Skip to content

chore(deps): update all non-major dependencies

Reiter, Christoph requested to merge renovate/all-minor-patch into main

This MR contains the following updates:

Package Type Update Change
friendsofphp/php-cs-fixer require-dev patch 2.18.2 -> 2.18.6
guzzlehttp/guzzle (source) require minor 7.2.0 -> 7.3.0
nelmio/cors-bundle require patch 2.1.0 -> 2.1.1
phpstan/phpstan require-dev patch 0.12.80 -> 0.12.84
symfony/framework-bundle (source) require patch 4.4.20 -> 4.4.21
symfony/http-client (source) require-dev patch 4.4.20 -> 4.4.21
symfony/phpunit-bridge (source) require-dev patch 4.4.20 -> 4.4.21
symfony/security-bundle (source) require patch 4.4.20 -> 4.4.21
symfony/security-core (source) require patch 4.4.20 -> 4.4.21
symfony/yaml (source) require patch 4.4.20 -> 4.4.21
vimeo/psalm require-dev minor 4.6.2 -> 4.7.0
web-token/jwt-easy require patch 2.2.8 -> 2.2.10
web-token/jwt-signature-algorithm-rsa require patch 2.2.8 -> 2.2.10

Release Notes

FriendsOfPHP/PHP-CS-Fixer

v2.18.6

Compare Source

  • bug #​5586 Add support for nullsafe object operator ("?->") (kubawerlos)
  • bug #​5597 Tokens - fix for checking block edges (kubawerlos)
  • bug #​5604 Custom annotations @​type changed into @​var (Leprechaunz)
  • bug #​5606 DoctrineAnnotationBracesFixer false positive (Leprechaunz)
  • bug #​5610 BracesFixer - fix braces of match expression (Leprechaunz)
  • bug #​5615 GroupImportFixer severely broken (Leprechaunz)
  • bug #​5617 ClassAttributesSeparationFixer - fix for using visibility for class elements (kubawerlos)
  • bug #​5618 GroupImportFixer - fix removal of import type when mixing multiple types (Leprechaunz)
  • bug #​5622 Exclude Doctrine documents from final fixer (ossinkine)
  • bug #​5630 PhpdocTypesOrderFixer - handle complex keys (Leprechaunz)
  • minor #​5554 DX: use tmp file in sys_temp_dir for integration tests (keradus)
  • minor #​5564 DX: make integration tests matching entries in FixerFactoryTest (kubawerlos)
  • minor #​5603 DX: DocumentationGenerator - no need to re-configure Differ (keradus)
  • minor #​5612 DX: use ::class whenever possible (kubawerlos)
  • minor #​5619 DX: allow XDebugHandler v2 (keradus)
  • minor #​5623 DX: when displaying app version, don't put extra space if there is no CODENAME available (keradus)
  • minor #​5626 DX: update PHPStan and way of ignoring flickering PHPStan exception (keradus)
  • minor #​5629 DX: fix CiIntegrationTest (keradus)
  • minor #​5636 DX: remove 'create' method in internal classes (keradus)
  • minor #​5637 DX: do not calculate bitmap via helper anymore (keradus)
  • minor #​5639 Move fix reports (classes and schemas) (keradus)
  • minor #​5640 DX: use constants for PHPUnit version (keradus)
  • minor #​5646 Cleanup YodaStyleFixerTest (kubawerlos)

v2.18.5

Compare Source

  • bug #​5561 NoMixedEchoPrintFixer: fix for conditions without curly brackets (kubawerlos)
  • bug #​5563 Priority fix: SingleSpaceAfterConstructFixer must run before BracesFixer (kubawerlos)
  • bug #​5567 Fix order of BracesFixer and ClassDefinitionFixer (Daeroni)
  • bug #​5596 NullableTypeTransformer - fix for attributes (kubawerlos, jrmajor)
  • bug #​5598 GroupImportFixer - fix breaking code when fixing root classes (Leprechaunz)
  • minor #​5571 DX: add test to make sure SingleSpaceAfterConstructFixer runs before FunctionDeclarationFixer (kubawerlos)
  • minor #​5577 Extend priority test for "class_definition" vs "braces" (kubawerlos)
  • minor #​5585 DX: make doc examples prettier (kubawerlos)
  • minor #​5590 Docs: HeaderCommentFixer - document example how to remove header comment (keradus)
  • minor #​5602 DX: regenerate docs (keradus)

v2.18.4

Compare Source

  • bug #​4085 Priority: AlignMultilineComment should run before every PhpdocFixer (dmvdbrugge)
  • bug #​5421 PsrAutoloadingFixer - Fix PSR autoloading outside configured directory (kelunik, keradus)
  • bug #​5464 NativeFunctionInvocationFixer - PHP 8 attributes (HypeMC, keradus)
  • bug #​5548 NullableTypeDeclarationForDefaultNullValueFixer - fix handling promoted properties (jrmajor, keradus)
  • bug #​5550 TypeAlternationTransformer - fix for typed static properties (kubawerlos)
  • bug #​5551 ClassAttributesSeparationFixer - fix for properties with type alternation (kubawerlos, keradus)
  • bug #​5552 DX: test relation between function_declaration and method_argument_space (keradus)
  • minor #​5540 DX: RuleSet - convert null handling to soft-warning (keradus)
  • minor #​5545 DX: update checkbashisms (keradus)

v2.18.3

Compare Source

  • bug #​5484 NullableTypeDeclarationForDefaultNullValueFixer - handle mixed pseudotype (keradus)
  • minor #​5470 Disable CI fail-fast (mvorisek)
  • minor #​5491 Support php8 static return type for NoSuperfluousPhpdocTagsFixer (tigitz)
  • minor #​5494 BinaryOperatorSpacesFixer - extend examples (keradus)
  • minor #​5499 DX: add TODOs for PHP requirements cleanup (keradus)
  • minor #​5500 DX: Test that Transformers are adding only CustomTokens that they define and nothing else (keradus)
  • minor #​5507 Fix quoting in exception message (gquemener)
  • minor #​5514 DX: PHP 7.0 integration test - solve TODO for random_api_migration usage (keradus)
  • minor #​5515 DX: do not override getConfigurationDefinition (keradus)
  • minor #​5516 DX: AbstractDoctrineAnnotationFixer - no need for import aliases (keradus)
  • minor #​5518 DX: minor typing and validation fixes (keradus)
  • minor #​5522 Token - add handling json_encode crash (keradus)
  • minor #​5523 DX: EregToPregFixer - fix sorting (keradus)
  • minor #​5528 DX: code cleanup (keradus)
guzzle/guzzle

v7.3.0

Compare Source

Added
  • Support for DER and P12 certificates #​2413
  • Support the cURL (http://) scheme for StreamHandler proxies #​2850
  • Support for guzzlehttp/psr7:^2.0 #​2878
Fixed
  • Handle exceptions on invalid header consistently between PHP versions and handlers #​2872
nelmio/NelmioCorsBundle

v2.1.1

Compare Source

  • Fixed response for unauthorized headers containing a reflected XSS (#​163)
phpstan/phpstan

v0.12.84

Compare Source

Major new feature 🚀

Local type aliases

Thanks to @​jiripudil and his MR phpstan/phpstan-src#​460, you can now enjoy @phpstan-type and @phpstan-import-type in class-level PHPDoc. See the documentation for more details.

Improvements 🔧

Bugfixes 🐛

Function signature fixes 🤖

v0.12.83

Compare Source

Improvements 🔧

Bleeding edge 🔪

If you want to see the shape of things to come and adopt bleeding edge features early, you can include this config file in your project's phpstan.neon:

includes:
	- vendor/phpstan/phpstan/conf/bleedingEdge.neon

Of course, there are no backwards compatibility guarantees when you include this file. The behaviour and reported errors can change in minor versions with this file included. Learn more

Bugfixes 🐛

Function signature fixes 🤖

v0.12.82

Compare Source

Improvements 🔧

Bugfixes 🐛

Function signature fixes 🤖

v0.12.81

Compare Source

Improvements 🔧

  • Support for running PHPStan without any arguments (phpstan/phpstan-src@469a8c3)
    • You can run PHPStan just by executing vendor/bin/phpstan, if you satisfy two conditions:
      • You have phpstan.neon (or phpstan.neon.dist) in your current working directory
      • This configuration file contains rule level parameter, and paths to analyse
  • Fix support for classes named after pseudotypes in PHPDocs (#​365), thanks @​stof!
    • This means that existing classes with names like Resource or Never are now correctly recognized in PHPDocs and have priority over PHP's resource type and PHPStan's never pseudotype
  • Understand noreturn in PHPDoc as NeverType (phpstan/phpstan-src@bce31f0)
  • Docker - support ARM architecture (#​4663)

Bugfixes 🐛

Function signature fixes 🤖

symfony/framework-bundle

v4.4.21

Compare Source

Changelog (https://github.com/symfony/framework-bundle/compare/v4.4.20...v4.4.21)

  • bug #​40178 Exclude unreadable files when executing About command (michaljusiega)
  • bug #​40398 : Fix method name compare in ResolveControllerNameSubscriber (glensc)
  • bug #​40373 Check if templating engine supports given view (fritzmg)
  • bug #​40313 Fix PropertyAccess definition when not in debug (PedroTroller)
symfony/http-client

v4.4.21

Compare Source

Changelog (https://github.com/symfony/http-client/compare/v4.4.20...v4.4.21)

  • bug #​40587 fix using stream_copy_to_stream() with responses cast to php streams (nicolas-grekas)
  • bug #​40538 remove using $http_response_header (nicolas-grekas)
symfony/phpunit-bridge

v4.4.21

Compare Source

Changelog (https://github.com/symfony/phpunit-bridge/compare/v4.4.20...v4.4.21)

  • bug #​40508 fix reporting deprecations from DebugClassLoader (nicolas-grekas)
  • bug #​40494 fix compat with symfony/debug (nicolas-grekas)
symfony/security-bundle

v4.4.21

Compare Source

Changelog (https://github.com/symfony/security-bundle/compare/v4.4.20...v4.4.21)

  • bug #​40537 Handle properly 'auto' option for remember me cookie security (fliespl)
symfony/security-core

v4.4.21

Compare Source

Changelog (https://github.com/symfony/security-core/compare/v4.4.20...v4.4.21)

  • bug #​40386 Backport psr/container 1.1/2.0 compatibility (derrabus)
symfony/yaml

v4.4.21

Compare Source

Changelog (https://github.com/symfony/yaml/compare/v4.4.20...v4.4.21)

  • no significant changes
vimeo/psalm

v4.7.0

Compare Source

Features

Better tracking of mixed issues

On level 1 Psalm now provides traces whenever mixed types occur in your code, to help you pinpoint where the mixed types were introduced. Here's an article that goes into more detail.

Some unused code is now a level 1 issue

Unused code detection breaks down into two main categories: function-scoped unused code (e.g. unused variables and unused closure params) and codebase-scoped (unused public methods, unused public properties).

Psalm has unused code detection for a long time, but it's always been opt-in. Now in version 4.7 all function-scoped unused code issues are emitted when using level 1, Psalm's strictest level.

This allows us to perform the aforementioned tracking of mixed types, because we're using the same underlying mechanism for both features. More importantly, it should also help you improve code quality, and avoid bugs.

Plugin hook for per-expression taint analysis

@​mortenson has added a plugin that allows you to add and remove taint flows (#​5398)

Error level XML autocompletion improvements

@​weirdan made the XML config level more specific, allowing the value to be autocompleted in IDEs that understand the .xsd (#​5476)

Add @psalm-ignore-var

Thanks to @​sj-i you can now tell Psalm to ignore an inline @var type annotation with a @psalm-ignore-var tag (#​5488)

Psalm level badges

If your project is open-source you can now show what Psalm level you use in a badge:

[![Psalm level](https://shepherd.dev/github/<username>/<repository>/level.svg?)](https://psalm.dev/)

This is the badge for Psalm's repository:

Psalm level

Make sure your build is sending appropriate data to Shepherd, the Psalm build data service:

vendor/bin/psalm --shepherd

Bugfixes

v4.6.4

Compare Source

IssueBuffer::finish had a small undocumented API change – that change is reverted here (#​5410).

Bugfixes:

v4.6.3

Compare Source

Features

Bugfixes

  • Improving handling of nested template types in class strings (#​5290)
  • Language Server Allow static methods to be autocompleted on instances (#​5210, #​5295)
  • Language Server Fix inferred type caching bug when editing neighbouring methods (#​5297)
  • Fix JSON reports containing UTF-8 strings – thanks @​danog (#​5300)
  • Improve callmap for gd functions in PHP 8 – thanks @​iluuu1994 (#​5271)
  • improvements to mysql_init and PDOStatement::fetchAll return type – thanks @​morozov (#​5306, #​5317)
  • WeakMap is now generic – thanks @​weirdan (#​5313)
  • Allow iterable coercion from a generic object (#​5310)
  • Fix an issue with method memoisation (#​5317)
  • Allow ReflectionParameter::getType() to return non-null if a ReflectionParameter::hasType() call returns true (#​5258)
  • Undefined variables can now be tracked in arrow functions – thanks @​weirdan (#​5343)
  • ImplicitToStringCast is now emitted in more places – thanks @​weirdan (#​5344)
  • variable usage in bool to int casts are now tracked – thanks @​weirdan (#​5349)
  • explode return type is improved – thanks @​weirdan (#​5350)
  • ceil just returns a float, thanks @​simPod (#​5355)
  • improved return type for min and max – thanks @​orklah
  • Psalm startup variables are now shielded from plugins that change global variables – thanks @​weirdan! (#​5366)
  • fixed integer overflow that could cause a Psalm crash – thanks @​orklah (#​5369)
  • @​orklah fixed a bug where Psalm would not accurately type the output of array_map when given a callable (#​5373)
  • prevented an edge-case where calling the constructor of a genericised class could poison Psalm's internal cache (b549989)
web-token/jwt-easy

v2.2.10

Compare Source

v2.2.9

Compare Source

web-token/jwt-signature-algorithm-rsa

v2.2.10

Compare Source

v2.2.9

Compare Source

Configuration

📅 Schedule: "before 3am on Monday" (UTC).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻️ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This MR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this MR, check this box.

This MR has been generated by Renovate Bot.

Edited by Reiter, Christoph

Merge request reports