Skip to content

Bump the composer-dev-dependencies group with 2 updates - #62

Merged
vjik merged 1 commit into
masterfrom
dependabot/composer/composer-dev-dependencies-6b38c3b05d
Sep 1, 2026
Merged

Bump the composer-dev-dependencies group with 2 updates#62
vjik merged 1 commit into
masterfrom
dependabot/composer/composer-dev-dependencies-6b38c3b05d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 31, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on friendsofphp/php-cs-fixer and vlucas/phpdotenv to permit the latest version.
Updates friendsofphp/php-cs-fixer to 3.95.22

Release notes

Sourced from friendsofphp/php-cs-fixer's releases.

v3.95.22 Adalbertus

What's Changed

New Contributors

Full Changelog: PHP-CS-Fixer/PHP-CS-Fixer@v3.95.21...v3.95.22

Changelog

Sourced from friendsofphp/php-cs-fixer's changelog.

Changelog for v3.95.22

  • fix: StaticLambdaFixer - do not make a lambda static when it is the direct subject of bindTo() or call() (#9802)
  • chore: Implement PHPStan Preg::replaceCallback() extension (#9799)
  • chore: Utils - fix stableSort() and sortFixers() template types, remove @phpstan-ignore suppressions (#9798)
  • deps: bump phpstan/phpstan from 2.2.8 to 2.2.9 (#9797)

Changelog for v3.95.21

  • fix: StatementIndentationFixer - do not treat ternary colon as block start (#9795)
  • perf: Introduce new candidate check for transformers (#9770)
  • perf: Optimize NameQualifiedTransformer token insertion (#9759)
  • CI: add BC check (#9791)
  • deps: upgrade dev-tools (#9793)

Changelog for v3.95.20

  • fix: PsrAutoloadingFixer - do not throw when the file cannot be resolved on disk (#9762)
  • refactor: Transformers - move looping over tokens directly into each transformer individually (#9782)
  • test: drop mikey179/vfsstream (#9787)
  • test: NoUnusedImportsFixerTest - add new cases around quoted values (#9784)

Changelog for v3.95.19

  • fix: binary_operator_spaces alignment for nested single-line arrays in multiline array (#9654)
  • fix: ClassDefinitionFixer - keep multiline constructor args when anonymous class has both extends and implements (#9625)
  • fix: SelfStaticAccessorFixer - do not stop fixing a class after a static return type (#9774)
  • chore: Fix incorrect URL in CommentsAnalyzer.php docblock (#9772)
  • chore: Runner - ignore coverage of non-deterministic parallel branches (#9785)
  • CI: fix using PHP_CS_FIXER_FAST_LINT_TEST_CASES (#9783)
  • deps: bump phpstan/phpstan from 2.2.7 to 2.2.8 in /dev-tools in the phpstan group (#9779)
  • deps: bump squizlabs/php_codesniffer from 4.0.1 to 4.0.4 in /dev-tools (#9768)
  • deps: bump the all group across 1 directory with 2 updates (#9767)
  • test: introduce TestCaseUtils::createTemporaryDirectory() helper (#9788)
  • test: ProjectCodeTest - restore the duplicate check in data providers (#9761)
  • test: AbstractFixerTestCase - use spl_object_id() to fix PHP 8.6 deprecations (#9786)

Changelog for v3.95.18

  • CI: attach provenance and SBOM attestations to the released image (#9751)
  • deps: bump the phpstan group in /dev-tools with 2 updates (#9748)
  • deps: update dev-tools (#9754)
  • perf: Limit token search in simplified_if_return (#9747)

Changelog for v3.95.17

... (truncated)

Commits
  • 482722e prepared the 3.95.22 release
  • 4edec9c fix: StaticLambdaFixer - do not make a lambda static when it is the direct ...
  • e8053ea chore: Implement PHPStan Preg::replaceCallback() extension (#9799)
  • 364cfee chore: Utils - fix stableSort() and sortFixers() template types, remove...
  • d8531ed deps: bump phpstan/phpstan from 2.2.8 to 2.2.9 (#9797)
  • 033b7c4 bumped version
  • See full diff in compare view

Updates vlucas/phpdotenv to 5.7.0

Release notes

Sourced from vlucas/phpdotenv's releases.

v5.7.0

What's Changed

New Contributors

Full Changelog: vlucas/phpdotenv@v5.6.4...v5.7.0

Commits
  • 301c079 Resolve the remaining static analysis baseline entries (#614)
  • 5d0bb3b Document the real parsing, nesting, comment, escape and validation rules (#609)
  • 4426075 Stop comments from starting multiline values (#615)
  • eec19ee Add regression tests for existing behaviour (#608)
  • 226b4ed Improve diagnostics and messages (#607)
  • 4f84f7e Strip a leading UTF-8 byte order mark from string content (#606)
  • 4b900c5 Resolve nested variables without re-copying the value prefix (#605)
  • dd5b391 Remove quadratic value parsing (#604)
  • 46d5ce3 Skip environment writes and reads for names or values containing a null byte ...
  • 8bf174e Fix memory-safety crash on invalid UTF-8 variable names (#602)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Updates the requirements on [friendsofphp/php-cs-fixer](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer) and [vlucas/phpdotenv](https://github.com/vlucas/phpdotenv) to permit the latest version.

Updates `friendsofphp/php-cs-fixer` to 3.95.22
- [Release notes](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/releases)
- [Changelog](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/blob/master/CHANGELOG.md)
- [Commits](PHP-CS-Fixer/PHP-CS-Fixer@v3.95.21...v3.95.22)

Updates `vlucas/phpdotenv` to 5.7.0
- [Release notes](https://github.com/vlucas/phpdotenv/releases)
- [Commits](vlucas/phpdotenv@v5.6.0...v5.7.0)

---
updated-dependencies:
- dependency-name: friendsofphp/php-cs-fixer
  dependency-version: 3.95.22
  dependency-type: direct:development
  dependency-group: composer-dev-dependencies
- dependency-name: vlucas/phpdotenv
  dependency-version: 5.7.0
  dependency-type: direct:development
  dependency-group: composer-dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update Php code labels Aug 31, 2026
@vjik
vjik merged commit 5e01459 into master Sep 1, 2026
21 checks passed
@vjik
vjik deleted the dependabot/composer/composer-dev-dependencies-6b38c3b05d branch September 1, 2026 06:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file php Pull requests that update Php code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant