Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

composer(deps-dev): bump the minor-patch-dependencies group with 5 updates #103

Merged

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 19, 2024

Updates the requirements on laminas/laminas-modulemanager, mimmi20/coding-standard, phpstan/phpstan, symplify/phpstan-rules and tomasvotruba/type-coverage to permit the latest version.
Updates laminas/laminas-modulemanager to 2.16.0

Release notes

Sourced from laminas/laminas-modulemanager's releases.

2.16.0

Release Notes for 2.16.0

Feature release (minor)

2.16.0

  • Total issues resolved: 0
  • Total pull requests resolved: 1
  • Total contributors: 1

Enhancement

Commits
  • 8df7b23 Merge pull request #51 from slknijnenburg/2.16.x
  • 3a51ab2 Lock file maintenance
  • 2b68754 Address Psalm issues after update
  • fb17b47 Update lock-file for psalm/plugin-phpunit update
  • 2b4b13f Update all non-major dependencies
  • 81c2192 Lock file maintenance
  • See full diff in compare view

Updates mimmi20/coding-standard to 5.2.35

Commits
  • b9b83e4 Merge pull request #521 from mimmi20/renovate/all-minor-patch-dependencies
  • 442b99b Update dependency friendsofphp/php-cs-fixer to ^3.59.3
  • 18b6c03 Merge pull request #520 from mimmi20/updates
  • c497061 update docblock
  • 3c15d3f add new stub
  • 4d2a07c add new stub
  • fd4b6fc Merge pull request #513 from mimmi20/renovate/all-minor-patch-dependencies
  • fd9d326 Merge pull request #519 from mimmi20/dependabot/composer/master/friendsofphp/...
  • 1b765e4 Update all non-major dependencies
  • 01afc7c composer(deps): update friendsofphp/php-cs-fixer requirement
  • Additional commits viewable in compare view

Updates phpstan/phpstan to 1.11.5

Release notes

Sourced from phpstan/phpstan's releases.

1.11.5

Bleeding edge 🔪

If you want to see the shape of things to come and adopt bleeding edge features early, you can include this config file in your project's phpstan.neon:

includes:
	- vendor/phpstan/phpstan/conf/bleedingEdge.neon

Of course, there are no backwards compatibility guarantees when you include this file. The behaviour and reported errors can change in minor versions with this file included. Learn more

Improvements 🔧

Bugfixes 🐛

Function signature fixes 🤖

Internals 🔍

... (truncated)

Commits
  • 490f0ae PHPStan 1.11.5
  • 2546955 Update errors identifiers
  • 01e5828 Updated PHPStan to commit 01e5828ef4dd581732c087c3524073c469173069
  • 7d9800c Updated PHPStan to commit 7d9800c2241344556731eb7f17fd6b8564dba43c
  • 71534f1 Fix
  • 98476c3 Update result-cache.md
  • 1cb07bd Update errors identifiers
  • 108277a Updated PHPStan to commit 108277a6348de38eaaeb6a5bdb89f83dd775fc9c
  • 1711429 Updated PHPStan to commit 1711429c1ba2b30ce63ae6f8eff763758accc4c1
  • c45cade Bump braces from 3.0.2 to 3.0.3 in /website
  • Additional commits viewable in compare view

Updates symplify/phpstan-rules to 13.0.0

Release notes

Sourced from symplify/phpstan-rules's releases.

13.0.0

Added Rules 🥳

What's Changed 🔨

Removed 💀

Few rules seemed like too pedantic in practice, I always ignored them in most projects. Time to let go to make this set more practical:

Full Changelog: symplify/phpstan-rules@12.5.0...13.0.0

Commits

Updates tomasvotruba/type-coverage to 0.3.1

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…dates

Updates the requirements on [laminas/laminas-modulemanager](https://github.com/laminas/laminas-modulemanager), [mimmi20/coding-standard](https://github.com/mimmi20/coding-standard), [phpstan/phpstan](https://github.com/phpstan/phpstan), [symplify/phpstan-rules](https://github.com/symplify/phpstan-rules) and [tomasvotruba/type-coverage](https://github.com/TomasVotruba/type-coverage) to permit the latest version.

Updates `laminas/laminas-modulemanager` to 2.16.0
- [Release notes](https://github.com/laminas/laminas-modulemanager/releases)
- [Commits](laminas/laminas-modulemanager@2.15.0...2.16.0)

Updates `mimmi20/coding-standard` to 5.2.35
- [Release notes](https://github.com/mimmi20/coding-standard/releases)
- [Commits](mimmi20/coding-standard@5.2.33...5.2.35)

Updates `phpstan/phpstan` to 1.11.5
- [Release notes](https://github.com/phpstan/phpstan/releases)
- [Changelog](https://github.com/phpstan/phpstan/blob/1.11.x/CHANGELOG.md)
- [Commits](phpstan/phpstan@1.11.4...1.11.5)

Updates `symplify/phpstan-rules` to 13.0.0
- [Release notes](https://github.com/symplify/phpstan-rules/releases)
- [Commits](symplify/phpstan-rules@12.7.0...13.0.0)

Updates `tomasvotruba/type-coverage` to 0.3.1
- [Commits](TomasVotruba/type-coverage@0.3.0...0.3.1)

---
updated-dependencies:
- dependency-name: laminas/laminas-modulemanager
  dependency-type: direct:development
  dependency-group: minor-patch-dependencies
- dependency-name: mimmi20/coding-standard
  dependency-type: direct:development
  dependency-group: minor-patch-dependencies
- dependency-name: phpstan/phpstan
  dependency-type: direct:development
  dependency-group: minor-patch-dependencies
- dependency-name: symplify/phpstan-rules
  dependency-type: direct:development
  dependency-group: minor-patch-dependencies
- dependency-name: tomasvotruba/type-coverage
  dependency-type: direct:development
  dependency-group: minor-patch-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested a review from mimmi20 as a code owner June 19, 2024 02:20
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jun 19, 2024
Copy link

github-actions bot commented Jun 19, 2024

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
actions/actions/setup-node 4.*.* 🟢 5.4
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained⚠️ 01 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases⚠️ -1no releases found
Binary-Artifacts🟢 9binaries present in source code
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Security-Policy🟢 9security policy file detected
SAST🟢 10SAST tool is run on all commits
Vulnerabilities🟢 46 existing vulnerabilities detected

Scanned Manifest Files

.github/workflows/lint-workflow-files.yml
  • actions/setup-node@4.*.*
composer.json
  • laminas/laminas-modulemanager@>= 2.16.0, < 3.0.0
  • mimmi20/coding-standard@>= 5.2.35, < 6.0.0
  • phpstan/phpstan@>= 1.11.5, < 2.0.0
  • rector/type-perfect@>= 0.1.6, < 0.2.0
  • symplify/phpstan-rules@>= 13.0.0, < 14.0.0
  • tomasvotruba/type-coverage@>= 0.3.1, < 0.4.0
  • laminas/laminas-modulemanager@>= 2.15.0, < 3.0.0
  • mimmi20/coding-standard@>= 5.2.33, < 6.0.0
  • phpstan/phpstan@>= 1.11.4, < 2.0.0
  • symplify/phpstan-rules@>= 12.7.0, < 13.0.0
  • tomasvotruba/type-coverage@>= 0.3.0, < 0.4.0

Copy link

codeclimate bot commented Jun 20, 2024

Code Climate has analyzed commit 5cda10f and detected 0 issues on this pull request.

The test coverage on the diff in this pull request is 100.0% (50% is the threshold).

This pull request will bring the total coverage in the repository to 100.0% (0.0% change).

View more on Code Climate.

@mimmi20 mimmi20 merged commit b101ac2 into master Jun 20, 2024
77 checks passed
@mimmi20 mimmi20 deleted the dependabot/composer/master/minor-patch-dependencies-a01a31dce3 branch June 20, 2024 11:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant