Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github May 12, 2025

Updates the requirements on squizlabs/php_codesniffer to permit the latest version.
Updates squizlabs/php_codesniffer to 3.13.0

Release notes

Sourced from squizlabs/php_codesniffer's releases.

3.13.0 - 2025-05-11

Added

  • Added support for PHP 8.4 asymmetric visibility modifiers to the tokenizer. #871
  • Added support for PHP 8.4 final properties to the following sniffs:

Changed

  • Generic.WhiteSpace.LanguageConstructSpacing: will now also check the spacing after the goto language construct keyword. #917
  • The PSR2.Classes.PropertyDeclaration will now check that the final modifier keyword is placed before a visibility keyword. #950
  • Improved Help information about the --reports CLI flag. #1078
  • The documentation for the following sniffs has been improved:
    • PSR1.Files.SideEffects
    • PSR2.ControlStructures.SwitchDeclaration
    • PSR2.Namespaces.NamespaceDeclaration
    • Thanks to Rodrigo Primo for the patches.
  • Various housekeeping, including improvements to the tests and documentation.

Deprecated

  • Nearly everything which was soft deprecated before is now hard deprecated and will show deprecation notices:
    • This applies to:
      • All sniffs which will be removed in 4.0. #888
      • The deprecated Generator methods. #889
      • The old array property setting format (via comma separated strings). #890
      • Sniffs not implementing the PHP_CodeSniffer\Sniffs\Sniff interface. #891
      • Sniffs not following the naming conventions. #892
      • Standards called Internal. #893
      • Sniffs which don't listen for PHP, like JS/CSS specific sniffs. #894
    • The deprecation notices can be silenced by using the -q (=quiet) CLI flag.
    • Thanks to Juliette Reinders Folmer for the patches.

Fixed

  • Fixed bug #1040 : Generic.Strings.UnnecessaryHeredoc - false positive for heredocs containing escape sequences.
  • Fixed bug #1040 : Generic.Strings.UnnecessaryHeredoc - fixer would not clean up escape sequences which aren't necessary in nowdocs.
  • Fixed bug #1048 : A file under scan would sometimes be updated with partial fixes, even though the file "failed to fix".

Other

Calling all testers!

The first beta release for PHP_CodeSniffer 4.0 has been tagged. Please help by testing the beta release and reporting any issues you run into.

... (truncated)

Changelog

Sourced from squizlabs/php_codesniffer's changelog.

[3.13.0] - 2025-05-11

Added

  • Added support for PHP 8.4 asymmetric visibility modifiers to the tokenizer. #871
  • Added support for PHP 8.4 final properties to the following sniffs:
    • PSR2.Classes.PropertyDeclaration #950
    • Thanks to [Juliette Reinders Folmer][@​jrfnl] for the patches.

Changed

  • Generic.WhiteSpace.LanguageConstructSpacing: will now also check the spacing after the goto language construct keyword. #917
    • Thanks to [Juliette Reinders Folmer][@​jrfnl] for the patch.
  • The PSR2.Classes.PropertyDeclaration will now check that the final modifier keyword is placed before a visibility keyword. #950
    • Errors will be reported via a new FinalAfterVisibility error code.
    • Thanks to [Juliette Reinders Folmer][@​jrfnl] for the patch.
  • Improved Help information about the --reports CLI flag. #1078
    • Thanks to [Juliette Reinders Folmer][@​jrfnl] for the patch.
  • The documentation for the following sniffs has been improved:
    • PSR1.Files.SideEffects
    • PSR2.ControlStructures.SwitchDeclaration
    • PSR2.Namespaces.NamespaceDeclaration
    • Thanks to [Rodrigo Primo][@​rodrigoprimo] for the patches.
  • Various housekeeping, including improvements to the tests and documentation.
    • Thanks to [Juliette Reinders Folmer][@​jrfnl] for their contributions.

Deprecated

  • Nearly everything which was soft deprecated before is now hard deprecated and will show deprecation notices:
    • This applies to:
      • All sniffs which will be removed in 4.0. #888
      • The deprecated Generator methods. #889
      • The old array property setting format (via comma separated strings). #890
      • Sniffs not implementing the PHP_CodeSniffer\Sniffs\Sniff interface. #891
      • Sniffs not following the naming conventions. #892
      • Standards called Internal. #893
      • Sniffs which don't listen for PHP, like JS/CSS specific sniffs. #894
    • The deprecation notices can be silenced by using the -q (=quiet) CLI flag.
    • Thanks to [Juliette Reinders Folmer][@​jrfnl] for the patches.

Fixed

  • Fixed bug #1040 : Generic.Strings.UnnecessaryHeredoc - false positive for heredocs containing escape sequences.
    • Thanks to [Juliette Reinders Folmer][@​jrfnl] for the patch.
  • Fixed bug #1040 : Generic.Strings.UnnecessaryHeredoc - fixer would not clean up escape sequences which aren't necessary in nowdocs.
    • Thanks to [Juliette Reinders Folmer][@​jrfnl] for the patch.
  • Fixed bug #1048 : A file under scan would sometimes be updated with partial fixes, even though the file "failed to fix".
    • Thanks to [Juliette Reinders Folmer][@​jrfnl] for the patch.

Other

Calling all testers!

... (truncated)

Commits
  • 65ff248 Merge pull request #1088 from PHPCSStandards/feature/changelog-3.13.0
  • f599fb2 Changelog for the 3.13.0 release
  • e09be25 PHP 8.4 | Add tokenizer support for asymmetric visibility (#871)
  • 4667299 Merge pull request #1078 from PHPCSStandards/feature/help-improve-report-desc...
  • 33cd903 Merge pull request #1077 from PHPCSStandards/feature/config-bug-report-file-v...
  • 2c044cc Help: improve information about requesting reports
  • 46c1d3e Config: bug fix - "reports" could get set incorrectly when in CBF mode
  • 726bbc1 Merge pull request #1076 from PHPCSStandards/feature/tests-should-pass-in-cbf...
  • 1100de7 GH Actions/tests: safeguard that tests pass in CBF mode
  • 7048ed4 DisplayCachedMessagesTest: allow for the tests to pass in CBF mode
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Updates the requirements on [squizlabs/php_codesniffer](https://github.com/PHPCSStandards/PHP_CodeSniffer) to permit the latest version.

Updates `squizlabs/php_codesniffer` to 3.13.0
- [Release notes](https://github.com/PHPCSStandards/PHP_CodeSniffer/releases)
- [Changelog](https://github.com/PHPCSStandards/PHP_CodeSniffer/blob/master/CHANGELOG.md)
- [Commits](PHPCSStandards/PHP_CodeSniffer@3.12.2...3.13.0)

---
updated-dependencies:
- dependency-name: squizlabs/php_codesniffer
  dependency-version: 3.13.0
  dependency-type: direct:development
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added composer For usage with dependabot and auto-merge actions. dependabot For usage with dependabot and auto-merge actions. dependencies For usage with dependabot and auto-merge actions. labels May 12, 2025
@github-actions github-actions bot merged commit 04dfcb3 into master May 12, 2025
2 of 10 checks passed
@dependabot dependabot bot deleted the dependabot/composer/dev-dependencies-b0880940d1 branch May 12, 2025 10:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

composer For usage with dependabot and auto-merge actions. dependabot For usage with dependabot and auto-merge actions. dependencies For usage with dependabot and auto-merge actions.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant