Skip to content

chore(deps): bump the composer-version-updates group across 1 directory with 9 updates - #94

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/composer/composer-version-updates-e5c39ba461
Open

chore(deps): bump the composer-version-updates group across 1 directory with 9 updates#94
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/composer/composer-version-updates-e5c39ba461

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 24, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the composer-version-updates group with 9 updates in the / directory:

Package From To
firebase/php-jwt 7.0.0 7.1.1
league/oauth2-client 2.9.0 2.9.1
friendsofphp/php-cs-fixer 3.92.3 3.95.26
haydenpierce/class-finder 0.5.3 0.6.0
testcontainers/testcontainers 1.0.3 1.1.0
vlucas/phpdotenv 5.6.2 5.7.0
rector/rector 2.2.14 2.6.7
phpstan/phpstan 2.1.33 2.2.15
icanhazstring/composer-unused 0.9.5 0.9.6

Updates firebase/php-jwt from 7.0.0 to 7.1.1

Release notes

Sourced from firebase/php-jwt's releases.

v7.1.1

7.1.1 (2026-09-02)

Bug Fixes

  • Limit the number of segments a JWT can be exploded into (#639) (93d248c)

v7.1.0

7.1.0 (2026-06-11)

Features

Bug Fixes

  • Skip parsing valid unsupported curves (#638) (8a6c2a7)
  • Update homepage URL in composer.json (#635) (f7ae571)
  • Validate numeric type of iat, nbf and exp claims in encode (#634) (958e422)

v7.0.5

7.0.5 (2026-03-31)

Bug Fixes

  • RSA from JWK sometimes returns empty Instance (#628) (b4c78aa)

v7.0.4

7.0.4 (2026-03-27)

Bug Fixes

  • readme examples, add tests for all examples (#626) (510a00c)
  • use urlsafeB64Decode everywhere (#627) (b889495)

v7.0.3

7.0.3 (2026-02-18)

Miscellaneous Chores

  • add environment for Release Please job (#619) (300fd02)

v7.0.2

7.0.2 (2025-12-16)

... (truncated)

Changelog

Sourced from firebase/php-jwt's changelog.

7.1.1 (2026-09-02)

Bug Fixes

  • Limit the number of segments a JWT can be exploded into (#639) (93d248c)

7.1.0 (2026-06-11)

Features

Bug Fixes

  • Skip parsing valid unsupported curves (#638) (8a6c2a7)
  • Update homepage URL in composer.json (#635) (f7ae571)
  • Validate numeric type of iat, nbf and exp claims in encode (#634) (958e422)

7.0.5 (2026-03-31)

Bug Fixes

  • RSA from JWK sometimes returns empty Instance (#628) (b4c78aa)

7.0.4 (2026-03-27)

Bug Fixes

  • readme examples, add tests for all examples (#626) (510a00c)
  • use urlsafeB64Decode everywhere (#627) (b889495)

7.0.3 (2026-02-18)

Miscellaneous Chores

  • add environment for Release Please job (#619) (300fd02)

7.0.2 (2025-12-16)

Bug Fixes

  • add key length validation for ec keys (#615) (7044f9a)
Commits
  • 9bc93bd Merge pull request #645 from googleapis/release-please--branches--main
  • 3654990 chore(main): release 7.1.1
  • 93d248c fix: limit the number of segments a JWT can be exploded into (#639)
  • 70c5221 chore: allow guzzlehttp/guzzle 8.0 (#643)
  • b374a5d chore(main): release 7.1.0 (#641)
  • 87b258a chore: add back release-please (#640)
  • aa0b447 feat: Add support for PS256 (#637)
  • 8a6c2a7 fix: skip parsing valid unsupported curves (#638)
  • f7ae571 Fix: Update homepage URL in composer.json (#635)
  • 958e422 fix: validate numeric type of iat, nbf and exp claims in encode (#634)
  • Additional commits viewable in compare view

Updates league/oauth2-client from 2.9.0 to 2.9.1

Release notes

Sourced from league/oauth2-client's releases.

2.9.1

  • Add support for Guzzle v8 #1112
Changelog

Sourced from league/oauth2-client's changelog.

2.9.1

Released: 2026-09-16

  • Add support for Guzzle v8 #1112
Commits
  • 8cedfef Update changelog for v2.9.1
  • f16649f Merge pull request #1108 from thephpleague/dependabot/bundler/docs/faraday-2....
  • 37b814f Bump faraday from 2.14.1 to 2.14.3 in /docs
  • fa92da8 Merge pull request #1096 from thephpleague/dependabot/bundler/docs/activesupp...
  • 33389ff Bump activesupport from 8.0.0 to 8.0.4.1 in /docs
  • 90059d9 Merge pull request #1104 from thephpleague/dependabot/github_actions/codecov/...
  • ded0901 Merge pull request #1106 from thephpleague/dependabot/github_actions/actions/...
  • 4adbf64 Merge pull request #1107 from thephpleague/dependabot/bundler/docs/nokogiri-1...
  • dac07fc Merge pull request #1109 from thephpleague/dependabot/bundler/docs/concurrent...
  • 5a7fc0a Merge pull request #1115 from thephpleague/dependabot/bundler/docs/json-2.19.9
  • Additional commits viewable in compare view

Updates friendsofphp/php-cs-fixer from 3.92.3 to 3.95.26

Release notes

Sourced from friendsofphp/php-cs-fixer's releases.

v3.95.26 Adalbertus

What's Changed

Full Changelog: PHP-CS-Fixer/PHP-CS-Fixer@v3.95.25...v3.95.26

v3.95.25 Adalbertus

What's Changed

New Contributors

Full Changelog: PHP-CS-Fixer/PHP-CS-Fixer@v3.95.24...v3.95.25

v3.95.24 Adalbertus

What's Changed

New Contributors

Full Changelog: PHP-CS-Fixer/PHP-CS-Fixer@v3.95.23...v3.95.24

... (truncated)

Changelog

Sourced from friendsofphp/php-cs-fixer's changelog.

Changelog for v3.95.26

  • perf: Use dedicated sequence matcher in simplified_if_return (#9763)
  • DX: add XDEBUG for PHP 8.5 docker build (#9841)
  • chore: ConfigInterface - document TODO for v4 (#9845)
  • chore: drop benchmark.sh in favour of phpbench (#9849)
  • chore: stalebot - exclude RTM labels (#9843)
  • deps: bump dev-deps (#9840)
  • deps: explicitly expect PHPUnit 13.3+ over 13.0.x (#9842)
  • deps: update dev deps (#9848)
  • docs: do not promote deprecated path argument usage with --path-mode=override (#9850)
  • docs: simpler docs for parallel execution, as it's default one nowadays (#9851)

Changelog for v3.95.25

  • fix: handle missing terminator after ?? in AssignNullCoalescingToCoalesceEqualFixer (#9831)
  • fix: IsNullFixer - do not fix is_null() calls using argument unpacking (#9830)
  • fix: IsNullFixer - handle is_null() calls using named arguments (#9828)
  • UX: init - use outlined messages (#9826)
  • deps: bump crate-ci/typos from 1.49.0 to 1.50.1 in /.github/workflows in the all group across 1 directory (#9824)
  • deps: bump phpstan/phpstan from 2.2.9 to 2.2.12 in /dev-tools in the phpstan group (#9822)
  • deps: bump shipmonk/dead-code-detector from 1.3.3 to 1.4.0 in /dev-tools in the shipmonk group across 1 directory (#9823)

Changelog for v3.95.24

  • fix: ControlStructureBracesFixer - do not read a body starting with a parenthesis as a condition (#9815)
  • UX: init - add handling of .gitignore (#9813)
  • UX: init - add sections (#9819)
  • UX: init - command improvements (#9807)
  • UX: init - fix typos and improve wording (#9820)
  • UX: init command - suggest php_unit_test_case_static_method_calls rule (#9810)
  • chore: Fixer name must not be empty (#9756)
  • chore: DescribeCommand - replace dynamic method calls with explicit ones (#9817)
  • chore: PhpdocOrderFixer - fix type of duplicated tags passed to naturalLanguageJoin (#9818)
  • CI: fix warning - Unexpected input(s) 'extensions' (#9809)
  • CI: introduce PHPBench (#9755)
  • refactor: init - move content preparation to helper method (#9812)

Changelog for v3.95.23

  • fix: FunctionsAnalyzer - detect return type of a closure with a use clause (#9806)

Changelog for v3.95.22

  • fix: StaticLambdaFixer - do not make a lambda static when it is the direct subject of bindTo() or call() (#9802)

... (truncated)

Commits
  • 11839df prepared the 3.95.26 release
  • c84d44a docs: simpler docs for parallel execution, as it's default one nowadays (#9851)
  • d3fedb2 docs: do not promote deprecated path argument usage with `--path-mode=overr...
  • 934fdad chore: drop benchmark.sh in favour of phpbench (#9849)
  • 00c022d perf: Use dedicated sequence matcher in simplified_if_return (#9763)
  • 9f448d6 deps: update dev deps (#9848)
  • 1e57830 chore: ConfigInterface - document TODO for v4 (#9845)
  • 6ff6891 chore: stalebot - exclude RTM labels (#9843)
  • deb4e5c deps: explicitly expect PHPUnit 13.3+ over 13.0.x (#9842)
  • b1650a0 deps: bump dev-deps (#9840)
  • Additional commits viewable in compare view

Updates haydenpierce/class-finder from 0.5.3 to 0.6.0
Updates testcontainers/testcontainers from 1.0.3 to 1.1.0

Release notes

Sourced from testcontainers/testcontainers's releases.

1.1.0

What's Changed

New Contributors

Full Changelog: testcontainers/testcontainers-php@1.0.10...1.1.0

1.0.10

What's Changed

Full Changelog: testcontainers/testcontainers-php@1.0.9...1.0.10

1.0.9

What's Changed

New Contributors

Full Changelog: testcontainers/testcontainers-php@1.0.8...1.0.9

1.0.8

What's Changed

New Contributors

Full Changelog: testcontainers/testcontainers-php@1.0.7...1.0.8

1.0.7

What's Changed

New Contributors

Full Changelog: testcontainers/testcontainers-php@1.0.6...1.0.7

... (truncated)

Commits
  • 551f3fa Merge pull request #74 from testcontainers/chore/phpstan-2
  • 969bb44 chore: require docker-php >=1.45.7 and docker-php-api >=7.1.45.5
  • ed5b91b chore: upgrade PHPStan to 2.x and fix reported errors
  • 01f7f8b Merge pull request #73 from codedmonkey/mount-fix
  • f441892 fix: use class methods to construct mount
  • a9dfb00 Merge pull request #72 from testcontainers/dependabot/pip/mkdocs-material-9.7.7
  • cfacffd chore(deps): bump mkdocs-material from 9.7.5 to 9.7.7
  • ef87d08 Merge pull request #71 from mchojrin/patch-1
  • b0b31d1 Add autoload requirement for Postgres module
  • 9c56186 Merge pull request #70 from nightio/copy-order-change
  • Additional commits viewable in compare view

Updates vlucas/phpdotenv from 5.6.2 to 5.7.0

Release notes

Sourced from vlucas/phpdotenv's releases.

v5.7.0

What's Changed

New Contributors

Full Changelog: phpdotenv/phpdotenv@v5.6.4...v5.7.0

V5.6.4 (06/07/2026)

We announce the immediate availability V5.6.4.

Changes

  • Pass explicit trim characters ahead of PHP 8.6 (416df702837983f8d5ff48c9c3fee4f5f57b980b)

V5.6.3 (27/12/2025)

We announce the immediate availability V5.6.3.

Changes

  • Add official support for PHP 8.5 (cd59ef0935168961aa100678fb61c8fd4d1044a0, 955e7815d677a3eaa7075231212f2110983adecc)
Commits
  • 301c079 Resolve the remaining static analysis baseline entries (#614)
  • 5d0bb3b Document the real parsing, nesting, comment, escape and validation rules (#609)
  • 4426075 Stop comments from starting multiline values (#615)
  • eec19ee Add regression tests for existing behaviour (#608)
  • 226b4ed Improve diagnostics and messages (#607)
  • 4f84f7e Strip a leading UTF-8 byte order mark from string content (#606)
  • 4b900c5 Resolve nested variables without re-copying the value prefix (#605)
  • dd5b391 Remove quadratic value parsing (#604)
  • 46d5ce3 Skip environment writes and reads for names or values containing a null byte ...
  • 8bf174e Fix memory-safety crash on invalid UTF-8 variable names (#602)
  • Additional commits viewable in compare view

Updates rector/rector from 2.2.14 to 2.6.7

Release notes

Sourced from rector/rector's releases.

Released Rector 2.6.7

Agentic Experience

This release improves Rector for automated, CI and non-interactive workflows: validate configuration without processing files, limit the amount of changes per run, select multiple rules at once, and get more useful machine-readable output.

  • Bump PHPStan to ^2.2.14 and PHP-Parser to ^5.9, regenerate preload (#8491)

New validate-config command (#8450, #8452)

New validate-config command checks rector.php for configuration issues without processing any source files.

vendor/bin/rector validate-config

It reports deprecated rules and configuration, invalid skips, duplicated rule registrations and other config hygiene issues. A valid config exits with 0, while detected issues exit with 1, so the command can be used directly as a CI gate.

For machine-readable output:

vendor/bin/rector validate-config --output-format=json
{
    "valid": true,
    "issue_count": 0
}

Limit a run with --max-changes (#8449)

New --max-changes option lets automated runs process changes in smaller batches:

vendor/bin/rector process --dry-run --max-changes=50

The limit counts applied rule changes rather than files. The current file is always finished before Rector stops, so the final number may be slightly above the requested limit.

Run multiple rules with --only (#8451)

--only can now be repeated to run several selected rules in a single pass:

vendor/bin/rector process \
    --only=App\\Rector\\FooRector \
    --only=App\\Rector\\BarRector

... (truncated)

Commits
  • f4aa224 Rector 2.6.7
  • 668bc22 Updated Rector to commit 85a5406bd628b1eb1d53c529e53ef33b873e1fb9
  • 9d41ae7 Updated Rector to commit 71a969fbd931a4f206a504d981e2aa7543dd2351
  • a2c6be3 Updated Rector to commit 71a969fbd931a4f206a504d981e2aa7543dd2351
  • a6b4c3e Updated Rector to commit 6d8240575626342682a62f2c6f016f1579cca59e
  • 11f9ea3 Updated Rector to commit 9c56f19713758c6f4cfd534a17bf5c9f91a52bb9
  • 7d3b83f Updated Rector to commit 222bbf2f4e10e311a826a5375b0726c5bd4cf124
  • 21ace77 Updated Rector to commit c6d15cd2c8f8a6684f48a9ab45db34934c3b4a75
  • e5bdae7 Updated Rector to commit 15412f07928be9b60f752facb1397ebe25f034f9
  • 3c05554 Updated Rector to commit 15412f07928be9b60f752facb1397ebe25f034f9
  • Additional commits viewable in compare view

Updates phpstan/phpstan from 2.1.33 to 2.2.15

Commits

Updates icanhazstring/composer-unused from 0.9.5 to 0.9.6

Release notes

Sourced from icanhazstring/composer-unused's releases.

0.9.6

What's Changed

New Contributors

Full Changelog: composer-unused/composer-unused@0.9.5...0.9.6

Commits
  • c60030a Up CI to php 8.5
  • 8e07d4e chore: Drop composer.lock
  • 2ff3811 Symfony 8 support
  • 2e01ef8 github-actions(deps): bump the dependencies group across 1 directory with 3 u...
  • b904f88 Use major version tag for shivammathur/setup-php action
  • ba9f5f1 build(deps-dev): bump paragonie/sodium_compat in /vendor-bin/box
  • 0c3595a build(deps-dev): bump symfony/process in /vendor-bin/box
  • 00e1918 composer(deps-dev): bump the dependencies group across 1 directory with 4 upd...
  • 4b55573 Add support for webmozart/assert 2.0
  • 6283924 composer(deps-dev): bump the dependencies group across 1 directory with 4 upd...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the composer-version-updates group across 1 directo…
ab405ad 
…ry with 9 updates

---
updated-dependencies:
- dependency-name: firebase/php-jwt
  dependency-version: 7.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: composer-version-updates
- dependency-name: league/oauth2-client
  dependency-version: 2.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: composer-version-updates
- dependency-name: friendsofphp/php-cs-fixer
  dependency-version: 3.95.26
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: composer-version-updates
- dependency-name: haydenpierce/class-finder
  dependency-version: 0.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: composer-version-updates
- dependency-name: testcontainers/testcontainers
  dependency-version: 1.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: composer-version-updates
- dependency-name: vlucas/phpdotenv
  dependency-version: 5.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: composer-version-updates
- dependency-name: rector/rector
  dependency-version: 2.6.7
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: composer-version-updates
- dependency-name: phpstan/phpstan
  dependency-version: 2.2.15
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: composer-version-updates
- dependency-name: icanhazstring/composer-unused
  dependency-version: 0.9.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: composer-version-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update PHP code labels Sep 24, 2026
@github-actions

github-actions Bot commented Sep 24, 2026

Copy link
Copy Markdown
Contributor

Qodana for PHP

13 new problems were found

Inspection name Severity Problems
Check the PHP source code coverage 🔶 Warning 4
Unhandled exception ◽️ Notice 9 
@@ Code coverage @@
+ 87% total lines covered
314 lines analyzed, 275 lines covered
# Calculated according to the filters of your coverage tool

💡 Qodana analysis was run in the pull request mode: only the changed files were checked
☁️ View the detailed Qodana report

Contact Qodana team

Contact us at qodana-support@jetbrains.com

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file php Pull requests that update PHP code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants