search

box-project / box

📦🚀 Fast, zero config application bundler with PHARs.
https://box-project.github.io/box
MIT License
1.12k stars 101 forks source link

build(deps): bump the dependencies group across 1 directory with 6 updates #1401

Closed dependabot[bot] closed 2 weeks ago

dependabot[bot] commented 1 month ago

Bumps the dependencies group with 6 updates in the / directory:

Package From To
composer/semver 3.4.0 3.4.2
seld/jsonlint 1.10.2 1.11.0
symfony/finder 7.1.1 7.1.3
symfony/process 7.1.1 7.1.3
symfony/var-dumper 7.1.2 7.1.3
fidry/makefile 1.0.1 1.0.2

Updates composer/semver from 3.4.0 to 3.4.2

Release notes

Sourced from composer/semver's releases.

3.4.2

  • Fixed PHP 5.3 syntax error

Full Changelog: https://github.com/composer/semver/compare/3.4.1...3.4.2

3.4.1

  • Fixed normalizeStability's return type to enforce valid stabilities

Full Changelog: https://github.com/composer/semver/compare/3.4.0...3.4.1

Changelog

Sourced from composer/semver's changelog.

[3.4.2] 2024-07-12

  • Fixed PHP 5.3 syntax error

[3.4.1] 2024-07-12

  • Fixed normalizeStability's return type to enforce valid stabilities
Commits
  • c51258e Fix tests
  • f25dd04 Update CHANGELOG.md
  • d9dae3c Fix PHP 5.3 compatibility
  • 8536c1b Update CHANGELOG.md
  • 106a346 Fix normalizeStability return type to enforce valid stabilities
  • a40ea7e Add test cases for invalid CalVer & the boundary between SemVer and CalVer (#...
  • 1d09200 Add phpstan-baseline.neon to .gitattributes (#153)
  • See full diff in compare view


Updates seld/jsonlint from 1.10.2 to 1.11.0

Release notes

Sourced from seld/jsonlint's releases.

1.11.0

What's Changed

  • Add ALLOW_DUPLICATE_KEYS_TO_ARRAY flag for collect values from duplicated keys in a __duplicate__ array Seldaek/jsonlint#88

New Contributors

Full Changelog: https://github.com/Seldaek/jsonlint/compare/1.10.2...1.11.0

Commits
  • 1748aaf Add ALLOW_DUPLICATE_KEYS_TO_ARRAY flag for collect values from duplic… (#88)
  • See full diff in compare view


Updates symfony/finder from 7.1.1 to 7.1.3

Release notes

Sourced from symfony/finder's releases.

v7.1.3

Changelog (https://github.com/symfony/finder/compare/v7.1.2...v7.1.3)

  • no significant changes
Commits
  • 717c632 Merge branch '7.0' into 7.1
  • 25b2676 Merge branch '6.4' into 7.0
  • af29198 Merge branch '5.4' into 6.4
  • 0724c51 fix Finder test using the ftp wrapper by switching the server being used
  • See full diff in compare view


Updates symfony/process from 7.1.1 to 7.1.3

Release notes

Sourced from symfony/process's releases.

v7.1.3

Changelog (https://github.com/symfony/process/compare/v7.1.2...v7.1.3)

  • no significant changes
Commits


Updates symfony/var-dumper from 7.1.2 to 7.1.3

Release notes

Sourced from symfony/var-dumper's releases.

v7.1.3

Changelog (https://github.com/symfony/var-dumper/compare/v7.1.2...v7.1.3)

Commits
  • 86af461 Merge branch '7.0' into 7.1
  • 3b5bed5 Merge branch '6.4' into 7.0
  • a71cc33 Merge branch '5.4' into 6.4
  • 0c17c56 bug #57815 [Console][PhpUnitBridge][VarDumper] Fix NO_COLOR empty value han...
  • e0a521e [Console][PhpUnitBridge][VarDumper] Fix NO_COLOR empty value handling
  • e4de722 [ErrorHandler][VarDumper] Remove PHP 8.4 deprecations
  • See full diff in compare view


Updates fidry/makefile from 1.0.1 to 1.0.2

Release notes

Sourced from fidry/makefile's releases.

1.0.2

Fixes

  • Fix support for comments (#49)
Commits


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
dependabot[bot] commented 2 weeks ago

Looks like these dependencies are updatable in another way, so this is no longer needed.