Skip to content

chore(deps): bump the composer group across 3 directories with 5 updates - #459

Merged
lyrixx merged 1 commit into
mainfrom
dependabot/composer/tools/php-cs-fixer/composer-d09370976b
Oct 15, 2026
Merged

chore(deps): bump the composer group across 3 directories with 5 updates#459
lyrixx merged 1 commit into
mainfrom
dependabot/composer/tools/php-cs-fixer/composer-d09370976b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 15, 2026

Copy link
Copy Markdown
Contributor

Bumps the composer group with 1 update in the /tools/php-cs-fixer directory: friendsofphp/php-cs-fixer.
Bumps the composer group with 3 updates in the /tools/phpstan directory: phpstan/phpstan, phpstan/phpstan-deprecation-rules and phpstan/phpstan-symfony.
Bumps the composer group with 1 update in the /tools/twig-cs-fixer directory: vincentlanglet/twig-cs-fixer.

Updates friendsofphp/php-cs-fixer from 3.95.2 to 3.95.27

Release notes

Sourced from friendsofphp/php-cs-fixer's releases.

v3.95.27 Adalbertus

What's Changed

New Contributors

Full Changelog: PHP-CS-Fixer/PHP-CS-Fixer@v3.95.26...v3.95.27

v3.95.26 Adalbertus

What's Changed

Full Changelog: PHP-CS-Fixer/PHP-CS-Fixer@v3.95.25...v3.95.26

v3.95.25 Adalbertus

What's Changed

New Contributors

Full Changelog: PHP-CS-Fixer/PHP-CS-Fixer@v3.95.24...v3.95.25

v3.95.24 Adalbertus

What's Changed

... (truncated)

Changelog

Sourced from friendsofphp/php-cs-fixer's changelog.

Commits
  • 1d0c68e prepared the 3.95.27 release
  • 730c761 docs: FullyQualifiedStrictTypesFixer - document attribute handling in examp...
  • 57b9dc0 fix: validate value types in Cache::fromJson so a corrupt cache rebuilds inst...
  • cad2991 fix: SimplifiedIfReturnFixer - fix whitespace before ; as well (#9857)
  • 65086cb fix: refuse a symlinked cache path in FileHandler to avoid arbitrary file ove...
  • 00a4527 chore: add TODO to split class with too many responsibilities (#9853)
  • e3bcd56 refactor: more moderate permissions for newly created cache file/directory (#...
  • ab9226e bumped version
  • 11839df prepared the 3.95.26 release
  • c84d44a docs: simpler docs for parallel execution, as it's default one nowadays (#9851)
  • Additional commits viewable in compare view

Updates phpstan/phpstan from 2.2.1 to 2.3.0

Commits

Updates phpstan/phpstan-deprecation-rules from 2.0.4 to 2.0.5

Release notes

Sourced from phpstan/phpstan-deprecation-rules's releases.

2.0.5

  • 67bedd6 - Update github-actions (#197)
  • 6be8bd3 - Update actions/cache action to v6 (#198)
  • 0b310ec - Update github-actions to v3.0.1 (#195)
  • 782d848 - Update github-actions to v7 (#196)
  • 85fff9d - Update github-actions to f3e473d (#194)
  • 54db580 - Update github-actions (#193)
  • 99aff1a - Replace deprecated actions/create-release with softprops/action-gh-release
  • 971f8e1 - Bump GitHub Actions across major versions
  • 89fef35 - Bump GitHub Actions within their current majors
  • 0652358 - Update github-actions
  • 02119cc - Update github-actions
  • 389c78c - latest infection does not support PHP 8.2 (#189)
  • 899202d - Update release-toot.yml (#188)
  • 016d677 - name-collision-detector (#187)
  • 945df12 - Delete .github/workflows/claude-react-on-comment.yml
  • a70b8b1 - Remove default branch determination from workflow
  • 1faeb2e - Lint workflows
  • 534891e - [StepSecurity] ci: Harden GitHub Actions
  • 3acc664 - Remove PHPSTAN_BOT_TOKEN from checkout step
  • 49efeb2 - React on issues opened and fall back to issue body
  • 319c3f6 - Add PHP 8.5 to CI matrix for lint, tests, and static analysis
  • 73feeba - Add missing export-ignore entries to .gitattributes
  • c6d73e5 - Add CLAUDE.md with project documentation
  • f9f68eb - Add Claude React on Comment workflow
Commits

Updates phpstan/phpstan-symfony from 2.0.18 to 2.1.0

Release notes

Sourced from phpstan/phpstan-symfony's releases.

2.1.0

2.0.20

No release notes provided.

2.0.19

No release notes provided.

Commits

Updates vincentlanglet/twig-cs-fixer from 3.14.0 to 4.1.1

Release notes

Sourced from vincentlanglet/twig-cs-fixer's releases.

4.1.1

What's Changed

New Contributors

Full Changelog: VincentLanglet/Twig-CS-Fixer@4.1.0...4.1.1

4.1.0

What's Changed

Full Changelog: VincentLanglet/Twig-CS-Fixer@4.0.2...4.1.0

4.0.2

What's Changed

New Contributors

Full Changelog: VincentLanglet/Twig-CS-Fixer@4.0.1...4.0.2

4.0.1

What's Changed

Full Changelog: VincentLanglet/Twig-CS-Fixer@4.0.0...4.0.1

4.0.0

What's Changed

New Contributors

... (truncated)

Upgrade guide

Sourced from vincentlanglet/twig-cs-fixer's upgrade guide.

UPGRADE

FROM 3.x to 4.0

DelimiterSpacingRule

The DelimiterSpacingRule constructor signature changed from

__construct(bool $skipIfNewLine = true)

to

__construct(array $beforeOverride = [], array $afterOverride = [], bool $skipIfNewLine = true)

OperatorSpacingRule

The OperatorSpacingRule has been split in three:

  • TwigCsFixer\Rules\Operator\OperatorSpacingRule
  • TwigCsFixer\Rules\Operator\TernaryOperatorSpacingRule
  • TwigCsFixer\Rules\Operator\UnaryOperatorSpacingRule

Token

The Token::OPERATOR_TYPE has been split in three:

  • Token::OPERATOR_TYPE
  • Token::TERNARY_OPERATOR_TYPE
  • Token::UNARY_OPERATOR_TYPE

The Token::SPREAD_TYPE has been removed in favor of Token::UNARY_OPERATOR_TYPE.

The Token::ARROW_TYPE has been removed in favor of Token::OPERATOR_TYPE.

The tokens . and | moved from Token::PUNCTUATION_TYPE to Token::OPERATOR_TYPE.

FROM 2.x to 3.0

  • The checkstyle and junit reporter now try to use an absolute path rather than relative path.
  • In debug mode, the report now contains both the identifier and the message of the error.
  • The position of TrailingCommaMultiLineRule error changed.
  • The position of TrailingCommaSingleLineRule error changed.
  • TwigCsFixer\Command\TwigCsFixerCommand class moved to TwigCsFixer\Console\Command folder.
  • TwigCsFixer\Report\Reporter\ReporterInterface now require a getName method.

If you never implemented a custom rule, nothing else changed. Otherwise, ...

AbstractRule

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the composer group across 3 directories with 5 updates
5c90b5a 
Bumps the composer group with 1 update in the /tools/php-cs-fixer directory: [friendsofphp/php-cs-fixer](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer).
Bumps the composer group with 3 updates in the /tools/phpstan directory: [phpstan/phpstan](https://github.com/phpstan/phpstan-phar-composer-source), [phpstan/phpstan-deprecation-rules](https://github.com/phpstan/phpstan-deprecation-rules) and [phpstan/phpstan-symfony](https://github.com/phpstan/phpstan-symfony).
Bumps the composer group with 1 update in the /tools/twig-cs-fixer directory: [vincentlanglet/twig-cs-fixer](https://github.com/VincentLanglet/Twig-CS-Fixer).


Updates `friendsofphp/php-cs-fixer` from 3.95.2 to 3.95.27
- [Release notes](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/releases)
- [Changelog](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/blob/master/CHANGELOG.md)
- [Commits](PHP-CS-Fixer/PHP-CS-Fixer@v3.95.2...v3.95.27)

Updates `phpstan/phpstan` from 2.2.1 to 2.3.0
- [Commits](https://github.com/phpstan/phpstan-phar-composer-source/commits)

Updates `phpstan/phpstan-deprecation-rules` from 2.0.4 to 2.0.5
- [Release notes](https://github.com/phpstan/phpstan-deprecation-rules/releases)
- [Commits](phpstan/phpstan-deprecation-rules@2.0.4...2.0.5)

Updates `phpstan/phpstan-symfony` from 2.0.18 to 2.1.0
- [Release notes](https://github.com/phpstan/phpstan-symfony/releases)
- [Commits](phpstan/phpstan-symfony@2.0.18...2.1.0)

Updates `vincentlanglet/twig-cs-fixer` from 3.14.0 to 4.1.1
- [Release notes](https://github.com/VincentLanglet/Twig-CS-Fixer/releases)
- [Upgrade guide](https://github.com/VincentLanglet/Twig-CS-Fixer/blob/main/UPGRADE.md)
- [Commits](VincentLanglet/Twig-CS-Fixer@3.14.0...4.1.1)

---
updated-dependencies:
- dependency-name: friendsofphp/php-cs-fixer
  dependency-version: 3.95.27
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: composer
- dependency-name: phpstan/phpstan
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: composer
- dependency-name: phpstan/phpstan-deprecation-rules
  dependency-version: 2.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: composer
- dependency-name: phpstan/phpstan-symfony
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: composer
- dependency-name: vincentlanglet/twig-cs-fixer
  dependency-version: 4.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: composer
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update Php code labels Oct 15, 2026
@lyrixx
lyrixx merged commit 31deda1 into main Oct 15, 2026
5 checks passed
@lyrixx
lyrixx deleted the dependabot/composer/tools/php-cs-fixer/composer-d09370976b branch October 15, 2026 13:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file php Pull requests that update Php code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@lyrixx