Update root-composer

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
dealerdirect/phpcodesniffer-composer-installer (source)	1.1.2 -> 1.2.0
slevomat/coding-standard	8.24.0 -> 8.25.0
squizlabs/php_codesniffer	4.0.0 -> 4.0.1

---

Release Notes

PHPCSStandards/composer-installer (dealerdirect/phpcodesniffer-composer-installer)

v1.2.0

Compare Source

Changed

• Various housekeeping, including improvements to the documentation and tests.

Removed

• Drop support for PHP_CodeSniffer 2.x. Thanks [@​jrfnl] ! #​261

slevomat/coding-standard (slevomat/coding-standard)

v8.25.0

Compare Source

🔧 Improvements

• SlevomatCodingStandard.Functions.RequireMultiLineCall: New option minParametersCount (thanks to @​parth391)
• SlevomatCodingStandard.Functions.RequireMultiLineCall: New option excludedCallPatterns (thanks to @​parth391)
• SlevomatCodingStandard.Classes.RequireMultiLineMethodSignature: New option withParametersWithAttributes
• SlevomatCodingStandard.PHP.UselessParentheses: Option enableCheckAroundNew is disabled if target PHP version is lower 8.4
• Support $this as a valid traversable parameter type (thanks to @​alies-dev)
• Fix typo in comment (thanks to @​vrana)
• Improved documentation (thanks to @​jrfnl)

🐛 Fixes

• SlevomatCodingStandard.Whitespaces.DuplicateSpaces: Fixed false positive
• SlevomatCodingStandard.Complexity.Cognitive: Fixed internal error for closures

PHPCSStandards/PHP_CodeSniffer (squizlabs/php_codesniffer)

v4.0.1: - 2025-11-10

Compare Source

This release includes all improvements and bugfixes from PHP_CodeSniffer 3.13.5.

Added

• Runtime support for PHP 8.5. All known PHP 8.5 deprecation notices have been fixed.
  • Syntax support for new PHP 8.5 features will follow in a future release.
  • If you find any PHP 8.5 deprecation notices which were missed, please report them.

Changed

• The Squiz.ControlStructures.SwitchDeclaration sniff will now flag a PHP close tag as a "wrong opener" and will auto-fix this by inserting a colon. #​1316
• Various housekeeping, including improvements to the tests and documentation.

Fixed

• 4.x regression #​1277: bring back whitespace tolerance in phpcs:ignore comma-separated rule reference lists.
  • Note: this bug did not affect phpcs:disable/phpcs:enable ignore annotations.
• Fixed bug #​968: Generic.WhiteSpace.ScopeIndent was reporting false positives - and making incorrect fixes - for lines following a line containing an arrow function.
  • Thanks to Soichi Sato for the patch.
• Fixed bug #​1216: Tokenizer/PHP: added more defensive coding to prevent PHP 8.5 "Using null as an array offset" deprecation notices.
  • Thanks to Andrew Lyons for the patch.
• Fixed bug #​1279: Tokenizer/PHP: on PHP < 8.0, an unclosed attribute (parse error) could end up removing some tokens from the token stream.
  • This could lead to false positives and false negative from sniffs, but could also lead to incorrect fixes being made mangling the file under scan.
• Fixed bug #​1315: Squiz.ControlStructures.SwitchDeclaration: a number of the fixers would get into fixer conflicts with each other if the code under scan contained multiple statements on a line within a switch.
  • The sniff will now forbid - and auto-fix - multiple statements on one line for case/default and "case breaking" statements.
• Fixed bug #​1316: Tokenizer/PHP: a PHP close tag after a switch case condition or after a default keyword, was not regarded as a "scope_opener" for the case/default body.
• Fixed bug #​1316: PSR2.ControlStructures.SwitchDeclaration: the WrongOpener error is now also auto-fixable if the wrong opener is a PHP close tag.
• Fixed bug #​1316: Squiz.PHP.NonExecutableCode would throw false positives when code within a switch control structure would move in and out of PHP.

---

New Contributors

The PHP_CodeSniffer project is happy to welcome the following new contributors:
@​andrewnicols, @​Soh1121

Statistics

Closed: 2 issues
Merged: 8 pull requests

Follow @​phpcs on Mastodon or @​PHP_CodeSniffer on X to stay informed.

Please consider funding the PHP_CodeSniffer project. If you already do so: thank you!

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.