Skip to content

Bump the composer-non-major group across 1 directory with 10 updates - #1577

Closed
dependabot[bot] wants to merge 1 commit into
1.8from
dependabot/composer/composer-non-major-92a6d242ef
Closed

Bump the composer-non-major group across 1 directory with 10 updates#1577
dependabot[bot] wants to merge 1 commit into
1.8from
dependabot/composer/composer-non-major-92a6d242ef

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 21, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the composer-non-major group with 10 updates in the / directory:

Package From To
api-platform/core 4.3.15 4.3.17
doctrine/dbal 4.4.3 4.4.4
mtdowling/jmespath.php 2.9.1 2.9.2
twig/twig 3.27.1 3.28.0
friendsofphp/php-cs-fixer 3.95.11 3.95.15
igor-php/igor-php 0.7.0 0.8.1
phpunit/php-code-coverage 14.2.2 14.2.3
phpunit/phpunit 13.2.1 13.2.4
rector/rector 2.5.2 2.5.7
zenstruck/foundry 2.10.1 2.10.3

Updates api-platform/core from 4.3.15 to 4.3.17

Release notes

Sourced from api-platform/core's releases.

v4.3.17

What's Changed

Full Changelog: api-platform/core@v4.3.16...v4.3.17

v4.3.16

What's Changed

Full Changelog: api-platform/core@v4.3.15...v4.3.16

Changelog

Sourced from api-platform/core's changelog.

v4.3.17

Bug fixes

  • 079c7461f fix(openapi): don't inherit name converter from a possibly-missing Symfony parent (#8386)
  • 3d48a4aa4 fix(serializer): preserve denormalization errors for nullable object properties (#8393)
  • 56de59737 fix(doctrine): fetch_data=false reference for stateOptions resources (#8387)
  • b396ff938 fix(serializer): report enum backing type in denormalization violations (#8389)

v4.3.16

Bug fixes

  • 328cb67ce fix(symfony): don't expose entrypoint in openapi format (#8383)
  • 340e982c2 fix(test): remove stale phpstan ignores in CollectionNormalizerTest (#8384)
  • 43e3b4cf7 fix(openapi): don't apply the global name converter to the generated document (#8360)
  • 48e8f9781 fix(doctrine): use PHP property name in DQL for modern filters with name converter (#8382)
  • 66829859f fix(doctrine): support filtering scalar enum columns by IRI (#8358)
  • 71918e464 fix(jsonschema): respect readableLink for resource-typed properties on non-resource parents (#8362)
  • 798b4cc53 fix(serializer): denormalize nullable collections of enums/objects (#8381)
  • a9c1b538c fix: clone Parameters before mutation in security and validator providers (#8378)
  • f1f33cac9 fix(ci): link monorepo root in laravel e2e so siblings resolve from working tree (#8363)
  • f9d3706bb fix(mcp): make tools/list resilient to an empty registry (#8371)
  • fe84af236 fix(symfony): allow null $data in PlaceholderAction (#8359)
Commits
  • 815f7f4 doc: changelog 4.3.17
  • 3d48a4a fix(serializer): preserve denormalization errors for nullable object properti...
  • b396ff9 fix(serializer): report enum backing type in denormalization violations (#8389)
  • 079c746 fix(openapi): don't inherit name converter from a possibly-missing Symfony pa...
  • 56de597 fix(doctrine): fetch_data=false reference for stateOptions resources (#8387)
  • 95dd023 doc: changelog 4.3.16
  • 328cb67 fix(symfony): don't expose entrypoint in openapi format (#8383)
  • 340e982 fix(test): remove stale phpstan ignores in CollectionNormalizerTest (#8384)
  • 798b4cc fix(serializer): denormalize nullable collections of enums/objects (#8381)
  • 48e8f97 fix(doctrine): use PHP property name in DQL for modern filters with name conv...
  • Additional commits viewable in compare view

Updates doctrine/dbal from 4.4.3 to 4.4.4

Release notes

Sourced from doctrine/dbal's releases.

4.4.4

Release Notes for 4.4.4

4.4.4

  • Total issues resolved: 1
  • Total pull requests resolved: 18
  • Total contributors: 6

Bug,Error Handling,PostgreSQL

Bug,MySQL,Schema Introspection

Schema Definition,Test Suite

Bug,Indexes,Schema Definition

Static Analysis,Test Suite

Connections,Error Handling,Test Suite

Identifiers,Schema Introspection,Schema Management,Test Suite

Connections,Drivers,Results,Test Suite

Documentation,Test Suite

Platforms,Test Suite

... (truncated)

Commits
  • fb9e0ff Merge branch '3.10.x' into 4.4.x
  • c95589d fix(MariaDb): add support of new reserved word TO_DATE (12.3+) (#7391)
  • ff5c186 Merge tag '4.2.5' into 4.4.x
  • 6ea4f27 Merge pull request #7462 from morozov/fix-introspection-of-table-names-differ...
  • 7e086ed Distinguish table names differing only in case
  • 20af8cd Merge pull request #7458 from morozov/implicit-indexes-docs
  • fdec68d Explain the real reason implicit indexes exist
  • 1c8bfc4 Merge pull request #7453 from morozov/cover-core-value-objects
  • 28fd6b2 Cover renameColumn reuse of unaffected objects
  • 00276ae Test object set re-keying on rename and removal
  • Additional commits viewable in compare view

Updates mtdowling/jmespath.php from 2.9.1 to 2.9.2

Release notes

Sourced from mtdowling/jmespath.php's releases.

2.9.2

  • Pass explicit trim characters ahead of the PHP 8.6 trim default change.
Changelog

Sourced from mtdowling/jmespath.php's changelog.

2.9.2 - 2026-07-06

  • Pass explicit trim characters ahead of the PHP 8.6 trim default change.
Commits

Updates twig/twig from 3.27.1 to 3.28.0

Release notes

Sourced from twig/twig's releases.

v3.28.0

Changelog (twigphp/Twig@v3.27.1...v3.28.0)

  • bug #4850 Render backed enums using their backing value in the html_attr function (@​fabpot)
  • minor #4845 Add documention note about variable scope of override blocks in { embed ... only } (@​andy-blum)
  • minor #4843 Define macros at the template root in the cache macro fixture (@​fabpot)
  • bug #4841 Fix Markup truthiness in boolean expressions (@​xtrime-ru)
  • bug #4842 Fix a PHP 8.5 chr() deprecation when decoding octal string escapes (@​austinderrick)
  • feature #4292 Introduce a CorrectnessNodeVisitor to validate that templates are semantically correct (@​fabpot)
  • feature #4840 Mark Markup as final (@​fabpot)
  • feature #4838 Allow calling a macro with a dynamic name via the dot operator (@​fabpot)
  • bug #4835 Fix markdown_to_html mangling content that starts with a blank line (@​fabpot)
  • feature #4819 Add an allow-list for tests to the sandbox security policy (@​fabpot)
  • minor #4837 Reduce memory usage of the context restoration compiled at the end of for loops (@​fabpot)
  • feature #4816 Add an always_allowed_in_sandbox flag for filters, functions, and tags (@​fabpot)
  • feature #4834 Track the source offset of each token and expose it in syntax errors (@​fabpot)
  • minor #4836 Document how to customize the markdown_to_html converter (@​fabpot)
  • minor #4662 CoreExtension::getAttribute: small improvement regarding getter/isser/hasser (@​gharlan)
  • bug #4825 Make the include() function return a Markup object (@​fabpot)
  • bug #4830 Fix nested block() resolution when a directly rendered block calls parent() (@​fabpot)
  • minor #4827 Document {#--#} as the replacement for the deprecated spaceless filter (@​fabpot)
  • bug #4828 Stop reporting a skipped test in IntegrationTestCase when there is no legacy test to run (@​fabpot)
  • minor #4829 Document storing an enum in a variable to avoid repeating its FQCN (@​fabpot)
  • bug #4824 Cast printed expressions to string so values that cannot be converted to a string (arrays, non-Stringable objects, ...) report a usable stack trace at the print location (@​stof, @​fabpot)
  • feature #4826 Make IntegrationTestCase and NodeTestCase compatible with PHPUnit 11 (@​fabpot)
  • feature #4823 Skip the sandbox __toString check on arguments whose PHP parameter type cannot implicitly coerce to string (@​fabpot)
Changelog

Sourced from twig/twig's changelog.

3.28.0 (2026-07-03)

  • Render backed enums using their backing value in the html_attr function
  • Fix empty Markup values being treated as truthy in and, or, xor, not, ternary, and elvis expressions
  • Fix a PHP 8.5 chr() deprecation when decoding an octal string escape sequence larger than \377 (such as "\777")
  • Mark Twig\Markup as @final; it will be final in Twig 4.0
  • Reduce memory usage and speed up the context restoration compiled at the end of for loops
  • Allow calling a macro with a dynamic name via the dot operator (macros.(name)(args))
  • Report the column number in syntax errors and expose it via Error::getTemplateColumn()
  • Track the source offset of each token and expose it via Token::getOffset()
  • Fix nested block() calls to resolve against the overriding template when a block rendered through block(name, template) calls parent()
  • Deprecate the possibility to use a block tag within a capture node (like set)
  • Deprecate the possibility to use a block tag within a capture node (like set) in child templates
  • Deprecate using a macro, extends, or use tag outside the root of a template
  • Stop reporting a skipped test in IntegrationTestCase when there is no legacy test to run
  • Fix markdown_to_html to strip the indentation shared by all lines instead of mangling content that starts with a blank line
  • Make the IntegrationTestCase and NodeTestCase test helpers compatible with PHPUnit 11
  • Cast printed expressions to string so values that cannot be converted to a string (arrays, non-Stringable objects, ...) report a usable stack trace at the print location
  • Make the include() function return a Markup object so an assigned result is not re-escaped when printed
  • Skip the sandbox __toString check on arguments whose PHP parameter type cannot implicitly coerce to string
  • Document the criteria for marking a callable or tag as always allowed in a sandbox, and the list of built-in tags, filters, and functions that will be always allowed in Twig 4.0
  • Add an always_allowed_in_sandbox option for filters, functions, and tests, and an isAlwaysAllowedInSandbox() method for token parsers, to let authors mark callables and tags that are always allowed in sandbox mode without explicit allow-listing
  • Add an allow-list for tests to Twig\Sandbox\SecurityPolicy, with the safe built-in tests flagged as always allowed so they keep working without allow-listing
Commits
  • 597c12e Prepare the 3.28.0 release
  • 6a175a5 bug #4850 Render backed enums using their backing value in the html_attr func...
  • 9323a82 Render backed enums using their backing value in the html_attr function
  • ec0f5d5 Tweak previous merge
  • 4007231 minor #4845 Add documention note about variable scope of override blocks in {...
  • 068a2e6 Add documention note about variable scope of override blocks in {% embed ... ...
  • f6152fe minor #4843 Define macros at the template root in the cache macro fixture (fa...
  • 424d2f1 Define the macro at the template root in the cache macro fixture
  • e3b8e15 Update CHANGELOG
  • 2f202b0 bug #4841 Fix Markup truthiness in boolean expressions (xtrime-ru)
  • Additional commits viewable in compare view

Updates friendsofphp/php-cs-fixer from 3.95.11 to 3.95.15

Release notes

Sourced from friendsofphp/php-cs-fixer's releases.

v3.95.15 Adalbertus

What's Changed

Full Changelog: PHP-CS-Fixer/PHP-CS-Fixer@v3.95.14...v3.95.15

v3.95.14 Adalbertus

What's Changed

Full Changelog: PHP-CS-Fixer/PHP-CS-Fixer@v3.95.13...v3.95.14

v3.95.13 Adalbertus

What's Changed

Full Changelog: PHP-CS-Fixer/PHP-CS-Fixer@v3.95.12...v3.95.13

v3.95.12 Adalbertus

What's Changed

Full Changelog: PHP-CS-Fixer/PHP-CS-Fixer@v3.95.11...v3.95.12

Changelog

Sourced from friendsofphp/php-cs-fixer's changelog.

Changelog for v3.95.15

  • fix: self-update - fix "Access Denied" error when running on Windows (#9731)

Changelog for v3.95.14

  • fix: ClassAttributesSeparationFixer - handle property with hooks as last class element (#9724)
  • fix: SingleClassElementPerStatementFixer - do not break PHP syntax when splitting properties with disjunctive normal form type (#9723)
  • fix: TrailingCommaInMultilineFixer - do not add trailing comma after first-class callable (#9722)
  • chore: add code coverage ignore annotations to parallel runner and worker (#9721)
  • chore: cleanup FunctionToConstantFixer (#9719)
  • test: HeaderCommentFixerTest - improve invalid configuration types (#9728)
  • test: ClassDefinitionFixerTest - improve PHPDocs (#9726)
  • test: ConfigurationResolverTest - fix types (#9725)
  • test: GeneralAttributeRemoveFixerTest - improve data provider types (#9727)
  • test: ProjectCodeTest - improve PHPDocs (#9730)
  • deps: allow to run PHPUnit v12 directly for project, without future-ready CI workarounds (#9580)
  • deps: bump shipmonk/dead-code-detector from 1.3.0 to 1.3.1 in /dev-tools in the shipmonk group across 1 directory (#9718)
  • deps: bump the phpstan group in /dev-tools with 2 updates (#9717)

Changelog for v3.95.13

  • fix: SelfAccessorFixer - do not replace constant with same name as class in the middle of a static access chain (#9716)
  • fix: SingleClassElementPerStatementFixer - do not drop type of typed constants (#9706)

Changelog for v3.95.12

  • fix: BinaryOperatorSpacesFixer - do not align nested array in yield with following yields (#9708)
  • chore: cleanup RuleSetDocumentationGenerator (#9705)
  • chore: unblock self-approval (#9699)
  • deps: bump crate-ci/typos from 1.47.2 to 1.48.0 in /.github/workflows in the all group across 1 directory (#9712)
  • deps: bump shipmonk/dead-code-detector from 1.2.1 to 1.3.0 in /dev-tools in the shipmonk group across 1 directory (#9711)
  • deps: bump the all group across 2 directories with 1 update (#9704)
  • deps: bump the phpstan group in /dev-tools with 2 updates (#9710)
  • deps: PHPUnit - PHP 8.6 compat changes (#9714)
Commits
  • 3e47e5d prepared the 3.95.15 release
  • 5eeae8d fix: self-update - fix "Access Denied" error when running on Windows (#9731)
  • 8153d49 bumped version
  • beee274 prepared the 3.95.14 release
  • 4b1d95d deps: allow to run PHPUnit v12 directly for project, without future-ready CI ...
  • 4796020 test: ProjectCodeTest - improve PHPDocs (#9730)
  • e8af9ca fix: SingleClassElementPerStatementFixer - do not break PHP syntax when spl...
  • b858858 fix: ClassAttributesSeparationFixer - handle property with hooks as last cl...
  • 6a461b9 fix: TrailingCommaInMultilineFixer - do not add trailing comma after first-...
  • 177aa71 test: HeaderCommentFixerTest - improve invalid configuration types (#9728)
  • Additional commits viewable in compare view

Updates igor-php/igor-php from 0.7.0 to 0.8.1

Release notes

Sourced from igor-php/igor-php's releases.

v0.8.1

Changelog

  • 1c333bf55b297b32158349f5961dd12b89007b59 fix: robustly parse reflection mapping by isolating stdout/stderr (#39) (#40)

v0.8.0

Changelog

  • 90dcc5df689614101893c076b023b83651babbbe feat: dynamically resolve binary name in help and version outputs (#37)
  • 46a7ee71b0439e8060c5ba3f71f417c053561d76 feat: generic --container-dump bridge for non-Symfony frameworks (#33)
  • 6e2584eebbecb1cb102f4ce8ac6ce183d2db1081 feat: restrict audit to services when Symfony is detected (#36)

What's Changed

New Contributors

Full Changelog: igor-php/igor-php@v0.7.0...v0.8.0

Commits
  • 1c333bf fix: robustly parse reflection mapping by isolating stdout/stderr (#39) (#40)
  • 90dcc5d feat: dynamically resolve binary name in help and version outputs (#37)
  • 6e2584e feat: restrict audit to services when Symfony is detected (#36)
  • 46a7ee7 feat: generic --container-dump bridge for non-Symfony frameworks (#33)
  • See full diff in compare view

Updates phpunit/php-code-coverage from 14.2.2 to 14.2.3

Release notes

Sourced from phpunit/php-code-coverage's releases.

phpunit/php-code-coverage 14.2.3

Fixed

  • #1240: Dark-mode HTML report: Warning and Danger backgrounds are indistinguishable for colorblind users
  • #1244: Do not build code unit map when test has no coverage targets
Changelog

Sourced from phpunit/php-code-coverage's changelog.

ChangeLog

All notable changes are documented in this file using the Keep a CHANGELOG principles.

14.3.0 - 2026-08-07

Added

  • #1140: Class-oriented HTML report
  • #1141: Improve visualization of branch coverage and path coverage in the HTML report
  • #1153: Filter HTML code coverage report by test size
  • #1210: Filesystem-based targeting
  • #1231: Identify dead code using static analysis
  • Record how often a test executed a line or traversed a branch or path (the <covered> elements of the XML report now have a count attribute; drivers that do not collect hit counts report 1)

Changed

  • #1259: Degrade gracefully when a source file cannot be parsed
  • The serialization format for .cov files was bumped from version 1 to version 2; files serialized with previous versions cannot be loaded or merged any more

Fixed

  • #1258: Coverage of less than 100% can be displayed as 100.00% due to rounding
Commits
  • 82f6e49 Prepare release
  • edd4603 Update dependency phpstan/phpstan to ^2.2.5
  • 0ac6e38 Update dependency nikic/php-parser to ^5.8.0
  • 592a1c2 Update dependency phpstan/phpstan-phpunit to ^2.0.18
  • 7fa079b Update dependency phpstan/phpstan to ^2.2.4
  • ade0ea3 Merge branch '12.5'
  • 650e11b Update ChangeLog
  • 21a8808 Do not build code unit map when test only has uses targets
  • d342c69 Do not build code unit map when test has no coverage targets
  • 4119e03 Update PHPStan packages
  • Additional commits viewable in compare view

Updates phpunit/phpunit from 13.2.1 to 13.2.4

Release notes

Sourced from phpunit/phpunit's releases.

PHPUnit 13.2.4

Fixed

  • #6817: Issue is reported even when previously registered error handler turns the error into an exception
  • #6818: Issue is reported when custom error handler checks error_reporting() output dynamically

Learn how to install or update PHPUnit 13.2 in the documentation.

Keep up to date with PHPUnit:

PHPUnit 13.2.3

Changed

  • #6797: Adapt code generated for test double of interface with constructor for PHP 8.6

Learn how to install or update PHPUnit 13.2 in the documentation.

Keep up to date with PHPUnit:

PHPUnit 13.2.2

Fixed

  • #6768: Negative priorities for hook methods are rejected by static analysis
  • #6778: Deprecation triggered outside of tests cannot be ignored

Learn how to install or update PHPUnit 13.2 in the documentation.

Keep up to date with PHPUnit:

Changelog

Sourced from phpunit/phpunit's changelog.

[13.2.4] - 2026-07-08

Fixed

  • #6817: Issue is reported even when previously registered error handler turns the error into an exception
  • #6818: Issue is reported when custom error handler checks error_reporting() output dynamically

[13.2.3] - 2026-07-06

Changed

  • #6797: Adapt code generated for test double of interface with constructor for PHP 8.6

[13.2.2] - 2026-06-29

Fixed

  • #6768: Negative priorities for hook methods are rejected by static analysis
  • #6778: Deprecation triggered outside of tests cannot be ignored
Commits

Updates rector/rector from 2.5.2 to 2.5.7

Release notes

Sourced from rector/rector's releases.

Released Rector 2.5.7

This release sharpens the PHPUnit code-quality sets, adds a focused narrow asserts set, deprecates two blurry Symfony web-test rules, and fixes a handful of docblock false-positives in dead-code removal.

New Features 🎉

PHPUnit: PHPUNIT_NARROW_ASSERTS set

A new set focused on narrowing broad asserts to their specific, more descriptive method — e.g. assertTrue(isset($a['b'])) → assertArrayHasKey('b', $a). ([rector-phpunit #716])

use Rector\PHPUnit\Set\PHPUnitSetList;
return RectorConfig::configure()
->withSets([PHPUnitSetList::PHPUNIT_NARROW_ASSERTS]);

withPreparedSets() gains phpunitNarrowAsserts + phpunitMockToStub

The 2 PHPUnit sets are now toggleable like any other prepared set. (#8178)

return RectorConfig::configure()
    ->withPreparedSets(
        phpunitNarrowAsserts: true,
        phpunitMockToStub: true,
    );

PHPUnit: flip with($this->callback(...)) on void methods to willReturnCallback()

VoidMethodWithCallbackToWillReturnCallbackRector (renamed + refocused) drops the pointless return value and types the closure as void, matching the mocked void method. ([rector-phpunit #724])

 $this->createMock(SomeClass::class)
     ->method('run')
-    ->with($this->callback(function ($arg) {
-        echo $arg;
-
-        return true;
-    }));
+    ->willReturnCallback(function ($arg): void {
+        echo $arg;
+    });

... (truncated)

Commits
  • ba22f8c Rector 2.5.7
  • 1109537 Updated Rector to commit 653ec233fa55057fb11a6c133ed5c8d57dec9ff2
  • e363554 Updated Rector to commit 3c481b689cd746323dfad98782cd7939f28035e4
  • fb62051 Updated Rector to commit 3c481b689cd746323dfad98782cd7939f28035e4
  • 561c81c Updated Rector to commit 51d61737c5fbaed10c5f711bbc8074720452417e
  • 9f3ea3a Updated Rector to commit e713102f40682bc65311d3a50e5490e6acc452f3
  • 78b5c28 Updated Rector to commit 306b852af3e4d0045034a6865bffe311ccdf38c9
  • 4bb232c Updated Rector to commit 0e269a0d17470ec8331efb518efcfd5fa6e7162d
  • eab289b Updated Rector to commit cc1a748e25adb989f2cf42f0329792810d79d216
  • 4ebe4bc Updated Rector to commit ed944a11e6e3a83bac0f9e1f4a413bcc7153fca7
  • Additional commits viewable in compare view

Updates zenstruck/foundry from 2.10.1 to 2.10.3

Release notes

Sourced from zenstruck/foundry's releases.

v2.10.3

Minor BC break: state computed by PrePersist listeners is no longer visible from hooks with default priority

Previously, objects created by nested factories were passed to $em->persist() during the creation of the object graph. Their PrePersist listeners could therefore observe — and even corrupt (#1115) — a half-built graph, but it also meant their side effects (e.g. a field computed in the listener) were already applied when your afterInstantiate() hooks ran.

Persistence is now deferred until the whole object graph is instantiated and wired, so hooks with default priority run before any lifecycle event has been triggered. If one of your hooks reads state computed by a PrePersist listener, give it a priority lower than PersistentObjectFactory::PRIORITY_SCHEDULE_FOR_INSERT:

use Zenstruck\Foundry\Persistence\PersistentObjectFactory;
OrderItemFactory::new()
->afterInstantiate(function(OrderItem $item): void {
// computed in Order's PrePersist listener — visible ...
Description has been truncated

@dependabot
Bump the composer-non-major group across 1 directory with 10 updates
8ab9275 
Bumps the composer-non-major group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [api-platform/core](https://github.com/api-platform/core) | `4.3.15` | `4.3.17` |
| [doctrine/dbal](https://github.com/doctrine/dbal) | `4.4.3` | `4.4.4` |
| [mtdowling/jmespath.php](https://github.com/jmespath/jmespath.php) | `2.9.1` | `2.9.2` |
| [twig/twig](https://github.com/twigphp/Twig) | `3.27.1` | `3.28.0` |
| [friendsofphp/php-cs-fixer](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer) | `3.95.11` | `3.95.15` |
| [igor-php/igor-php](https://github.com/igor-php/igor-php) | `0.7.0` | `0.8.1` |
| [phpunit/php-code-coverage](https://github.com/sebastianbergmann/php-code-coverage) | `14.2.2` | `14.2.3` |
| [phpunit/phpunit](https://github.com/sebastianbergmann/phpunit) | `13.2.1` | `13.2.4` |
| [rector/rector](https://github.com/rectorphp/rector) | `2.5.2` | `2.5.7` |
| [zenstruck/foundry](https://github.com/zenstruck/foundry) | `2.10.1` | `2.10.3` |



Updates `api-platform/core` from 4.3.15 to 4.3.17
- [Release notes](https://github.com/api-platform/core/releases)
- [Changelog](https://github.com/api-platform/core/blob/main/CHANGELOG.md)
- [Commits](api-platform/core@v4.3.15...v4.3.17)

Updates `doctrine/dbal` from 4.4.3 to 4.4.4
- [Release notes](https://github.com/doctrine/dbal/releases)
- [Commits](doctrine/dbal@4.4.3...4.4.4)

Updates `mtdowling/jmespath.php` from 2.9.1 to 2.9.2
- [Release notes](https://github.com/jmespath/jmespath.php/releases)
- [Changelog](https://github.com/jmespath/jmespath.php/blob/master/CHANGELOG.md)
- [Commits](jmespath/jmespath.php@2.9.1...2.9.2)

Updates `twig/twig` from 3.27.1 to 3.28.0
- [Release notes](https://github.com/twigphp/Twig/releases)
- [Changelog](https://github.com/twigphp/Twig/blob/3.x/CHANGELOG)
- [Commits](twigphp/Twig@v3.27.1...v3.28.0)

Updates `friendsofphp/php-cs-fixer` from 3.95.11 to 3.95.15
- [Release notes](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/releases)
- [Changelog](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/blob/master/CHANGELOG.md)
- [Commits](PHP-CS-Fixer/PHP-CS-Fixer@v3.95.11...v3.95.15)

Updates `igor-php/igor-php` from 0.7.0 to 0.8.1
- [Release notes](https://github.com/igor-php/igor-php/releases)
- [Commits](igor-php/igor-php@v0.7.0...v0.8.1)

Updates `phpunit/php-code-coverage` from 14.2.2 to 14.2.3
- [Release notes](https://github.com/sebastianbergmann/php-code-coverage/releases)
- [Changelog](https://github.com/sebastianbergmann/php-code-coverage/blob/main/ChangeLog-14.3.md)
- [Commits](sebastianbergmann/php-code-coverage@14.2.2...14.2.3)

Updates `phpunit/phpunit` from 13.2.1 to 13.2.4
- [Release notes](https://github.com/sebastianbergmann/phpunit/releases)
- [Changelog](https://github.com/sebastianbergmann/phpunit/blob/13.2.4/ChangeLog-13.2.md)
- [Commits](sebastianbergmann/phpunit@13.2.1...13.2.4)

Updates `rector/rector` from 2.5.2 to 2.5.7
- [Release notes](https://github.com/rectorphp/rector/releases)
- [Commits](rectorphp/rector@2.5.2...2.5.7)

Updates `zenstruck/foundry` from 2.10.1 to 2.10.3
- [Release notes](https://github.com/zenstruck/foundry/releases)
- [Changelog](https://github.com/zenstruck/foundry/blob/2.x/CHANGELOG.md)
- [Commits](zenstruck/foundry@v2.10.1...v2.10.3)

---
updated-dependencies:
- dependency-name: api-platform/core
  dependency-version: 4.3.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: composer-non-major
- dependency-name: doctrine/dbal
  dependency-version: 4.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: composer-non-major
- dependency-name: mtdowling/jmespath.php
  dependency-version: 2.9.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: composer-non-major
- dependency-name: twig/twig
  dependency-version: 3.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: composer-non-major
- dependency-name: friendsofphp/php-cs-fixer
  dependency-version: 3.95.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: composer-non-major
- dependency-name: igor-php/igor-php
  dependency-version: 0.8.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: composer-non-major
- dependency-name: phpunit/php-code-coverage
  dependency-version: 14.2.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: composer-non-major
- dependency-name: phpunit/phpunit
  dependency-version: 13.2.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: composer-non-major
- dependency-name: rector/rector
  dependency-version: 2.5.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: composer-non-major
- dependency-name: zenstruck/foundry
  dependency-version: 2.10.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: composer-non-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update Php code labels Jul 21, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 22, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 22, 2026
@dependabot
dependabot Bot deleted the dependabot/composer/composer-non-major-92a6d242ef branch July 22, 2026 21:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file php Pull requests that update Php code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants