Skip to content
This repository was archived by the owner on Aug 21, 2026. It is now read-only.

composer(deps-dev): bump the development-dependencies group with 4 updates - #258

Merged
github-actions[bot] merged 3 commits into
masterfrom
dependabot/composer/master/development-dependencies-c28d4e12ef
Jul 14, 2025
Merged

composer(deps-dev): bump the development-dependencies group with 4 updates#258
github-actions[bot] merged 3 commits into
masterfrom
dependabot/composer/master/development-dependencies-c28d4e12ef

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 12, 2025

Copy link
Copy Markdown
Contributor

Updates the requirements on infection/infection, mimmi20/coding-standard, phpunit/phpunit and rector/rector to permit the latest version.
Updates infection/infection to 0.30.3

Release notes

Sourced from infection/infection's releases.

New ReturnRemoval mutator. Don't show 0 metrics in result summary

Added:

Changed:

Fixed:

Internal:

Full Changelog: infection/infection@0.30.2...0.30.3

Changelog

Sourced from infection/infection's changelog.

0.30.3 (2025-07-11)

Added:

Changed:

Fixed:

Internal:

Full Changelog: infection/infection@0.30.2...0.30.3

0.30.2 (2025-07-10)

Changed:

Internal:

Full Changelog: infection/infection@0.30.1...0.30.2

0.30.1 (2025-07-04)

Changed:

... (truncated)

Commits

Updates mimmi20/coding-standard to 6.1.4

Commits
  • a47e6a5 Merge pull request #748 from mimmi20/dependabot/composer/master/friendsofphp/...
  • 6f89786 composer (master)(deps): update friendsofphp/php-cs-fixer requirement
  • 0ffa4e1 Merge pull request #746 from mimmi20/dependabot/composer/master/friendsofphp/...
  • e34e97c composer (master)(deps): update friendsofphp/php-cs-fixer requirement
  • See full diff in compare view

Updates phpunit/phpunit to 12.2.7

Release notes

Sourced from phpunit/phpunit's releases.

PHPUnit 12.2.7

Fixed

  • #6254: defects,randomconfiguration is supported by implementation, but it is not allowed by the XML configuration file schema
  • #6259: Order of tests which use data from data providers is not affected by test sorting
  • #6266: Superfluous whitespace in TestDox output when test method name has a number after the test prefix

How to install or update PHPUnit

Changelog

Sourced from phpunit/phpunit's changelog.

[12.2.7] - 2025-07-11

Fixed

  • #6254: defects,randomconfiguration is supported by implementation, but it is not allowed by the XML configuration file schema
  • #6259: Order of tests which use data from data providers is not affected by test sorting
  • #6266: Superfluous whitespace in TestDox output when test method name has a number after the test prefix

[12.2.6] - 2025-07-04

Fixed

  • #6104: Test with dependencies and data provider fails
  • #6163: @no-named-arguments leads to static analysis errors for variadic arguments

[12.2.5] - 2025-06-27

Fixed

  • #6249: No meaningful error when <testsuite> element is missing required name attribute

[12.2.4] - 2025-06-26

Changed

  • Including information about the Git repository (such as the commit hash and branch name) in the Open Test Reporting XML format is now an opt-in feature that can be enabled via the --include-git-information CLI option or the includeGitInformation attribute in the XML configuration file

Fixed

  • If Git information is included in the Open Test Reporting XML format (see above), any credentials that may be configured as part the remote.origin.url setting in Git were written to the originUrl attribute of <git:repository> elements. For example, when cloning a GitHub repository using a URL like https://username:password@github.com/organization/repository.git both username and password were included in the XML report. Since this report may be shared, published, or archived (for example, on a CI server) while including this information, this was reported as a potential security vulnerability (CVE-2025-53103). Any credentials are now removed before writing them to the XML report.

[12.2.3] - 2025-06-20

Added

  • #6236: failOnPhpunitWarning attribute on the <phpunit> element of the XML configuration file and --fail-on-phpunit-warning CLI option for controlling whether PHPUnit should fail on PHPUnit warnings (default: true)
  • #6239: --do-not-fail-on-deprecation, --do-not-fail-on-phpunit-warning, --do-not-fail-on-phpunit-deprecation, --do-not-fail-on-empty-test-suite, --do-not-fail-on-incomplete, --do-not-fail-on-notice, --do-not-fail-on-risky, --do-not-fail-on-skipped, and --do-not-fail-on-warning CLI options
  • --do-not-report-useless-tests CLI option as a replacement for --dont-report-useless-tests

Deprecated

  • #6240: --dont-report-useless-tests CLI option (use --do-not-report-useless-tests instead)

Fixed

  • #6243: Constraints cannot be implemented without using internal class ExpectationFailedException

[12.2.2] - 2025-06-13

Fixed

... (truncated)

Commits

Updates rector/rector to 2.1.1

Release notes

Sourced from rector/rector's releases.

Released Rector 2.1.1

New Features 🥳

  • [Php84] Add message name on multilines on DeprecatedAnnotationToDeprecatedAttributeRector (#7030)
  • Add SortNamedParamRector (#7047), Thanks @​VincentLanglet!

Bugfixes 🐛

  • [CodeQuality] Properly handle Goto_ on ExplicitReturnNullRector (#7018)
  • [Php84] Skip non-array on ForeachToArray* rules (#7023)
  • [Console] Handle hidden "process" with --option without = on ConsoleApplication (#7022)
  • [Php80] Handle with property hook on ClassPropertyAssignToConstructorPromotionRector (#7024)
  • [Scoped] Exclude DateRangeError on Scoper for prefixing (#7027)
  • [Php84] Handle multi lines text on DeprecatedAnnotationToDeprecatedAttributeRector (#7028)
  • [Php55] Avoid $scope = ScopeFetcher::fetch($node); when not needed on GetCalledClassToStaticClassRector (#7029)
  • Fix crash on ExactCompareFactory::createBooleanAnd/Or (#7031)
  • Move ScopeFetcher::fetch() to near its usage (#7032)
  • [CodeQuality][Php84] Handle crash on ForeachToArrayFindRector+OptionalParametersAfterRequiredRector (#7033)
  • [Php84] Skip foreach value used after foreach on ForeachToArray* rules (#7034)
  • [Php84] Handle key used on conditional on ForeachToArray* rules (#7035)
  • [code-quality] Make ctor defined dynamic properties private, as most probably case (#7036)
  • [PostRector] Keep first comment after declare(strict_types=1) on UnusedImportRemovingPostRector (#7042)
  • [Php80] Make configurable to allow skip on model based classes on ClassPropertyAssignToConstructorPromotionRector (#7043)
  • [Kaizen] Save kaizen applied rules into cache to make works on parallel (#7046)
  • [Kaizen] No need filter unchanged files when --kaizen is used (#7050)
  • [Kaizen] When no files changed, early return empty on FilesFinder, even on kaizen (#7051)
  • [Kaizen] Enforce clear cache when there is files changed + kaizen enabled (#7052)
  • Fix ambiguous variable name (#7053)
  • [Php84] Handle with space on message like class name constant on DeprecatedAnnotationToDeprecatedAttributeRector (#7056)
  • [CodeQuality] LogicalToBooleanRector should add parentheses on equal (#7048)
  • [Kaizen] Remove unneeded clean kaizen cache since all cache cleared early when there are files to be changed + kaizen enabled (#7054)

rectorphp/rector-symfony 🎵

  • Fix code style issues (#810), Thanks @​mttsch
  • [Symfony 74] Rename Application::add() to Application::addCommand() (#809), Thanks @​mttsch
  • Fix links to Symfony 7.2/7.3 upgrade documents (#808), Thanks @​mttsch
  • [Symfony 7.3] Handle existing named array arguments in ConstraintOptionsToNamedArgumentsRector (#807), Thanks @​gharlan
  • [Symfony 73] add ConstraintOptionsToNamedArgumentsRector (#806), Thanks @​pedrocasado
  • Twig attributes: make methods public (#805), Thanks @​gharlan
  • AddVoteArgumentToVoteOnAttributeRector (#804), Thanks @​tugmaks
  • [CodeQuality] Skip first class callable on StringCastDebugResponseRector (#803)

... (truncated)

Commits
  • d0917c0 Rector 2.1.1
  • ef45f56 Updated Rector to commit fbb92469f8b808e54564104866cf50940b341f86
  • 4b7a582 Updated Rector to commit fbb92469f8b808e54564104866cf50940b341f86
  • 2ca3e22 Updated Rector to commit 22a54d9ce193f56f27a7f663d0d74831bb560a31
  • b97ec3f Updated Rector to commit 417d068e942d23b6b32412adcdbde3afdddd8dc9
  • 2a59eac Updated Rector to commit c079d5c0912b9f86bc5fec1914dd0df1eb83bdc5
  • f843d3d Updated Rector to commit b28a51bebdd6870a6b5d07320f615fde80b687b5
  • fa661c3 Updated Rector to commit 6670b9039c89800f3f3ab6546a7aa70c4c1e0a75
  • 582f107 Updated Rector to commit 1804aec1481ef4c1d112bbd89871ad7b2248c539
  • c243796 Updated Rector to commit 1233b635eb3decbeb5692bbd7a04ae3a74cf0162
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…dates

Updates the requirements on [infection/infection](https://github.com/infection/infection), [mimmi20/coding-standard](https://github.com/mimmi20/coding-standard), [phpunit/phpunit](https://github.com/sebastianbergmann/phpunit) and [rector/rector](https://github.com/rectorphp/rector) to permit the latest version.

Updates `infection/infection` to 0.30.3
- [Release notes](https://github.com/infection/infection/releases)
- [Changelog](https://github.com/infection/infection/blob/master/CHANGELOG.md)
- [Commits](infection/infection@0.30.1...0.30.3)

Updates `mimmi20/coding-standard` to 6.1.4
- [Release notes](https://github.com/mimmi20/coding-standard/releases)
- [Commits](mimmi20/coding-standard@6.1.2...6.1.4)

Updates `phpunit/phpunit` to 12.2.7
- [Release notes](https://github.com/sebastianbergmann/phpunit/releases)
- [Changelog](https://github.com/sebastianbergmann/phpunit/blob/12.2.7/ChangeLog-12.2.md)
- [Commits](sebastianbergmann/phpunit@12.2.6...12.2.7)

Updates `rector/rector` to 2.1.1
- [Release notes](https://github.com/rectorphp/rector/releases)
- [Commits](rectorphp/rector@2.1.0...2.1.1)

---
updated-dependencies:
- dependency-name: infection/infection
  dependency-version: 0.30.3
  dependency-type: direct:development
  dependency-group: development-dependencies
- dependency-name: mimmi20/coding-standard
  dependency-version: 6.1.4
  dependency-type: direct:development
  dependency-group: development-dependencies
- dependency-name: phpunit/phpunit
  dependency-version: 12.2.7
  dependency-type: direct:development
  dependency-group: development-dependencies
- dependency-name: rector/rector
  dependency-version: 2.1.1
  dependency-type: direct:development
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from mimmi20 as a code owner July 12, 2025 02:43
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 12, 2025
@github-actions

github-actions Bot commented Jul 12, 2025

Copy link
Copy Markdown
Contributor

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
composer/infection/infection >= 0.30.3, < 0.31.0 🟢 6.2
Details
CheckScoreReason
Packaging⚠️ -1packaging workflow not detected
Code-Review🟢 6Found 17/25 approved changesets -- score normalized to 6
Maintained🟢 1030 commit(s) and 26 issue activity found in the last 90 days -- score normalized to 10
Token-Permissions⚠️ -1No tokens found
Dangerous-Workflow⚠️ -1no workflows found
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ -1no dependencies found
Security-Policy⚠️ 0security policy file not detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Vulnerabilities🟢 100 existing vulnerabilities detected
Signed-Releases🟢 85 out of the last 5 releases have a total of 5 signed artifacts.
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
composer/mimmi20/coding-standard >= 6.1.4, < 7.0.0 UnknownUnknown
composer/phpunit/phpunit >= 12.2.7, < 13.0.0 🟢 5.2
Details
CheckScoreReason
Packaging⚠️ -1packaging workflow not detected
Code-Review⚠️ 0Found 1/26 approved changesets -- score normalized to 0
Dangerous-Workflow⚠️ -1no workflows found
Token-Permissions⚠️ -1No tokens found
Security-Policy🟢 10security policy file detected
Maintained🟢 1030 commit(s) and 19 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies⚠️ -1no dependencies found
Binary-Artifacts🟢 10no binaries found in the repo
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Vulnerabilities🟢 100 existing vulnerabilities detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
composer/rector/rector >= 2.1.1, < 3.0.0 🟢 4.8
Details
CheckScoreReason
Code-Review⚠️ 0Found 0/30 approved changesets -- score normalized to 0
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow⚠️ -1no workflows found
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Token-Permissions⚠️ -1No tokens found
Maintained🟢 1030 commit(s) and 24 issue activity found in the last 90 days -- score normalized to 10
Security-Policy⚠️ 0security policy file not detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0no SAST tool detected
Binary-Artifacts🟢 9binaries present in source code
Pinned-Dependencies⚠️ -1no dependencies found
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Vulnerabilities🟢 100 existing vulnerabilities detected

Scanned Files

  • composer.json

github-actions[bot]
github-actions Bot previously approved these changes Jul 12, 2025
@github-actions
github-actions Bot enabled auto-merge July 12, 2025 02:44
@codecov

codecov Bot commented Jul 12, 2025

Copy link
Copy Markdown

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 100.00%. Comparing base (1b0d0f9) to head (dbe84d3).
Report is 5 commits behind head on master.

✅ All tests successful. No failed tests found.

Additional details and impacted files

Impacted file tree graph

@@             Coverage Diff             @@
##              master      #258   +/-   ##
===========================================
  Coverage     100.00%   100.00%           
+ Complexity        24        23    -1     
===========================================
  Files              4         4           
  Lines             84        82    -2     
===========================================
- Hits              84        82    -2     
Flag Coverage Δ
php-8.3 100.00% <100.00%> (ø)
phpunit 100.00% <100.00%> (ø)
ubuntu-latest 100.00% <100.00%> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

Files with missing lines Coverage Δ
src/View/Helper/ViteUrl.php 100.00% <100.00%> (ø)

@qlty-cloud-legacy

Copy link
Copy Markdown

Code Climate has analyzed commit c3c10e0 and detected 0 issues on this pull request.

The test coverage on the diff in this pull request is 100.0% (50% is the threshold).

This pull request will bring the total coverage in the repository to 100.0%.

View more on Code Climate.

mimmi20
mimmi20 previously approved these changes Jul 13, 2025
@mimmi20
mimmi20 dismissed stale reviews from github-actions[bot] and themself via b3a8852 July 14, 2025 18:04
mimmi20
mimmi20 previously approved these changes Jul 14, 2025
@github-actions
github-actions Bot merged commit 8a71eae into master Jul 14, 2025
76 checks passed
@github-actions
github-actions Bot deleted the dependabot/composer/master/development-dependencies-c28d4e12ef branch July 14, 2025 18:47
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant