Skip to content

Bump the "maintenance" group with 1 update across multiple ecosystems#169

Merged
Sleon4 merged 1 commit into
5.xfrom
dependabot/maintenance-bc76dceac5
Apr 14, 2026
Merged

Bump the "maintenance" group with 1 update across multiple ecosystems#169
Sleon4 merged 1 commit into
5.xfrom
dependabot/maintenance-bc76dceac5

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 8, 2026

Bumps the maintenance group with 3 updates: lion/bundle, lion/mailer and phpunit/phpunit.

Updates lion/bundle from 19.2.1 to 19.2.2

Release notes

Sourced from lion/bundle's releases.

v19.2.2

What's Changed

Full Changelog: lion-packages/bundle@v19.2.1...v19.2.2

Commits
  • f272aa0 Merge pull request #291 from lion-packages/dependabot/maintenance-e0e0e28fba
  • 0f7659a build(deps): bump the maintenance group with 13 updates
  • f725e4e Merge pull request #290 from lion-packages/Sleon4-patch-1
  • 0efb5b6 Update dependabot.yml
  • See full diff in compare view

Updates lion/mailer from 8.0.0 to 8.0.1

Release notes

Sourced from lion/mailer's releases.

v8.0.1

What's Changed

Full Changelog: lion-packages/mailer@v8.0.0...v8.0.1

Commits
  • f8c01b3 Merge pull request #75 from lion-packages/dependabot/maintenance-1e496c0919
  • 24ea25b build(deps-dev): bump the maintenance group with 2 updates
  • 7a81736 Merge pull request #74 from lion-packages/Sleon4-patch-1
  • 3619424 Update dependabot.yml
  • 7684410 Merge pull request #73 from lion-packages/dependabot/maintenance-cc81429f92
  • 67f34c7 build(deps-dev): bump the maintenance group with 4 updates
  • 6a2774e Merge pull request #72 from lion-packages/dependabot/maintenance-f4e48aa716
  • badc8fd build(deps-dev): bump the maintenance group with 4 updates
  • a61ec9a Merge pull request #71 from lion-packages/dependabot/maintenance-d7f1210f3b
  • 8d71dcb build(deps-dev): bump the maintenance group with 7 updates
  • Additional commits viewable in compare view

Updates phpunit/phpunit from 13.0.6 to 13.1.1

Release notes

Sourced from phpunit/phpunit's releases.

PHPUnit 13.1.1

Changed

  • #3676: Include class/interface name in mock object expectation failure messages
  • #4793: Exit with non-zero exit code when exit was called from some test

Fixed

  • #5881: colors="true" in XML configuration file does not unconditionally enable colored output
  • #6019: --migrate-configuration does not update schema location when XML content already validates against current schema
  • #6372: Assertion failure inside willReturnCallback() is silently swallowed when code under test catches exceptions
  • #6464: Process isolation template unconditionally calls set_include_path()
  • #6571: Static analysis errors for TestDoubleBuilder method chaining

Learn how to install or update PHPUnit 13.1 in the documentation.

Keep up to date with PHPUnit:

PHPUnit 13.1.0

Added

  • #6501: Include unexpected output in Open Test Reporting (OTR) XML logfile
  • #6517: includeInCodeCoverage attribute for <directory> and <file> children of <source>
  • #6523: Include #[Group] information in Open Test Reporting (OTR) XML logfile
  • #6524: Report issues in Open Test Reporting (OTR) XML logfile
  • #6526: Introduce #[DataProviderClosure] for static closures
  • #6530: Support for custom issue trigger resolvers that can be configured using <issueTriggerResolvers> in the XML configuration file
  • #6547: Support for %r...%r in EXPECTF section
  • Support for configuring HTML code coverage report options (colors, thresholds, custom CSS) in XML configuration file without requiring an outputDirectory attribute, allowing the output directory to be specified later with the --coverage-html CLI option
  • Support for configuring dark mode colors, progress bar colors, and breadcrumb colors for HTML code coverage reports in the XML configuration file

Changed

  • #6557: Improve failure description for StringMatchesFormatDescription constraint which is used by assertFileMatchesFormat(), assertFileMatchesFormatFile(), assertStringMatchesFormat(), assertStringMatchesFormatFile(), and EXPECTF sections of PHPT test files
  • The HTML code coverage report now uses a more colorblind-friendly blue/amber/orange palette by default
  • Extracted PHPUnit\Runner\Extension\Facade from a concrete class to an interface and introduced an internal ExtensionFacade implementation, so that extensions only depend on the Facade interface while PHPUnit internally uses the ExtensionFacade class that also provides query methods

Deprecated

  • #6515: Deprecate the --log-events-verbose-text <file> CLI option
  • #6537: Soft-deprecate id() and after() for mock object expectations

Fixed

  • #6025: FILE_EXTERNAL breaks __DIR__

... (truncated)

Changelog

Sourced from phpunit/phpunit's changelog.

13.1.1 - 2026-04-08

Changed

  • #3676: Include class/interface name in mock object expectation failure messages
  • #4793: Exit with non-zero exit code when exit was called from some test

Fixed

  • #5881: colors="true" in XML configuration file does not unconditionally enable colored output
  • #6019: --migrate-configuration does not update schema location when XML content already validates against current schema
  • #6372: Assertion failure inside willReturnCallback() is silently swallowed when code under test catches exceptions
  • #6464: Process isolation template unconditionally calls set_include_path()
  • #6571: Static analysis errors for TestDoubleBuilder method chaining

13.1.0 - 2026-04-03

Added

  • #6501: Include unexpected output in Open Test Reporting (OTR) XML logfile
  • #6517: includeInCodeCoverage attribute for <directory> and <file> children of <source>
  • #6523: Include #[Group] information in Open Test Reporting (OTR) XML logfile
  • #6524: Report issues in Open Test Reporting (OTR) XML logfile
  • #6526: Introduce #[DataProviderClosure] for static closures
  • #6530: Support for custom issue trigger resolvers that can be configured using <issueTriggerResolvers> in the XML configuration file
  • #6547: Support for %r...%r in EXPECTF section
  • Support for configuring HTML code coverage report options (colors, thresholds, custom CSS) in XML configuration file without requiring an outputDirectory attribute, allowing the output directory to be specified later with the --coverage-html CLI option
  • Support for configuring dark mode colors, progress bar colors, and breadcrumb colors for HTML code coverage reports in the XML configuration file

Changed

  • #6557: Improve failure description for StringMatchesFormatDescription constraint which is used by assertFileMatchesFormat(), assertFileMatchesFormatFile(), assertStringMatchesFormat(), assertStringMatchesFormatFile(), and EXPECTF sections of PHPT test files
  • The HTML code coverage report now uses a more colorblind-friendly blue/amber/orange palette by default
  • Extracted PHPUnit\Runner\Extension\Facade from a concrete class to an interface and introduced an internal ExtensionFacade implementation, so that extensions only depend on the Facade interface while PHPUnit internally uses the ExtensionFacade class that also provides query methods

Deprecated

  • #6515: Deprecate the --log-events-verbose-text <file> CLI option
  • #6537: Soft-deprecate id() and after() for mock object expectations

Fixed

  • #6025: FILE_EXTERNAL breaks __DIR__
  • #6351: No warning when the same test runner extension is configured more than once
  • #6433: Logic in TestSuiteLoader is brittle and causes "Class FooTest not found" even for valid tests in valid filenames
  • #6463: Process Isolation fails on non-serializable globals and quietly ignore closures
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the maintenance group with 3 updates
73123e2 
Bumps the maintenance group with 3 updates: [lion/bundle](https://github.com/lion-packages/bundle), [lion/mailer](https://github.com/lion-packages/mailer) and [phpunit/phpunit](https://github.com/sebastianbergmann/phpunit).


Updates `lion/bundle` from 19.2.1 to 19.2.2
- [Release notes](https://github.com/lion-packages/bundle/releases)
- [Commits](lion-packages/bundle@v19.2.1...v19.2.2)

Updates `lion/mailer` from 8.0.0 to 8.0.1
- [Release notes](https://github.com/lion-packages/mailer/releases)
- [Commits](lion-packages/mailer@v8.0.0...v8.0.1)

Updates `phpunit/phpunit` from 13.0.6 to 13.1.1
- [Release notes](https://github.com/sebastianbergmann/phpunit/releases)
- [Changelog](https://github.com/sebastianbergmann/phpunit/blob/13.1.1/ChangeLog-13.1.md)
- [Commits](sebastianbergmann/phpunit@13.0.6...13.1.1)

---
updated-dependencies:
- dependency-name: lion/bundle
  dependency-version: 19.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maintenance
- dependency-name: lion/mailer
  dependency-version: 8.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maintenance
- dependency-name: phpunit/phpunit
  dependency-version: 13.1.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maintenance
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added this to the Support and maintenance milestone Apr 8, 2026
@dependabot dependabot Bot added dependencies Project dependencies are updated php Pull requests that update php code labels Apr 8, 2026
@sonarqubecloud
Copy link
Copy Markdown

sonarqubecloud Bot commented Apr 8, 2026

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Apr 8, 2026

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 9 package(s) with unknown licenses.
See the Details below.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA 2afa8b1.
Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

License Issues

composer.lock

PackageVersionLicenseIssue Type
laravel/serializable-closure2.0.11NullUnknown License
lion/bundle19.2.2NullUnknown License
lion/command6.2.1NullUnknown License
lion/database12.1.1NullUnknown License
lion/exceptions3.0.1NullUnknown License
lion/files9.1.1NullUnknown License
lion/mailer8.0.1NullUnknown License
lion/route13.1.1NullUnknown License
nesbot/carbon3.11.4NullUnknown License

OpenSSF Scorecard

Scorecard details
PackageVersionScoreDetails
composer/laravel/serializable-closure 2.0.11 UnknownUnknown
composer/lion/bundle 19.2.2 UnknownUnknown
composer/lion/command 6.2.1 UnknownUnknown
composer/lion/database 12.1.1 UnknownUnknown
composer/lion/exceptions 3.0.1 UnknownUnknown
composer/lion/files 9.1.1 UnknownUnknown
composer/lion/mailer 8.0.1 UnknownUnknown
composer/lion/route 13.1.1 UnknownUnknown
composer/nesbot/carbon 3.11.4 UnknownUnknown
composer/phpunit/php-code-coverage 14.0.0 UnknownUnknown
composer/phpunit/phpunit 13.1.1 UnknownUnknown
composer/sebastian/comparator 8.1.1 UnknownUnknown
composer/sebastian/diff 8.1.0 UnknownUnknown
composer/sebastian/environment 9.2.0 UnknownUnknown
composer/sebastian/git-state 1.0.0 UnknownUnknown

Scanned Files

  • composer.lock

@Sleon4 Sleon4 self-requested a review April 14, 2026 19:21
@Sleon4 Sleon4 merged commit 223d3e6 into 5.x Apr 14, 2026
4 checks passed
@Sleon4 Sleon4 deleted the dependabot/maintenance-bc76dceac5 branch April 14, 2026 19:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Sleon4 Sleon4 Sleon4 approved these changes

Assignees

No one assigned

Labels

dependencies Project dependencies are updated php Pull requests that update php code

Projects

None yet

Milestone

Support and maintenance

Development

Successfully merging this pull request may close these issues.

1 participant

@Sleon4