composer: update kint-php/kint requirement from ^4.0 to ^6.0#11
Conversation
dependabot
Bot
added
dependencies
|
Important Review skippedBot user detected. To trigger a single review, invoke the You can disable this status message by setting the WalkthroughUpdated composer.json to change the kint-php/kint dependency constraint from ^4.0 to ^6.0. No other files or sections were modified. Changes
Estimated code review effort🎯 1 (Trivial) | ⏱️ ~2 minutes Poem
🪧 TipsChatThere are 3 ways to chat with CodeRabbit:
SupportNeed help? Join our Discord community for assistance with any issues or questions. CodeRabbit Commands (Invoked using PR/Issue comments)Type Other keywords and placeholders
CodeRabbit Configuration File (
|
|
@coderabbitai review |
✅ Actions performedReview triggered.
|
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 1
🧹 Nitpick comments (4)
composer.json (4)
18-27: Add an explicit PHP requirement to avoid accidental incompatible installscomposer.json lacks a "php" constraint. Without it, Composer may resolve dependencies (including Kint v6) to versions incompatible with your production PHP runtime.
Apply a constraint that matches your supported runtime(s). Example (adjust as needed):
"require": { + "php": "^8.1", "vitexsoftware/ease-twbootstrap5": "^1.2", "league/oauth2-client": "^2.8", "vitexsoftware/ease-core": "^1.48", "vitexsoftware/ease-fluentpdo": "^1.4", "vitexsoftware/ease-html-widgets": "^1.0", "spojenet/csas-accountsapi": "^0.7", "kint-php/kint": "^6.0" },Optionally, you can also pin the platform to ensure consistent resolution across environments:
"config": { + "platform": { + "php": "8.1.0" + }, "allow-plugins": { "ergebnis/composer-normalize": true } }
26-26: Consider moving Kint to require-dev if it’s only used for debuggingKint is typically a developer tool. If it’s not needed in production runtime (e.g., not referenced in shipped code or UI), placing it in require-dev reduces your production attack surface and install size.
Proposed change (verify your codebase doesn’t rely on Kint at runtime before applying):
"require": { "vitexsoftware/ease-twbootstrap5": "^1.2", "league/oauth2-client": "^2.8", "vitexsoftware/ease-core": "^1.48", "vitexsoftware/ease-fluentpdo": "^1.4", "vitexsoftware/ease-html-widgets": "^1.0", "spojenet/csas-accountsapi": "^0.7", - "kint-php/kint": "^6.0" + // (moved to require-dev) }, "require-dev": { "robmorgan/phinx": "^0.16", "phpunit/phpunit": "*", "phpstan/phpstan": "*", "friendsofphp/php-cs-fixer": "^3.86", "ergebnis/composer-normalize": "^2.47", - "ergebnis/php-cs-fixer-config": "^6.52" + "ergebnis/php-cs-fixer-config": "^6.52", + "kint-php/kint": "^6.0" },
18-18: Minimum stability is dev: consider enabling prefer-stable or revisiting stability policyWith "minimum-stability": "dev", Composer may resolve dev releases across your tree. If that’s intentional, consider at least adding "prefer-stable": true to bias towards stable releases. Otherwise, consider removing "dev" minimum stability to reduce risk.
Example:
"minimum-stability": "dev", + "prefer-stable": true,Also applies to: 36-40
28-35: Pin dev tools instead of using wildcards to reduce breakageUsing "*" for phpunit/phpunit and phpstan/phpstan makes CI susceptible to sudden upstream breaking changes. Recommend pinning major/minor ranges (e.g., caret or tilde) aligned with your PHP version and toolchain.
If you want, I can propose compatible version ranges based on your target PHP version and current CI matrix.
📜 Review details
Configuration used: CodeRabbit UI
Review profile: CHILL
Plan: Pro
💡 Knowledge Base configuration:
- MCP integration is disabled by default for public repositories
- Jira integration is disabled by default for public repositories
- Linear integration is disabled by default for public repositories
You can enable these sources in your CodeRabbit configuration.
📒 Files selected for processing (1)
composer.json(1 hunks)
🔇 Additional comments (1)
composer.json (1)
26-26: LGTM on the dependency constraint updateUsing caret ^6.0 is appropriate to receive compatible 6.x bugfixes and improvements without jumping to a future 7.x.
| "vitexsoftware/ease-html-widgets": "^1.0", | ||
| "spojenet/csas-accountsapi": "^0.7", | ||
| "kint-php/kint": "^4.0" | ||
| "kint-php/kint": "^6.0" |
There was a problem hiding this comment.
💡 Verification agent
🧩 Analysis chain
Version bump to Kint ^6: check runtime PHP compatibility and BC changes
Upgrading Kint to major version 6 can introduce runtime requirements and subtle behavior changes. Ensure:
- Your runtime PHP version meets Kint v6’s minimum requirement.
- All usages (e.g., Kint::dump(), Kint::$enabled, d(), dd(), s()) continue to work as expected.
Run this script to quickly locate Kint usages and verify the presence of a PHP platform constraint:
🏁 Script executed:
#!/bin/bash
set -euo pipefail
echo "==> Checking composer.json for PHP constraint"
jq -r '.require.php // "MISSING_PHP_CONSTRAINT"' composer.json
echo
echo "==> Searching for Kint usages in the codebase"
# Common Kint usage patterns: static calls and helper functions
rg -nP --type=php -C2 '\bKint::|\bd\(|\bdd\(|\bs\(|\bKint\b' || true
echo
echo "==> If PHP constraint is missing, consider adding one that matches your production PHP version."Length of output: 1285
🌐 Web query:
What is the minimum PHP version requirement for kint-php/kint version 6.0?
💡 Result:
The minimum PHP version required for kint-php/kint version 6.0 is PHP 7.4 or greater[1].
The official package specification for kint-php/kint—including version 6.0 and its immediate releases—lists
Requires
- php: >=7.4
as its core requirement[1].
No search results indicate any higher requirement for kint-php/kint 6.0, nor is there evidence that versions subsequent to 6.0 raised this threshold.
Additional relevant detail:
- While PHP 7.4 is the minimum, using newer PHP versions (such as PHP 8.x) is likely to improve performance and security but is not strictly required for compatibility with kint-php/kint 6.0[1].
- For development dependencies (like phpunit or PHP CS Fixer), more recent PHP versions may sometimes be required, but these do not affect the runtime minimum for core Kint usage[1].
In summary, if your environment runs PHP 7.4 or newer, kint-php/kint version 6.0 will function as intended.
Citations:
- 1: https://packagist.org/packages/kint-php/kint
- 2: https://codeigniter.com/user_guide/installation/upgrade_430.html
- 3: https://wordpress.org/about/requirements/
- 4: https://letswp.justifiedgrid.com/kint-debugging-php-wordpress/
- 5: https://kint-php.github.io/kint/
- 6: https://www.drupal.org/project/kint/issues/3541375
- 7: https://forum.codeigniter.com/thread-86936-lastpost.html
- 8: https://notes.enovision.net/slim/composer-package-documentation/kint-php_kint
- 9: https://www.drupal.org/project/devel_kint_extras/issues/3277126
- 10: https://www.drupal.org/docs/getting-started/system-requirements/php-requirements
Add PHP ≥7.4 constraint for Kint v6 compatibility
composer.json doesn’t currently specify a PHP runtime requirement, but kint-php/kint v6 requires PHP 7.4 or greater. Without this constraint, Composer may install the package on unsupported PHP versions.
• In composer.json, under "require", add:
"php": ">=7.4",
"kint-php/kint": "^6.0"• Confirm your production and CI environments run PHP 7.4+.
• Verify existing Kint usages (e.g. in src/token.php) continue to work as expected.
🤖 Prompt for AI Agents
In composer.json around line 26, the project lacks a PHP runtime constraint but
kint-php/kint v6 requires PHP >=7.4; update the "require" section to add a php
constraint of ">=7.4" alongside the existing "kint-php/kint": "^6.0", then run
composer update/validate to ensure Composer honors the platform requirement and
confirm CI/production PHP versions are 7.4+ and that existing Kint usages (e.g.,
src/token.php) still work.
Updates the requirements on [kint-php/kint](https://github.com/kint-php/kint) to permit the latest version. - [Release notes](https://github.com/kint-php/kint/releases) - [Commits](kint-php/kint@4.0...6.0.1) --- updated-dependencies: - dependency-name: kint-php/kint dependency-version: 6.0.1 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/composer/kint-php/kint-tw-6.0
branch
from
89ac645 to
acf21ac
Compare
1 participant
Updates the requirements on kint-php/kint to permit the latest version.
Release notes
Sourced from kint-php/kint's releases.
Commits
2bd133bDomPlugin: Add outerHTML for PHP 8.52fb169bCSS: Use inlined SVG masks for button icons instead of htmlentities39c0a5fJS: Performance fix for chrome39da434CSS: Set contain on kint dumps to help client side performance9d3a86bParser::noRecurseCall: Simplify logic9fa1184MethodValue::getFullyQualifiedDisplayName089ee13Plain: Set normal line-heightc7874dfIteratorPlugin: Relax type hint for blacklistfe7be9dAssetRendererTrait: Bugfix wrong return type with non-existent theme file5766ba6Parser: Use try/finally to unset recursion stacksDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)Summary by CodeRabbit