jorijn / laravel-security-checker

Added Laravel functionality to Enlightn Security Checker. Adds a command to check for, and optionally emails you, vulnerabilities when they affect you.
https://jorijn.com
MIT License
198 stars 26 forks source link

Update squizlabs/php_codesniffer requirement from ~2.3 to ~3.5 #29

Closed dependabot[bot] closed 3 years ago

dependabot[bot] commented 4 years ago

Updates the requirements on squizlabs/php_codesniffer to permit the latest version.

Release notes

Sourced from squizlabs/php_codesniffer's releases.

3.5.6

  • Added support for PHP 8.0 magic constant dereferencing
    • Thanks to Juliette Reinders Folmer for the patch
  • Added support for changes to the way PHP 8.0 tokenizes comments
    • The existing PHP 5-7 behaviour has been replicated for version 8, so no sniff changes are required
    • Thanks to Juliette Reinders Folmer for the patch
  • File::getMethodProperties() now detects the PHP 8.0 static return type
    • Thanks to Juliette Reinders Folmer for the patch
  • The PHP 8.0 static return type is now supported for arrow functions
    • Thanks to Juliette Reinders Folmer for the patch
  • The cache is no longer used if the list of loaded PHP extensions changes
    • Thanks to Juliette Reinders Folmer for the patch
  • Generic.NamingConventions.CamelCapsFunctionName no longer reports __serialize and __unserialize as invalid names
    • Thanks to Filip Š for the patch
  • PEAR.NamingConventions.ValidFunctionName no longer reports __serialize and __unserialize as invalid names
    • Thanks to Filip Š for the patch
  • Squiz.Scope.StaticThisUsage now detects usage of $this inside closures and arrow functions
    • Thanks to Michał Bundyra for the patch
  • Fixed bug #2877 : PEAR.Functions.FunctionCallSignature false positive for array of functions
    • Thanks to Vincent Langlet for the patch
  • Fixed bug #2888 : PSR12.Files.FileHeader blank line error with multiple namespaces in one file
  • Fixed bug #2926 : phpcs hangs when using arrow functions that return heredoc
  • Fixed bug #2943 : Redundant semicolon added to a file when fixing PSR2.Files.ClosingTag.NotAllowed
  • Fixed bug #2967 : Markdown generator does not output headings correctly
    • Thanks to Petr Bugyík for the patch
  • Fixed bug #2977 : File::isReference() does not detect return by reference for closures
    • Thanks to Juliette Reinders Folmer for the patch
  • Fixed bug #2994 : Generic.Formatting.DisallowMultipleStatements false positive for FOR loop with no body
  • Fixed bug #3033 : Error generated during tokenizing of goto statements on PHP 8
    • Thanks to Juliette Reinders Folmer for the patch
Commits


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
dependabot[bot] commented 3 years ago

Superseded by #38.