Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 1, 2025

Bumps the development-dependencies group with 2 updates: friendsofphp/php-cs-fixer and rector/rector.

Updates friendsofphp/php-cs-fixer from 3.90.0 to 3.91.2

Release notes

Sourced from friendsofphp/php-cs-fixer's releases.

v3.91.2 Folding Bike

What's Changed

Full Changelog: PHP-CS-Fixer/PHP-CS-Fixer@v3.91.1...v3.91.2

v3.91.1 Folding Bike

What's Changed

Full Changelog: PHP-CS-Fixer/PHP-CS-Fixer@v3.91.0...v3.91.1

v3.91.0 Folding Bike

PHP 8.5 officially supported 🎉

What's Changed

... (truncated)

Changelog

Sourced from friendsofphp/php-cs-fixer's changelog.

Changelog for v3.91.2

  • fix: fix support call-site generic variance (#9253)
  • chore: adjust autoloader to exclude all Internal classes in classmap (#9252)
  • CI: set PHP_CS_FIXER_IGNORE_ENV for PHP 8.6 (#9254)

Changelog for v3.91.1

  • UX: show warning on PHP-mismatch only for 'fix' and 'check' commands (#9243)
  • docs: unify rule/ruleset doc tags (#9250)
  • refactor: don't expose internal commands/rules (#9245)
  • refactor: memoize fixer names (#9219)
  • refactor: use custom set for internal rules (#9247)
  • test: show that describe command works well for custom sets (#9246)

Changelog for v3.91.0

  • UX: init command (#9215)
  • feat: PHP 8.5 compatibility support (#9234)
  • feat: Add StringableForToStringFixer (#9218)
  • feat: support call-site generic variance (#9212)
  • feat: Symfony - add stringable_for_to_string to set (#9235)
  • chore: do not mark NamespaceAnalysis as internal, because it's part of public API interface (#9193)
  • chore: ExampleRuleset - improve test fixture name (#9214)
  • chore: traits - require interfaces or base classes (#9086)
  • CI: Add PHPStan rule to validate public API surface completeness (#9196)
  • CI: auto-select PHP_MAX for special jobs (#9231)
  • CI: drop duplicated PHP 8.4 jobs (#9229)
  • CI: fix SCA after Symfony 7.4.0 release (#9226)
  • CI: no more need for solving PHP 8.4 deprecations in /vendor/ anymore (#9230)
  • CI: switch trivial jobs to ubuntu-slim (#9232)
  • CI: upgrade .php-cs-fixer.php-highest.php to fully reflect PHP 8.4 (#9233)
  • deps: bump actions/checkout from 5 to 6 (#9210)
  • deps: bump crate-ci/typos from 1.39.2 to 1.40.0 (#9237)
  • deps: bump shipmonk/composer-dependency-analyser from 1.8.3 to 1.8.4 in /dev-tools (#9238)
  • deps: bump shipmonk/dead-code-detector from 0.13.5 to 0.14.0 in /dev-tools (#9239)
  • deps: bump Symfony v8 to RC (#9221)
  • deps: bump Symfony v8 to stable (#9222)
  • deps: update xdebug (#9228)
  • fix: move config template to non-excluded folder (#9241)
  • fix: DeclareStrictTypesFixer - do not duplicate strict_types if it is already present, with other directive (#9225)
  • fix: FullyQualifiedStrictTypesFixer - fix crash on T_OPEN_TAG_WITH_ECHO (#9217)
  • test: allow CI to define both, numeric and non-numeric PHP versions/builds (#9236)
  • test: do not allow to fail PHP 8.5 job (#9224)
  • test: let's not dance on the edge of the JIT stack limit (#9211)
  • test: run smoke tests on any OS (#9242)
  • tests: update PHP 8.5 compatibility test (#9223)
Commits
  • f171dc2 prepared the 3.91.2 release
  • 1d3537f fix: fix support call-site generic variance (#9253)
  • 82a17c6 CI: set PHP_CS_FIXER_IGNORE_ENV for PHP 8.6 (#9254)
  • ef85d03 chore: adjust autoloader to exclude all Internal classes in classmap (#9252)
  • 677faa8 bumped version
  • b075d84 prepared the 3.91.1 release
  • 05c1815 UX: show warning on PHP-mismatch only for 'fix' and 'check' commands (#9243)
  • ba3a0a9 docs: unify rule/ruleset doc tags (#9250)
  • 8556ba3 refactor: use custom set for internal rules (#9247)
  • 8cc0eb4 test: show that describe command works well for custom sets (#9246)
  • Additional commits viewable in compare view

Updates rector/rector from 2.2.8 to 2.2.10

Release notes

Sourced from rector/rector's releases.

Released Rector 2.2.10

New Features and Improvements 🥳

Bugfixes 🐛

  • [PhpParser] Add Stmt\Block to NodeGroup::STMTS_AWARE (#7689)
  • skip already dim fetch variable on OrdSingleByteRector (#7681)
  • [Php85] Handle crash on no arg on OrdSingleByteRector (#7682)
  • [Php70] Handle return ternary on IfIssetToCoalescingRector (#7683)
  • [CodingStyle] Skip use trait on NewlineBetweenClassLikeStmtsRector (#7685)
  • [CodingStyle] Handle use trait after property on NewlineBetweenClassLikeStmtsRector (#7687)
  • [CodeQuality] Skip with HTML on ShortenElseIfRector (#7686)
  • [Variables] Fetch list super global variable names from PHPStan Scope::SUPERGLOBAL_VARIABLES constant (#7663)
  • Fix typo in rule definition message (#7690), Thanks @​simonschaufi!

rectorphp/rector-symfony 🎵

  • [code-quality] Skip enum in ControllerMethodInjectionToConstructorRector (#893)
  • [symfony 7.3] Add CommandDefaultNameAndDescriptionToAsCommandAttributeRector (#892)
  • [symfony 7.x] update sets (#890)
  • [CodeQuality] Skip parent method exists on ControllerMethodInjectionToConstructorRector (#889)
  • skip params with attributes in ControllerMethodInjectionToConstructorRector (#887)
  • [stmts-aware] Use NodeGroup::STMTS_AWARE over StmtsAwareInterface (#886)

rectorphp/rector-phpunit 🟢

  • [fix] Improve AssertComparisonToSpecificMethodRector for assert false (#594)

Released Rector 2.2.9

New Features and Changes 🥳

  • [exp] Add RemoveReturnThisFromSetterClassMethodRector (#7624)
  • [exp] Add FluentSettersToStandaloneCallMethodRector (#7625)
  • [dead-code] Add RemoveNextSameValueConditionRector (#7525)
  • Update PHP upgrade support to version 8.5 (#7644), Thanks @​guilheb!
  • [stmts-aware] Deprecate StmtsAwareInterface interface and replace with meta-type + groups (#7679) - How to upgrade?

Bugfixes 🐛

... (truncated)

Commits
  • 2abbf73 Rector 2.2.10
  • 8f056da Updated Rector to commit 6ef19d6b1b9ac99efbc6cb07cb9313ec16e6cc30
  • a5d0027 Updated Rector to commit f26495b785120b264e9f4477c647fb3abd8e0d47
  • 00b9fe2 Updated Rector to commit 1d141d573432ebc152383bf884f488dc62619f0c
  • 8d6ed67 Updated Rector to commit d8e4eeeac636ef79c3a57b5b3f44e3c6f8bf96ba
  • fe25f5b Updated Rector to commit c1da4ecdec3bf17ff896b99540388ee564c03eb7
  • 7ae74db Updated Rector to commit 89b8e0734e581148261d3b206ea07002017871fb
  • ce5a710 Updated Rector to commit 1d519488c8e76f1316bf6aaf02621b2de959c638
  • f1f98be Updated Rector to commit 51a334c02c1bfb07c910b345c609bf420b97eb62
  • f20290e Updated Rector to commit 51a334c02c1bfb07c910b345c609bf420b97eb62
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the development-dependencies group with 2 updates: [friendsofphp/php-cs-fixer](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer) and [rector/rector](https://github.com/rectorphp/rector).


Updates `friendsofphp/php-cs-fixer` from 3.90.0 to 3.91.2
- [Release notes](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/releases)
- [Changelog](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/blob/master/CHANGELOG.md)
- [Commits](PHP-CS-Fixer/PHP-CS-Fixer@v3.90.0...v3.91.2)

Updates `rector/rector` from 2.2.8 to 2.2.10
- [Release notes](https://github.com/rectorphp/rector/releases)
- [Commits](rectorphp/rector@2.2.8...2.2.10)

---
updated-dependencies:
- dependency-name: friendsofphp/php-cs-fixer
  dependency-version: 3.91.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: rector/rector
  dependency-version: 2.2.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file php Pull requests that update Php code labels Dec 1, 2025
@dependabot dependabot bot requested a review from a team as a code owner December 1, 2025 23:20
@dependabot dependabot bot added dependencies Pull requests that update a dependency file php Pull requests that update Php code labels Dec 1, 2025
@coderabbitai
Copy link

coderabbitai bot commented Dec 1, 2025

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.


Comment @coderabbitai help to get the list of available commands and usage tips.

@ildyria ildyria enabled auto-merge (squash) December 3, 2025 16:08
@ildyria ildyria merged commit 695ec86 into master Dec 3, 2025
45 checks passed
@ildyria ildyria deleted the dependabot/composer/development-dependencies-83434263be branch December 3, 2025 16:25
@codecov
Copy link

codecov bot commented Dec 3, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 90.25%. Comparing base (d74734d) to head (70b45fc).
⚠️ Report is 4 commits behind head on master.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file php Pull requests that update Php code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants