Skip to content

Bump the dev-dependencies group across 1 directory with 2 updates - #841

Open
dependabot[bot] wants to merge 2 commits into
masterfrom
dependabot-composer-dev-dependencies-8e38ac0768
Open

Bump the dev-dependencies group across 1 directory with 2 updates#841
dependabot[bot] wants to merge 2 commits into
masterfrom
dependabot-composer-dev-dependencies-8e38ac0768

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 5, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the dev-dependencies group with 2 updates in the / directory: friendsofphp/php-cs-fixer and rector/rector.

Updates friendsofphp/php-cs-fixer from 3.87.1 to 3.95.27

Release notes

Sourced from friendsofphp/php-cs-fixer's releases.

v3.95.27 Adalbertus

What's Changed

New Contributors

Full Changelog: PHP-CS-Fixer/PHP-CS-Fixer@v3.95.26...v3.95.27

v3.95.26 Adalbertus

What's Changed

Full Changelog: PHP-CS-Fixer/PHP-CS-Fixer@v3.95.25...v3.95.26

v3.95.25 Adalbertus

What's Changed

New Contributors

Full Changelog: PHP-CS-Fixer/PHP-CS-Fixer@v3.95.24...v3.95.25

v3.95.24 Adalbertus

What's Changed

... (truncated)

Changelog

Sourced from friendsofphp/php-cs-fixer's changelog.

Changelog for v3.95.27

  • fix: refuse a symlinked cache path in FileHandler to avoid arbitrary file overwrite (#9856)
  • fix: validate value types in Cache::fromJson so a corrupt cache rebuilds instead of crashing (#9855)
  • fix: SimplifiedIfReturnFixer - fix whitespace before ; as well (#9857)
  • refactor: more moderate permissions for newly created cache file/directory (#9852)
  • chore: add TODO to split class with too many responsibilities (#9853)
  • docs: FullyQualifiedStrictTypesFixer - document attribute handling in example (#9859)

Changelog for v3.95.26

  • perf: Use dedicated sequence matcher in simplified_if_return (#9763)
  • DX: add XDEBUG for PHP 8.5 docker build (#9841)
  • chore: ConfigInterface - document TODO for v4 (#9845)
  • chore: drop benchmark.sh in favour of phpbench (#9849)
  • chore: stalebot - exclude RTM labels (#9843)
  • deps: bump dev-deps (#9840)
  • deps: explicitly expect PHPUnit 13.3+ over 13.0.x (#9842)
  • deps: update dev deps (#9848)
  • docs: do not promote deprecated path argument usage with --path-mode=override (#9850)
  • docs: simpler docs for parallel execution, as it's default one nowadays (#9851)

Changelog for v3.95.25

  • fix: handle missing terminator after ?? in AssignNullCoalescingToCoalesceEqualFixer (#9831)
  • fix: IsNullFixer - do not fix is_null() calls using argument unpacking (#9830)
  • fix: IsNullFixer - handle is_null() calls using named arguments (#9828)
  • UX: init - use outlined messages (#9826)
  • deps: bump crate-ci/typos from 1.49.0 to 1.50.1 in /.github/workflows in the all group across 1 directory (#9824)
  • deps: bump phpstan/phpstan from 2.2.9 to 2.2.12 in /dev-tools in the phpstan group (#9822)
  • deps: bump shipmonk/dead-code-detector from 1.3.3 to 1.4.0 in /dev-tools in the shipmonk group across 1 directory (#9823)

Changelog for v3.95.24

  • fix: ControlStructureBracesFixer - do not read a body starting with a parenthesis as a condition (#9815)
  • UX: init - add handling of .gitignore (#9813)
  • UX: init - add sections (#9819)
  • UX: init - command improvements (#9807)
  • UX: init - fix typos and improve wording (#9820)
  • UX: init command - suggest php_unit_test_case_static_method_calls rule (#9810)
  • chore: Fixer name must not be empty (#9756)
  • chore: DescribeCommand - replace dynamic method calls with explicit ones (#9817)
  • chore: PhpdocOrderFixer - fix type of duplicated tags passed to naturalLanguageJoin (#9818)
  • CI: fix warning - Unexpected input(s) 'extensions' (#9809)
  • CI: introduce PHPBench (#9755)
  • refactor: init - move content preparation to helper method (#9812)

... (truncated)

Commits
  • 1d0c68e prepared the 3.95.27 release
  • 730c761 docs: FullyQualifiedStrictTypesFixer - document attribute handling in examp...
  • 57b9dc0 fix: validate value types in Cache::fromJson so a corrupt cache rebuilds inst...
  • cad2991 fix: SimplifiedIfReturnFixer - fix whitespace before ; as well (#9857)
  • 65086cb fix: refuse a symlinked cache path in FileHandler to avoid arbitrary file ove...
  • 00a4527 chore: add TODO to split class with too many responsibilities (#9853)
  • e3bcd56 refactor: more moderate permissions for newly created cache file/directory (#...
  • ab9226e bumped version
  • 11839df prepared the 3.95.26 release
  • c84d44a docs: simpler docs for parallel execution, as it's default one nowadays (#9851)
  • Additional commits viewable in compare view

Updates rector/rector from 2.1.4 to 2.6.7

Release notes

Sourced from rector/rector's releases.

Released Rector 2.6.7

Agentic Experience

This release improves Rector for automated, CI and non-interactive workflows: validate configuration without processing files, limit the amount of changes per run, select multiple rules at once, and get more useful machine-readable output.

  • Bump PHPStan to ^2.2.14 and PHP-Parser to ^5.9, regenerate preload (#8491)

New validate-config command (#8450, #8452)

New validate-config command checks rector.php for configuration issues without processing any source files.

vendor/bin/rector validate-config

It reports deprecated rules and configuration, invalid skips, duplicated rule registrations and other config hygiene issues. A valid config exits with 0, while detected issues exit with 1, so the command can be used directly as a CI gate.

For machine-readable output:

vendor/bin/rector validate-config --output-format=json
{
    "valid": true,
    "issue_count": 0
}

Limit a run with --max-changes (#8449)

New --max-changes option lets automated runs process changes in smaller batches:

vendor/bin/rector process --dry-run --max-changes=50

The limit counts applied rule changes rather than files. The current file is always finished before Rector stops, so the final number may be slightly above the requested limit.

Run multiple rules with --only (#8451)

--only can now be repeated to run several selected rules in a single pass:

vendor/bin/rector process \
    --only=App\\Rector\\FooRector \
    --only=App\\Rector\\BarRector

... (truncated)

Commits
  • f4aa224 Rector 2.6.7
  • 668bc22 Updated Rector to commit 85a5406bd628b1eb1d53c529e53ef33b873e1fb9
  • 9d41ae7 Updated Rector to commit 71a969fbd931a4f206a504d981e2aa7543dd2351
  • a2c6be3 Updated Rector to commit 71a969fbd931a4f206a504d981e2aa7543dd2351
  • a6b4c3e Updated Rector to commit 6d8240575626342682a62f2c6f016f1579cca59e
  • 11f9ea3 Updated Rector to commit 9c56f19713758c6f4cfd534a17bf5c9f91a52bb9
  • 7d3b83f Updated Rector to commit 222bbf2f4e10e311a826a5375b0726c5bd4cf124
  • 21ace77 Updated Rector to commit c6d15cd2c8f8a6684f48a9ab45db34934c3b4a75
  • e5bdae7 Updated Rector to commit 15412f07928be9b60f752facb1397ebe25f034f9
  • 3c05554 Updated Rector to commit 15412f07928be9b60f752facb1397ebe25f034f9
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update Php code labels Oct 5, 2026
This was referenced Oct 5, 2026
Closed
Closed
@dependabot dependabot Bot changed the title Bump the dev-dependencies group with 2 updates Bump the dev-dependencies group across 1 directory with 2 updates Oct 5, 2026
@dependabot
dependabot Bot force-pushed the dependabot-composer-dev-dependencies-8e38ac0768 branch from 835ffc7 to a820afc Compare October 5, 2026 14:19
@dependabot
Bump the dev-dependencies group across 1 directory with 2 updates
dd4edfd 
Bumps the dev-dependencies group with 2 updates in the / directory: [friendsofphp/php-cs-fixer](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer) and [rector/rector](https://github.com/rectorphp/rector).


Updates `friendsofphp/php-cs-fixer` from 3.87.1 to 3.95.27
- [Release notes](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/releases)
- [Changelog](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/blob/master/CHANGELOG.md)
- [Commits](PHP-CS-Fixer/PHP-CS-Fixer@v3.87.1...v3.95.27)

Updates `rector/rector` from 2.1.4 to 2.6.7
- [Release notes](https://github.com/rectorphp/rector/releases)
- [Commits](rectorphp/rector@2.1.4...2.6.7)

---
updated-dependencies:
- dependency-name: friendsofphp/php-cs-fixer
  dependency-version: 3.95.27
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: rector/rector
  dependency-version: 2.6.7
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot-composer-dev-dependencies-8e38ac0768 branch from a820afc to dd4edfd Compare October 5, 2026 14:37
@pylipp pylipp assigned pylipp and unassigned HaGuesto Oct 5, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@pylipp pylipp

Labels

dependencies Pull requests that update a dependency file php Pull requests that update Php code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@pylipp @HaGuesto