Skip to content

chore(deps-dev): bump the development-dependencies group with 5 updates - #4651

Merged
ildyria merged 3 commits into
masterfrom
dependabot/composer/development-dependencies-0e8b195e99
Aug 22, 2026
Merged

chore(deps-dev): bump the development-dependencies group with 5 updates#4651
ildyria merged 3 commits into
masterfrom
dependabot/composer/development-dependencies-0e8b195e99

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 22, 2026

Copy link
Copy Markdown
Contributor

Bumps the development-dependencies group with 5 updates:

Package From To
friendsofphp/php-cs-fixer 3.95.18 3.95.19
lychee-org/phpstan-lychee 2.0.3 2.0.4
mockery/mockery 1.6.13 1.6.14
phpstan/phpstan 2.2.8 2.2.9
rector/rector 2.6.2 2.6.3

Updates friendsofphp/php-cs-fixer from 3.95.18 to 3.95.19

Release notes

Sourced from friendsofphp/php-cs-fixer's releases.

v3.95.19 Adalbertus

What's Changed

New Contributors

Full Changelog: PHP-CS-Fixer/PHP-CS-Fixer@v3.95.18...v3.95.19

Changelog

Sourced from friendsofphp/php-cs-fixer's changelog.

Changelog for v3.95.19

  • fix: binary_operator_spaces alignment for nested single-line arrays in multiline array (#9654)
  • fix: ClassDefinitionFixer - keep multiline constructor args when anonymous class has both extends and implements (#9625)
  • fix: SelfStaticAccessorFixer - do not stop fixing a class after a static return type (#9774)
  • chore: Fix incorrect URL in CommentsAnalyzer.php docblock (#9772)
  • chore: Runner - ignore coverage of non-deterministic parallel branches (#9785)
  • CI: fix using PHP_CS_FIXER_FAST_LINT_TEST_CASES (#9783)
  • deps: bump phpstan/phpstan from 2.2.7 to 2.2.8 in /dev-tools in the phpstan group (#9779)
  • deps: bump squizlabs/php_codesniffer from 4.0.1 to 4.0.4 in /dev-tools (#9768)
  • deps: bump the all group across 1 directory with 2 updates (#9767)
  • test: introduce TestCaseUtils::createTemporaryDirectory() helper (#9788)
  • test: ProjectCodeTest - restore the duplicate check in data providers (#9761)
  • test: AbstractFixerTestCase - use spl_object_id() to fix PHP 8.6 deprecations (#9786)
Commits
  • 8a06c4a prepared the 3.95.19 release
  • af0d812 fix: binary_operator_spaces alignment for nested single-line arrays in multil...
  • 51229c4 test: introduce TestCaseUtils::createTemporaryDirectory() helper (#9788)
  • 0e24c5e test: AbstractFixerTestCase - use spl_object_id() to fix PHP 8.6 deprecat...
  • 870ee66 chore: Runner - ignore coverage of non-deterministic parallel branches (#9785)
  • 25bd52c fix: ClassDefinitionFixer - keep multiline constructor args when anonymous ...
  • ba57fb2 CI: fix using PHP_CS_FIXER_FAST_LINT_TEST_CASES (#9783)
  • 65a7bfd test: ProjectCodeTest - restore the duplicate check in data providers (#9761)
  • 60a617a deps: bump phpstan/phpstan from 2.2.7 to 2.2.8 in /dev-tools in the phpstan g...
  • 01cbf87 fix: SelfStaticAccessorFixer - do not stop fixing a class after a static ...
  • Additional commits viewable in compare view

Updates lychee-org/phpstan-lychee from 2.0.3 to 2.0.4

Release notes

Sourced from lychee-org/phpstan-lychee's releases.

Version 2.0.4 - Dependencies update

What's Changed

Full Changelog: LycheeOrg/phpstan-lychee@2.0.3...2.0.4

Commits
  • 044ee50 Composer update (#45)
  • 51d78b2 Bump the development-dependencies group with 2 updates (#43)
  • 808dbae Bump actions/checkout from 6 to 7 in the actions-deps group (#41)
  • 20fb0b2 Bump the production-dependencies group with 6 updates (#42)
  • 79c3985 Bump the production-dependencies group with 3 updates (#38)
  • 4edcc2e Bump friendsofphp/php-cs-fixer from 3.93.0 to 3.94.0 in the development-depen...
  • a89d424 Bump styfle/cancel-workflow-action from 0.13.0 to 0.13.1 in the actions-deps ...
  • 7f90bd1 Bump symfony/process from 8.0.3 to 8.0.5 (#37)
  • a129d0a Bump friendsofphp/php-cs-fixer in the development-dependencies group (#36)
  • 6ef9cca Bump the production-dependencies group with 2 updates (#35)
  • Additional commits viewable in compare view

Updates mockery/mockery from 1.6.13 to 1.6.14

Release notes

Sourced from mockery/mockery's releases.

1.6.14

What's Changed

New Contributors

Full Changelog: mockery/mockery@1.6.13...1.6.14

Changelog

Sourced from mockery/mockery's changelog.

[1.6.14] - 2026-08-18

Changed

Fixed

Commits

Updates phpstan/phpstan from 2.2.8 to 2.2.9

Commits

Updates rector/rector from 2.6.2 to 2.6.3

Release notes

Sourced from rector/rector's releases.

Released Rector 2.6.3

A stabilization release on top of the composer-based sets finished in 2.6.2 - bugfixes across the engine, a couple of fresh Symfony and Doctrine rules, and the caching cleanup that the cacheClass() deprecation promised.

New rules 🎉

rector-symfony

  • [Symfony 6.1] RouteRequirementStringToConstantRector (#1037)

rector-doctrine

  • [DBAL 3.1] QueryBuilderExecuteToExecuteQueryOrExecuteStatementRector — split the deprecated execute() into executeQuery() / executeStatement() (#507)

Bugfixes 🐛

  • [DeadCode] Skip RemoveReturnTagIncompatibleWithNativeTypeRector on a type alias nested in a union (#8319)
  • [NodeAnalyzer] Treat an infinite loop without a break as always terminated (#8348) — improves return/dead-code analysis on while (true) bodies

rector-symfony

  • [CodeQuality] Fix InlineClassRoutePrefixRector duplicating the route name prefix on attribute routes (#9851)
  • [Symfony 7.2] Fix PushRequestToRequestStackConstructorRector leaving the pushed request undefined (#1040)
  • [CodeQuality] Skip loadValidatorMetadata() containing addConstraint(new Callback()) (#1038)

rector-phpunit

  • [PHPUnit 6.0] Skip imported PHPUnit assert functions in AddDoesNotPerformAssertionToNonAssertingTestRector (#767)

Set changes 📈

rector-doctrine

  • [ORM 3.5] Replace deprecated ORMSetup methods — createAttributeMetadataConfiguration() → createAttributeMetadataConfig(), createXMLMetadataConfiguration() → createXMLMetadataConfig(), createConfiguration() → createConfig()
  • [DBAL 4.0] Replace the removed Types::ARRAY with Types::SIMPLE_ARRAY (#506)

Deprecations 💀

Deprecated rules run without any effect, print a warning and will be removed in a future major release.

rector-phpunit

  • AllowMockObjectsWithoutExpectationsAttributeRector — also removed from the set

Removals 💀

... (truncated)

Commits
  • 7e46709 Rector 2.6.3
  • 75df214 Updated Rector to commit 1cd96ae9202f3d7bc51a702662deb78973d01edf
  • fa6e606 Updated Rector to commit 8eed4698083bdd1960877fb3e7ff8b76e73ef600
  • 762d6d1 Updated Rector to commit 45740234298ac355755eb76757f8a509364dfc58
  • 926f146 Updated Rector to commit ec3e0745087b8501f6abe3c0faa645ed4a022cec
  • 06622d0 Updated Rector to commit b1a303b416ed754d54b760e932bfc8880594ed85
  • ab14ccb Updated Rector to commit d2eb79dfe14e1c630b0898b3f6c70e6f9fd17558
  • a352872 Updated Rector to commit d2eb79dfe14e1c630b0898b3f6c70e6f9fd17558
  • 696856a Updated Rector to commit d2eb79dfe14e1c630b0898b3f6c70e6f9fd17558
  • 35e06a1 Updated Rector to commit d2eb79dfe14e1c630b0898b3f6c70e6f9fd17558
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps-dev): bump the development-dependencies group with 5 updates
31ba4af 
Bumps the development-dependencies group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [friendsofphp/php-cs-fixer](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer) | `3.95.18` | `3.95.19` |
| [lychee-org/phpstan-lychee](https://github.com/LycheeOrg/phpstan-lychee) | `2.0.3` | `2.0.4` |
| [mockery/mockery](https://github.com/mockery/mockery) | `1.6.13` | `1.6.14` |
| [phpstan/phpstan](https://github.com/phpstan/phpstan-phar-composer-source) | `2.2.8` | `2.2.9` |
| [rector/rector](https://github.com/rectorphp/rector) | `2.6.2` | `2.6.3` |


Updates `friendsofphp/php-cs-fixer` from 3.95.18 to 3.95.19
- [Release notes](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/releases)
- [Changelog](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/blob/master/CHANGELOG.md)
- [Commits](PHP-CS-Fixer/PHP-CS-Fixer@v3.95.18...v3.95.19)

Updates `lychee-org/phpstan-lychee` from 2.0.3 to 2.0.4
- [Release notes](https://github.com/LycheeOrg/phpstan-lychee/releases)
- [Commits](LycheeOrg/phpstan-lychee@2.0.3...2.0.4)

Updates `mockery/mockery` from 1.6.13 to 1.6.14
- [Release notes](https://github.com/mockery/mockery/releases)
- [Changelog](https://github.com/mockery/mockery/blob/1.6.x/CHANGELOG.md)
- [Commits](mockery/mockery@1.6.13...1.6.14)

Updates `phpstan/phpstan` from 2.2.8 to 2.2.9
- [Commits](https://github.com/phpstan/phpstan-phar-composer-source/commits)

Updates `rector/rector` from 2.6.2 to 2.6.3
- [Release notes](https://github.com/rectorphp/rector/releases)
- [Commits](rectorphp/rector@2.6.2...2.6.3)

---
updated-dependencies:
- dependency-name: friendsofphp/php-cs-fixer
  dependency-version: 3.95.19
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: lychee-org/phpstan-lychee
  dependency-version: 2.0.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: mockery/mockery
  dependency-version: 1.6.14
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: phpstan/phpstan
  dependency-version: 2.2.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: rector/rector
  dependency-version: 2.6.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update Php code labels Aug 22, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 22, 2026 10:57
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update Php code labels Aug 22, 2026
@socket-security

socket-security Bot commented Aug 22, 2026 •
edited
Loading

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatedcomposer/​lychee-org/​phpstan-lychee@​2.0.3.0 ⏵ 2.0.4.010010090100100
Updatedcomposer/​mockery/​mockery@​1.6.13.0 ⏵ 1.6.14.010010090100100
Updatedcomposer/​phpstan/​phpstan@​2.2.8.0 ⏵ 2.2.9.010010090100100
Updatedcomposer/​friendsofphp/​php-cs-fixer@​3.95.18.0 ⏵ 3.95.19.0N/AN/AN/AN/AN/A
Updatedcomposer/​rector/​rector@​2.6.2.0 ⏵ 2.6.3.0N/AN/AN/AN/AN/A

View full report

@codecov

codecov Bot commented Aug 22, 2026

Copy link
Copy Markdown

Codecov Report

❌ Patch coverage is 33.33333% with 2 lines in your changes missing coverage. Please review.
✅ Project coverage is 91.20%. Comparing base (2a78f91) to head (75a74a8).
⚠️ Report is 3 commits behind head on master.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@ildyria
ildyria merged commit b8e4d1e into master Aug 22, 2026
52 checks passed
@ildyria
ildyria deleted the dependabot/composer/development-dependencies-0e8b195e99 branch August 22, 2026 17:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@ildyria ildyria ildyria approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file php Pull requests that update Php code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@ildyria