Bump metalogico/laravel-formello from 1.3.3 to 2.1.1

[dependabot]

Bumps metalogico/laravel-formello from 1.3.3 to 2.1.1.

Release notes

Sourced from metalogico/laravel-formello's releases.

v2.1.1

Security updates and updated composer packages

v2.1.0

Added

• Tailwind CSS 4 widgets
• Tom Select Widget: New TomSelectWidget using Tom Select for a modern, lightweight, and accessible select dropdown with features like search, pagination, and custom templates.
• Dependent Select: It's possible now to make a select field dependent on another select field (using the new tomselect widget).
• Separator Widget: New separator widget for dividing sections in your forms.
• Custom Widgets Config: config/formello.php now uses "custom_widgets" to alias your custom widgets.
• Reactive System: Callback-based field interdependency engine with two execution layers:
  • reactive.client — instant JS callbacks via window.FormelloReactive
  • reactive.server — async PHP callbacks via POST endpoint
• FormelloState (src/Support/FormelloState.php): State object with identical API in JS and PHP (get, set, setOptions, setAttributes)
• FormelloComputeController (src/Http/Controllers/FormelloComputeController.php): POST endpoint for server-side reactive callbacks
• formello-reactive.js: Client-side reactive engine with debounced input handling, widget-aware value setters (TomSelect, Flatpickr, Jodit), and initial state execution on page load
• Reactive config section in config/formello.php with compute_path and allowed_forms whitelist
• Reactive data attributes on <form> and field wrapper <div> elements for JS engine binding
• New methods on Formello.php: getFieldConfig(), hasReactiveFields(), getReactiveMap()
• Documentation: docs/reactive.md
• Unit tests for FormelloState and reactive methods (13 new tests)

Warning: BREAKING CHANGES!

• Select2 Widget: The Select2Widget has been deprecated in favor of the TomSelectWidget.
• Removed dependencies on jQuery
• 'boolean' widget is now 'toggle'

Fixed

• Date and DateTime: error messages now appear below the field and the red highlight works correctly, including with icons/prefix/suffix.
• Jodit WYSIWYG: removed safeMode so plugins load by default; fixed config binding.

Full Changelog: metalogico/laravel-formello@v1.3.1...v2.1.0

Commits

• d7a4e75 Merge branch 'develop'
• a983270 chore: composer update
• 692ac19 Merge develop into main for v2.1.0
• 0b00aa5 feat: reactive js/php forms
• efb21be feat: tailwindcss widgets
• 7675904 Merge branch 'main' into feature/tailwindcss-widgets
• 93c5392 Merge branch 'develop' into main for v1.3.3
• b3f168c Merge branch 'develop' into main for v1.3.2
• b7f7559 Merge branch 'develop' into main
• afad6f2 Merge branch 'develop' into main
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[crimsonstrife]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[deepsource-io]

DeepSource Code Review

We reviewed changes in 1f2bcc4...d22b653 on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall Grade

Security   Reliability   Complexity   Hygiene

Code Review Summary

Analyzer	Status	Updated (UTC)	Details
PHP		Jun 8, 2026 12:54a.m.	Review ↗
JavaScript		Jun 8, 2026 12:54a.m.	Review ↗
Python		Jun 8, 2026 12:54a.m.	Review ↗

---

Important

AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.