Skip to content

build(deps): Bump coenjacobs/mozart from 1.0.6 to 1.2.1 in /vendor-bin/mozart#2881

Merged
github-actions[bot] merged 2 commits intomasterfrom
dependabot/composer/vendor-bin/mozart/coenjacobs/mozart-1.2.1
Mar 28, 2026
Merged

build(deps): Bump coenjacobs/mozart from 1.0.6 to 1.2.1 in /vendor-bin/mozart#2881
github-actions[bot] merged 2 commits intomasterfrom
dependabot/composer/vendor-bin/mozart/coenjacobs/mozart-1.2.1

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Mar 28, 2026

Bumps coenjacobs/mozart from 1.0.6 to 1.2.1.

Release notes

Sourced from coenjacobs/mozart's releases.

Release 1.2.1

What's Changed

  • BACKPORT: Fix symlinks in vendor packages causing UnableToListContents failure by @​coenjacobs in #373

Full Changelog: coenjacobs/mozart@1.2.0...1.2.1

Docker Images

This release includes Docker images for multiple architectures (linux/amd64, linux/arm64, linux/arm/v7).

Pull from Docker Hub

docker pull coenjacobs/mozart:1.2.1

Pull from GitHub Container Registry

docker pull ghcr.io/coenjacobs/mozart:1.2.1

Available Tags

  • 1.2.1 - This release

  • latest - Latest stable version (if this is the highest version)

Links

Release 1.2.0

Mozart 1.2.0 is a major feature release. 🎉 The headline: Mozart now works with zero configuration — just run mozart compose and it handles the rest. This release also adds global-scope constant and function prefixing and automatic autoloader generation.

New features

  • Zero configuration — Running mozart compose is now the only opt-in required. All six settings have sensible defaults, inferred from your project's composer.json. Existing extra.mozart blocks continue to work unchanged. A new mozart config command lets you inspect the resolved configuration and where each value came from. #316
  • Autoloader generation — Mozart now generates a Composer-compatible autoloader file covering PSR-4, classmap, and files entries for all processed dependencies. This is enabled by default (generate_autoloader: true) and replaces the need to manually configure your project's composer.json autoload section. See usage docs. #315
  • Global-scope constant prefixing — Constants declared with const or define() at global scope are now prefixed with constant_prefix (defaults to an uppercased version of classmap_prefix). References via constant(), defined(), and bare constant fetches are updated throughout the codebase. #308
  • Global-scope function prefixing — Functions declared at global scope are now prefixed with functions_prefix (defaults to a lowercased version of classmap_prefix). References via function_exists() and direct function calls are updated accordingly. #308
  • PHP built-in symbol protection — Mozart ships a database of PHP built-in symbols (PHP 7.4–8.5) and skips them during renaming. Polyfill packages like symfony/polyfill-php80 are no longer broken by having their declarations prefixed. #306

Improvements

  • Namespaced define() calls routed correctlydefine() inside a namespace block is now handled by the namespace replacer instead of being incorrectly prefixed with constant_prefix. #353
  • Files autoloader basename collision — Global-scope files with the same basename but in different directories are no longer flattened to the same target path. #351
  • NameVisitor routes by symbol type — Class, constant, and function references are now matched against their respective maps, preventing cross-type collisions. #363
  • Case-insensitive symbol lookups — Class and function name matching is now case-insensitive (as PHP itself is), while constant matching remains case-sensitive. #314
  • Parent replacer propagation for files autoloaders — Namespaced files autoloader entries in parent packages now receive constant and function renames from child packages. #365, #367
  • Generated autoloader hardening — Fixed file identifier collisions, Windows path separators in $baseDir, and absolute classmap paths. #362
  • Boolean config values detected correctlydelete_vendor_directories: false and generate_autoloader: false are now properly distinguished from "not set" when reporting config sources. #323
  • Parent replacer early return — Fixed replaceParentPackage() exiting after the first autoloader combination instead of processing all of them. #288

... (truncated)

Commits
  • da0c859 Merge pull request #373 from coenjacobs/backport/issue-371-release-1.2
  • cff65c2 Add tests for isDirectoryEmpty with symlinks
  • 5e068c5 Fix symlinks in vendor packages causing UnableToListContents failure
  • a2a6aef This branch is now 1.2.1 development branch
  • 5c37bd4 Merge pull request #369 from coenjacobs/docs-update
  • c6282b7 Update remaining PHP 8.1 references to 8.2 in testing and docker docs
  • 27707cd Update phpcs testVersion to match PHP 8.2 minimum
  • d1e40a2 Update docs for 1.2.0 release
  • 884e48d Bump PHP requirement in README.md
  • d55ee92 Merge pull request #368 from coenjacobs/update-dependencies
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot Bot added 3. to review dependencies Pull requests that update a dependency file labels Mar 28, 2026
@dependabot dependabot Bot requested a review from nickvergessen as a code owner March 28, 2026 02:03
@dependabot dependabot Bot added 3. to review dependencies Pull requests that update a dependency file labels Mar 28, 2026
@github-actions github-actions Bot enabled auto-merge March 28, 2026 02:15
Copy link
Copy Markdown
Member

@nickvergessen nickvergessen left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Currently breaks

dependabot Bot and others added 2 commits March 28, 2026 22:36
Bumps [coenjacobs/mozart](https://github.com/coenjacobs/mozart) from 1.0.6 to 1.2.1.
- [Release notes](https://github.com/coenjacobs/mozart/releases)
- [Commits](coenjacobs/mozart@1.0.6...1.2.1)

---
updated-dependencies:
- dependency-name: coenjacobs/mozart
  dependency-version: 1.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Joas Schilling <coding@schilljs.com>
@nickvergessen nickvergessen force-pushed the dependabot/composer/vendor-bin/mozart/coenjacobs/mozart-1.2.1 branch from 58f97a0 to 5a4aa01 Compare March 28, 2026 21:40
@github-actions github-actions Bot merged commit b3a9cfd into master Mar 28, 2026
47 checks passed
@github-actions github-actions Bot deleted the dependabot/composer/vendor-bin/mozart/coenjacobs/mozart-1.2.1 branch March 28, 2026 21:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3. to review dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant