Skip to content

chore(deps): bump the composer-version-updates group across 1 directory with 8 updates - #87

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/composer/composer-version-updates-ccdd3310e5
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/composer/composer-version-updates-ccdd3310e5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 23, 2026

Copy link
Copy Markdown
Contributor

Bumps the composer-version-updates group with 8 updates in the / directory:

Package From To
firebase/php-jwt 7.0.0 7.1.1
friendsofphp/php-cs-fixer 3.92.3 3.95.25
haydenpierce/class-finder 0.5.3 0.6.0
testcontainers/testcontainers 1.0.3 1.1.0
vlucas/phpdotenv 5.6.2 5.7.0
rector/rector 2.2.14 2.6.7
phpstan/phpstan 2.1.33 2.2.14
icanhazstring/composer-unused 0.9.5 0.9.6

Updates firebase/php-jwt from 7.0.0 to 7.1.1

Release notes

Sourced from firebase/php-jwt's releases.

v7.1.1

7.1.1 (2026-09-02)

Bug Fixes

  • Limit the number of segments a JWT can be exploded into (#639) (93d248c)

v7.1.0

7.1.0 (2026-06-11)

Features

Bug Fixes

  • Skip parsing valid unsupported curves (#638) (8a6c2a7)
  • Update homepage URL in composer.json (#635) (f7ae571)
  • Validate numeric type of iat, nbf and exp claims in encode (#634) (958e422)

v7.0.5

7.0.5 (2026-03-31)

Bug Fixes

  • RSA from JWK sometimes returns empty Instance (#628) (b4c78aa)

v7.0.4

7.0.4 (2026-03-27)

Bug Fixes

  • readme examples, add tests for all examples (#626) (510a00c)
  • use urlsafeB64Decode everywhere (#627) (b889495)

v7.0.3

7.0.3 (2026-02-18)

Miscellaneous Chores

  • add environment for Release Please job (#619) (300fd02)

v7.0.2

7.0.2 (2025-12-16)

... (truncated)

Changelog

Sourced from firebase/php-jwt's changelog.

7.1.1 (2026-09-02)

Bug Fixes

  • Limit the number of segments a JWT can be exploded into (#639) (93d248c)

7.1.0 (2026-06-11)

Features

Bug Fixes

  • Skip parsing valid unsupported curves (#638) (8a6c2a7)
  • Update homepage URL in composer.json (#635) (f7ae571)
  • Validate numeric type of iat, nbf and exp claims in encode (#634) (958e422)

7.0.5 (2026-03-31)

Bug Fixes

  • RSA from JWK sometimes returns empty Instance (#628) (b4c78aa)

7.0.4 (2026-03-27)

Bug Fixes

  • readme examples, add tests for all examples (#626) (510a00c)
  • use urlsafeB64Decode everywhere (#627) (b889495)

7.0.3 (2026-02-18)

Miscellaneous Chores

  • add environment for Release Please job (#619) (300fd02)

7.0.2 (2025-12-16)

Bug Fixes

  • add key length validation for ec keys (#615) (7044f9a)
Commits
  • 9bc93bd Merge pull request #645 from googleapis/release-please--branches--main
  • 3654990 chore(main): release 7.1.1
  • 93d248c fix: limit the number of segments a JWT can be exploded into (#639)
  • 70c5221 chore: allow guzzlehttp/guzzle 8.0 (#643)
  • b374a5d chore(main): release 7.1.0 (#641)
  • 87b258a chore: add back release-please (#640)
  • aa0b447 feat: Add support for PS256 (#637)
  • 8a6c2a7 fix: skip parsing valid unsupported curves (#638)
  • f7ae571 Fix: Update homepage URL in composer.json (#635)
  • 958e422 fix: validate numeric type of iat, nbf and exp claims in encode (#634)
  • Additional commits viewable in compare view

Updates friendsofphp/php-cs-fixer from 3.92.3 to 3.95.25

Release notes

Sourced from friendsofphp/php-cs-fixer's releases.

v3.95.25 Adalbertus

What's Changed

New Contributors

Full Changelog: PHP-CS-Fixer/PHP-CS-Fixer@v3.95.24...v3.95.25

v3.95.24 Adalbertus

What's Changed

New Contributors

Full Changelog: PHP-CS-Fixer/PHP-CS-Fixer@v3.95.23...v3.95.24

v3.95.23 Adalbertus

What's Changed

Full Changelog: PHP-CS-Fixer/PHP-CS-Fixer@v3.95.22...v3.95.23

v3.95.22 Adalbertus

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from friendsofphp/php-cs-fixer's changelog.

Changelog for v3.95.25

  • fix: handle missing terminator after ?? in AssignNullCoalescingToCoalesceEqualFixer (#9831)
  • fix: IsNullFixer - do not fix is_null() calls using argument unpacking (#9830)
  • fix: IsNullFixer - handle is_null() calls using named arguments (#9828)
  • UX: init - use outlined messages (#9826)
  • deps: bump crate-ci/typos from 1.49.0 to 1.50.1 in /.github/workflows in the all group across 1 directory (#9824)
  • deps: bump phpstan/phpstan from 2.2.9 to 2.2.12 in /dev-tools in the phpstan group (#9822)
  • deps: bump shipmonk/dead-code-detector from 1.3.3 to 1.4.0 in /dev-tools in the shipmonk group across 1 directory (#9823)

Changelog for v3.95.24

  • fix: ControlStructureBracesFixer - do not read a body starting with a parenthesis as a condition (#9815)
  • UX: init - add handling of .gitignore (#9813)
  • UX: init - add sections (#9819)
  • UX: init - command improvements (#9807)
  • UX: init - fix typos and improve wording (#9820)
  • UX: init command - suggest php_unit_test_case_static_method_calls rule (#9810)
  • chore: Fixer name must not be empty (#9756)
  • chore: DescribeCommand - replace dynamic method calls with explicit ones (#9817)
  • chore: PhpdocOrderFixer - fix type of duplicated tags passed to naturalLanguageJoin (#9818)
  • CI: fix warning - Unexpected input(s) 'extensions' (#9809)
  • CI: introduce PHPBench (#9755)
  • refactor: init - move content preparation to helper method (#9812)

Changelog for v3.95.23

  • fix: FunctionsAnalyzer - detect return type of a closure with a use clause (#9806)

Changelog for v3.95.22

  • fix: StaticLambdaFixer - do not make a lambda static when it is the direct subject of bindTo() or call() (#9802)
  • chore: Implement PHPStan Preg::replaceCallback() extension (#9799)
  • chore: Utils - fix stableSort() and sortFixers() template types, remove @phpstan-ignore suppressions (#9798)
  • deps: bump phpstan/phpstan from 2.2.8 to 2.2.9 (#9797)

Changelog for v3.95.21

  • fix: StatementIndentationFixer - do not treat ternary colon as block start (#9795)
  • perf: Introduce new candidate check for transformers (#9770)
  • perf: Optimize NameQualifiedTransformer token insertion (#9759)
  • CI: add BC check (#9791)
  • deps: upgrade dev-tools (#9793)

Changelog for v3.95.20

... (truncated)

Commits
  • 2cdfc1f prepared the 3.95.25 release
  • 38656cc fix: handle missing terminator after ?? in `AssignNullCoalescingToCoalesceE...
  • e080515 UX: init - use outlined messages (#9826)
  • ab7bb8b fix: IsNullFixer - do not fix is_null() calls using argument unpacking (#9830)
  • bda6d10 fix: IsNullFixer - handle is_null() calls using named arguments (#9828)
  • b7da2d3 deps: bump shipmonk/dead-code-detector from 1.3.3 to 1.4.0 in /dev-tools in t...
  • 9020ad1 deps: bump crate-ci/typos from 1.49.0 to 1.50.1 in /.github/workflows in the ...
  • 207b03d deps: bump phpstan/phpstan from 2.2.9 to 2.2.12 in /dev-tools in the phpstan ...
  • 945e6d8 bumped version
  • 9a4b805 prepared the 3.95.24 release
  • Additional commits viewable in compare view

Updates haydenpierce/class-finder from 0.5.3 to 0.6.0

Commits
  • b9e7859 Edit composer.json
  • 9ea1afd Update version and changelog
  • edd5071 Merge branch 'cache-namespace-tree' into 'master'
  • a4bd343 Edit composer.json
  • 8a39a5b Precompute direct namespace on ClassmapEntry construction
  • ab24b80 Resolve direct subnamespaces lazily on first access
  • 02905ce Cache PSR4 namespaces and classmap entries per app root
  • a50751e Update 2 files
  • 730d0c2 Merge branch 'allow-emojis-in-paths' into 'master'
  • 53e6568 Allow emojis in paths
  • See full diff in compare view

Updates testcontainers/testcontainers from 1.0.3 to 1.1.0

Release notes

Sourced from testcontainers/testcontainers's releases.

1.1.0

What's Changed

New Contributors

Full Changelog: testcontainers/testcontainers-php@1.0.10...1.1.0

1.0.10

What's Changed

Full Changelog: testcontainers/testcontainers-php@1.0.9...1.0.10

1.0.9

What's Changed

New Contributors

Full Changelog: testcontainers/testcontainers-php@1.0.8...1.0.9

1.0.8

What's Changed

New Contributors

Full Changelog: testcontainers/testcontainers-php@1.0.7...1.0.8

1.0.7

What's Changed

New Contributors

Full Changelog: testcontainers/testcontainers-php@1.0.6...1.0.7

... (truncated)

Commits
  • 551f3fa Merge pull request #74 from testcontainers/chore/phpstan-2
  • 969bb44 chore: require docker-php >=1.45.7 and docker-php-api >=7.1.45.5
  • ed5b91b chore: upgrade PHPStan to 2.x and fix reported errors
  • 01f7f8b Merge pull request #73 from codedmonkey/mount-fix
  • f441892 fix: use class methods to construct mount
  • a9dfb00 Merge pull request #72 from testcontainers/dependabot/pip/mkdocs-material-9.7.7
  • cfacffd chore(deps): bump mkdocs-material from 9.7.5 to 9.7.7
  • ef87d08 Merge pull request #71 from mchojrin/patch-1
  • b0b31d1 Add autoload requirement for Postgres module
  • 9c56186 Merge pull request #70 from nightio/copy-order-change
  • Additional commits viewable in compare view

Updates vlucas/phpdotenv from 5.6.2 to 5.7.0

Release notes

Sourced from vlucas/phpdotenv's releases.

v5.7.0

What's Changed

New Contributors

Full Changelog: vlucas/phpdotenv@v5.6.4...v5.7.0

V5.6.4 (06/07/2026)

We announce the immediate availability V5.6.4.

Changes

  • Pass explicit trim characters ahead of PHP 8.6 (416df702837983f8d5ff48c9c3fee4f5f57b980b)

V5.6.3 (27/12/2025)

We announce the immediate availability V5.6.3.

Changes

  • Add official support for PHP 8.5 (cd59ef0935168961aa100678fb61c8fd4d1044a0, 955e7815d677a3eaa7075231212f2110983adecc)
Commits
  • 301c079 Resolve the remaining static analysis baseline entries (#614)
  • 5d0bb3b Document the real parsing, nesting, comment, escape and validation rules (#609)
  • 4426075 Stop comments from starting multiline values (#615)
  • eec19ee Add regression tests for existing behaviour (#608)
  • 226b4ed Improve diagnostics and messages (#607)
  • 4f84f7e Strip a leading UTF-8 byte order mark from string content (#606)
  • 4b900c5 Resolve nested variables without re-copying the value prefix (#605)
  • dd5b391 Remove quadratic value parsing (#604)
  • 46d5ce3 Skip environment writes and reads for names or values containing a null byte ...
  • 8bf174e Fix memory-safety crash on invalid UTF-8 variable names (#602)
  • Additional commits viewable in compare view

Updates rector/rector from 2.2.14 to 2.6.7

Release notes

Sourced from rector/rector's releases.

Released Rector 2.6.7

Agentic Experience

This release improves Rector for automated, CI and non-interactive workflows: validate configuration without processing files, limit the amount of changes per run, select multiple rules at once, and get more useful machine-readable output.

  • Bump PHPStan to ^2.2.14 and PHP-Parser to ^5.9, regenerate preload (#8491)

New validate-config command (#8450, #8452)

New validate-config command checks rector.php for configuration issues without processing any source files.

vendor/bin/rector validate-config

It reports deprecated rules and configuration, invalid skips, duplicated rule registrations and other config hygiene issues. A valid config exits with 0, while detected issues exit with 1, so the command can be used directly as a CI gate.

For machine-readable output:

vendor/bin/rector validate-config --output-format=json
{
    "valid": true,
    "issue_count": 0
}

Limit a run with --max-changes (#8449)

New --max-changes option lets automated runs process changes in smaller batches:

vendor/bin/rector process --dry-run --max-changes=50

The limit counts applied rule changes rather than files. The current file is always finished before Rector stops, so the final number may be slightly above the requested limit.

Run multiple rules with --only (#8451)

--only can now be repeated to run several selected rules in a single pass:

vendor/bin/rector process \
    --only=App\\Rector\\FooRector \
    --only=App\\Rector\\BarRector

... (truncated)

Commits
  • f4aa224 Rector 2.6.7
  • 668bc22 Updated Rector to commit 85a5406bd628b1eb1d53c529e53ef33b873e1fb9
  • 9d41ae7 Updated Rector to commit 71a969fbd931a4f206a504d981e2aa7543dd2351
  • a2c6be3 Updated Rector to commit 71a969fbd931a4f206a504d981e2aa7543dd2351
  • a6b4c3e Updated Rector to commit 6d8240575626342682a62f2c6f016f1579cca59e
  • 11f9ea3 Updated Rector to commit 9c56f19713758c6f4cfd534a17bf5c9f91a52bb9
  • 7d3b83f Updated Rector to commit 222bbf2f4e10e311a826a5375b0726c5bd4cf124
  • 21ace77 Updated Rector to commit c6d15cd2c8f8a6684f48a9ab45db34934c3b4a75
  • e5bdae7 Updated Rector to commit 15412f07928be9b60f752facb1397ebe25f034f9
  • 3c05554 Updated Rector to commit 15412f07928be9b60f752facb1397ebe25f034f9
  • Additional commits viewable in compare view

Updates phpstan/phpstan from 2.1.33 to 2.2.14

Commits

Updates icanhazstring/composer-unused from 0.9.5 to 0.9.6

Release notes

Sourced from icanhazstring/composer-unused's releases.

0.9.6

What's Changed

New Contributors

Full Changelog: composer-unused/composer-unused@0.9.5...0.9.6

Commits
  • c60030a Up CI to php 8.5
  • 8e07d4e chore: Drop composer.lock
  • 2ff3811 Symfony 8 support
  • 2e01ef8 github-actions(deps): bump the dependencies group across 1 directory with 3 u...
  • b904f88 Use major version tag for shivammathur/setup-php action
  • ba9f5f1 build(deps-dev): bump paragonie/sodium_compat in /vendor-bin/box
  • 0c3595a build(deps-dev): bump symfony/process in /vendor-bin/box
  • 00e1918 composer(deps-dev): bump the dependencies group across 1 directory with 4 upd...
  • 4b55573 Add support for webmozart/assert 2.0
  • 6283924 composer(deps-dev): bump the dependencies group across 1 directory with 4 upd...
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update PHP code labels Jul 23, 2026
@github-actions

github-actions Bot commented Jul 23, 2026

Copy link
Copy Markdown
Contributor

Qodana for PHP

13 new problems were found

Inspection name Severity Problems
Check the PHP source code coverage 🔶 Warning 4
Unhandled exception ◽️ Notice 9
@@ Code coverage @@
+ 87% total lines covered
314 lines analyzed, 275 lines covered
# Calculated according to the filters of your coverage tool

💡 Qodana analysis was run in the pull request mode: only the changed files were checked
☁️ View the detailed Qodana report

Contact Qodana team

Contact us at qodana-support@jetbrains.com

@dependabot @github

dependabot Bot commented on behalf of github Aug 6, 2026

Copy link
Copy Markdown
Contributor Author

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

…ry with 8 updates

Bumps the composer-version-updates group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [firebase/php-jwt](https://github.com/googleapis/php-jwt) | `7.0.0` | `7.1.1` |
| [friendsofphp/php-cs-fixer](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer) | `3.92.3` | `3.95.25` |
| [haydenpierce/class-finder](https://gitlab.com/hpierce1102/ClassFinder) | `0.5.3` | `0.6.0` |
| [testcontainers/testcontainers](https://github.com/testcontainers/testcontainers-php) | `1.0.3` | `1.1.0` |
| [vlucas/phpdotenv](https://github.com/vlucas/phpdotenv) | `5.6.2` | `5.7.0` |
| [rector/rector](https://github.com/rectorphp/rector) | `2.2.14` | `2.6.7` |
| [phpstan/phpstan](https://github.com/phpstan/phpstan-phar-composer-source) | `2.1.33` | `2.2.14` |
| [icanhazstring/composer-unused](https://github.com/composer-unused/composer-unused) | `0.9.5` | `0.9.6` |



Updates `firebase/php-jwt` from 7.0.0 to 7.1.1
- [Release notes](https://github.com/googleapis/php-jwt/releases)
- [Changelog](https://github.com/googleapis/php-jwt/blob/main/CHANGELOG.md)
- [Commits](googleapis/php-jwt@v7.0.0...v7.1.1)

Updates `friendsofphp/php-cs-fixer` from 3.92.3 to 3.95.25
- [Release notes](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/releases)
- [Changelog](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/blob/master/CHANGELOG.md)
- [Commits](PHP-CS-Fixer/PHP-CS-Fixer@v3.92.3...v3.95.25)

Updates `haydenpierce/class-finder` from 0.5.3 to 0.6.0
- [Commits](https://gitlab.com/hpierce1102/ClassFinder/compare/0.5.3...0.6.0)

Updates `testcontainers/testcontainers` from 1.0.3 to 1.1.0
- [Release notes](https://github.com/testcontainers/testcontainers-php/releases)
- [Commits](testcontainers/testcontainers-php@1.0.3...1.1.0)

Updates `vlucas/phpdotenv` from 5.6.2 to 5.7.0
- [Release notes](https://github.com/vlucas/phpdotenv/releases)
- [Commits](vlucas/phpdotenv@v5.6.2...v5.7.0)

Updates `rector/rector` from 2.2.14 to 2.6.7
- [Release notes](https://github.com/rectorphp/rector/releases)
- [Commits](rectorphp/rector@2.2.14...2.6.7)

Updates `phpstan/phpstan` from 2.1.33 to 2.2.14
- [Commits](https://github.com/phpstan/phpstan-phar-composer-source/commits)

Updates `icanhazstring/composer-unused` from 0.9.5 to 0.9.6
- [Release notes](https://github.com/composer-unused/composer-unused/releases)
- [Changelog](https://github.com/composer-unused/composer-unused/blob/main/CHANGELOG.md)
- [Commits](composer-unused/composer-unused@0.9.5...0.9.6)

---
updated-dependencies:
- dependency-name: firebase/php-jwt
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: composer-version-updates
- dependency-name: friendsofphp/php-cs-fixer
  dependency-version: 3.95.15
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: composer-version-updates
- dependency-name: haydenpierce/class-finder
  dependency-version: 0.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: composer-version-updates
- dependency-name: icanhazstring/composer-unused
  dependency-version: 0.9.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: composer-version-updates
- dependency-name: phpstan/phpstan
  dependency-version: 2.2.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: composer-version-updates
- dependency-name: rector/rector
  dependency-version: 2.5.7
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: composer-version-updates
- dependency-name: testcontainers/testcontainers
  dependency-version: 1.0.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: composer-version-updates
- dependency-name: vlucas/phpdotenv
  dependency-version: 5.6.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: composer-version-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/composer/composer-version-updates-ccdd3310e5 branch from 18ebaac to 03be3d6 Compare September 17, 2026 18:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file php Pull requests that update PHP code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants