tools(deps-dev): Update friendsofphp/php-cs-fixer requirement from 3.92.5 to 3.94.0 in /tools/php-cs-fixer (#600)

dependabot[bot] · jkowalleck · web-flow · commit 318e40485f26 · 2026-02-17T12:35:08.000+01:00
Updates the requirements on [friendsofphp/php-cs-fixer](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer) to permit the latest version. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/releases">friendsofphp/php-cs-fixer's releases</a>.</em></p> <blockquote> <h2>v3.94.0 7th Gear</h2> <p>JACKPOT 7️⃣7️⃣7️⃣7️⃣! Yes, <a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/pull/7777">parallel runner</a> was available for a while, but was marked as experimental feature. Not anymore! Even better: we made it the <strong>default runner</strong> now 🥳! It's great opportunity to share your stories about performance boost you got in your QA processes - let us know how parallel runner impacted your workflows, pipelines and day-to-day tasks 😁.</p> <h2>What's Changed</h2> <ul> <li>UX: enable parallel runner by default by <a href="https://github.com/keradus"><code>@​keradus</code></a> in <a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/pull/9408">PHP-CS-Fixer/PHP-CS-Fixer#9408</a></li> <li>fix: Runner - fix occasional sub-process freeze on parallel execution with <code>--stop-on-violation</code> by <a href="https://github.com/Copilot"><code>@​Copilot</code></a> / <a href="https://github.com/Wirone"><code>@​Wirone</code></a> in <a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/pull/9393">PHP-CS-Fixer/PHP-CS-Fixer#9393</a></li> <li>feat: <code>PhpUnitTestCaseStaticMethodCallsFixer</code> - add PHPUnit 13 assertions by <a href="https://github.com/kubawerlos"><code>@​kubawerlos</code></a> in <a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/pull/9410">PHP-CS-Fixer/PHP-CS-Fixer#9410</a></li> <li>feat: <code>VoidReturnFixer</code> - allow to skip lambdas by <a href="https://github.com/keradus"><code>@​keradus</code></a> in <a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/pull/9417">PHP-CS-Fixer/PHP-CS-Fixer#9417</a></li> <li>feat: Add option <code>case</code> to <code>phpdoc_line_span</code> fixer by <a href="https://github.com/Kocal"><code>@​Kocal</code></a> in <a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/pull/9391">PHP-CS-Fixer/PHP-CS-Fixer#9391</a></li> <li>feat: <code>PhpdocLineSpanFixer</code> - support docs for classes, trait usages and other code lines by <a href="https://github.com/gharlan"><code>@​gharlan</code></a> in <a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/pull/8832">PHP-CS-Fixer/PHP-CS-Fixer#8832</a></li> <li>chore: <code>VoidReturnFixer</code> - better describe exceptions by <a href="https://github.com/keradus"><code>@​keradus</code></a> in <a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/pull/9418">PHP-CS-Fixer/PHP-CS-Fixer#9418</a></li> <li>chore: fix comment by <a href="https://github.com/keradus"><code>@​keradus</code></a> in <a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/pull/9404">PHP-CS-Fixer/PHP-CS-Fixer#9404</a></li> <li>chore: Linter tests for Schrodinger's validity by <a href="https://github.com/keradus"><code>@​keradus</code></a> in <a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/pull/9398">PHP-CS-Fixer/PHP-CS-Fixer#9398</a></li> <li>chore: ModernizeStrposFixer - no need for configuration hooks by <a href="https://github.com/keradus"><code>@​keradus</code></a> in <a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/pull/9419">PHP-CS-Fixer/PHP-CS-Fixer#9419</a></li> <li>CI: no need for special handling of MacOS by <a href="https://github.com/keradus"><code>@​keradus</code></a> in <a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/pull/9403">PHP-CS-Fixer/PHP-CS-Fixer#9403</a></li> <li>DX: use custom name for custom config by <a href="https://github.com/keradus"><code>@​keradus</code></a> in <a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/pull/9402">PHP-CS-Fixer/PHP-CS-Fixer#9402</a></li> <li>fix: <code>NoUnreachableDefaultArgumentValueFixer</code> - fix for closures by <a href="https://github.com/kubawerlos"><code>@​kubawerlos</code></a> in <a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/pull/9409">PHP-CS-Fixer/PHP-CS-Fixer#9409</a></li> <li>fix: <code>UseArrowFunctionsFixer</code> - do not convert closure in attribute by <a href="https://github.com/kubawerlos"><code>@​kubawerlos</code></a> in <a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/pull/9416">PHP-CS-Fixer/PHP-CS-Fixer#9416</a></li> <li>fix: absolute path in reports by <a href="https://github.com/kubawerlos"><code>@​kubawerlos</code></a> in <a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/pull/9399">PHP-CS-Fixer/PHP-CS-Fixer#9399</a></li> <li>fix: indentation for backed enum with multiline assignment by <a href="https://github.com/mspirkov"><code>@​mspirkov</code></a> in <a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/pull/9362">PHP-CS-Fixer/PHP-CS-Fixer#9362</a></li> <li>test: create PHP 8.5 risky compat test by <a href="https://github.com/keradus"><code>@​keradus</code></a> in <a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/pull/9420">PHP-CS-Fixer/PHP-CS-Fixer#9420</a></li> <li>UX: Do not run interactive configurator when rules are passed explicitly by <a href="https://github.com/Wirone"><code>@​Wirone</code></a> in <a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/pull/9378">PHP-CS-Fixer/PHP-CS-Fixer#9378</a></li> <li>deps: bump crate-ci/typos from 1.42.1 to 1.42.3 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/pull/9395">PHP-CS-Fixer/PHP-CS-Fixer#9395</a></li> <li>deps: bump crate-ci/typos from 1.42.3 to 1.43.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/pull/9405">PHP-CS-Fixer/PHP-CS-Fixer#9405</a></li> <li>deps: bump ergebnis/composer-normalize from 2.48.2 to 2.49.0 in /dev-tools by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/pull/9396">PHP-CS-Fixer/PHP-CS-Fixer#9396</a></li> <li>deps: bump the phpstan group in /dev-tools with 2 updates by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/pull/9394">PHP-CS-Fixer/PHP-CS-Fixer#9394</a></li> <li>deps: upgrade dev-deps by <a href="https://github.com/kubawerlos"><code>@​kubawerlos</code></a> in <a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/pull/9411">PHP-CS-Fixer/PHP-CS-Fixer#9411</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/compare/v3.93.1...v3.94.0">https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/compare/v3.93.1...v3.94.0</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/blob/master/CHANGELOG.md">friendsofphp/php-cs-fixer's changelog</a>.</em></p> <blockquote> <h2>Changelog for v3.94.0</h2> <ul> <li>UX: enable parallel runner by default (<a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/issues/9408">#9408</a>)</li> <li>feat: Add option <code>case</code> to <code>phpdoc_line_span</code> fixer (<a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/issues/9391">#9391</a>)</li> <li>feat: PhpdocLineSpanFixer - support docs for classes, trait usages and other code lines (<a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/issues/8832">#8832</a>)</li> <li>feat: <code>VoidReturnFixer</code> - allow to skip lambdas (<a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/issues/9417">#9417</a>)</li> <li>chore: fix comment (<a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/issues/9404">#9404</a>)</li> <li>chore: Linter tests for Schrodinger's validity (<a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/issues/9398">#9398</a>)</li> <li>chore: ModernizeStrposFixer - no need for configuration hooks (<a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/issues/9419">#9419</a>)</li> <li>chore: <code>VoidReturnFixer</code> - better describe exceptions (<a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/issues/9418">#9418</a>)</li> <li>CI: no need for special handling of MacOS (<a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/issues/9403">#9403</a>)</li> <li>CI: run tests using PHPUnit 13 (<a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/issues/9410">#9410</a>)</li> <li>deps: bump crate-ci/typos from 1.42.1 to 1.42.3 (<a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/issues/9395">#9395</a>)</li> <li>deps: bump crate-ci/typos from 1.42.3 to 1.43.2 (<a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/issues/9405">#9405</a>)</li> <li>deps: bump ergebnis/composer-normalize from 2.48.2 to 2.49.0 in /dev-tools (<a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/issues/9396">#9396</a>)</li> <li>deps: bump the phpstan group in /dev-tools with 2 updates (<a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/issues/9394">#9394</a>)</li> <li>deps: upgrade dev-deps (<a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/issues/9411">#9411</a>)</li> <li>DX: use custom name for custom config (<a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/issues/9402">#9402</a>)</li> <li>fix: absolute path in reports (<a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/issues/9399">#9399</a>)</li> <li>fix: indentation for backed enum with multiline assignment (<a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/issues/9362">#9362</a>)</li> <li>fix: Runner - fix occasional sub-process freeze on parallel execution with <code>--stop-on-violation</code> (<a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/issues/9393">#9393</a>)</li> <li>fix: <code>NoUnreachableDefaultArgumentValueFixer</code> - fix for closures (<a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/issues/9409">#9409</a>)</li> <li>fix: <code>UseArrowFunctionsFixer</code> - do not convert closure in attribute (<a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/issues/9416">#9416</a>)</li> <li>test: create PHP 8.5 risky compat test (<a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/issues/9420">#9420</a>)</li> <li>UX: Do not run interactive configurator when rules are passed explicitly (<a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/issues/9378">#9378</a>)</li> </ul> <h2>Changelog for v3.93.1</h2> <ul> <li>fix: <code>ErrorOutput</code> - do not show &quot;begin diff&quot;/&quot;end diff&quot; when there is no diff (<a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/issues/9361">#9361</a>)</li> <li>fix: <code>UseArrowFunctionsFixer</code> - don't convert lambda with <code>use($var)</code> clause if it includes another file (<a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/issues/9389">#9389</a>)</li> <li>DX: use null coalescing operator (<a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/issues/9380">#9380</a>)</li> </ul> <h2>Changelog for v3.93.0</h2> <ul> <li>feat: add <code>ModernSerializationMethodsFixer</code> (<a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/issues/9108">#9108</a>)</li> <li>feat: Add <code>NoRedundantReadonlyPropertyFixer</code> (<a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/issues/9339">#9339</a>)</li> <li>feat: add <code>PhpdocTypesNoDuplicatesFixer</code> (<a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/issues/9312">#9312</a>)</li> <li>feat: do not suggest config file creation if config explicitly skipped with <code>--config=-</code> (<a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/issues/9379">#9379</a>)</li> <li>feat: improve handling of <code>@see</code> tags in <code>FullyQualifiedStrictTypesFixer</code> (<a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/issues/9350">#9350</a>)</li> <li>feat: PER attribute block no spaces (<a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/issues/9264">#9264</a>)</li> <li>feat: php_unit_test_case_static_method_calls - change default 'call_type' to 'this' for v4 (<a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/issues/9328">#9328</a>)</li> <li>feat: protected_to_private - add to<code>@symfony</code> set (<a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/issues/9303">#9303</a>)</li> <li>feat: PSR/PER-CS - adjust <code>braces_position</code> rule (<a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/issues/9329">#9329</a>)</li> <li>feat: remove <code>php_unit_test_case_static_method_calls</code> from PHPUnit sets (<a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/issues/9341">#9341</a>)</li> <li>feat: <code>@PHP7x0MigrationRisky</code> - update configuration of <code>RandomApiMigrationFixer</code> to match it's newly updated v4 defaults (<a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/issues/9368">#9368</a>)</li> <li>feat: <code>@symfony:risky</code> - extend set with <code>modern_serialization_methods</code> (<a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/issues/9366">#9366</a>)</li> <li>feat: <code>@symfony:risky</code> - extend set with <code>static_lambda</code> (<a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/issues/9365">#9365</a>)</li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/commit/883b20fb38c7866de9844ab6d0a205c423bde2d4"><code>883b20f</code></a> prepared the 3.94.0 release</li> <li><a href="https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/commit/6da9f7b479960bbea34fea43b17dfa9484a76289"><code>6da9f7b</code></a> feat: Add option <code>case</code> to <code>phpdoc_line_span</code> fixer (<a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/issues/9391">#9391</a>)</li> <li><a href="https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/commit/aacb91c1358e72c1a31d7df7da05d1460b7f663b"><code>aacb91c</code></a> fix: <code>NoUnreachableDefaultArgumentValueFixer</code> - fix for closures (<a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/issues/9409">#9409</a>)</li> <li><a href="https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/commit/67ce15fc2af3a2a8900bb5f23a8064223bab74de"><code>67ce15f</code></a> feat: <code>VoidReturnFixer</code> - allow to skip lambdas (<a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/issues/9417">#9417</a>)</li> <li><a href="https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/commit/dc8713d48e2a666c5f24abe01b76a2973bcfc394"><code>dc8713d</code></a> test: create PHP 8.5 risky compat test (<a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/issues/9420">#9420</a>)</li> <li><a href="https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/commit/a8ac2fff54fd52fa0f2a9a489f8430bb29e6040e"><code>a8ac2ff</code></a> fix: <code>UseArrowFunctionsFixer</code> - do not convert closure in attribute (<a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/issues/9416">#9416</a>)</li> <li><a href="https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/commit/f46ea64582c1c8c87f930e0b905dd9c401789a3e"><code>f46ea64</code></a> chore: <code>VoidReturnFixer</code> - better describe exceptions (<a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/issues/9418">#9418</a>)</li> <li><a href="https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/commit/a49152b96678b7c1f61b7d0606116fb9d46c8885"><code>a49152b</code></a> chore: ModernizeStrposFixer - no need for configuration hooks (<a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/issues/9419">#9419</a>)</li> <li><a href="https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/commit/00c2960d3068be135efe8fd37e6caa46b74d60eb"><code>00c2960</code></a> UX: enable parallel runner by default (<a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/issues/9408">#9408</a>)</li> <li><a href="https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/commit/3e9f3e05db23d73b325f4c1510aeefd38238e274"><code>3e9f3e0</code></a> UX: Do not run interactive configurator when rules are passed explicitly (<a href="https://redirect.github.com/PHP-CS-Fixer/PHP-CS-Fixer/issues/9378">#9378</a>)</li> <li>Additional commits viewable in <a href="https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/compare/v3.92.5...v3.94.0">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --------- Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Jan Kowalleck <jan.kowalleck@gmail.com>
diff --git a/HISTORY.md b/HISTORY.md
@@ -31,12 +31,15 @@ All notable changes to this project will be documented in this file.
   * No longer depends on, but suggests `composer/spdx-licenses:^1.5` ([#571] via [#587])  
     May be used when utilizing `CycloneDX\Contrib\License\Factories\LicenseFactory`.
   * No longer depend on `package-url/packageurl-php` ([#571] via [#588])
+* Style
+  * Applied latest PHP Coding Standards (via [#600])
 
 [#571]: https://github.com/CycloneDX/cyclonedx-php-library/issues/571
 [#587]: https://github.com/CycloneDX/cyclonedx-php-library/pull/587
 [#588]: https://github.com/CycloneDX/cyclonedx-php-library/pull/588
 [#590]: https://github.com/CycloneDX/cyclonedx-php-library/issues/590
 [#591]: https://github.com/CycloneDX/cyclonedx-php-library/pull/591
+[#600]: https://github.com/CycloneDX/cyclonedx-php-library/pull/600
 
 ## 3.10.0 - 2026-01-07
 
diff --git a/tests/Core/Serialization/BaseSerializerTest.php b/tests/Core/Serialization/BaseSerializerTest.php
@@ -136,7 +136,7 @@ public function testSerializeUsesUniqueBomRefsAndResetThemAfterwards(Bom $bom, a
             ->method('realNormalize')
             ->with($bom)
             ->willReturnCallback(
-                function () use ($allBomRefsValuesOriginal, &$allBomRefsValuesOnNormalize, $normalized) {
+                static function () use ($allBomRefsValuesOriginal, &$allBomRefsValuesOnNormalize, $normalized) {
                     /**
                      * @var BomRef $bomRef
                      */
@@ -184,7 +184,7 @@ public function testSerializeUsesUniqueBomRefsAndResetThemOnThrow(Bom $bom, arra
             ->method('realNormalize')
             ->with($bom)
             ->willReturnCallback(
-                function () use ($allBomRefsValuesOriginal, &$allBomRefsValuesOnNormalize, $exception): void {
+                static function () use ($allBomRefsValuesOriginal, &$allBomRefsValuesOnNormalize, $exception): void {
                     /**
                      * @var BomRef $bomRef
                      */
diff --git a/tools/php-cs-fixer/composer.json b/tools/php-cs-fixer/composer.json
@@ -6,7 +6,7 @@
         "php": "^8.1.31"
     },
     "require-dev": {
-        "friendsofphp/php-cs-fixer": "3.92.5",
+        "friendsofphp/php-cs-fixer": "3.94.0",
         "roave/security-advisories": "dev-latest"
     },
     "prefer-stable": true,
