Skip to content

Conversation

@renovate
Copy link

@renovate renovate bot commented Nov 14, 2025

This PR contains the following updates:

Package Type Update Change Age Confidence
actions/checkout action patch v6 -> v6.0.1 age confidence
actions/checkout action patch v5.0.0 -> v5.0.1 age confidence
libunwind requires patch 1.8.1 -> 1.8.3 age confidence
magic_enum requires patch 0.9.6 -> 0.9.7 age confidence
open-telemetry/opentelemetry-auto-http-async (source) require patch 1.1.0 -> 1.1.1 age confidence
ossf/scorecard-action action patch v2.4.2 -> v2.4.3 age confidence
phpstan/phpstan require-dev patch 2.1.31 -> 2.1.33 age confidence
phpstan/phpstan-phpunit require-dev patch 2.0.7 -> 2.0.11 age confidence
squizlabs/php_codesniffer require-dev patch 3.13.2 -> 3.13.5 age confidence

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

actions/checkout (actions/checkout)

v6.0.1

Compare Source

opentelemetry-php/contrib-auto-http-async (open-telemetry/opentelemetry-auto-http-async)

v1.1.1

Compare Source

What's Changed:

Full Changelog: opentelemetry-php/contrib-auto-http-async@1.1.0...1.1.1

ossf/scorecard-action (ossf/scorecard-action)

v2.4.3

Compare Source

What's Changed

This update bumps the Scorecard version to the v5.3.0 release. For a complete list of changes, please refer to the Scorecard v5.3.0 release notes.

Documentation

Other

New Contributors

Full Changelog: ossf/scorecard-action@v2.4.2...v2.4.3

phpstan/phpstan-phar-composer-source (phpstan/phpstan)

v2.1.33

Compare Source

v2.1.32

Compare Source

phpstan/phpstan-phpunit (phpstan/phpstan-phpunit)

v2.0.11

Compare Source

  • 5e30669 - Perf: Refactor PHPUnitVersionDetector to use runtime reflection
  • 202afe9 - chore(deps): update github-actions

v2.0.10

Compare Source

  • 8d61a58 - Remove checkDataProviderData and introduce reportMissingDataProviderReturnType

v2.0.9

Compare Source

  • cda423c - Implement AttributeRequiresPhpVersionRule
  • 83b717d - ci: Add tests for PHP 8.5
  • 75ba948 - chore(deps): update actions/checkout action to v6

v2.0.8

Compare Source

  • 2fe9fbe - Fix AssertSameWithCountRule for recursive count()
  • d935297 - Fix "Unexpected input(s) 'extensions', valid inputs are ['php-version', 'php-extensions', 'build-infection-path']"
  • 8532ceb - Make AssertSameNullExpectedRule auto-fixable
  • a4abfc1 - Use TypeSystem in AssertSameBooleanExpectedRule
  • 36cb9a6 - Make AssertSameBooleanExpectedRule auto-fixable
  • 450bfc0 - Added assertArrayHasKey() expectations
  • 033f690 - PHPUnit 9.x/10.x does not at all support named arguments from data-providers
  • 758d343 - Refactor PHPUnitVersionDetector to ease different major version checks
  • dd87f2e - Assert*Rules: Do cheap checks first (#​247)
  • 5c89d74 - Ignore missingType.iterableValue for data-providers
  • 1fbc321 - move analyse-paths into phpstan.neon
  • 11f3ada - Fix mutation testing on dev branch (#​244)
  • 53e33fc - Setup mutation testing
  • 12676a7 - One more test
  • c81e395 - Fix memory consumption in DataProviderDataRule
  • 61860a6 - Implement DataProviderDataRule
  • 39950c7 - Preparational refactoring for DataProviderDataRule
  • c54a269 - Narrow too wide return type
  • 9ec3fa9 - Modernize code examples in README.md
  • b1df1f5 - chore(deps): update actions/checkout action to v5
  • 1d7eb7e - chore(deps): update eomm/why-don-t-you-tweet action to v2
PHPCSStandards/PHP_CodeSniffer (squizlabs/php_codesniffer)

v3.13.5: - 2025-11-04

Compare Source

Added
  • Runtime support for PHP 8.5. All known PHP 8.5 deprecation notices have been fixed.
    • Syntax support for new PHP 8.5 features will follow in a future release.
    • If you find any PHP 8.5 deprecation notices which were missed, please report them.
Changed
Fixed
  • Fixed bug #​1216: Tokenizer/PHP: added more defensive coding to prevent PHP 8.5 "Using null as an array offset" deprecation notices.
  • Fixed bug #​1279: Tokenizer/PHP: on PHP < 8.0, an unclosed attribute (parse error) could end up removing some tokens from the token stream.
    • This could lead to false positives and false negative from sniffs, but could also lead to incorrect fixes being made mangling the file under scan.
    • Thanks to Juliette Reinders Folmer for the patch.
Other
  • Please be aware that the master branch has been renamed to 3.x and the default branch has changed to the 4.x branch.
    • If you contribute to PHP_CodeSniffer, you will need to update your local git clone.
    • If you develop against PHP_CodeSniffer and run your tests against dev branches of PHPCS, you will need to update your workflows.

New Contributors

The PHP_CodeSniffer project is happy to welcome the following new contributors:
@​andrewnicols

Statistics

Closed: 2 issues
Merged: 36 pull requests

Follow @​phpcs on Mastodon or @​PHP_CodeSniffer on X to stay informed.

Please consider funding the PHP_CodeSniffer project. If you already do so: thank you!

v3.13.4: - 2025-09-05

Compare Source

Fixed
Statistics

Closed: 0 issues
Merged: 3 pull requests

If you like to stay informed about releases and more, follow @​phpcs on Mastodon or @​PHP_CodeSniffer on X.

Please consider funding the PHP_CodeSniffer project. If you already do so: thank you!

v3.13.3: - 2025-09-04

Compare Source

Added
  • Tokenizer support for PHP 8.4 dereferencing of new expressions without wrapping parentheses. #​1160
  • Tokenizer support for PHP 8.4 abstract properties. #​1183
    • The File::getMemberProperties() method now also supports abstract properties through a new is_abstract array index in the return value. #​1184
    • Additionally, the following sniffs have been updated to support abstract properties:
      • Generic.PHP.LowerCaseConstant #​1185
      • Generic.PHP.UpperCaseConstant #​1185
      • PSR2.Classes.PropertyDeclaration #​1188
      • Squiz.Commenting.VariableComment #​1186
      • Squiz.WhiteSpace.MemberVarSpacing #​1187
    • Thanks to Juliette Reinders Folmer for the patches
  • Tokenizer support for the PHP 8.4 "exit as a function call" change. #​1201
    • When exit/die is used as a fully qualified "function call", it will now be tokenized as T_NS_SEPARATOR + T_EXIT.
    • Additionally, the following sniff has been updated to handle fully qualified exit/die correctly:
      • Squiz.PHP.NonExecutableCode
    • Thanks to Juliette Reinders Folmer for the patches
Changed
  • Tokenizer/PHP: fully qualified true/false/null will now be tokenized as T_NS_SEPARATOR + T_TRUE/T_FALSE/T_NULL. #​1201
    • Previously, these were tokenized as T_NS_SEPARATOR + T_STRING.
    • Additionally, the following sniffs have been updated to handle fully qualified true/false/null correctly:
      • Generic.CodeAnalysis.UnconditionalIfStatement
      • Generic.ControlStructures.DisallowYodaConditions
      • PEAR.Functions.ValidDefaultValue
    • Thanks to Juliette Reinders Folmer for the patches.
  • Generic.PHP.Syntax: the sniff is now able to scan input provided via STDIN on non-Windows OSes. #​915
  • PSR2.ControlStructures.SwitchDeclaration: the WrongOpener* error code is now auto-fixable if the identified "wrong opener" is a semi-colon. #​1161
  • The PSR2.Classes.PropertyDeclaration will now check that the abstract modifier keyword is placed before a visibility keyword. #​1188
    • Errors will be reported via a new AbstractAfterVisibility error code.
    • Thanks to Juliette Reinders Folmer for the patch.
  • Various housekeeping, including improvements to the tests and documentation.
Fixed
  • Fixed bug #​1112 : --parallel option fails if PHP_CodeSniffer is invoked via bash and the invokation creates a non-PHPCS-managed process.
  • Fixed bug #​1113 : fatal error when the specified "files to scan" would result in the same file being added multiple times to the queue.
    • This error only occured when --parallel scanning was enabled.
    • Thanks to Rodrigo Primo for the patch.
  • Fixed bug #​1154 : PEAR.WhiteSpace.ObjectOperatorIndent: false positive when checking multiple chained method calls in a multidimensional array.
  • Fixed bug #​1193 : edge case inconsistency in how empty string array keys for sniff properties are handled.
  • Fixed bug #​1197 : Squiz.Commenting.FunctionComment: return types containing a class name with underscores would be truncated leading to incorrect results.
Other

New Contributors

The PHP_CodeSniffer project is happy to welcome the following new contributors:
@​benno5020, @​NanoSector

Statistics

Closed: 11 issues
Merged: 40 pull requests

Follow @​phpcs on Mastodon or @​PHP_CodeSniffer on X to stay informed.

Please consider funding the PHP_CodeSniffer project. If you already do so: thank you!


Configuration

📅 Schedule: Branch creation - "before 8am every weekday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from a team as a code owner November 14, 2025 18:43
@renovate renovate bot changed the title Update ossf/scorecard-action action to v2.4.3 Update all patch versions Nov 19, 2025
@renovate renovate bot force-pushed the renovate/all-patch-versions branch from c563459 to 13e637d Compare November 19, 2025 07:30
@renovate renovate bot force-pushed the renovate/all-patch-versions branch from 13e637d to 983a135 Compare December 22, 2025 12:09
@renovate renovate bot force-pushed the renovate/all-patch-versions branch from 983a135 to 1dffe8c Compare December 22, 2025 14:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

0 participants