Bump the composer-non-major group across 1 directory with 11 updates by dependabot[bot] · Pull Request #1578 · benjaminjonard/koillection

dependabot · 2026-07-22T21:23:32Z

Bumps the composer-non-major group with 11 updates in the / directory:

Package	From	To
api-platform/core	`4.3.15`	`4.3.17`
doctrine/dbal	`4.4.3`	`4.4.4`
doctrine/doctrine-bundle	`3.2.4`	`3.3.0`
mtdowling/jmespath.php	`2.9.1`	`2.9.2`
twig/twig	`3.27.1`	`3.28.0`
friendsofphp/php-cs-fixer	`3.95.11`	`3.95.15`
igor-php/igor-php	`0.7.0`	`0.8.1`
phpunit/php-code-coverage	`14.2.2`	`14.2.3`
phpunit/phpunit	`13.2.1`	`13.2.4`
rector/rector	`2.5.2`	`2.5.7`
zenstruck/foundry	`2.10.1`	`2.10.3`

Updates api-platform/core from 4.3.15 to 4.3.17

Release notes

Sourced from api-platform/core's releases.

v4.3.17

What's Changed

fix(doctrine): fetch_data=false reference for stateOptions resources by @bendavies in api-platform/core#8387

fix(openapi): don't inherit name converter from a possibly-missing Symfony parent by @soyuka in api-platform/core#8386

fix(serializer): report enum backing type in denormalization violations by @soyuka in api-platform/core#8389

fix(serializer): preserve denormalization errors for nullable object properties by @bendavies in api-platform/core#8393

Full Changelog: api-platform/core@v4.3.16...v4.3.17

v4.3.16

What's Changed

fix(jsonschema): respect readableLink for resource-typed properties on non-resource parents by @wuchen90 in api-platform/core#8362

fix(doctrine): support filtering scalar enum columns by IRI by @soyuka in api-platform/core#8358

fix(ci): link monorepo root in laravel e2e so siblings resolve from working tree by @soyuka in api-platform/core#8363

fix(openapi): don't apply the global name converter to the generated document by @soyuka in api-platform/core#8360

fix(symfony): allow null $data in PlaceholderAction by @soyuka in api-platform/core#8359

fix: clone Parameters before mutation in security and validator providers by @ostrolucky in api-platform/core#8378

fix(mcp): make tools/list resilient to an empty registry by @soyuka in api-platform/core#8371

fix(doctrine): use PHP property name in DQL for modern filters with name converter by @soyuka in api-platform/core#8382

fix(serializer): denormalize nullable collections of enums/objects by @soyuka in api-platform/core#8381

fix(test): remove stale phpstan ignores in CollectionNormalizerTest by @soyuka in api-platform/core#8384

fix(symfony): don't expose entrypoint in openapi format by @soyuka in api-platform/core#8383

Full Changelog: api-platform/core@v4.3.15...v4.3.16

Changelog

Sourced from api-platform/core's changelog.

v4.3.17

Bug fixes

079c7461f fix(openapi): don't inherit name converter from a possibly-missing Symfony parent (#8386)

3d48a4aa4 fix(serializer): preserve denormalization errors for nullable object properties (#8393)

56de59737 fix(doctrine): fetch_data=false reference for stateOptions resources (#8387)

b396ff938 fix(serializer): report enum backing type in denormalization violations (#8389)

v4.3.16

Bug fixes

328cb67ce fix(symfony): don't expose entrypoint in openapi format (#8383)

340e982c2 fix(test): remove stale phpstan ignores in CollectionNormalizerTest (#8384)

43e3b4cf7 fix(openapi): don't apply the global name converter to the generated document (#8360)

48e8f9781 fix(doctrine): use PHP property name in DQL for modern filters with name converter (#8382)

66829859f fix(doctrine): support filtering scalar enum columns by IRI (#8358)

71918e464 fix(jsonschema): respect readableLink for resource-typed properties on non-resource parents (#8362)

798b4cc53 fix(serializer): denormalize nullable collections of enums/objects (#8381)

a9c1b538c fix: clone Parameters before mutation in security and validator providers (#8378)

f1f33cac9 fix(ci): link monorepo root in laravel e2e so siblings resolve from working tree (#8363)

f9d3706bb fix(mcp): make tools/list resilient to an empty registry (#8371)

fe84af236 fix(symfony): allow null $data in PlaceholderAction (#8359)

Commits

815f7f4 doc: changelog 4.3.17
3d48a4a fix(serializer): preserve denormalization errors for nullable object properti...
b396ff9 fix(serializer): report enum backing type in denormalization violations (#8389)
079c746 fix(openapi): don't inherit name converter from a possibly-missing Symfony pa...
56de597 fix(doctrine): fetch_data=false reference for stateOptions resources (#8387)
95dd023 doc: changelog 4.3.16
328cb67 fix(symfony): don't expose entrypoint in openapi format (#8383)
340e982 fix(test): remove stale phpstan ignores in CollectionNormalizerTest (#8384)
798b4cc fix(serializer): denormalize nullable collections of enums/objects (#8381)
48e8f97 fix(doctrine): use PHP property name in DQL for modern filters with name conv...
Additional commits viewable in compare view

Updates doctrine/dbal from 4.4.3 to 4.4.4

Release notes

Sourced from doctrine/dbal's releases.

4.4.4

Release Notes for 4.4.4

4.4.4

Total issues resolved: 1

Total pull requests resolved: 18

Total contributors: 6

Bug,Error Handling,PostgreSQL

7468: Fix with detection of connection lost in PostgreSQL is missing in newer releases thanks to @HaiD84

Bug,MySQL,Schema Introspection

7462: Distinguish table names differing only in case thanks to @morozov

Schema Definition,Test Suite

7453: Improve test coverage of TableEditor and OptionallyUnqualifiedNamedObjectSet thanks to @morozov

7413: Cover Table constraint lookup failures thanks to @morozov

Bug,Indexes,Schema Definition

7447: Apply index column length to the correct column thanks to @morozov

Static Analysis,Test Suite

7440: Tighten loose type annotations in tests thanks to @morozov

Connections,Error Handling,Test Suite

7437: Cover driver error handling on a broken connection thanks to @morozov

Identifiers,Schema Introspection,Schema Management,Test Suite

7436: Cover schema management edge cases thanks to @morozov

Connections,Drivers,Results,Test Suite

7435: Cover edge-case runtime behaviors thanks to @morozov

Documentation,Test Suite

7431: Point coverage badges at per-branch pages thanks to @morozov

Platforms,Test Suite

... (truncated)

Commits

fb9e0ff Merge branch '3.10.x' into 4.4.x
c95589d fix(MariaDb): add support of new reserved word TO_DATE (12.3+) (#7391)
ff5c186 Merge tag '4.2.5' into 4.4.x
6ea4f27 Merge pull request #7462 from morozov/fix-introspection-of-table-names-differ...
7e086ed Distinguish table names differing only in case
20af8cd Merge pull request #7458 from morozov/implicit-indexes-docs
fdec68d Explain the real reason implicit indexes exist
1c8bfc4 Merge pull request #7453 from morozov/cover-core-value-objects
28fd6b2 Cover renameColumn reuse of unaffected objects
00276ae Test object set re-keying on rename and removal
Additional commits viewable in compare view

Updates doctrine/doctrine-bundle from 3.2.4 to 3.3.0

Release notes

Sourced from doctrine/doctrine-bundle's releases.

3.3.0

Release Notes for 3.3.0

Feature release (minor)

3.3.0

Total issues resolved: 0

Total pull requests resolved: 9

Total contributors: 6

2259: Prepare the 3.3.0 release thanks to @derrabus

Improvement

2237: Display whether a query ran on a primary or replica in the profiler thanks to @MatTheCat

2224: Group large number of queries by default thanks to @HypeMC

2207: Don't use FQCN as service ids thanks to @nicolas-grekas

2204: Wire the clock argument of PostgreSqlNotifyOnIdleListener thanks to @nicolas-grekas

2203: Add proper target names to autowiring aliases thanks to @nicolas-grekas

Feature

2198: Wire PostgreSqlNotifyOnIdleListener for doctrine-messenger thanks to @nicolas-grekas

2197: Add #&[#91](https://github.com/doctrine/DoctrineBundle/issues/91);AsDbalType&[#93](https://github.com/doctrine/DoctrineBundle/issues/93); attribute thanks to @syl20b

2193: Wire the Console EntityValueResolver as a service thanks to @chalasr

3.2.5

Release Notes for 3.2.5

3.2.x bugfix release (patch)

3.2.5

Total issues resolved: 0

Total pull requests resolved: 2

Total contributors: 2

Bug

2256: Revert EventDispatcher downgrade thanks to @derrabus

2247: Add missing dependency thanks to @greg0ire

Changes from lower branches

This release contains all changes from the 2.18.4 release.

Commits

88ad384 Prepare the 3.3.0 release (#2259)
eb3ea68 Merge branch '3.2.x' into 3.3.x
f07f8fb Revert EventDispatcher downgrade (#2256)
3a01857 Merge branch '2.18.x' into 3.2.x
175f8ff Fix dark theme time bar colors in the profiler
2fdd0d6 Add ValueResolverInterface check for EntityValueResolver (#2254)
160e074 Display whether a query ran on a primary or replica in the profiler
cf306a7 Add missing dependency
d490179 Wire the Console EntityValueResolver as a service
940ff32 Merge branch '2.18.x' into 3.2.x
Additional commits viewable in compare view

Updates mtdowling/jmespath.php from 2.9.1 to 2.9.2

Release notes

Sourced from mtdowling/jmespath.php's releases.

2.9.2

Pass explicit trim characters ahead of the PHP 8.6 trim default change.

Changelog

Sourced from mtdowling/jmespath.php's changelog.

2.9.2 - 2026-07-06

Pass explicit trim characters ahead of the PHP 8.6 trim default change.

Commits

2157c5e Release 2.9.2
aa13a7b Freeze trim characters ahead of PHP 8.6 (#121)
See full diff in compare view

Updates twig/twig from 3.27.1 to 3.28.0

Release notes

Sourced from twig/twig's releases.

v3.28.0

Changelog (twigphp/Twig@v3.27.1...v3.28.0)

bug #4850 Render backed enums using their backing value in the html_attr function (@fabpot)

minor #4845 Add documention note about variable scope of override blocks in { embed ... only } (@andy-blum)

minor #4843 Define macros at the template root in the cache macro fixture (@fabpot)

bug #4841 Fix Markup truthiness in boolean expressions (@xtrime-ru)

bug #4842 Fix a PHP 8.5 chr() deprecation when decoding octal string escapes (@austinderrick)

feature #4292 Introduce a CorrectnessNodeVisitor to validate that templates are semantically correct (@fabpot)

feature #4840 Mark Markup as final (@fabpot)

feature #4838 Allow calling a macro with a dynamic name via the dot operator (@fabpot)

bug #4835 Fix markdown_to_html mangling content that starts with a blank line (@fabpot)

feature #4819 Add an allow-list for tests to the sandbox security policy (@fabpot)

minor #4837 Reduce memory usage of the context restoration compiled at the end of for loops (@fabpot)

feature #4816 Add an always_allowed_in_sandbox flag for filters, functions, and tags (@fabpot)

feature #4834 Track the source offset of each token and expose it in syntax errors (@fabpot)

minor #4836 Document how to customize the markdown_to_html converter (@fabpot)

minor #4662 CoreExtension::getAttribute: small improvement regarding getter/isser/hasser (@gharlan)

bug #4825 Make the include() function return a Markup object (@fabpot)

bug #4830 Fix nested block() resolution when a directly rendered block calls parent() (@fabpot)

minor #4827 Document {#--#} as the replacement for the deprecated spaceless filter (@fabpot)

bug #4828 Stop reporting a skipped test in IntegrationTestCase when there is no legacy test to run (@fabpot)

minor #4829 Document storing an enum in a variable to avoid repeating its FQCN (@fabpot)

bug #4824 Cast printed expressions to string so values that cannot be converted to a string (arrays, non-Stringable objects, ...) report a usable stack trace at the print location (@stof, @fabpot)

feature #4826 Make IntegrationTestCase and NodeTestCase compatible with PHPUnit 11 (@fabpot)

feature #4823 Skip the sandbox __toString check on arguments whose PHP parameter type cannot implicitly coerce to string (@fabpot)

Changelog

Sourced from twig/twig's changelog.

3.28.0 (2026-07-03)

Render backed enums using their backing value in the html_attr function

Fix empty Markup values being treated as truthy in and, or, xor, not, ternary, and elvis expressions

Fix a PHP 8.5 chr() deprecation when decoding an octal string escape sequence larger than \377 (such as "\777")

Mark Twig\Markup as @final; it will be final in Twig 4.0

Reduce memory usage and speed up the context restoration compiled at the end of for loops

Allow calling a macro with a dynamic name via the dot operator (macros.(name)(args))

Report the column number in syntax errors and expose it via Error::getTemplateColumn()

Track the source offset of each token and expose it via Token::getOffset()

Fix nested block() calls to resolve against the overriding template when a block rendered through block(name, template) calls parent()

Deprecate the possibility to use a block tag within a capture node (like set)

Deprecate the possibility to use a block tag within a capture node (like set) in child templates

Deprecate using a macro, extends, or use tag outside the root of a template

Stop reporting a skipped test in IntegrationTestCase when there is no legacy test to run

Fix markdown_to_html to strip the indentation shared by all lines instead of mangling content that starts with a blank line

Make the IntegrationTestCase and NodeTestCase test helpers compatible with PHPUnit 11

Cast printed expressions to string so values that cannot be converted to a string (arrays, non-Stringable objects, ...) report a usable stack trace at the print location

Make the include() function return a Markup object so an assigned result is not re-escaped when printed

Skip the sandbox __toString check on arguments whose PHP parameter type cannot implicitly coerce to string

Document the criteria for marking a callable or tag as always allowed in a sandbox, and the list of built-in tags, filters, and functions that will be always allowed in Twig 4.0

Add an always_allowed_in_sandbox option for filters, functions, and tests, and an isAlwaysAllowedInSandbox() method for token parsers, to let authors mark callables and tags that are always allowed in sandbox mode without explicit allow-listing

Add an allow-list for tests to Twig\Sandbox\SecurityPolicy, with the safe built-in tests flagged as always allowed so they keep working without allow-listing

Commits

597c12e Prepare the 3.28.0 release
6a175a5 bug #4850 Render backed enums using their backing value in the html_attr func...
9323a82 Render backed enums using their backing value in the html_attr function
ec0f5d5 Tweak previous merge
4007231 minor #4845 Add documention note about variable scope of override blocks in {...
068a2e6 Add documention note about variable scope of override blocks in {% embed ... ...
f6152fe minor #4843 Define macros at the template root in the cache macro fixture (fa...
424d2f1 Define the macro at the template root in the cache macro fixture
e3b8e15 Update CHANGELOG
2f202b0 bug #4841 Fix Markup truthiness in boolean expressions (xtrime-ru)
Additional commits viewable in compare view

Updates friendsofphp/php-cs-fixer from 3.95.11 to 3.95.15

Release notes

Sourced from friendsofphp/php-cs-fixer's releases.

v3.95.15 Adalbertus

What's Changed

fix: self-update - fix "Access Denied" error when running on Windows by @mlocati in PHP-CS-Fixer/PHP-CS-Fixer#9731

Full Changelog: PHP-CS-Fixer/PHP-CS-Fixer@v3.95.14...v3.95.15

v3.95.14 Adalbertus

What's Changed

deps: bump the phpstan group in /dev-tools with 2 updates by @dependabot[bot] in PHP-CS-Fixer/PHP-CS-Fixer#9717

deps: bump shipmonk/dead-code-detector from 1.3.0 to 1.3.1 in /dev-tools in the shipmonk group across 1 directory by @dependabot[bot] in PHP-CS-Fixer/PHP-CS-Fixer#9718

chore: cleanup FunctionToConstantFixer by @kubawerlos in PHP-CS-Fixer/PHP-CS-Fixer#9719

chore: add code coverage ignore annotations to parallel runner and worker by @kubawerlos in PHP-CS-Fixer/PHP-CS-Fixer#9721

test: ConfigurationResolverTest - fix types by @kubawerlos in PHP-CS-Fixer/PHP-CS-Fixer#9725

test: ClassDefinitionFixerTest - improve PHPDocs by @kubawerlos in PHP-CS-Fixer/PHP-CS-Fixer#9726

test: GeneralAttributeRemoveFixerTest - improve data provider types by @kubawerlos in PHP-CS-Fixer/PHP-CS-Fixer#9727

test: HeaderCommentFixerTest - improve invalid configuration types by @kubawerlos in PHP-CS-Fixer/PHP-CS-Fixer#9728

fix: TrailingCommaInMultilineFixer - do not add trailing comma after first-class callable by @kubawerlos in PHP-CS-Fixer/PHP-CS-Fixer#9722

fix: ClassAttributesSeparationFixer - handle property with hooks as last class element by @kubawerlos in PHP-CS-Fixer/PHP-CS-Fixer#9724

fix: SingleClassElementPerStatementFixer - do not break PHP syntax when splitting properties with disjunctive normal form type by @kubawerlos in PHP-CS-Fixer/PHP-CS-Fixer#9723

test: ProjectCodeTest - improve PHPDocs by @kubawerlos in PHP-CS-Fixer/PHP-CS-Fixer#9730

deps: allow to run PHPUnit v12 directly for project, without future-ready CI workarounds by @keradus in PHP-CS-Fixer/PHP-CS-Fixer#9580

Full Changelog: PHP-CS-Fixer/PHP-CS-Fixer@v3.95.13...v3.95.14

v3.95.13 Adalbertus

What's Changed

fix: SelfAccessorFixer - do not replace constant with same name as class in the middle of a static access chain by @kubawerlos in PHP-CS-Fixer/PHP-CS-Fixer#9716

fix: SingleClassElementPerStatementFixer - do not drop type of typed constants by @kubawerlos in PHP-CS-Fixer/PHP-CS-Fixer#9706

Full Changelog: PHP-CS-Fixer/PHP-CS-Fixer@v3.95.12...v3.95.13

v3.95.12 Adalbertus

What's Changed

deps: bump the all group across 2 directories with 1 update by @dependabot[bot] in PHP-CS-Fixer/PHP-CS-Fixer#9704

chore: unblock self-approval by @keradus in PHP-CS-Fixer/PHP-CS-Fixer#9699

chore: cleanup RuleSetDocumentationGenerator by @kubawerlos in PHP-CS-Fixer/PHP-CS-Fixer#9705

deps: bump crate-ci/typos from 1.47.2 to 1.48.0 in /.github/workflows in the all group across 1 directory by @dependabot[bot] in PHP-CS-Fixer/PHP-CS-Fixer#9712

deps: bump the phpstan group in /dev-tools with 2 updates by @dependabot[bot] in PHP-CS-Fixer/PHP-CS-Fixer#9710

deps: bump shipmonk/dead-code-detector from 1.2.1 to 1.3.0 in /dev-tools in the shipmonk group across 1 directory by @dependabot[bot] in PHP-CS-Fixer/PHP-CS-Fixer#9711

fix: BinaryOperatorSpacesFixer - do not align nested array in yield with following yields by @kubawerlos in PHP-CS-Fixer/PHP-CS-Fixer#9708

deps: PHPUnit - PHP 8.6 compat changes by @keradus in PHP-CS-Fixer/PHP-CS-Fixer#9714

Full Changelog: PHP-CS-Fixer/PHP-CS-Fixer@v3.95.11...v3.95.12

Changelog

Sourced from friendsofphp/php-cs-fixer's changelog.

Changelog for v3.95.15

fix: self-update - fix "Access Denied" error when running on Windows (#9731)

Changelog for v3.95.14

fix: ClassAttributesSeparationFixer - handle property with hooks as last class element (#9724)

fix: SingleClassElementPerStatementFixer - do not break PHP syntax when splitting properties with disjunctive normal form type (#9723)

fix: TrailingCommaInMultilineFixer - do not add trailing comma after first-class callable (#9722)

chore: add code coverage ignore annotations to parallel runner and worker (#9721)

chore: cleanup FunctionToConstantFixer (#9719)

test: HeaderCommentFixerTest - improve invalid configuration types (#9728)

test: ClassDefinitionFixerTest - improve PHPDocs (#9726)

test: ConfigurationResolverTest - fix types (#9725)

test: GeneralAttributeRemoveFixerTest - improve data provider types (#9727)

test: ProjectCodeTest - improve PHPDocs (#9730)

deps: allow to run PHPUnit v12 directly for project, without future-ready CI workarounds (#9580)

deps: bump shipmonk/dead-code-detector from 1.3.0 to 1.3.1 in /dev-tools in the shipmonk group across 1 directory (#9718)

deps: bump the phpstan group in /dev-tools with 2 updates (#9717)

Changelog for v3.95.13

fix: SelfAccessorFixer - do not replace constant with same name as class in the middle of a static access chain (#9716)

fix: SingleClassElementPerStatementFixer - do not drop type of typed constants (#9706)

Changelog for v3.95.12

fix: BinaryOperatorSpacesFixer - do not align nested array in yield with following yields (#9708)

chore: cleanup RuleSetDocumentationGenerator (#9705)

chore: unblock self-approval (#9699)

deps: bump crate-ci/typos from 1.47.2 to 1.48.0 in /.github/workflows in the all group across 1 directory (#9712)

deps: bump shipmonk/dead-code-detector from 1.2.1 to 1.3.0 in /dev-tools in the shipmonk group across 1 directory (#9711)

deps: bump the all group across 2 directories with 1 update (#9704)

deps: bump the phpstan group in /dev-tools with 2 updates (#9710)

deps: PHPUnit - PHP 8.6 compat changes (#9714)

Commits

3e47e5d prepared the 3.95.15 release
5eeae8d fix: self-update - fix "Access Denied" error when running on Windows (#9731)
8153d49 bumped version
beee274 prepared the 3.95.14 release
4b1d95d deps: allow to run PHPUnit v12 directly for project, without future-ready CI ...
4796020 test: ProjectCodeTest - improve PHPDocs (#9730)
e8af9ca fix: SingleClassElementPerStatementFixer - do not break PHP syntax when spl...
b858858 fix: ClassAttributesSeparationFixer - handle property with hooks as last cl...
6a461b9 fix: TrailingCommaInMultilineFixer - do not add trailing comma after first-...
177aa71 test: HeaderCommentFixerTest - improve invalid configuration types (#9728)
Additional commits viewable in compare view

Updates igor-php/igor-php from 0.7.0 to 0.8.1

Release notes

Sourced from igor-php/igor-php's releases.

v0.8.1

Changelog

1c333bf55b297b32158349f5961dd12b89007b59 fix: robustly parse reflection mapping by isolating stdout/stderr (#39) (#40)

v0.8.0

Changelog

90dcc5df689614101893c076b023b83651babbbe feat: dynamically resolve binary name in help and version outputs (#37)

46a7ee71b0439e8060c5ba3f71f417c053561d76 feat: generic --container-dump bridge for non-Symfony frameworks (#33)

6e2584eebbecb1cb102f4ce8ac6ce183d2db1081 feat: restrict audit to services when Symfony is detected (#36)

What's Changed

feat: generic --container-dump bridge for non-Symfony frameworks by @supa-chayajin in igor-php/igor-php#33

feat: restrict audit to services when Symfony is detected by @KevinMartinsDev in igor-php/igor-php#36

feat: dynamically resolve binary name in help and version outputs by @KevinMartinsDev in igor-php/igor-php#37

New Contributors

@supa-chayajin made their first contribution in igor-php/igor-php#33

Full Changelog: igor-php/igor-php@v0.7.0...v0.8.0

Commits

1c333bf fix: robustly parse reflection mapping by isolating stdout/stderr (#39) (#40)
90dcc5d feat: dynamically resolve binary name in help and version outputs (#37)
6e2584e feat: restrict audit to services when Symfony is detected (#36)
46a7ee7 feat: generic --container-dump bridge for non-Symfony frameworks (#33)
See full diff in compare view

Updates phpunit/php-code-coverage from 14.2.2 to 14.2.3

Release notes

Sourced from phpunit/php-code-coverage's releases.

phpunit/php-code-coverage 14.2.3

Fixed

#1240: Dark-mode HTML report: Warning and Danger backgrounds are indistinguishable for colorblind users

#1244: Do not build code unit map when test has no coverage targets

Changelog

Sourced from phpunit/php-code-coverage's changelog.

ChangeLog

All notable changes are documented in this file using the Keep a CHANGELOG principles.

14.3.0 - 2026-08-07

Added

#1140: Class-oriented HTML report

#1141: Improve visualization of branch coverage and path coverage in the HTML report

#1153: Filter HTML code coverage report by test size

#1210: Filesystem-based targeting

#1231: Identify dead code using static analysis

Record how often a test executed a line or traversed a branch or path (the <covered> elements of the XML report now have a count attribute; drivers that do not collect hit counts report 1)

Changed

#1259: Degrade gracefully when a source file cannot be parsed

The serialization format for .cov files was bumped from version 1 to version 2; files serialized with previous versions cannot be loaded or merged any more

Fixed

#1258: Coverage of less than 100% can be displayed as 100.00% due to rounding

Commits

82f6e49 Prepare release
edd4603 Update dependency phpstan/phpstan to ^2.2.5
0ac6e38 Update dependency nikic/php-parser to ^5.8.0
592a1c2 Update dependency phpstan/phpstan-phpunit to ^2.0.18
7fa079b Update dependency phpstan/phpstan to ^2.2.4
ade0ea3 Merge branch '12.5'
650e11b Update ChangeLog
21a8808 Do not build code unit map when test only has uses targets
d342c69 Do not build code unit map when test has no coverage targets
4119e03 Update PHPStan packages
Additional commits viewable in compare view

Updates phpunit/phpunit from 13.2.1 to 13.2.4

Release notes

Sourced from phpunit/phpunit's releases.

PHPUnit 13.2.4

Fixed

#6817: Issue is reported even when previously registered error handler turns the error into an exception

#6818: Issue is reported when custom error handler checks error_reporting() output dynamically

Learn how to install or update PHPUnit 13.2 in the documentation.

Keep up to date with PHPUnit:

You can follow @phpunit@phpc.social to stay up to date with PHPUnit's development.

You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

PHPUnit 13.2.3

Changed

#6797: Adapt code generated for test double of interface with constructor for PHP 8.6

Learn how to install or update PHPUnit 13.2 in the documentation.

Keep up to date with PHPUnit:

You can follow @phpunit@phpc.social to stay up to date with PHPUnit's development.

You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

PHPUnit 13.2.2

Fixed

#6768: Negative priorities for hook methods are rejected by static analysis

#6778: Deprecation triggered outside of tests cannot be ignored

Learn how to install or update PHPUnit 13.2 in the documentation.

Keep up to date with PHPUnit:

You can follow @phpunit@phpc.social to stay up to date with PHPUnit's development.

You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

Changelog

Sourced from phpunit/phpunit's changelog.

[13.2.4] - 2026-07-08

Fixed

#6817: Issue is reported even when previously registered error handler turns the error into an exception

#6818: Issue is reported when custom error handler checks error_reporting() output dynamically

[13.2.3] - 2026-07-06

Changed

#6797: Adapt code generated for test double of interface with constructor for PHP 8.6

[13.2.2] - 2026-06-29

Fixed

#6768: Negative priorities for hook methods are rejected by static analysis

#6778: Deprecation triggered outside of tests cannot be ignored

Commits

8f5180f Prepare release
6b667a5 Closes #6818
1d90b39 Closes #6817
4f2ca2c Update dependencies
d76d0e2 Prepare release
eca8792 Merge branch '12.5' into 13.2
0608d15 Prepare release
ca03a71 Merge branch '11.5' into 12.5
5f83edf Prepare release
... Description has been truncated

Bumps the composer-non-major group with 11 updates in the / directory: | Package | From | To | | --- | --- | --- | | [api-platform/core](https://github.com/api-platform/core) | `4.3.15` | `4.3.17` | | [doctrine/dbal](https://github.com/doctrine/dbal) | `4.4.3` | `4.4.4` | | [doctrine/doctrine-bundle](https://github.com/doctrine/DoctrineBundle) | `3.2.4` | `3.3.0` | | [mtdowling/jmespath.php](https://github.com/jmespath/jmespath.php) | `2.9.1` | `2.9.2` | | [twig/twig](https://github.com/twigphp/Twig) | `3.27.1` | `3.28.0` | | [friendsofphp/php-cs-fixer](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer) | `3.95.11` | `3.95.15` | | [igor-php/igor-php](https://github.com/igor-php/igor-php) | `0.7.0` | `0.8.1` | | [phpunit/php-code-coverage](https://github.com/sebastianbergmann/php-code-coverage) | `14.2.2` | `14.2.3` | | [phpunit/phpunit](https://github.com/sebastianbergmann/phpunit) | `13.2.1` | `13.2.4` | | [rector/rector](https://github.com/rectorphp/rector) | `2.5.2` | `2.5.7` | | [zenstruck/foundry](https://github.com/zenstruck/foundry) | `2.10.1` | `2.10.3` | Updates `api-platform/core` from 4.3.15 to 4.3.17 - [Release notes](https://github.com/api-platform/core/releases) - [Changelog](https://github.com/api-platform/core/blob/main/CHANGELOG.md) - [Commits](api-platform/core@v4.3.15...v4.3.17) Updates `doctrine/dbal` from 4.4.3 to 4.4.4 - [Release notes](https://github.com/doctrine/dbal/releases) - [Commits](doctrine/dbal@4.4.3...4.4.4) Updates `doctrine/doctrine-bundle` from 3.2.4 to 3.3.0 - [Release notes](https://github.com/doctrine/DoctrineBundle/releases) - [Commits](doctrine/DoctrineBundle@3.2.4...3.3.0) Updates `mtdowling/jmespath.php` from 2.9.1 to 2.9.2 - [Release notes](https://github.com/jmespath/jmespath.php/releases) - [Changelog](https://github.com/jmespath/jmespath.php/blob/master/CHANGELOG.md) - [Commits](jmespath/jmespath.php@2.9.1...2.9.2) Updates `twig/twig` from 3.27.1 to 3.28.0 - [Release notes](https://github.com/twigphp/Twig/releases) - [Changelog](https://github.com/twigphp/Twig/blob/3.x/CHANGELOG) - [Commits](twigphp/Twig@v3.27.1...v3.28.0) Updates `friendsofphp/php-cs-fixer` from 3.95.11 to 3.95.15 - [Release notes](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/releases) - [Changelog](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/blob/master/CHANGELOG.md) - [Commits](PHP-CS-Fixer/PHP-CS-Fixer@v3.95.11...v3.95.15) Updates `igor-php/igor-php` from 0.7.0 to 0.8.1 - [Release notes](https://github.com/igor-php/igor-php/releases) - [Commits](igor-php/igor-php@v0.7.0...v0.8.1) Updates `phpunit/php-code-coverage` from 14.2.2 to 14.2.3 - [Release notes](https://github.com/sebastianbergmann/php-code-coverage/releases) - [Changelog](https://github.com/sebastianbergmann/php-code-coverage/blob/main/ChangeLog-14.3.md) - [Commits](sebastianbergmann/php-code-coverage@14.2.2...14.2.3) Updates `phpunit/phpunit` from 13.2.1 to 13.2.4 - [Release notes](https://github.com/sebastianbergmann/phpunit/releases) - [Changelog](https://github.com/sebastianbergmann/phpunit/blob/13.2.4/ChangeLog-13.2.md) - [Commits](sebastianbergmann/phpunit@13.2.1...13.2.4) Updates `rector/rector` from 2.5.2 to 2.5.7 - [Release notes](https://github.com/rectorphp/rector/releases) - [Commits](rectorphp/rector@2.5.2...2.5.7) Updates `zenstruck/foundry` from 2.10.1 to 2.10.3 - [Release notes](https://github.com/zenstruck/foundry/releases) - [Changelog](https://github.com/zenstruck/foundry/blob/2.x/CHANGELOG.md) - [Commits](zenstruck/foundry@v2.10.1...v2.10.3) --- updated-dependencies: - dependency-name: api-platform/core dependency-version: 4.3.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: composer-non-major - dependency-name: doctrine/dbal dependency-version: 4.4.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: composer-non-major - dependency-name: doctrine/doctrine-bundle dependency-version: 3.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: composer-non-major - dependency-name: mtdowling/jmespath.php dependency-version: 2.9.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: composer-non-major - dependency-name: twig/twig dependency-version: 3.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: composer-non-major - dependency-name: friendsofphp/php-cs-fixer dependency-version: 3.95.15 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: composer-non-major - dependency-name: igor-php/igor-php dependency-version: 0.8.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: composer-non-major - dependency-name: phpunit/php-code-coverage dependency-version: 14.2.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: composer-non-major - dependency-name: phpunit/phpunit dependency-version: 13.2.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: composer-non-major - dependency-name: rector/rector dependency-version: 2.5.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: composer-non-major - dependency-name: zenstruck/foundry dependency-version: 2.10.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: composer-non-major ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update Php code labels Jul 22, 2026

benjaminjonard merged commit d46d11b into 1.8 Jul 28, 2026
18 checks passed

dependabot Bot deleted the dependabot/composer/composer-non-major-969ed6f941 branch July 28, 2026 12:25

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the composer-non-major group across 1 directory with 11 updates - #1578

Bump the composer-non-major group across 1 directory with 11 updates#1578
benjaminjonard merged 1 commit into
1.8from
dependabot/composer/composer-non-major-969ed6f941

dependabot Bot commented on behalf of github Jul 22, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Jul 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v4.3.17

What's Changed

v4.3.16

What's Changed

v4.3.17

Bug fixes

v4.3.16

Bug fixes

4.4.4

Release Notes for 4.4.4

4.4.4

Bug,Error Handling,PostgreSQL

Bug,MySQL,Schema Introspection

Schema Definition,Test Suite

Bug,Indexes,Schema Definition

Static Analysis,Test Suite

Connections,Error Handling,Test Suite

Identifiers,Schema Introspection,Schema Management,Test Suite

Connections,Drivers,Results,Test Suite

Documentation,Test Suite

Platforms,Test Suite

3.3.0

Release Notes for 3.3.0

3.3.0

Improvement

Feature

3.2.5

Release Notes for 3.2.5

3.2.5

Bug

Changes from lower branches

2.9.2

2.9.2 - 2026-07-06

v3.28.0

3.28.0 (2026-07-03)

v3.95.15 Adalbertus

What's Changed

v3.95.14 Adalbertus

What's Changed

v3.95.13 Adalbertus

What's Changed

v3.95.12 Adalbertus

What's Changed

Changelog for v3.95.15

Changelog for v3.95.14

Changelog for v3.95.13

Changelog for v3.95.12

v0.8.1

Changelog

v0.8.0

Changelog

What's Changed

New Contributors

phpunit/php-code-coverage 14.2.3

Fixed

ChangeLog

14.3.0 - 2026-08-07

Added

Changed

Fixed

PHPUnit 13.2.4

Fixed

Keep up to date with PHPUnit:

PHPUnit 13.2.3

Changed

Keep up to date with PHPUnit:

PHPUnit 13.2.2

Fixed

Keep up to date with PHPUnit:

[13.2.4] - 2026-07-08

Fixed

[13.2.3] - 2026-07-06

Changed

[13.2.2] - 2026-06-29

Fixed

Uh oh!

Uh oh!

dependabot Bot commented on behalf of github Jul 22, 2026 •

edited

Loading