Skip to content

Bump the composer-development-tools group across 1 directory with 5 updates - #168

Merged
samdark merged 1 commit into
masterfrom
dependabot/composer/composer-development-tools-d29304b374
Aug 31, 2026
Merged

Bump the composer-development-tools group across 1 directory with 5 updates#168
samdark merged 1 commit into
masterfrom
dependabot/composer/composer-development-tools-d29304b374

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 31, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the composer-development-tools group with 5 updates in the / directory:

Package From To
friendsofphp/php-cs-fixer 3.95.18 3.95.22
infection/infection 0.34.1 0.35.2
phpstan/phpstan 2.2.8 2.2.9
phpunit/phpunit 13.2.6 13.3.1
rector/rector 2.6.2 2.6.3

Updates friendsofphp/php-cs-fixer from 3.95.18 to 3.95.22

Release notes

Sourced from friendsofphp/php-cs-fixer's releases.

v3.95.22 Adalbertus

What's Changed

New Contributors

Full Changelog: PHP-CS-Fixer/PHP-CS-Fixer@v3.95.21...v3.95.22

v3.95.21 Adalbertus

What's Changed

Full Changelog: PHP-CS-Fixer/PHP-CS-Fixer@v3.95.20...v3.95.21

v3.95.20 Adalbertus

What's Changed

New Contributors

Full Changelog: PHP-CS-Fixer/PHP-CS-Fixer@v3.95.19...v3.95.20

v3.95.19 Adalbertus

What's Changed

... (truncated)

Changelog

Sourced from friendsofphp/php-cs-fixer's changelog.

Changelog for v3.95.22

  • fix: StaticLambdaFixer - do not make a lambda static when it is the direct subject of bindTo() or call() (#9802)
  • chore: Implement PHPStan Preg::replaceCallback() extension (#9799)
  • chore: Utils - fix stableSort() and sortFixers() template types, remove @phpstan-ignore suppressions (#9798)
  • deps: bump phpstan/phpstan from 2.2.8 to 2.2.9 (#9797)

Changelog for v3.95.21

  • fix: StatementIndentationFixer - do not treat ternary colon as block start (#9795)
  • perf: Introduce new candidate check for transformers (#9770)
  • perf: Optimize NameQualifiedTransformer token insertion (#9759)
  • CI: add BC check (#9791)
  • deps: upgrade dev-tools (#9793)

Changelog for v3.95.20

  • fix: PsrAutoloadingFixer - do not throw when the file cannot be resolved on disk (#9762)
  • refactor: Transformers - move looping over tokens directly into each transformer individually (#9782)
  • test: drop mikey179/vfsstream (#9787)
  • test: NoUnusedImportsFixerTest - add new cases around quoted values (#9784)

Changelog for v3.95.19

  • fix: binary_operator_spaces alignment for nested single-line arrays in multiline array (#9654)
  • fix: ClassDefinitionFixer - keep multiline constructor args when anonymous class has both extends and implements (#9625)
  • fix: SelfStaticAccessorFixer - do not stop fixing a class after a static return type (#9774)
  • chore: Fix incorrect URL in CommentsAnalyzer.php docblock (#9772)
  • chore: Runner - ignore coverage of non-deterministic parallel branches (#9785)
  • CI: fix using PHP_CS_FIXER_FAST_LINT_TEST_CASES (#9783)
  • deps: bump phpstan/phpstan from 2.2.7 to 2.2.8 in /dev-tools in the phpstan group (#9779)
  • deps: bump squizlabs/php_codesniffer from 4.0.1 to 4.0.4 in /dev-tools (#9768)
  • deps: bump the all group across 1 directory with 2 updates (#9767)
  • test: introduce TestCaseUtils::createTemporaryDirectory() helper (#9788)
  • test: ProjectCodeTest - restore the duplicate check in data providers (#9761)
  • test: AbstractFixerTestCase - use spl_object_id() to fix PHP 8.6 deprecations (#9786)
Commits
  • 482722e prepared the 3.95.22 release
  • 4edec9c fix: StaticLambdaFixer - do not make a lambda static when it is the direct ...
  • e8053ea chore: Implement PHPStan Preg::replaceCallback() extension (#9799)
  • 364cfee chore: Utils - fix stableSort() and sortFixers() template types, remove...
  • d8531ed deps: bump phpstan/phpstan from 2.2.8 to 2.2.9 (#9797)
  • 033b7c4 bumped version
  • 1228a1c prepared the 3.95.21 release
  • 426a3b9 fix: StatementIndentationFixer - do not treat ternary colon as block start ...
  • 905e8ee perf: Optimize NameQualifiedTransformer token insertion (#9759)
  • 62781c7 perf: Introduce new candidate check for transformers (#9770)
  • Additional commits viewable in compare view

Updates infection/infection from 0.34.1 to 0.35.2

Release notes

Sourced from infection/infection's releases.

0.35.2

Fixed:

New Contributors

Full Changelog: infection/infection@0.35.1...0.35.2

0.35.1

Fixed:

Full Changelog: infection/infection@0.35.0...0.35.1

Fix auto-prepend file logic, mago freezes and Windows-specific PHPUnit tests filtering

Fixes:

Internal:

New Contributors

Full Changelog: infection/infection@0.34.2...0.35.0

0.34.2

Fixed:

Internal:

... (truncated)

Commits
  • c7ad005 fix(phpunit): Remove the defects test order when disabling the test r… (#3458)
  • 66d7d00 build: Update the docker sandbox kits to the newer schema version (#3497)
  • 6299f6b fix(phar): Upgrade Box so the PHAR works on PHP 8.5 (#3495)
  • 741d151 [Conductor] Update rector/rector to 2.6.3 (#3493)
  • a16048a [Conductor] Update carthage-software/mago to 1.47.1 (#3492)
  • 47ef461 [Conductor] Update nette/schema to v1.3.6 (#3490)
  • f54ac59 fix(mago): Limit the mago thread count in the mutant processes (#3489)
  • 1a86473 [Conductor] Update rector/rector to 2.6.2 (#3475)
  • 1bb9430 refactor: Remove deprecated FileOrDirectoryNotFound::multipleFilesDoNotExist(...
  • 7adff14 chore(phpstan): key assertion for capture groups (#3485)
  • Additional commits viewable in compare view

Updates phpstan/phpstan from 2.2.8 to 2.2.9

Commits

Updates phpunit/phpunit from 13.2.6 to 13.3.1

Release notes

Sourced from phpunit/phpunit's releases.

PHPUnit 13.3.1

Changed

  • Invoking a static hook method such as setUpBeforeClass() no longer triggers a deprecation warning on PHP 8.6

Learn how to install or update PHPUnit 13.3 in the documentation.

Keep up to date with PHPUnit:

PHPUnit 13.3.0

Added

  • #3794: Filesystem-based code coverage targeting
  • #5758: Make export of objects customizable
  • #6546: Both property hooks can now be configured on test doubles of virtual hooked properties, even when the doubled property only declares one of them
  • #6586: Custom code coverage driver support
  • #6591: Repeated test execution using --repeat CLI option and #[Repeat] attribute
  • #6701: Allow expectOutputString() and expectOutputRegex() to be combined and repeated
  • #6710: Deprecation Filters
  • #6722: Allow #[CoversNothing] on methods
  • #6742: Retry failing tests up to N times using --retry CLI option #[Retry] attribute
  • #6827: Customize which deprecation trigger types fail the test run
  • #6830: Warn when failOnAllIssues="true" is combined with an explicitly disabled fine-grained failOn* setting
  • #6832: Allow doubling properties that do not declare property hooks
  • #6853: Optionally warn when PHP is not configured for development
  • [phpunit/php-code-coverage #1140](sebastianbergmann/php-code-coverage#1140): Class-oriented HTML report
  • [phpunit/php-code-coverage #1141](sebastianbergmann/php-code-coverage#1141): Improve visualization of branch coverage and path coverage in the HTML report
  • [phpunit/php-code-coverage #1153](sebastianbergmann/php-code-coverage#1153): Filter HTML code coverage report by test size
  • --record-test-run-history and --do-not-record-test-run-history CLI options as well as the recordTestRunHistory attribute for the XML configuration file to control whether the status and duration of each test are recorded for use by --order-by defects and --order-by duration-*
  • --without-class-view CLI option and classView attribute for the XML configuration file to disable the class-oriented view in the HTML code coverage report
  • --without-file-view CLI option and fileView attribute for the XML configuration file to disable the file-oriented view in the HTML code coverage report
  • {PWD} is now substituted with the directory of the PHPT test file in --ENV-- and --INI-- sections of PHPT test files
  • {TMP} (system directory for temporary files) and {ENV:name} (value of environment variable name) are now substituted in --INI-- sections of PHPT test files
  • A PHPT test whose --INI-- section references an environment variable that is not set is now skipped
  • A --SKIPIF-- section of a PHPT test file that prints xfail <reason> now marks the test as expected to fail, as if the PHPT test file had an --XFAIL-- section with that reason

Changed

  • [phpunit/php-code-coverage #1231](sebastianbergmann/php-code-coverage#1231): Identify dead code using static analysis
  • [phpunit/php-code-coverage #1259](sebastianbergmann/php-code-coverage#1259): Degrade gracefully when a source file cannot be parsed
  • The test runner no longer crashes when an attribute cannot be instantiated
  • Improved TestDox HTML report
  • The feature formerly named "test result cache" is now named "test run history"; when a cache directory is configured, the file it is stored in is now named test-run-history instead of test-results
  • The test runner warns now when ordering by defects or duration is configured but recording of the test run history is disabled
  • TestCase no longer captures error_log() output for tests that do not use expectErrorLog(), avoiding the cost of setting up error log redirection for every test

... (truncated)

Changelog

Sourced from phpunit/phpunit's changelog.

[13.3.1] - 2026-08-13

Changed

  • Invoking a static hook method such as setUpBeforeClass() no longer triggers a deprecation warning on PHP 8.6

[13.3.0] - 2026-08-07

Added

  • #3794: Filesystem-based code coverage targeting
  • #5758: Make export of objects customizable
  • #6546: Both property hooks can now be configured on test doubles of virtual hooked properties, even when the doubled property only declares one of them
  • #6586: Custom code coverage driver support
  • #6591: Repeated test execution using --repeat CLI option and #[Repeat] attribute
  • #6701: Allow expectOutputString() and expectOutputRegex() to be combined and repeated
  • #6710: Deprecation Filters
  • #6722: Allow #[CoversNothing] on methods
  • #6742: Retry failing tests up to N times using --retry CLI option #[Retry] attribute
  • #6827: Customize which deprecation trigger types fail the test run
  • #6830: Warn when failOnAllIssues="true" is combined with an explicitly disabled fine-grained failOn* setting
  • #6832: Allow doubling properties that do not declare property hooks
  • #6853: Optionally warn when PHP is not configured for development
  • [phpunit/php-code-coverage #1140](sebastianbergmann/php-code-coverage#1140): Class-oriented HTML report
  • [phpunit/php-code-coverage #1141](sebastianbergmann/php-code-coverage#1141): Improve visualization of branch coverage and path coverage in the HTML report
  • [phpunit/php-code-coverage #1153](sebastianbergmann/php-code-coverage#1153): Filter HTML code coverage report by test size
  • --record-test-run-history and --do-not-record-test-run-history CLI options as well as the recordTestRunHistory attribute for the XML configuration file to control whether the status and duration of each test are recorded for use by --order-by defects and --order-by duration-*
  • --without-class-view CLI option and classView attribute for the XML configuration file to disable the class-oriented view in the HTML code coverage report
  • --without-file-view CLI option and fileView attribute for the XML configuration file to disable the file-oriented view in the HTML code coverage report
  • {PWD} is now substituted with the directory of the PHPT test file in --ENV-- and --INI-- sections of PHPT test files
  • {TMP} (system directory for temporary files) and {ENV:name} (value of environment variable name) are now substituted in --INI-- sections of PHPT test files
  • A PHPT test whose --INI-- section references an environment variable that is not set is now skipped
  • A --SKIPIF-- section of a PHPT test file that prints xfail <reason> now marks the test as expected to fail, as if the PHPT test file had an --XFAIL-- section with that reason

Changed

  • [phpunit/php-code-coverage #1231](sebastianbergmann/php-code-coverage#1231): Identify dead code using static analysis
  • [phpunit/php-code-coverage #1259](sebastianbergmann/php-code-coverage#1259): Degrade gracefully when a source file cannot be parsed
  • The test runner no longer crashes when an attribute cannot be instantiated
  • Improved TestDox HTML report
  • The feature formerly named "test result cache" is now named "test run history"; when a cache directory is configured, the file it is stored in is now named test-run-history instead of test-results
  • The test runner warns now when ordering by defects or duration is configured but recording of the test run history is disabled
  • TestCase no longer captures error_log() output for tests that do not use expectErrorLog(), avoiding the cost of setting up error log redirection for every test
  • error_log() output from tests without an expectation is no longer echoed (date-stripped) to PHPUnit's output; it goes to the configured error log again, as it did before capture was introduced
  • A test running in process isolation that calls error_log() without expectErrorLog() now produces stderr output in the child process, which the test runner reports as a test error
  • A PHPT test that is expected to fail (--XFAIL-- section or xfail output from the --SKIPIF-- section) but passes is now considered risky; this usually means the expected-failure marker is stale and should be removed
  • A PHPT test whose --SKIPIF-- section produces output that is not recognized is now considered risky; this usually means the skip check itself is broken. The keywords understood by PHP's own test runner that have no PHPUnit counterpart (info, warn, xleak, flaky, and nocache) are tolerated and do not make the test risky
  • PHPT tests now run with additional INI defaults for deterministic output (date.timezone=UTC, display_startup_errors=1, fatal_error_backtraces=Off, ignore_repeated_errors=0, precision=14, serialize_precision=-1), consistent with PHP's own test runner; all of them can be overridden per test using the --INI-- section

... (truncated)

Commits
  • fc02493 Prepare release
  • e29a704 Update dependencies
  • 04157ce Do not pass object to ReflectionMethod::invoke() for static hook methods (whi...
  • 7efd432 Revert "Do not report deprecations triggered by myclabs/deep-copy"
  • a2048e9 Merge branch '12.5' into 13.3
  • 83be0fc Merge branch '11.5' into 12.5
  • 9375d10 Merge branch '10.5' into 11.5
  • bbd3c83 Update dependencies
  • dbc02ef Make closure comparison test independent of PHP 8.6 closure reuse
  • 5d20f13 Do not report deprecations triggered by myclabs/deep-copy
  • Additional commits viewable in compare view

Updates rector/rector from 2.6.2 to 2.6.3

Release notes

Sourced from rector/rector's releases.

Released Rector 2.6.3

A stabilization release on top of the composer-based sets finished in 2.6.2 - bugfixes across the engine, a couple of fresh Symfony and Doctrine rules, and the caching cleanup that the cacheClass() deprecation promised.

New rules 🎉

rector-symfony

  • [Symfony 6.1] RouteRequirementStringToConstantRector (#1037)

rector-doctrine

  • [DBAL 3.1] QueryBuilderExecuteToExecuteQueryOrExecuteStatementRector — split the deprecated execute() into executeQuery() / executeStatement() (#507)

Bugfixes 🐛

  • [DeadCode] Skip RemoveReturnTagIncompatibleWithNativeTypeRector on a type alias nested in a union (#8319)
  • [NodeAnalyzer] Treat an infinite loop without a break as always terminated (#8348) — improves return/dead-code analysis on while (true) bodies

rector-symfony

  • [CodeQuality] Fix InlineClassRoutePrefixRector duplicating the route name prefix on attribute routes (#9851)
  • [Symfony 7.2] Fix PushRequestToRequestStackConstructorRector leaving the pushed request undefined (#1040)
  • [CodeQuality] Skip loadValidatorMetadata() containing addConstraint(new Callback()) (#1038)

rector-phpunit

  • [PHPUnit 6.0] Skip imported PHPUnit assert functions in AddDoesNotPerformAssertionToNonAssertingTestRector (#767)

Set changes 📈

rector-doctrine

  • [ORM 3.5] Replace deprecated ORMSetup methods — createAttributeMetadataConfiguration() → createAttributeMetadataConfig(), createXMLMetadataConfiguration() → createXMLMetadataConfig(), createConfiguration() → createConfig()
  • [DBAL 4.0] Replace the removed Types::ARRAY with Types::SIMPLE_ARRAY (#506)

Deprecations 💀

Deprecated rules run without any effect, print a warning and will be removed in a future major release.

rector-phpunit

  • AllowMockObjectsWithoutExpectationsAttributeRector — also removed from the set

Removals 💀

... (truncated)

Commits
  • 7e46709 Rector 2.6.3
  • 75df214 Updated Rector to commit 1cd96ae9202f3d7bc51a702662deb78973d01edf
  • fa6e606 Updated Rector to commit 8eed4698083bdd1960877fb3e7ff8b76e73ef600
  • 762d6d1 Updated Rector to commit 45740234298ac355755eb76757f8a509364dfc58
  • 926f146 Updated Rector to commit ec3e0745087b8501f6abe3c0faa645ed4a022cec
  • 06622d0 Updated Rector to commit b1a303b416ed754d54b760e932bfc8880594ed85
  • ab14ccb Updated Rector to commit d2eb79dfe14e1c630b0898b3f6c70e6f9fd17558
  • a352872 Updated Rector to commit d2eb79dfe14e1c630b0898b3f6c70e6f9fd17558
  • 696856a Updated Rector to commit d2eb79dfe14e1c630b0898b3f6c70e6f9fd17558
  • 35e06a1 Updated Rector to commit d2eb79dfe14e1c630b0898b3f6c70e6f9fd17558
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update php code labels Aug 31, 2026
@dependabot
dependabot Bot force-pushed the dependabot/composer/composer-development-tools-d29304b374 branch from 9aba839 to 36c6fca Compare August 31, 2026 20:31
@samdark

samdark commented Aug 31, 2026

Copy link
Copy Markdown
Member

@dependabot rebase.

@dependabot
Bump the composer-development-tools group across 1 directory with 5 u…
abb11be 
…pdates

Bumps the composer-development-tools group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [friendsofphp/php-cs-fixer](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer) | `3.95.18` | `3.95.22` |
| [infection/infection](https://github.com/infection/infection) | `0.34.1` | `0.35.2` |
| [phpstan/phpstan](https://github.com/phpstan/phpstan-phar-composer-source) | `2.2.8` | `2.2.9` |
| [phpunit/phpunit](https://github.com/sebastianbergmann/phpunit) | `13.2.6` | `13.3.1` |
| [rector/rector](https://github.com/rectorphp/rector) | `2.6.2` | `2.6.3` |



Updates `friendsofphp/php-cs-fixer` from 3.95.18 to 3.95.22
- [Release notes](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/releases)
- [Changelog](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/blob/master/CHANGELOG.md)
- [Commits](PHP-CS-Fixer/PHP-CS-Fixer@v3.95.18...v3.95.22)

Updates `infection/infection` from 0.34.1 to 0.35.2
- [Release notes](https://github.com/infection/infection/releases)
- [Changelog](https://github.com/infection/infection/blob/master/CHANGELOG.md)
- [Commits](infection/infection@0.34.1...0.35.2)

Updates `phpstan/phpstan` from 2.2.8 to 2.2.9
- [Commits](https://github.com/phpstan/phpstan-phar-composer-source/commits)

Updates `phpunit/phpunit` from 13.2.6 to 13.3.1
- [Release notes](https://github.com/sebastianbergmann/phpunit/releases)
- [Changelog](https://github.com/sebastianbergmann/phpunit/blob/13.3.1/ChangeLog-13.3.md)
- [Commits](sebastianbergmann/phpunit@13.2.6...13.3.1)

Updates `rector/rector` from 2.6.2 to 2.6.3
- [Release notes](https://github.com/rectorphp/rector/releases)
- [Commits](rectorphp/rector@2.6.2...2.6.3)

---
updated-dependencies:
- dependency-name: friendsofphp/php-cs-fixer
  dependency-version: 3.95.22
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: composer-development-tools
- dependency-name: infection/infection
  dependency-version: 0.35.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: composer-development-tools
- dependency-name: phpstan/phpstan
  dependency-version: 2.2.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: composer-development-tools
- dependency-name: phpunit/phpunit
  dependency-version: 13.3.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: composer-development-tools
- dependency-name: rector/rector
  dependency-version: 2.6.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: composer-development-tools
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/composer/composer-development-tools-d29304b374 branch from 36c6fca to abb11be Compare August 31, 2026 21:21
@samdark
samdark merged commit 847aa06 into master Aug 31, 2026
16 checks passed
@samdark
samdark deleted the dependabot/composer/composer-development-tools-d29304b374 branch August 31, 2026 21:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file php Pull requests that update php code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@samdark