiveFields(), getReactiveMap()
• Documentation: docs/reactive.md
• Unit tests for FormelloState and reactive methods (13 new tests)

Warning: BREAKING CHANGES!

• Select2 Widget: The Select2Widget has been deprecated in favor of the TomSelectWidget.
• Removed dependencies on jQuery
• 'boolean' widget is now 'toggle'

Fixed

• Date and DateTime: error messages now appear below the field and the red highlight works correctly, including with icons/prefix/suffix.
• Jodit WYSIWYG: removed safeMode so plugins load by default; fixed config binding.

Full Changelog: metalogico/laravel-formello@v1.3.1...v2.1.0

Commits

• d7a4e75 Merge branch 'develop'
• a983270 chore: composer update
• 692ac19 Merge develop into main for v2.1.0
• 0b00aa5 feat: reactive js/php forms
• efb21be feat: tailwindcss widgets
• 7675904 Merge branch 'main' into feature/tailwindcss-widgets
• 93c5392 Merge branch 'develop' into main for v1.3.3
• b3f168c Merge branch 'develop' into main for v1.3.2
• b7f7559 Merge branch 'develop' into main
• afad6f2 Merge branch 'develop' into main
• Additional commits viewable in compare view

[crimsonstrife]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[deepsource-io]

DeepSource Code Review

We reviewed changes in 2b30267...af4ee01 on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall Grade

Security   Reliability   Complexity   Hygiene

Code Review Summary

Analyzer	Status	Updated (UTC)	Details
PHP		Jun 2, 2026 2:34p.m.	Review ↗
JavaScript		Jun 2, 2026 2:34p.m.	Review ↗
Python		Jun 2, 2026 2:34p.m.	Review ↗

---

Important

AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.

[crimsonstrife]

@dependabot rebase

[dependabot]

Superseded by #576.