Bump the composer-development-tools group across 1 directory with 3 updates by dependabot[bot] · Pull Request #165 · yiipress/engine

dependabot · 2026-08-25T05:32:51Z

Bumps the composer-development-tools group with 3 updates in the / directory: friendsofphp/php-cs-fixer, infection/infection and phpunit/phpunit.

Updates friendsofphp/php-cs-fixer from 3.95.18 to 3.95.19

Release notes

Sourced from friendsofphp/php-cs-fixer's releases.

v3.95.19 Adalbertus

What's Changed

fix: ClassDefinitionFixer - keep multiline constructor args when anonymous class has both extends and implements by @momala454 in PHP-CS-Fixer/PHP-CS-Fixer#9625

fix: SelfStaticAccessorFixer - do not stop fixing a class after a static return type by @sinemacula-ben in PHP-CS-Fixer/PHP-CS-Fixer#9774

fix: binary_operator_spaces alignment for nested single-line arrays in multiline array by @chriscpty in PHP-CS-Fixer/PHP-CS-Fixer#9654

chore: Runner - ignore coverage of non-deterministic parallel branches by @kubawerlos in PHP-CS-Fixer/PHP-CS-Fixer#9785

chore: Fix incorrect URL in CommentsAnalyzer.php docblock by @live627 in PHP-CS-Fixer/PHP-CS-Fixer#9772

CI: fix using PHP_CS_FIXER_FAST_LINT_TEST_CASES by @kubawerlos in PHP-CS-Fixer/PHP-CS-Fixer#9783

deps: bump phpstan/phpstan from 2.2.7 to 2.2.8 in /dev-tools in the phpstan group by @dependabot[bot] in PHP-CS-Fixer/PHP-CS-Fixer#9779

deps: bump squizlabs/php_codesniffer from 4.0.1 to 4.0.4 in /dev-tools by @dependabot[bot] in PHP-CS-Fixer/PHP-CS-Fixer#9768

deps: bump the all group across 1 directory with 2 updates by @dependabot[bot] in PHP-CS-Fixer/PHP-CS-Fixer#9767

test: AbstractFixerTestCase - use spl_object_id() to fix PHP 8.6 deprecations by @kubawerlos in PHP-CS-Fixer/PHP-CS-Fixer#9786

test: introduce TestCaseUtils::createTemporaryDirectory() helper by @kubawerlos in PHP-CS-Fixer/PHP-CS-Fixer#9788

test: ProjectCodeTest - restore the duplicate check in data providers by @semx in PHP-CS-Fixer/PHP-CS-Fixer#9761

New Contributors

@sinemacula-ben made their first contribution in PHP-CS-Fixer/PHP-CS-Fixer#9774

@semx made their first contribution in PHP-CS-Fixer/PHP-CS-Fixer#9761

@momala454 made their first contribution in PHP-CS-Fixer/PHP-CS-Fixer#9625

@chriscpty made their first contribution in PHP-CS-Fixer/PHP-CS-Fixer#9654

Full Changelog: PHP-CS-Fixer/PHP-CS-Fixer@v3.95.18...v3.95.19

Changelog

Sourced from friendsofphp/php-cs-fixer's changelog.

Changelog for v3.95.19

fix: binary_operator_spaces alignment for nested single-line arrays in multiline array (#9654)

fix: ClassDefinitionFixer - keep multiline constructor args when anonymous class has both extends and implements (#9625)

fix: SelfStaticAccessorFixer - do not stop fixing a class after a static return type (#9774)

chore: Fix incorrect URL in CommentsAnalyzer.php docblock (#9772)

chore: Runner - ignore coverage of non-deterministic parallel branches (#9785)

CI: fix using PHP_CS_FIXER_FAST_LINT_TEST_CASES (#9783)

deps: bump phpstan/phpstan from 2.2.7 to 2.2.8 in /dev-tools in the phpstan group (#9779)

deps: bump squizlabs/php_codesniffer from 4.0.1 to 4.0.4 in /dev-tools (#9768)

deps: bump the all group across 1 directory with 2 updates (#9767)

test: introduce TestCaseUtils::createTemporaryDirectory() helper (#9788)

test: ProjectCodeTest - restore the duplicate check in data providers (#9761)

test: AbstractFixerTestCase - use spl_object_id() to fix PHP 8.6 deprecations (#9786)

Commits

8a06c4a prepared the 3.95.19 release
af0d812 fix: binary_operator_spaces alignment for nested single-line arrays in multil...
51229c4 test: introduce TestCaseUtils::createTemporaryDirectory() helper (#9788)
0e24c5e test: AbstractFixerTestCase - use spl_object_id() to fix PHP 8.6 deprecat...
870ee66 chore: Runner - ignore coverage of non-deterministic parallel branches (#9785)
25bd52c fix: ClassDefinitionFixer - keep multiline constructor args when anonymous ...
ba57fb2 CI: fix using PHP_CS_FIXER_FAST_LINT_TEST_CASES (#9783)
65a7bfd test: ProjectCodeTest - restore the duplicate check in data providers (#9761)
60a617a deps: bump phpstan/phpstan from 2.2.7 to 2.2.8 in /dev-tools in the phpstan g...
01cbf87 fix: SelfStaticAccessorFixer - do not stop fixing a class after a static ...
Additional commits viewable in compare view

Updates infection/infection from 0.34.1 to 0.35.0

Release notes

Sourced from infection/infection's releases.

Fix auto-prepend file logic, mago freezes and Windows-specific PHPUnit tests filtering

Fixes:

[BC Break] Fail when PHP configures an auto-prepend file by @theofidry in #3448

fix(mago): Limit the mago thread count in the mutant processes by @theofidry in infection/infection#3489

fix(phpunit): Prevent Windows environment block overflow by @Meacue in infection/infection#3468

fix: Fix version detection with quiet console output by @theofidry in infection/infection#3474

Internal:

fix: Replace deprecated Node\Scalar\LNumber with Node\Scalar\Int_ by @sanmai in infection/infection#3461

fix(ci): Block outdated php-enum package by @sanmai in infection/infection#3481

New Contributors

@Meacue made their first contribution in infection/infection#3468

Full Changelog: infection/infection@0.34.2...0.35.0

0.34.2

Fixed:

Use recordTestRunHistory instead of cacheResult on PHPUnit 13.3 by @lazerg in infection/infection#3447

Escape GitHub annotation workflow commands by @theofidry in infection/infection#3441

Internal:

Suggest minimizing blast radius of any change + specific guidance for AI by @sanmai in infection/infection#3426

Replace deprecated MutantBuilder::materialize(), simplify the builder by @sanmai in infection/infection#3432

Record PHPUnit version and CPU steal in performance metrics by @sanmai in infection/infection#3417

Refactor GitHub annotation command formatting by @theofidry in infection/infection#3442

Fix Rector warning by @theofidry in infection/infection#3443

Revert TurboNodeTraverser return type in Analyser by @sanmai in infection/infection#3434

New Contributors

@lazerg made their first contribution in infection/infection#3447

Full Changelog: infection/infection@0.34.1...0.34.2

Commits

f54ac59 fix(mago): Limit the mago thread count in the mutant processes (#3489)
1a86473 [Conductor] Update rector/rector to 2.6.2 (#3475)
1bb9430 refactor: Remove deprecated FileOrDirectoryNotFound::multipleFilesDoNotExist(...
7adff14 chore(phpstan): key assertion for capture groups (#3485)
02c0659 refactor(reporter): Add precise PHPDoc types to StrykerHtmlReportBuilder (#3487)
a7ad141 refactor(mutator): Use PhpParser\Modifiers instead of deprecated ::MODIFIER_*...
ff42997 fix(ci): Block outdated php-enum package (#3481)
df998b4 tests: Reduce PHPStan baseline in tests (#3479)
047b7ca fix: Fix version detection with quiet console output (#3474)
df04798 refactor(process): Refactor initial static analysis to use ShellCommandRunner...
Additional commits viewable in compare view

Updates phpunit/phpunit from 13.2.6 to 13.3.1

Release notes

Sourced from phpunit/phpunit's releases.

PHPUnit 13.3.1

Changed

Invoking a static hook method such as setUpBeforeClass() no longer triggers a deprecation warning on PHP 8.6

Learn how to install or update PHPUnit 13.3 in the documentation.

Keep up to date with PHPUnit:

You can follow @phpunit@phpc.social to stay up to date with PHPUnit's development.

You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

PHPUnit 13.3.0

Added

#3794: Filesystem-based code coverage targeting

#5758: Make export of objects customizable

#6546: Both property hooks can now be configured on test doubles of virtual hooked properties, even when the doubled property only declares one of them

#6586: Custom code coverage driver support

#6591: Repeated test execution using --repeat CLI option and #[Repeat] attribute

#6701: Allow expectOutputString() and expectOutputRegex() to be combined and repeated

#6710: Deprecation Filters

#6722: Allow #[CoversNothing] on methods

#6742: Retry failing tests up to N times using --retry CLI option #[Retry] attribute

#6827: Customize which deprecation trigger types fail the test run

#6830: Warn when failOnAllIssues="true" is combined with an explicitly disabled fine-grained failOn* setting

#6832: Allow doubling properties that do not declare property hooks

#6853: Optionally warn when PHP is not configured for development

[phpunit/php-code-coverage #1140](sebastianbergmann/php-code-coverage#1140): Class-oriented HTML report

[phpunit/php-code-coverage #1141](sebastianbergmann/php-code-coverage#1141): Improve visualization of branch coverage and path coverage in the HTML report

[phpunit/php-code-coverage #1153](sebastianbergmann/php-code-coverage#1153): Filter HTML code coverage report by test size

--record-test-run-history and --do-not-record-test-run-history CLI options as well as the recordTestRunHistory attribute for the XML configuration file to control whether the status and duration of each test are recorded for use by --order-by defects and --order-by duration-*

--without-class-view CLI option and classView attribute for the XML configuration file to disable the class-oriented view in the HTML code coverage report

--without-file-view CLI option and fileView attribute for the XML configuration file to disable the file-oriented view in the HTML code coverage report

{PWD} is now substituted with the directory of the PHPT test file in --ENV-- and --INI-- sections of PHPT test files

{TMP} (system directory for temporary files) and {ENV:name} (value of environment variable name) are now substituted in --INI-- sections of PHPT test files

A PHPT test whose --INI-- section references an environment variable that is not set is now skipped

A --SKIPIF-- section of a PHPT test file that prints xfail <reason> now marks the test as expected to fail, as if the PHPT test file had an --XFAIL-- section with that reason

Changed

[phpunit/php-code-coverage #1231](sebastianbergmann/php-code-coverage#1231): Identify dead code using static analysis

[phpunit/php-code-coverage #1259](sebastianbergmann/php-code-coverage#1259): Degrade gracefully when a source file cannot be parsed

The test runner no longer crashes when an attribute cannot be instantiated

Improved TestDox HTML report

The feature formerly named "test result cache" is now named "test run history"; when a cache directory is configured, the file it is stored in is now named test-run-history instead of test-results

The test runner warns now when ordering by defects or duration is configured but recording of the test run history is disabled

TestCase no longer captures error_log() output for tests that do not use expectErrorLog(), avoiding the cost of setting up error log redirection for every test

... (truncated)

Changelog

Sourced from phpunit/phpunit's changelog.

[13.3.1] - 2026-08-13

Changed

Invoking a static hook method such as setUpBeforeClass() no longer triggers a deprecation warning on PHP 8.6

[13.3.0] - 2026-08-07

Added

#3794: Filesystem-based code coverage targeting

#5758: Make export of objects customizable

#6546: Both property hooks can now be configured on test doubles of virtual hooked properties, even when the doubled property only declares one of them

#6586: Custom code coverage driver support

#6591: Repeated test execution using --repeat CLI option and #[Repeat] attribute

#6701: Allow expectOutputString() and expectOutputRegex() to be combined and repeated

#6710: Deprecation Filters

#6722: Allow #[CoversNothing] on methods

#6742: Retry failing tests up to N times using --retry CLI option #[Retry] attribute

#6827: Customize which deprecation trigger types fail the test run

#6830: Warn when failOnAllIssues="true" is combined with an explicitly disabled fine-grained failOn* setting

#6832: Allow doubling properties that do not declare property hooks

#6853: Optionally warn when PHP is not configured for development

[phpunit/php-code-coverage #1140](sebastianbergmann/php-code-coverage#1140): Class-oriented HTML report

[phpunit/php-code-coverage #1141](sebastianbergmann/php-code-coverage#1141): Improve visualization of branch coverage and path coverage in the HTML report

[phpunit/php-code-coverage #1153](sebastianbergmann/php-code-coverage#1153): Filter HTML code coverage report by test size

--record-test-run-history and --do-not-record-test-run-history CLI options as well as the recordTestRunHistory attribute for the XML configuration file to control whether the status and duration of each test are recorded for use by --order-by defects and --order-by duration-*

--without-class-view CLI option and classView attribute for the XML configuration file to disable the class-oriented view in the HTML code coverage report

--without-file-view CLI option and fileView attribute for the XML configuration file to disable the file-oriented view in the HTML code coverage report

{PWD} is now substituted with the directory of the PHPT test file in --ENV-- and --INI-- sections of PHPT test files

{TMP} (system directory for temporary files) and {ENV:name} (value of environment variable name) are now substituted in --INI-- sections of PHPT test files

A PHPT test whose --INI-- section references an environment variable that is not set is now skipped

A --SKIPIF-- section of a PHPT test file that prints xfail <reason> now marks the test as expected to fail, as if the PHPT test file had an --XFAIL-- section with that reason

Changed

[phpunit/php-code-coverage #1231](sebastianbergmann/php-code-coverage#1231): Identify dead code using static analysis

[phpunit/php-code-coverage #1259](sebastianbergmann/php-code-coverage#1259): Degrade gracefully when a source file cannot be parsed

The test runner no longer crashes when an attribute cannot be instantiated

Improved TestDox HTML report

The feature formerly named "test result cache" is now named "test run history"; when a cache directory is configured, the file it is stored in is now named test-run-history instead of test-results

The test runner warns now when ordering by defects or duration is configured but recording of the test run history is disabled

TestCase no longer captures error_log() output for tests that do not use expectErrorLog(), avoiding the cost of setting up error log redirection for every test

error_log() output from tests without an expectation is no longer echoed (date-stripped) to PHPUnit's output; it goes to the configured error log again, as it did before capture was introduced

A test running in process isolation that calls error_log() without expectErrorLog() now produces stderr output in the child process, which the test runner reports as a test error

A PHPT test that is expected to fail (--XFAIL-- section or xfail output from the --SKIPIF-- section) but passes is now considered risky; this usually means the expected-failure marker is stale and should be removed

A PHPT test whose --SKIPIF-- section produces output that is not recognized is now considered risky; this usually means the skip check itself is broken. The keywords understood by PHP's own test runner that have no PHPUnit counterpart (info, warn, xleak, flaky, and nocache) are tolerated and do not make the test risky

PHPT tests now run with additional INI defaults for deterministic output (date.timezone=UTC, display_startup_errors=1, fatal_error_backtraces=Off, ignore_repeated_errors=0, precision=14, serialize_precision=-1), consistent with PHP's own test runner; all of them can be overridden per test using the --INI-- section

... (truncated)

Commits

fc02493 Prepare release
e29a704 Update dependencies
04157ce Do not pass object to ReflectionMethod::invoke() for static hook methods (whi...
7efd432 Revert "Do not report deprecations triggered by myclabs/deep-copy"
a2048e9 Merge branch '12.5' into 13.3
83be0fc Merge branch '11.5' into 12.5
9375d10 Merge branch '10.5' into 11.5
bbd3c83 Update dependencies
dbc02ef Make closure comparison test independent of PHP 8.6 closure reuse
5d20f13 Do not report deprecations triggered by myclabs/deep-copy
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…pdates Bumps the composer-development-tools group with 3 updates in the / directory: [friendsofphp/php-cs-fixer](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer), [infection/infection](https://github.com/infection/infection) and [phpunit/phpunit](https://github.com/sebastianbergmann/phpunit). Updates `friendsofphp/php-cs-fixer` from 3.95.18 to 3.95.19 - [Release notes](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/releases) - [Changelog](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/blob/master/CHANGELOG.md) - [Commits](PHP-CS-Fixer/PHP-CS-Fixer@v3.95.18...v3.95.19) Updates `infection/infection` from 0.34.1 to 0.35.0 - [Release notes](https://github.com/infection/infection/releases) - [Changelog](https://github.com/infection/infection/blob/master/CHANGELOG.md) - [Commits](infection/infection@0.34.1...0.35.0) Updates `phpunit/phpunit` from 13.2.6 to 13.3.1 - [Release notes](https://github.com/sebastianbergmann/phpunit/releases) - [Changelog](https://github.com/sebastianbergmann/phpunit/blob/13.3.1/ChangeLog-13.3.md) - [Commits](sebastianbergmann/phpunit@13.2.6...13.3.1) --- updated-dependencies: - dependency-name: friendsofphp/php-cs-fixer dependency-version: 3.95.19 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: composer-development-tools - dependency-name: infection/infection dependency-version: 0.35.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: composer-development-tools - dependency-name: phpunit/phpunit dependency-version: 13.3.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: composer-development-tools ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-08-31T18:56:04Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update php code labels Aug 25, 2026

dependabot Bot closed this Aug 31, 2026

dependabot Bot deleted the dependabot/composer/composer-development-tools-f5fb7e6a74 branch August 31, 2026 18:56

Navigation Menu

Uh oh!

Bump the composer-development-tools group across 1 directory with 3 updates - #165

Bump the composer-development-tools group across 1 directory with 3 updates#165
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/composer/composer-development-tools-f5fb7e6a74

dependabot Bot commented on behalf of github Aug 25, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Aug 31, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v3.95.19 Adalbertus

What's Changed

New Contributors

Changelog for v3.95.19

Fix auto-prepend file logic, mago freezes and Windows-specific PHPUnit tests filtering

New Contributors

0.34.2

New Contributors

PHPUnit 13.3.1

Changed

Keep up to date with PHPUnit:

PHPUnit 13.3.0

Added

Changed

[13.3.1] - 2026-08-13

Changed

[13.3.0] - 2026-08-07

Added

Changed

Uh oh!

dependabot Bot commented on behalf of github Aug 31, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Aug 25, 2026 •

edited

Loading