Skip to content

Bump the dev-dependencies group across 1 directory with 2 updates#13

Merged
JaclynCodes merged 1 commit into
mainfrom
dependabot/composer/composer/helpers/v2/dev-dependencies-5ccc8728ef
Mar 1, 2026
Merged

Bump the dev-dependencies group across 1 directory with 2 updates#13
JaclynCodes merged 1 commit into
mainfrom
dependabot/composer/composer/helpers/v2/dev-dependencies-5ccc8728ef

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Jan 28, 2026

Bumps the dev-dependencies group with 2 updates in the /composer/helpers/v2 directory: friendsofphp/php-cs-fixer and phpstan/phpstan.

Updates friendsofphp/php-cs-fixer from 3.84.0 to 3.93.0

Release notes

Sourced from friendsofphp/php-cs-fixer's releases.

v3.93.0 Exceptional Exception

What's Changed

Full Changelog: PHP-CS-Fixer/PHP-CS-Fixer@v3.92.5...v3.93.0

v3.92.5 Exceptional Exception

What's Changed

... (truncated)

Changelog

Sourced from friendsofphp/php-cs-fixer's changelog.

Changelog for v3.93.0

  • feat: add ModernSerializationMethodsFixer (#9108)
  • feat: Add NoRedundantReadonlyPropertyFixer (#9339)
  • feat: add PhpdocTypesNoDuplicatesFixer (#9312)
  • feat: do not suggest config file creation if config explicitly skipped with --config=- (#9379)
  • feat: improve handling of @see tags in FullyQualifiedStrictTypesFixer (#9350)
  • feat: PER attribute block no spaces (#9264)
  • feat: php_unit_test_case_static_method_calls - change default 'call_type' to 'this' for v4 (#9328)
  • feat: protected_to_private - add to@Symfony set (#9303)
  • feat: PSR/PER-CS - adjust braces_position rule (#9329)
  • feat: remove php_unit_test_case_static_method_calls from PHPUnit sets (#9341)
  • feat: @PHP7x0MigrationRisky - update configuration of RandomApiMigrationFixer to match it's newly updated v4 defaults (#9368)
  • feat: @Symfony:risky - extend set with modern_serialization_methods (#9366)
  • feat: @Symfony:risky - extend set with static_lambda (#9365)
  • feat: @Symfony - enable no_unneeded_control_parentheses.statements.negative_instanceof (#9336)
  • feat: @Symfony - extend set with no_useless_else (#9363)
  • feat: @Symfony - extend set with no_useless_return (#9364)
  • feat: RandomApiMigrationFixer - allow to convert mt_getrandmax and mt_srand (#9367)
  • fix: properly expose memory usage while running parallel mode (#9352)
  • fix: ModifierKeywordsFixer - closure in attribute (#9358)
  • fix: NoUselessElseFixer - handle conditional symbol declarations (#9347)
  • fix: OrderedClassElementsFixer - closure in attribute (#9357)
  • fix: PhpUnitAttributesFixer - do not add for annotation @testWith when attribute TestWith already present (#9354)
  • refactor: add base key-existence check for cross-process communication in parallel runner (#9360)
  • refactor: FixerDocumentGenerator - limit the scope to create rule instance in future mode only (#9359)
  • test: fix compatibility towards Symfony 8 (#9370)
  • test: update PHP 8.5 compat test to cover closure in attribute and prevent conversion to empty arrow function (#9373)
  • chore: add clarifying @return annotations to Config (#9337)
  • chore: fix assign.propertyType error from PHPStan (#9332)
  • chore: PHPUnit sets - cleanup test, update docs/comments (#9342)
  • chore: simplify phpstan:baseline command (#9346)
  • deps: bump crate-ci/typos from 1.41.0 to 1.42.0 (#9338)
  • deps: bump crate-ci/typos from 1.42.0 to 1.42.1 (#9376)
  • deps: bump dev deps (#9369)
  • deps: bump the phpstan group in /dev-tools with 3 updates (#9375)
  • docs: show default value for future mode (#9355)
  • DX: add env for easier finding which fixer break a PHP syntax (#9356)

Changelog for v3.92.5

  • fix: CombineConsecutiveUnsetsFixer - proper handling of trailing comma (#9335)
  • chore: cleanup self-config file (#9324)
  • chore: fix variable.undefined error from PHPStan (#9330)
  • deps: bump crate-ci/typos from 1.40.0 to 1.41.0 (#9325)
  • docs: extend Q&A for creating the rule (#9331)

Changelog for v3.92.4

... (truncated)

Commits
  • 50895a0 prepared the 3.93.0 release
  • 0292db5 feat: do not suggest config file creation if config explicitly skipped with `...
  • 7b6a712 feat: PER attribute block no spaces (#9264)
  • 7101f88 feat: Add NoRedundantReadonlyPropertyFixer (#9339)
  • 1e446b9 feat: remove php_unit_test_case_static_method_calls from PHPUnit sets (#9341)
  • eb72849 feat: php_unit_test_case_static_method_calls - change default 'call_type' to ...
  • 05bea8f deps: bump the phpstan group in /dev-tools with 3 updates (#9375)
  • d49f313 deps: bump crate-ci/typos from 1.42.0 to 1.42.1 (#9376)
  • 70b4c41 feat: improve handling of @see tags in FullyQualifiedStrictTypesFixer (#9...
  • d89d813 refactor: add base key-existence check for cross-process communication in par...
  • Additional commits viewable in compare view

Updates phpstan/phpstan from 2.1.18 to 2.1.37

Release notes

Sourced from phpstan/phpstan's releases.

2.1.37

Improvements 🔧

Bugfixes 🐛

Performance 🏎️

Internals 🔍

2.1.36

Bugfixes 🐛

... (truncated)

Commits
  • 28cd424 PHPStan 2.1.37
  • 20faa5c Update errors identifiers
  • ef7e5b9 Updated PHPStan to commit ef7e5b90a0bdefa7ae20ecd34e064a7a44a640dc
  • e50d059 Updated PHPStan to commit e50d059ef0967133cb0e6ad40bb321bcfce63b86
  • d7e83a7 Update errors identifiers
  • 8301dbb Updated PHPStan to commit 8301dbba1406df58e5f5e364806e6a38efec1cb4
  • 8acd93b Updated PHPStan to commit 8acd93b37c49cb8df10828f15342734454d1dd62
  • 059af1a Update errors identifiers
  • 47aa39d Updated PHPStan to commit 47aa39db752512e89d7a927b39019a0368283fe9
  • a1a8b66 Update baselines
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by cubic

Updates dev tooling in composer/helpers/v2 to keep code style and static analysis current and faster. Bumps php-cs-fixer to 3.94.2 and PHPStan to 2.1.39.

  • Dependencies
    • friendsofphp/php-cs-fixer: 3.84.0 → 3.94.2 (adds new fixers, Symfony 8+ compatibility, updates React/Symfony constraints).
    • phpstan/phpstan: 2.1.18 → 2.1.39 (performance improvements, debug metrics, closure inference fix).

Written for commit 0959ea6. Summary will update on new commits.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update php code labels Jan 28, 2026
@coderabbitai
Copy link
Copy Markdown

coderabbitai Bot commented Jan 28, 2026

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

  • ✅ Review completed - (🔄 Check again to review again)

Comment @coderabbitai help to get the list of available commands and usage tips.

Copy link
Copy Markdown

@cubic-dev-ai cubic-dev-ai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 1 file

@dependabot dependabot Bot force-pushed the dependabot/composer/composer/helpers/v2/dev-dependencies-5ccc8728ef branch from 4a73e22 to dc9b168 Compare February 1, 2026 16:11
@dependabot dependabot Bot force-pushed the dependabot/composer/composer/helpers/v2/dev-dependencies-5ccc8728ef branch 2 times, most recently from 7731558 to 761abbb Compare February 8, 2026 16:05
@dependabot dependabot Bot force-pushed the dependabot/composer/composer/helpers/v2/dev-dependencies-5ccc8728ef branch from 761abbb to 0959ea6 Compare February 22, 2026 16:05
Bumps the dev-dependencies group with 2 updates in the /composer/helpers/v2 directory: [friendsofphp/php-cs-fixer](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer) and [phpstan/phpstan](https://github.com/phpstan/phpstan).


Updates `friendsofphp/php-cs-fixer` from 3.84.0 to 3.93.0
- [Release notes](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/releases)
- [Changelog](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/blob/master/CHANGELOG.md)
- [Commits](PHP-CS-Fixer/PHP-CS-Fixer@v3.84.0...v3.93.0)

Updates `phpstan/phpstan` from 2.1.18 to 2.1.37
- [Release notes](https://github.com/phpstan/phpstan/releases)
- [Changelog](https://github.com/phpstan/phpstan/blob/2.1.x/CHANGELOG.md)
- [Commits](phpstan/phpstan@2.1.18...2.1.37)

---
updated-dependencies:
- dependency-name: friendsofphp/php-cs-fixer
  dependency-version: 3.93.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: phpstan/phpstan
  dependency-version: 2.1.37
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/composer/composer/helpers/v2/dev-dependencies-5ccc8728ef branch from 0959ea6 to beba657 Compare March 1, 2026 16:11
@JaclynCodes JaclynCodes merged commit a7768e9 into main Mar 1, 2026
39 of 48 checks passed
@dependabot dependabot Bot deleted the dependabot/composer/composer/helpers/v2/dev-dependencies-5ccc8728ef branch March 1, 2026 21:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file L: php:composer php Pull requests that update php code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant