Skip to content

chore(deps): bump the composer-version-updates group across 1 directory with 8 updates - #87

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/composer/composer-version-updates-ccdd3310e5
Open

chore(deps): bump the composer-version-updates group across 1 directory with 8 updates#87
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/composer/composer-version-updates-ccdd3310e5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 23, 2026

Copy link
Copy Markdown
Contributor

Bumps the composer-version-updates group with 7 updates in the / directory:

Package From To
firebase/php-jwt 7.0.0 7.1.0
friendsofphp/php-cs-fixer 3.92.3 3.95.15
haydenpierce/class-finder 0.5.3 0.6.0
testcontainers/testcontainers 1.0.3 1.0.10
vlucas/phpdotenv 5.6.2 5.6.4
rector/rector 2.2.14 2.5.7
icanhazstring/composer-unused 0.9.5 0.9.6

Updates firebase/php-jwt from 7.0.0 to 7.1.0

Release notes

Sourced from firebase/php-jwt's releases.

v7.1.0

7.1.0 (2026-06-11)

Features

Bug Fixes

  • Skip parsing valid unsupported curves (#638) (8a6c2a7)
  • Update homepage URL in composer.json (#635) (f7ae571)
  • Validate numeric type of iat, nbf and exp claims in encode (#634) (958e422)

v7.0.5

7.0.5 (2026-03-31)

Bug Fixes

  • RSA from JWK sometimes returns empty Instance (#628) (b4c78aa)

v7.0.4

7.0.4 (2026-03-27)

Bug Fixes

  • readme examples, add tests for all examples (#626) (510a00c)
  • use urlsafeB64Decode everywhere (#627) (b889495)

v7.0.3

7.0.3 (2026-02-18)

Miscellaneous Chores

  • add environment for Release Please job (#619) (300fd02)

v7.0.2

7.0.2 (2025-12-16)

Bug Fixes

  • add key length validation for ec keys (#615) (7044f9a)

v7.0.1

Bug Fixes

... (truncated)

Changelog

Sourced from firebase/php-jwt's changelog.

7.1.0 (2026-06-11)

Features

Bug Fixes

  • Skip parsing valid unsupported curves (#638) (8a6c2a7)
  • Update homepage URL in composer.json (#635) (f7ae571)
  • Validate numeric type of iat, nbf and exp claims in encode (#634) (958e422)

7.0.5 (2026-03-31)

Bug Fixes

  • RSA from JWK sometimes returns empty Instance (#628) (b4c78aa)

7.0.4 (2026-03-27)

Bug Fixes

  • readme examples, add tests for all examples (#626) (510a00c)
  • use urlsafeB64Decode everywhere (#627) (b889495)

7.0.3 (2026-02-18)

Miscellaneous Chores

  • add environment for Release Please job (#619) (300fd02)

7.0.2 (2025-12-16)

Bug Fixes

  • add key length validation for ec keys (#615) (7044f9a)
Commits

Updates friendsofphp/php-cs-fixer from 3.92.3 to 3.95.15

Release notes

Sourced from friendsofphp/php-cs-fixer's releases.

v3.95.15 Adalbertus

What's Changed

Full Changelog: PHP-CS-Fixer/PHP-CS-Fixer@v3.95.14...v3.95.15

v3.95.14 Adalbertus

What's Changed

Full Changelog: PHP-CS-Fixer/PHP-CS-Fixer@v3.95.13...v3.95.14

v3.95.13 Adalbertus

What's Changed

Full Changelog: PHP-CS-Fixer/PHP-CS-Fixer@v3.95.12...v3.95.13

v3.95.12 Adalbertus

What's Changed

Full Changelog: PHP-CS-Fixer/PHP-CS-Fixer@v3.95.11...v3.95.12

v3.95.11 Adalbertus

What's Changed

... (truncated)

Changelog

Sourced from friendsofphp/php-cs-fixer's changelog.

Changelog for v3.95.15

  • fix: self-update - fix "Access Denied" error when running on Windows (#9731)

Changelog for v3.95.14

  • fix: ClassAttributesSeparationFixer - handle property with hooks as last class element (#9724)
  • fix: SingleClassElementPerStatementFixer - do not break PHP syntax when splitting properties with disjunctive normal form type (#9723)
  • fix: TrailingCommaInMultilineFixer - do not add trailing comma after first-class callable (#9722)
  • chore: add code coverage ignore annotations to parallel runner and worker (#9721)
  • chore: cleanup FunctionToConstantFixer (#9719)
  • test: HeaderCommentFixerTest - improve invalid configuration types (#9728)
  • test: ClassDefinitionFixerTest - improve PHPDocs (#9726)
  • test: ConfigurationResolverTest - fix types (#9725)
  • test: GeneralAttributeRemoveFixerTest - improve data provider types (#9727)
  • test: ProjectCodeTest - improve PHPDocs (#9730)
  • deps: allow to run PHPUnit v12 directly for project, without future-ready CI workarounds (#9580)
  • deps: bump shipmonk/dead-code-detector from 1.3.0 to 1.3.1 in /dev-tools in the shipmonk group across 1 directory (#9718)
  • deps: bump the phpstan group in /dev-tools with 2 updates (#9717)

Changelog for v3.95.13

  • fix: SelfAccessorFixer - do not replace constant with same name as class in the middle of a static access chain (#9716)
  • fix: SingleClassElementPerStatementFixer - do not drop type of typed constants (#9706)

Changelog for v3.95.12

  • fix: BinaryOperatorSpacesFixer - do not align nested array in yield with following yields (#9708)
  • chore: cleanup RuleSetDocumentationGenerator (#9705)
  • chore: unblock self-approval (#9699)
  • deps: bump crate-ci/typos from 1.47.2 to 1.48.0 in /.github/workflows in the all group across 1 directory (#9712)
  • deps: bump shipmonk/dead-code-detector from 1.2.1 to 1.3.0 in /dev-tools in the shipmonk group across 1 directory (#9711)
  • deps: bump the all group across 2 directories with 1 update (#9704)
  • deps: bump the phpstan group in /dev-tools with 2 updates (#9710)
  • deps: PHPUnit - PHP 8.6 compat changes (#9714)

Changelog for v3.95.11

  • fix: NoBreakCommentFixer - handle enum cases, TokensAnalyzer::isEnumCase - fix handling nested switch-cases (#9565)
  • deps: bump actions/checkout from 6 to 7 in /.github/workflows in the all group across 1 directory (#9694)
  • deps: bump dev deps (#9702)
  • deps: bump phpstan/phpstan-symfony from 2.0.19 to 2.0.20 in /dev-tools in the phpstan group (#9693)
  • test: use correct test precondition failure mode in PharTest (#9700)

Changelog for v3.95.10

... (truncated)

Commits
  • 3e47e5d prepared the 3.95.15 release
  • 5eeae8d fix: self-update - fix "Access Denied" error when running on Windows (#9731)
  • 8153d49 bumped version
  • beee274 prepared the 3.95.14 release
  • 4b1d95d deps: allow to run PHPUnit v12 directly for project, without future-ready CI ...
  • 4796020 test: ProjectCodeTest - improve PHPDocs (#9730)
  • e8af9ca fix: SingleClassElementPerStatementFixer - do not break PHP syntax when spl...
  • b858858 fix: ClassAttributesSeparationFixer - handle property with hooks as last cl...
  • 6a461b9 fix: TrailingCommaInMultilineFixer - do not add trailing comma after first-...
  • 177aa71 test: HeaderCommentFixerTest - improve invalid configuration types (#9728)
  • Additional commits viewable in compare view

Updates haydenpierce/class-finder from 0.5.3 to 0.6.0

Commits
  • b9e7859 Edit composer.json
  • 9ea1afd Update version and changelog
  • edd5071 Merge branch 'cache-namespace-tree' into 'master'
  • a4bd343 Edit composer.json
  • 8a39a5b Precompute direct namespace on ClassmapEntry construction
  • ab24b80 Resolve direct subnamespaces lazily on first access
  • 02905ce Cache PSR4 namespaces and classmap entries per app root
  • a50751e Update 2 files
  • 730d0c2 Merge branch 'allow-emojis-in-paths' into 'master'
  • 53e6568 Allow emojis in paths
  • See full diff in compare view

Updates testcontainers/testcontainers from 1.0.3 to 1.0.10

Release notes

Sourced from testcontainers/testcontainers's releases.

1.0.10

What's Changed

Full Changelog: testcontainers/testcontainers-php@1.0.9...1.0.10

1.0.9

What's Changed

New Contributors

Full Changelog: testcontainers/testcontainers-php@1.0.8...1.0.9

1.0.8

What's Changed

New Contributors

Full Changelog: testcontainers/testcontainers-php@1.0.7...1.0.8

1.0.7

What's Changed

New Contributors

Full Changelog: testcontainers/testcontainers-php@1.0.6...1.0.7

1.0.6

What's Changed

Full Changelog: testcontainers/testcontainers-php@1.0.5...1.0.6

1.0.5

What's Changed

... (truncated)

Commits
  • 9c56186 Merge pull request #70 from nightio/copy-order-change
  • 087641a Copy files before starting container
  • 75bca05 Merge pull request #69 from testcontainers/feat/user-agent-header
  • d2f2691 test: replace assert() with explicit guards; remove duplicate test
  • f69bfff test: refactor DockerContainerClient for testability; fix false-positive tests
  • 1c35d1a test: fix structurally unsound unit tests to exercise production code paths
  • 679cb52 test: add unit tests for DockerContainerClient User-Agent header
  • c00e6f8 fix: handle OutOfBoundsException, declare php-http/client-common, strip build...
  • 8528b06 feat: set tc-php/<version> User-Agent header for Docker API requests
  • b376be3 Merge pull request #68 from testcontainers/feat/canonical-language-list
  • Additional commits viewable in compare view

Updates vlucas/phpdotenv from 5.6.2 to 5.6.4

Release notes

Sourced from vlucas/phpdotenv's releases.

V5.6.3 (27/12/2025)

We announce the immediate availability V5.6.3.

Changes

  • Add official support for PHP 8.5 (cd59ef0935168961aa100678fb61c8fd4d1044a0, 955e7815d677a3eaa7075231212f2110983adecc)
Commits

Updates rector/rector from 2.2.14 to 2.5.7

Release notes

Sourced from rector/rector's releases.

Released Rector 2.5.7

This release sharpens the PHPUnit code-quality sets, adds a focused narrow asserts set, deprecates two blurry Symfony web-test rules, and fixes a handful of docblock false-positives in dead-code removal.

New Features 🎉

PHPUnit: PHPUNIT_NARROW_ASSERTS set

A new set focused on narrowing broad asserts to their specific, more descriptive method — e.g. assertTrue(isset($a['b']))assertArrayHasKey('b', $a). ([rector-phpunit #716])

use Rector\PHPUnit\Set\PHPUnitSetList;
return RectorConfig::configure()
->withSets([PHPUnitSetList::PHPUNIT_NARROW_ASSERTS]);

withPreparedSets() gains phpunitNarrowAsserts + phpunitMockToStub

The 2 PHPUnit sets are now toggleable like any other prepared set. (#8178)

return RectorConfig::configure()
    ->withPreparedSets(
        phpunitNarrowAsserts: true,
        phpunitMockToStub: true,
    );

PHPUnit: flip with($this->callback(...)) on void methods to willReturnCallback()

VoidMethodWithCallbackToWillReturnCallbackRector (renamed + refocused) drops the pointless return value and types the closure as void, matching the mocked void method. ([rector-phpunit #724])

 $this->createMock(SomeClass::class)
     ->method('run')
-    ->with($this->callback(function ($arg) {
-        echo $arg;
-
-        return true;
-    }));
+    ->willReturnCallback(function ($arg): void {
+        echo $arg;
+    });

... (truncated)

Commits
  • ba22f8c Rector 2.5.7
  • 1109537 Updated Rector to commit 653ec233fa55057fb11a6c133ed5c8d57dec9ff2
  • e363554 Updated Rector to commit 3c481b689cd746323dfad98782cd7939f28035e4
  • fb62051 Updated Rector to commit 3c481b689cd746323dfad98782cd7939f28035e4
  • 561c81c Updated Rector to commit 51d61737c5fbaed10c5f711bbc8074720452417e
  • 9f3ea3a Updated Rector to commit e713102f40682bc65311d3a50e5490e6acc452f3
  • 78b5c28 Updated Rector to commit 306b852af3e4d0045034a6865bffe311ccdf38c9
  • 4bb232c Updated Rector to commit 0e269a0d17470ec8331efb518efcfd5fa6e7162d
  • eab289b Updated Rector to commit cc1a748e25adb989f2cf42f0329792810d79d216
  • 4ebe4bc Updated Rector to commit ed944a11e6e3a83bac0f9e1f4a413bcc7153fca7
  • Additional commits viewable in compare view

Updates phpstan/phpstan from 2.1.33 to 2.2.5

Commits

Updates icanhazstring/composer-unused from 0.9.5 to 0.9.6

Release notes

Sourced from icanhazstring/composer-unused's releases.

0.9.6

What's Changed

New Contributors

Full Changelog: composer-unused/composer-unused@0.9.5...0.9.6

Commits
  • c60030a Up CI to php 8.5
  • 8e07d4e chore: Drop composer.lock
  • 2ff3811 Symfony 8 support
  • 2e01ef8 github-actions(deps): bump the dependencies group across 1 directory with 3 u...
  • b904f88 Use major version tag for shivammathur/setup-php action
  • ba9f5f1 build(deps-dev): bump paragonie/sodium_compat in /vendor-bin/box
  • 0c3595a build(deps-dev): bump symfony/process in /vendor-bin/box
  • 00e1918 composer(deps-dev): bump the dependencies group across 1 directory with 4 upd...
  • 4b55573 Add support for webmozart/assert 2.0
  • 6283924 composer(deps-dev): bump the dependencies group across 1 directory with 4 upd...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ry with 8 updates

Bumps the composer-version-updates group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [firebase/php-jwt](https://github.com/firebase/php-jwt) | `7.0.0` | `7.1.0` |
| [friendsofphp/php-cs-fixer](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer) | `3.92.3` | `3.95.15` |
| [haydenpierce/class-finder](https://gitlab.com/hpierce1102/ClassFinder) | `0.5.3` | `0.6.0` |
| [testcontainers/testcontainers](https://github.com/testcontainers/testcontainers-php) | `1.0.3` | `1.0.10` |
| [vlucas/phpdotenv](https://github.com/vlucas/phpdotenv) | `5.6.2` | `5.6.4` |
| [rector/rector](https://github.com/rectorphp/rector) | `2.2.14` | `2.5.7` |
| [icanhazstring/composer-unused](https://github.com/composer-unused/composer-unused) | `0.9.5` | `0.9.6` |



Updates `firebase/php-jwt` from 7.0.0 to 7.1.0
- [Release notes](https://github.com/firebase/php-jwt/releases)
- [Changelog](https://github.com/googleapis/php-jwt/blob/main/CHANGELOG.md)
- [Commits](googleapis/php-jwt@v7.0.0...v7.1.0)

Updates `friendsofphp/php-cs-fixer` from 3.92.3 to 3.95.15
- [Release notes](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/releases)
- [Changelog](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/blob/master/CHANGELOG.md)
- [Commits](PHP-CS-Fixer/PHP-CS-Fixer@v3.92.3...v3.95.15)

Updates `haydenpierce/class-finder` from 0.5.3 to 0.6.0
- [Commits](https://gitlab.com/hpierce1102/ClassFinder/compare/0.5.3...0.6.0)

Updates `testcontainers/testcontainers` from 1.0.3 to 1.0.10
- [Release notes](https://github.com/testcontainers/testcontainers-php/releases)
- [Commits](testcontainers/testcontainers-php@1.0.3...1.0.10)

Updates `vlucas/phpdotenv` from 5.6.2 to 5.6.4
- [Release notes](https://github.com/vlucas/phpdotenv/releases)
- [Commits](vlucas/phpdotenv@v5.6.2...v5.6.4)

Updates `rector/rector` from 2.2.14 to 2.5.7
- [Release notes](https://github.com/rectorphp/rector/releases)
- [Commits](rectorphp/rector@2.2.14...2.5.7)

Updates `phpstan/phpstan` from 2.1.33 to 2.2.5
- [Commits](https://github.com/phpstan/phpstan-phar-composer-source/commits)

Updates `icanhazstring/composer-unused` from 0.9.5 to 0.9.6
- [Release notes](https://github.com/composer-unused/composer-unused/releases)
- [Changelog](https://github.com/composer-unused/composer-unused/blob/main/CHANGELOG.md)
- [Commits](composer-unused/composer-unused@0.9.5...0.9.6)

---
updated-dependencies:
- dependency-name: firebase/php-jwt
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: composer-version-updates
- dependency-name: friendsofphp/php-cs-fixer
  dependency-version: 3.95.15
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: composer-version-updates
- dependency-name: haydenpierce/class-finder
  dependency-version: 0.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: composer-version-updates
- dependency-name: testcontainers/testcontainers
  dependency-version: 1.0.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: composer-version-updates
- dependency-name: vlucas/phpdotenv
  dependency-version: 5.6.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: composer-version-updates
- dependency-name: rector/rector
  dependency-version: 2.5.7
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: composer-version-updates
- dependency-name: phpstan/phpstan
  dependency-version: 2.2.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: composer-version-updates
- dependency-name: icanhazstring/composer-unused
  dependency-version: 0.9.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: composer-version-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update PHP code labels Jul 23, 2026
@github-actions

Copy link
Copy Markdown
Contributor

Qodana for PHP

13 new problems were found

Inspection name Severity Problems
Check the PHP source code coverage 🔶 Warning 4
Unhandled exception ◽️ Notice 9
@@ Code coverage @@
+ 87% total lines covered
314 lines analyzed, 275 lines covered
# Calculated according to the filters of your coverage tool

💡 Qodana analysis was run in the pull request mode: only the changed files were checked
☁️ View the detailed Qodana report

Contact Qodana team

Contact us at qodana-support@jetbrains.com

@dependabot @github

dependabot Bot commented on behalf of github Aug 6, 2026

Copy link
Copy Markdown
Contributor Author

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file php Pull requests that update PHP code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants