Skip to content

Remove PHPCS packages and patterns related #2699

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
DMarinhoCodacy merged 5 commits into from
Jul 10, 2026
Merged

Remove PHPCS packages and patterns related #2699

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
2496706
Remove PHPCS packages and patterns related
DMarinhoCodacy Jul 10, 2026
3b8c47e
add mentions in index
DMarinhoCodacy Jul 10, 2026
d27ea7c
add new line
DMarinhoCodacy Jul 10, 2026
f28388d
improve copy
DMarinhoCodacy Jul 10, 2026
63567ae
remove typo
DMarinhoCodacy Jul 10, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
257 changes: 257 additions & 0 deletions docs/release-notes/cloud/cloud-2026-07-remove-codesniffer-packages.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,257 @@
---
rss_title: Codacy release notes RSS feed
rss_href: /feed_rss_created.xml
---

# PHP_CodeSniffer Upgrade and Legacy Package Deprecations – July 2026

Check failure on line 6 in docs/release-notes/cloud/cloud-2026-07-remove-codesniffer-packages.md

View workflow job for this annotation

GitHub Actions / vale 

[vale] reported by reviewdog 🐶
[Microsoft.Dashes] Remove the spaces around ' – '.

Raw Output:
{"message": "[Microsoft.Dashes] Remove the spaces around ' – '.", "location": {"path": "docs/release-notes/cloud/cloud-2026-07-remove-codesniffer-packages.md", "range": {"start": {"line": 6, "column": 58}}}, "severity": "ERROR"}

We are preparing to upgrade our PHP CodeSniffer tool to the latest version. This update will bring vital performance improvements, better syntax parsing, and support for the latest PHP features.

Check failure on line 8 in docs/release-notes/cloud/cloud-2026-07-remove-codesniffer-packages.md

View workflow job for this annotation

GitHub Actions / vale 

[vale] reported by reviewdog 🐶
[Microsoft.Contractions] Use 'we're' instead of 'We are'.

Raw Output:
{"message": "[Microsoft.Contractions] Use 'we're' instead of 'We are'.", "location": {"path": "docs/release-notes/cloud/cloud-2026-07-remove-codesniffer-packages.md", "range": {"start": {"line": 8, "column": 1}}}, "severity": "ERROR"}

We know how important your current workflows and rule configurations are. However, to successfully complete this upgrade, we have encountered hard compatibility constraints with several older, unmaintained coding standard packages. To move forward, we must officially remove support for these legacy packages and their associated rules.

Check failure on line 10 in docs/release-notes/cloud/cloud-2026-07-remove-codesniffer-packages.md

View workflow job for this annotation

GitHub Actions / vale 

[vale] reported by reviewdog 🐶
[Microsoft.Contractions] Use 'we've' instead of 'we have'.

Raw Output:
{"message": "[Microsoft.Contractions] Use 'we've' instead of 'we have'.", "location": {"path": "docs/release-notes/cloud/cloud-2026-07-remove-codesniffer-packages.md", "range": {"start": {"line": 10, "column": 123}}}, "severity": "ERROR"}

Check warning on line 10 in docs/release-notes/cloud/cloud-2026-07-remove-codesniffer-packages.md

View workflow job for this annotation

GitHub Actions / vale 

[vale] reported by reviewdog 🐶
[Microsoft.Wordiness] Consider using 'complete' instead of 'successfully complete'.

Raw Output:
{"message": "[Microsoft.Wordiness] Consider using 'complete' instead of 'successfully complete'.", "location": {"path": "docs/release-notes/cloud/cloud-2026-07-remove-codesniffer-packages.md", "range": {"start": {"line": 10, "column": 87}}}, "severity": "WARNING"}

## Packages Being Removed

The following packages are incompatible with the latest PHP_CodeSniffer version or are no longer maintained, and will be dropped in this release:

- automattic/vipwpcs
- magento/magento-coding-standard
- magento/marketplace-eqp
- pheromone/phpcs-security-audit
- wp-coding-standards/wpcs

### What to expect

As a result, pattern IDs from these packages will no longer be evaluated during your code scans, and any existing issues from them will disappear.

Below is the comprehensive list of patterns that are being removed, categorized by their respective frameworks.

#### Magento

Check failure on line 28 in docs/release-notes/cloud/cloud-2026-07-remove-codesniffer-packages.md

View workflow job for this annotation

GitHub Actions / vale 

[vale] reported by reviewdog 🐶
[Vale.Spelling] Did you really mean 'Magento'?

Raw Output:
{"message": "[Vale.Spelling] Did you really mean 'Magento'?", "location": {"path": "docs/release-notes/cloud/cloud-2026-07-remove-codesniffer-packages.md", "range": {"start": {"line": 28, "column": 6}}}, "severity": "ERROR"}

- MEQP1_Classes_Mysql4
- MEQP1_Classes_ObjectInstantiation
- MEQP1_Classes_ResourceModel
- MEQP1_CodeAnalysis_EmptyBlock
- MEQP1_Exceptions_DirectThrow
- MEQP1_Exceptions_Namespace
- MEQP1_Performance_CollectionCount
- MEQP1_Performance_EmptyCheck
- MEQP1_Performance_InefficientMethods
- MEQP1_Performance_Loop
- MEQP1_PHP_Goto
- MEQP1_PHP_PrivateClassMember
- MEQP1_PHP_Syntax
- MEQP1_PHP_Var
- MEQP1_SQL_MissedIndexes
- MEQP1_SQL_RawQuery
- MEQP1_SQL_SlowQuery
- Magento2Framework_Header_Copyright
- Magento2Framework_Header_CopyrightAnotherExtensionsFiles
- Magento2Framework_Header_CopyrightGraphQL
- Magento2Framework_Header_License
- Magento2_Annotation_MethodAnnotationStructure
- Magento2_Annotation_MethodArguments
- Magento2_Classes_AbstractApi
- Magento2_Classes_DiscouragedDependencies
- Magento2_CodeAnalysis_EmptyBlock
- Magento2_Commenting_ClassAndInterfacePHPDocFormatting
- Magento2_Commenting_ClassPropertyPHPDocFormatting
- Magento2_Commenting_ConstantsPHPDocFormatting
- Magento2_Exceptions_DirectThrow
- Magento2_Exceptions_ThrowCatch
- Magento2_Exceptions_TryProcessSystemResources
- Magento2_Functions_DiscouragedFunction
- Magento2_Functions_FunctionsDeprecatedWithoutArgument
- Magento2_Functions_StaticFunction
- Magento2_GraphQL_AbstractGraphQL
- Magento2_GraphQL_ValidArgumentName
- Magento2_GraphQL_ValidEnumValue
- Magento2_GraphQL_ValidFieldName
- Magento2_GraphQL_ValidTopLevelFieldName
- Magento2_GraphQL_ValidTypeName
- Magento2_Html_HtmlBinding
- Magento2_Html_HtmlClosingVoidTags
- Magento2_Html_HtmlCollapsibleAttribute
- Magento2_Html_HtmlDirective
- Magento2_Html_HtmlSelfClosingTags
- Magento2_Legacy_AbstractBlock
- Magento2_Legacy_ClassReferencesInConfigurationFiles
- Magento2_Legacy_DiConfig
- Magento2_Legacy_EmailTemplate
- Magento2_Legacy_EscapeMethodsOnBlockClass
- Magento2_Legacy_InstallUpgrade
- Magento2_Legacy_Layout
- Magento2_Legacy_MageEntity
- Magento2_Legacy_ModuleXML
- Magento2_Legacy_ObsoleteAcl
- Magento2_Legacy_ObsoleteConfigNodes
- Magento2_Legacy_ObsoleteConnection
- Magento2_Legacy_ObsoleteMenu
- Magento2_Legacy_ObsoleteSystemConfiguration
- Magento2_Legacy_PhtmlTemplate
- Magento2_Legacy_RestrictedCode
- Magento2_Legacy_TableName
- Magento2_Legacy_WidgetXML
- Magento2_Less_AvoidId
- Magento2_Less_BracesFormatting
- Magento2_Less_ClassNaming
- Magento2_Less_ColonSpacing
- Magento2_Less_ColourDefinition
- Magento2_Less_CombinatorIndentation
- Magento2_Less_CommentLevels
- Magento2_Less_ImportantProperty
- Magento2_Less_Indentation
- Magento2_Less_PropertiesLineBreak
- Magento2_Less_PropertiesSorting
- Magento2_Less_Quotes
- Magento2_Less_SelectorDelimiter
- Magento2_Less_SemicolonSpacing
- Magento2_Less_TypeSelectorConcatenation
- Magento2_Less_TypeSelectors
- Magento2_Less_Variables
- Magento2_Less_ZeroUnits
- Magento2_Methods_DeprecatedModelMethod
- Magento2_Namespaces_ImportsFromTestNamespace
- Magento2_NamingConvention_InterfaceName
- Magento2_NamingConvention_ReservedWords
- Magento2_Performance_ForeachArrayMerge
- Magento2_PHP_ArrayAutovivification
- Magento2_PHP_AutogeneratedClassNotInConstructor
- Magento2_PHP_FinalImplementation
- Magento2_PHP_Goto
- Magento2_PHP_LiteralNamespaces
- Magento2_PHP_ReturnValueCheck
- Magento2_PHP_ShortEchoSyntax
- Magento2_PHP_Var
- Magento2_SQL_RawQuery
- Magento2_Whitespace_MultipleEmptyLines

#### PHP CS Security

- Security_BadFunctions_Asserts
- Security_BadFunctions_Backticks
- Security_BadFunctions_CallbackFunctions
- Security_BadFunctions_CryptoFunctions
- Security_BadFunctions_EasyRFI
- Security_BadFunctions_EasyXSS
- Security_BadFunctions_ErrorHandling
- Security_BadFunctions_FilesystemFunctions
- Security_BadFunctions_FringeFunctions
- Security_BadFunctions_FunctionHandlingFunctions
- Security_BadFunctions_Mysqli
- Security_BadFunctions_NoEvals
- Security_BadFunctions_Phpinfos
- Security_BadFunctions_PregReplace
- Security_BadFunctions_SQLFunctions
- Security_BadFunctions_SystemExecFunctions
- Security_CVE_20132110
- Security_CVE_20134113
- Security_Drupal7_AESModule
- Security_Drupal7_AdvisoriesContrib
- Security_Drupal7_AdvisoriesCore
- Security_Drupal7_Cachei
- Security_Drupal7_DbQueryAC
- Security_Drupal7_DynQueries
- Security_Drupal7_HttpRequest
- Security_Drupal7_SQLi
- Security_Drupal7_UserInputWatch
- Security_Drupal7_XSSFormValue
- Security_Drupal7_XSSHTMLConstruct
- Security_Drupal7_XSSPTheme
- Security_Misc_BadCorsHeader
- Security_Misc_IncludeMismatch

#### WordPress

- WordPressVIPMinimum_Classes_DeclarationCompatibility
- WordPressVIPMinimum_Classes_RestrictedExtendClasses
- WordPressVIPMinimum_Constants_ConstantString
- WordPressVIPMinimum_Constants_RestrictedConstants
- WordPressVIPMinimum_Files_IncludingFile
- WordPressVIPMinimum_Files_IncludingNonPHPFile
- WordPressVIPMinimum_Functions_CheckReturnValue
- WordPressVIPMinimum_Functions_DynamicCalls
- WordPressVIPMinimum_Functions_RestrictedFunctions
- WordPressVIPMinimum_Functions_StripTags
- WordPressVIPMinimum_Hooks_AlwaysReturnInFilter
- WordPressVIPMinimum_Hooks_PreGetPosts
- WordPressVIPMinimum_Hooks_RestrictedHooks
- WordPressVIPMinimum_JS_DangerouslySetInnerHTML
- WordPressVIPMinimum_JS_HTMLExecutingFunctions
- WordPressVIPMinimum_JS_InnerHTML
- WordPressVIPMinimum_JS_StringConcat
- WordPressVIPMinimum_JS_StrippingTags
- WordPressVIPMinimum_JS_Window
- WordPressVIPMinimum_Performance_CacheValueOverride
- WordPressVIPMinimum_Performance_FetchingRemoteData
- WordPressVIPMinimum_Performance_LowExpiryCacheTime
- WordPressVIPMinimum_Performance_NoPaging
- WordPressVIPMinimum_Performance_OrderByRand
- WordPressVIPMinimum_Performance_RegexpCompare
- WordPressVIPMinimum_Performance_RemoteRequestTimeout
- WordPressVIPMinimum_Performance_TaxonomyMetaInOptions
- WordPressVIPMinimum_Performance_WPQueryParams
- WordPressVIPMinimum_Security_EscapingVoidReturnFunctions
- WordPressVIPMinimum_Security_ExitAfterRedirect
- WordPressVIPMinimum_Security_Mustache
- WordPressVIPMinimum_Security_PHPFilterFunctions
- WordPressVIPMinimum_Security_ProperEscapingFunction
- WordPressVIPMinimum_Security_StaticStrreplace
- WordPressVIPMinimum_Security_Twig
- WordPressVIPMinimum_Security_Underscorejs
- WordPressVIPMinimum_Security_Vuejs
- WordPressVIPMinimum_UserExperience_AdminBarRemoval
- WordPressVIPMinimum_Variables_RestrictedVariables
- WordPressVIPMinimum_Variables_ServerVariables
- WordPress_Arrays_ArrayDeclarationSpacing
- WordPress_Arrays_ArrayIndentation
- WordPress_Arrays_ArrayKeySpacingRestrictions
- WordPress_Arrays_MultipleStatementAlignment
- WordPress_CodeAnalysis_AssignmentInTernaryCondition
- WordPress_CodeAnalysis_EscapedNotTranslated
- WordPress_DB_DirectDatabaseQuery
- WordPress_DB_PreparedSQLPlaceholders
- WordPress_DB_RestrictedClasses
- WordPress_DB_RestrictedFunctions
- WordPress_DB_SlowDBQuery
- WordPress_DateTime_CurrentTimeTimestamp
- WordPress_DateTime_RestrictedFunctions
- WordPress_Files_FileName
- WordPress_NamingConventions_PrefixAllGlobals
- WordPress_NamingConventions_ValidFunctionName
- WordPress_NamingConventions_ValidHookName
- WordPress_NamingConventions_ValidPostTypeSlug
- WordPress_NamingConventions_ValidVariableName
- WordPress_PHP_DevelopmentFunctions
- WordPress_PHP_DiscouragedPHPFunctions
- WordPress_PHP_DontExtract
- WordPress_PHP_IniSet
- WordPress_PHP_NoSilencedErrors
- WordPress_PHP_POSIXFunctions
- WordPress_PHP_PregQuoteDelimiter
- WordPress_PHP_RestrictedPHPFunctions
- WordPress_PHP_StrictInArray
- WordPress_PHP_TypeCasts
- WordPress_PHP_YodaConditions
- WordPress_WP_AlternativeFunctions
- WordPress_WP_Capabilities
- WordPress_WP_CapitalPDangit
- WordPress_WP_ClassNameCase
- WordPress_WP_CronInterval
- WordPress_WP_DeprecatedClasses
- WordPress_WP_DeprecatedFunctions
- WordPress_WP_DeprecatedParameterValues
- WordPress_WP_DeprecatedParameters
- WordPress_WP_DiscouragedConstants
- WordPress_WP_DiscouragedFunctions
- WordPress_WP_EnqueuedResourceParameters
- WordPress_WP_EnqueuedResources
- WordPress_WP_GlobalVariablesOverride
- WordPress_WP_I18n
- WordPress_WP_PostsPerPage
- WordPress_WhiteSpace_CastStructureSpacing
- WordPress_WhiteSpace_ControlStructureSpacing
- WordPress_WhiteSpace_ObjectOperatorSpacing
- WordPress_WhiteSpace_OperatorSpacing
Comment thread
DMarinhoCodacy marked this conversation as resolved.


If you have any questions regarding this update or need assistance migrating to modern equivalents for these checks, please reach out to our support team.
1 change: 1 addition & 0 deletions docs/release-notes/index.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,6 +18,7 @@ For product updates that are in progress or planned [visit the Codacy public roa

2026

- [PHP_CodeSniffer Upgrade and Legacy Package Deprecations July, 2026](cloud/cloud-2026-07-remove-codesniffer-packages.md)
- [Cloud June 2026](cloud/cloud-2026-06.md)
- [Cloud May 2026](cloud/cloud-2026-05.md)
- [Cloud April 2026](cloud/cloud-2026-04.md)
Expand Down
1 change: 1 addition & 0 deletions mkdocs.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -691,6 +691,7 @@ nav:
- release-notes/index.md
- Cloud:
- 2026:
- release-notes/cloud/cloud-2026-07-remove-codesniffer-packages.md
- release-notes/cloud/cloud-2026-06.md
- release-notes/cloud/cloud-2026-05.md
- release-notes/cloud/cloud-2026-04.md
Expand Down
Loading