Skip to content

Bump the upgrade-batch group with 6 updates - #59

Merged
johanwilfer merged 3 commits into
masterfrom
dependabot/composer/upgrade-batch-6acccfa613
Aug 1, 2026
Merged

Bump the upgrade-batch group with 6 updates#59
johanwilfer merged 3 commits into
masterfrom
dependabot/composer/upgrade-batch-6acccfa613

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the upgrade-batch group with 6 updates:

Package From To
symplify/easy-coding-standard 13.2.3 13.2.17
rector/rector 2.5.2 2.5.8
phpstan/phpstan 2.2.3 2.2.7
phpstan/phpstan-strict-rules 2.0.11 2.0.12
spaze/phpstan-disallowed-calls 4.12.0 4.13.0
phpstan/phpstan-phpunit 2.0.17 2.0.18

Updates symplify/easy-coding-standard from 13.2.3 to 13.2.17

Release notes

Sourced from symplify/easy-coding-standard's releases.

Released ECS 13.2.15

What's new

🐛 Explicit Symfony attribute allowlist in StandaloneLineSymfonyAttributeParamFixer

Replaces the str_contains($name, 'Symfony') heuristic with an explicit allowlist of 17 Symfony attribute classes (SYMFONY_ATTRIBUTE_CLASSES). Third-party attributes whose FQCN merely contains Symfony (e.g. App\Symfony\...) are no longer reformatted.

-#[\Symfony\Component\Console\Attribute\AsCommand(name: 'app:some', description: 'Some description')]
+#[\Symfony\Component\Console\Attribute\AsCommand(
+    name: 'app:some',
+    description: 'Some description'
+)]

🧹 Drop pull_request trigger from version_command workflow

The job smoke-tests the published Packagist artifact, so on PRs it installed the already-published package, never the PR code — pure slow noise. push (main + tags) and weekly schedule already cover it.

Released ECS 13.2.14

What's new

✨ New StandaloneLineSymfonyAttributeParamFixer + standaloneLine set

Breaks each argument of a Symfony attribute onto its own line. New opt-in standaloneLine set groups the standalone-line rules.

-#[\Symfony\Component\Console\Attribute\AsCommand(name: 'mautic:entity:import', description: 'Import entity data from a ZIP file.')]
+#[\Symfony\Component\Console\Attribute\AsCommand(
+    name: 'mautic:entity:import',
+    description: 'Import entity data from a ZIP file.'
+)]
$ecsConfig->withPreparedSets(standaloneLine: true);
// or
$ecsConfig->withSets([SetList::STANDALONE_LINE]);

🐛 Recognize imported short-name Symfony attributes

Now resolves short names against use imports, not just fully-qualified names.

 use Symfony\Component\Console\Attribute\AsCommand;
-#[AsCommand(name: 'app:some', description: 'Some description')]
+#[AsCommand(

name: 'app:some',
</tr></table>

... (truncated)

Commits
  • f5f8131 ECS 13.2.17
  • 4c3cb21 Updated ECS to commit 28e95188c1c0dce870659c25200a291fb35752ac
  • 5176cf0 ECS 13.2.16
  • d68a4d5 Updated ECS to commit 0dc68f13a5e68f04878e3420270fadd270d6df08
  • 1281225 Updated ECS to commit 74d750e6262214e96a7ee9c2a91ba24241d84107
  • a2905db ECS 13.2.15
  • 359b467 Updated ECS to commit 4697d5094927c802ac1a20781d20ae1580fc5181
  • 168c338 Updated ECS to commit 5de591dea5085720742efdffc303bf13359999ac
  • 94ccd78 ECS 13.2.14
  • 5c8697b Updated ECS to commit b5d19edbd3e8302b976a5be12c8ab0aa16251544
  • Additional commits viewable in compare view

Updates rector/rector from 2.5.2 to 2.5.8

Release notes

Sourced from rector/rector's releases.

Released Rector 2.5.8

New Features 🥳

  • [dx] Add "if" set with if/else/ternary rules (#8199)
  • [DeadCode] Add RemoveDeadInstanceOfAssertRector (#8202)
  • [DeadCode] Add RemoveDoubleSelfAssignRector (#8203)
  • [DeadCode] Add RemoveParentDelegatingClassMethodRector (#8204)
  • [DeadCode] Add RemoveDefaultValueFromAssignedPropertyRector (#8207)
  • [TypeDeclaration] Fix incomplete type on yield variable + yield from in AddParamTypeBasedOnPHPUnitDataProviderRector (#8206)

Bugfixes 🐛

  • Fix LogicalToBooleanRector: parenthesize assignments nested under unary/binary operators (#8184)
  • [TypeDeclaration] Skip trait methods on ParamTypeByMethodCallType rules (#8189)
  • [Php80] Skip promotion when property type is wider than constructor param on ClassPropertyAssignToConstructorPromotionRector (#8170), Thanks @​ximki-vinki!
  • [Php85] Skip outer spread on NestedFuncCallsToPipeOperatorRector (#8191)
  • [DeadCode] Fix crash on float version arg in ConditionResolver (#8192)
  • Make NestedFuncCallsToPipeOperatorRector minimum depth configurable (#8193)
  • Fix codeception data provider detection (#8194), Thanks @​d-mitrofanov-v!
  • Make PHPStan DI-Container available in bootstrap files (#8190), Thanks @​staabm!
  • [Privatization] Skip Symfony Command protected static property in PrivatizeFinalClassPropertyRector (#8201)
  • Bump to PHPStan ^2.2.6 and Fix its Container compatibility in RichParser (#8208)

Removed 💀

  • skip @ return this on RemoveReturnTagIncompatibleWithNativeTypeRector on Traits (#8185)
  • [DeadCode] Skip string scalar sub type on RemoveReturnTagIncompatibleWithNativeTypeRector (#8186)

rectorphp/rector-symfony 🎵

  • [Symfony73] Remove empty configure() method in CommandHelpToAttributeRector (#969)
  • [Symfony73] Keep AbstractExtension when Twig extension overrides a built-in function/filter (#968)
  • [Symfony73] Wrap scalar groups option in array in ConstraintOptionsToNamedArgumentsRector (#967)
  • [Symfony61] Remove empty configure() method even with empty body (#966)
  • [Symfony61] Remove now empty configure() method in CommandConfigureToAttributeRector (#965)
  • [CodeQuality] Respect typeGuardedClasses and skip closure-only returns in ResponseReturnTypeControllerActionRector (#964)
  • [Symfony44] Return 1 instead of (int) false in ConsoleExecuteReturnIntRector (#963)
  • [CodeQuality] Add union and method call return type support to ResponseReturnTypeControllerActionRector (#961)
  • [Twig30] Add new set for Twig 30 (#960), Thanks @​MrYamous

rectorphp/rector-doctrine 🟠

... (truncated)

Commits
  • 861c77f Rector 2.5.8
  • 3bdc91d Updated Rector to commit 009a5e43abbcdc79616ab8e1c5a7ef7511fc7930
  • 073c330 Updated Rector to commit e3564ee205b6d0923b7e95cbd57aaf0a060b7257
  • 75fcd96 Updated Rector to commit 3b8b78ae4ade8bb61c2b2e4be2b7b8f3ab2e70df
  • bfbe3f5 Updated Rector to commit 0d55511893c35bb1bde7af197c5dde34ac9a000e
  • 2d74206 Updated Rector to commit 0d55511893c35bb1bde7af197c5dde34ac9a000e
  • ac2881b Updated Rector to commit e46bfd972bdedfd6034dd3f0f8ac736d4aa8a0ab
  • af8c31f Updated Rector to commit 919fc0e528d102bdc63223f55d6436b2b8e4b275
  • c116f72 Updated Rector to commit 919fc0e528d102bdc63223f55d6436b2b8e4b275
  • 07b34da Updated Rector to commit 919fc0e528d102bdc63223f55d6436b2b8e4b275
  • Additional commits viewable in compare view

Updates phpstan/phpstan from 2.2.3 to 2.2.7

Commits

Updates phpstan/phpstan-strict-rules from 2.0.11 to 2.0.12

Release notes

Sourced from phpstan/phpstan-strict-rules's releases.

2.0.12

  • 2bc5ae1 - Allow GMP and BCMath\Number in arithmetic operations (#311)
  • 70e3081 - Update github-actions (#324)
  • 07a17dd - Update github-actions to v7 (#325)
  • de9bdda - Update github-actions (#322)
  • 80870ec - Replace deprecated actions/create-release with softprops/action-gh-release
  • 109c14f - Bump GitHub Actions across major versions
  • ebf31ff - Bump GitHub Actions within their current majors
  • 727c193 - Update github-actions
  • cc56619 - Update github-actions
  • 1e72841 - Update release-toot.yml (#319)
  • ada7e60 - CI: move name-collision job into build.yml (#318)
  • 470946d - Add missing export-ignore entries to .gitattributes (#315)
  • 8b14a8e - name-collision-detector (#314)
Commits
  • 2bc5ae1 Allow GMP and BCMath\Number in arithmetic operations (#311)
  • 70e3081 Update github-actions (#324)
  • 07a17dd Update github-actions to v7 (#325)
  • de9bdda Update github-actions (#322)
  • 80870ec Replace deprecated actions/create-release with softprops/action-gh-release
  • 109c14f Bump GitHub Actions across major versions
  • ebf31ff Bump GitHub Actions within their current majors
  • 727c193 Update github-actions
  • cc56619 Update github-actions
  • 1e72841 Update release-toot.yml (#319)
  • Additional commits viewable in compare view

Updates spaze/phpstan-disallowed-calls from 4.12.0 to 4.13.0

Release notes

Sourced from spaze/phpstan-disallowed-calls's releases.

Attributes on methods match allowInMethods, and allow directives compose predictably

New

  • Attributes placed on a method or a function - not just used inside one - now match the name-based allowInMethods/allowInFunctions patterns, the same way allowInMethodsWithAttributes already matched them (#427, #428 - possible BC break)

  • Allow directives now fall through to the next one in the same config entry when they don't match, so e.g. allowInInstanceOf combined with allowInClassWithAttributes works as alternatives; how the directives compose is now documented (#429, #430)

  • Documented that directive aliases (allowInFunctions/allowInMethods, disallowInMethods/allowExceptInMethods etc.) refer to one single directive and only one of them is used when an entry sets several (#430)

Internal changes

  • Array types in PHPDoc adjusted for sealed arrays introduced in PHPStan 2.2 (#421), with the property config types following suit (#422)
  • The lowest supported PHPUnit is now 9.6 so tests run on PHP 7.4 again (#426), and the PHPUnit 13.2 expectExceptionMessage() deprecation is handled while keeping older PHPUnit versions working (#425)
  • shipmonk/dead-code-detector updated to ^1.1, which requires PHP 8.1+ so it's uninstalled when testing on older versions (#423)
  • goto is reachable again in the test fixture (#420)
  • actions/checkout bumped to 7 (#424, thanks @​dependabot)

Possible BC break note: allowExceptInMethods and its aliases can now report an attribute placed on a matching method or function, which was previously always allowed - if attribute errors newly appear, check your patterns. Other than that, errors can only disappear with this release.

Commits
  • 94bd445 Allow directives fall through to the next one when they don't match (#430)
  • be678df Document that setting multiple aliases of one directive uses just one of them
  • edef780 Allow directives fall through to the next one when they don't match
  • 46cd043 Match attributes on methods and functions with allowInMethods and `allowInFun...
  • d79e6e2 Link the methods-with-attributes list item to its own doc
  • 14c9e85 Match attributes on methods and functions with allowInMethods and `allowInF...
  • 8ade936 Bump actions/checkout from 6 to 7 (#424)
  • 30c9ca3 Bump actions/checkout from 6 to 7
  • 7966237 "Upgrade" the lowest possible PHPUnit to 9.6 which supports PHP 7.4 (#426)
  • d2d897f "Upgrade" the lowest possible PHPUnit to 9.6 which supports PHP 7.4
  • Additional commits viewable in compare view

Updates phpstan/phpstan-phpunit from 2.0.17 to 2.0.18

Release notes

Sourced from phpstan/phpstan-phpunit's releases.

2.0.18

  • f5dc20f - Fix #[RequiresPhpunit] version requirement being evaluated against PHP version (#313)
  • 1e573d3 - AttributeVersionRequirementHelper: add defaults to bool parameters (#312)
Commits
  • f5dc20f Fix #[RequiresPhpunit] version requirement being evaluated against PHP vers...
  • 1e573d3 AttributeVersionRequirementHelper: add defaults to bool parameters (#312)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the upgrade-batch group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [symplify/easy-coding-standard](https://github.com/ecsphp/ecs) | `13.2.3` | `13.2.17` |
| [rector/rector](https://github.com/rectorphp/rector) | `2.5.2` | `2.5.8` |
| [phpstan/phpstan](https://github.com/phpstan/phpstan-phar-composer-source) | `2.2.3` | `2.2.7` |
| [phpstan/phpstan-strict-rules](https://github.com/phpstan/phpstan-strict-rules) | `2.0.11` | `2.0.12` |
| [spaze/phpstan-disallowed-calls](https://github.com/spaze/phpstan-disallowed-calls) | `4.12.0` | `4.13.0` |
| [phpstan/phpstan-phpunit](https://github.com/phpstan/phpstan-phpunit) | `2.0.17` | `2.0.18` |


Updates `symplify/easy-coding-standard` from 13.2.3 to 13.2.17
- [Release notes](https://github.com/ecsphp/ecs/releases)
- [Commits](ecsphp/ecs@13.2.3...13.2.17)

Updates `rector/rector` from 2.5.2 to 2.5.8
- [Release notes](https://github.com/rectorphp/rector/releases)
- [Commits](rectorphp/rector@2.5.2...2.5.8)

Updates `phpstan/phpstan` from 2.2.3 to 2.2.7
- [Commits](https://github.com/phpstan/phpstan-phar-composer-source/commits)

Updates `phpstan/phpstan-strict-rules` from 2.0.11 to 2.0.12
- [Release notes](https://github.com/phpstan/phpstan-strict-rules/releases)
- [Commits](phpstan/phpstan-strict-rules@2.0.11...2.0.12)

Updates `spaze/phpstan-disallowed-calls` from 4.12.0 to 4.13.0
- [Release notes](https://github.com/spaze/phpstan-disallowed-calls/releases)
- [Commits](spaze/phpstan-disallowed-calls@v4.12.0...v4.13.0)

Updates `phpstan/phpstan-phpunit` from 2.0.17 to 2.0.18
- [Release notes](https://github.com/phpstan/phpstan-phpunit/releases)
- [Commits](phpstan/phpstan-phpunit@2.0.17...2.0.18)

---
updated-dependencies:
- dependency-name: symplify/easy-coding-standard
  dependency-version: 13.2.17
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: upgrade-batch
- dependency-name: rector/rector
  dependency-version: 2.5.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: upgrade-batch
- dependency-name: phpstan/phpstan
  dependency-version: 2.2.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: upgrade-batch
- dependency-name: phpstan/phpstan-strict-rules
  dependency-version: 2.0.12
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: upgrade-batch
- dependency-name: spaze/phpstan-disallowed-calls
  dependency-version: 4.13.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: upgrade-batch
- dependency-name: phpstan/phpstan-phpunit
  dependency-version: 2.0.18
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: upgrade-batch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update php code labels Aug 1, 2026
@johanwilfer
johanwilfer merged commit ef2ac84 into master Aug 1, 2026
5 checks passed
@johanwilfer
johanwilfer deleted the dependabot/composer/upgrade-batch-6acccfa613 branch August 1, 2026 10:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file php Pull requests that update php code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant