Skip to content
This repository was archived by the owner on Aug 21, 2026. It is now read-only.

composer (3.x)(deps-dev): bump the development-dependencies group with 4 updates - #312

Merged
mimmi20 merged 1 commit into
3.xfrom
dependabot/composer/3.x/development-dependencies-b88e497532
Jul 9, 2026
Merged

composer (3.x)(deps-dev): bump the development-dependencies group with 4 updates#312
mimmi20 merged 1 commit into
3.xfrom
dependabot/composer/3.x/development-dependencies-b88e497532

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 9, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on infection/infection, phpstan/phpstan, rector/rector and tomasvotruba/cognitive-complexity to permit the latest version.
Updates infection/infection to 0.34.0

Release notes

Sourced from infection/infection's releases.

0.34.0

Added:

Changed:

Full Changelog: infection/infection@0.33.3...0.34.0

Commits
  • 373c2ab Allow skipping run command with positional args (#3285)
  • d8b56fc Add support for positional arguments for config:list-sources command (#3307)
  • 2960c35 Deprecate --filter options in favor of new positional arguments for filteri...
  • 0efff96 Support positional arguments to mimic --filter and `--test-framewor-extra-a...
  • cd433d3 refactor(autoreview): Refine autoreview I/O detection for source classes (#3286)
  • 371d88d refactor(autoreview): Move the PHPUnit related code from IoCodeDetector to th...
  • a6fd990 refactor(autoreview): Minor variable and method renames (#3305)
  • f75942d feat: Add our own local unified diff output builder (#3300)
  • 9031987 docs: Improve the description of the Differ service (#3304)
  • af20b6b Support sebastian/diff: 9 (#3298)
  • Additional commits viewable in compare view

Updates phpstan/phpstan to 2.2.3

Commits

Updates rector/rector to 2.5.2

Release notes

Sourced from rector/rector's releases.

Released Rector 2.5.2

Bugfixes 🐛

  • Match class + path in unused-skip reporting — fix combined class => [paths] skips being wrongly flagged as unused (#8073)
  • Mark skip used only when rule would change the file — a class/path skip counts as "used" only if the rule would actually touch that file, killing false "used" hits (#8076)
  • Improve unused-skip resolver methods — cleaner resolution internals (#8072)
  • Track used skips as class => [paths] map — richer per-path skip tracking backing the report (#8074)
Commits
  • 49ff633 Rector 2.5.2
  • 56d179b Updated Rector to commit dd21759b1194fe28cd266337124fd3035c62ead9
  • 228203d Updated Rector to commit 2328ea6338d2496c409aaf2d8a001052e323feda
  • d7cb788 Updated Rector to commit 19dcdb7816f10cb502a1b2ef5a6628185f74e49d
  • 76d81c5 Updated Rector to commit aea1570424613c9a0acbf80c3abeb41d7dd33dbe
  • 34a9124 Rector 2.5.1
  • 6502d60 Updated Rector to commit df98b3b4e5f024d2260edc233dc9cb4adfe6a3e0
  • b74237c Updated Rector to commit 84ab911ef53267aa1c4a9466064def614e486eea
  • e3c4ee7 Updated Rector to commit 3893ea422afa3fb801ae64fa546c8a2cb24b0f97
  • bdd26a9 Updated Rector to commit 580b374ea3638fd50cf9b98b84445cd9fe53768e
  • Additional commits viewable in compare view

Updates tomasvotruba/cognitive-complexity to 1.2.0

Commits

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…h 4 updates

Updates the requirements on [infection/infection](https://github.com/infection/infection), [phpstan/phpstan](https://github.com/phpstan/phpstan-phar-composer-source), [rector/rector](https://github.com/rectorphp/rector) and [tomasvotruba/cognitive-complexity](https://github.com/TomasVotruba/cognitive-complexity) to permit the latest version.

Updates `infection/infection` to 0.34.0
- [Release notes](https://github.com/infection/infection/releases)
- [Changelog](https://github.com/infection/infection/blob/master/CHANGELOG.md)
- [Commits](infection/infection@0.33.2...0.34.0)

Updates `phpstan/phpstan` to 2.2.3
- [Commits](https://github.com/phpstan/phpstan-phar-composer-source/commits)

Updates `rector/rector` to 2.5.2
- [Release notes](https://github.com/rectorphp/rector/releases)
- [Commits](rectorphp/rector@2.4.5...2.5.2)

Updates `tomasvotruba/cognitive-complexity` to 1.2.0
- [Commits](TomasVotruba/cognitive-complexity@1.1.1...1.2.0)

---
updated-dependencies:
- dependency-name: infection/infection
  dependency-version: 0.34.0
  dependency-type: direct:development
  dependency-group: development-dependencies
- dependency-name: phpstan/phpstan
  dependency-version: 2.2.3
  dependency-type: direct:development
  dependency-group: development-dependencies
- dependency-name: rector/rector
  dependency-version: 2.5.2
  dependency-type: direct:development
  dependency-group: development-dependencies
- dependency-name: tomasvotruba/cognitive-complexity
  dependency-version: 1.2.0
  dependency-type: direct:development
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from mimmi20 as a code owner July 9, 2026 02:06
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 9, 2026
@github-actions

github-actions Bot commented Jul 9, 2026

Copy link
Copy Markdown
Contributor

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
composer/infection/infection >= 0.34.0, < 0.35.0 UnknownUnknown
composer/phpstan/phpstan >= 2.2.3, < 3.0.0 UnknownUnknown
composer/rector/rector >= 2.5.2, < 3.0.0 UnknownUnknown
composer/tomasvotruba/cognitive-complexity >= 1.2.0, < 2.0.0 UnknownUnknown

Scanned Files

  • composer.json

@codecov

codecov Bot commented Jul 9, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (aac950e) to head (d3ca087).
✅ All tests successful. No failed tests found.

Additional details and impacted files

Impacted file tree graph

@@             Coverage Diff             @@
##                 3.x      #312   +/-   ##
===========================================
  Coverage     100.00%   100.00%           
  Complexity        23        23           
===========================================
  Files              4         4           
  Lines             81        81           
===========================================
  Hits              81        81           
Flag Coverage Δ
php-8.3 100.00% <ø> (ø)
phpunit 100.00% <ø> (ø)
ubuntu-latest 100.00% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

@mimmi20
mimmi20 merged commit aa60e79 into 3.x Jul 9, 2026
66 checks passed
@mimmi20
mimmi20 deleted the dependabot/composer/3.x/development-dependencies-b88e497532 branch July 9, 2026 04:42
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant