Dependency Dashboard

[renovate[bot]]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• [ ] Update dependency psalm/plugin-phpunit to ^0.19.0
• [ ] Update dependency phpunit/phpunit to v11
• [ ] Update dependency symfony/console to v7
• [ ] Lock file maintenance
• [ ] Click on this checkbox to rebase all open PRs at once

Detected dependencies

composer

composer.json

- `php ~8.1.0 || ~8.2.0 || ~8.3.0` - `brick/varexporter ^0.3.8 || ^0.4.0 || ^0.5.0` - `laminas/laminas-stdlib ^3.17` - `psr/container ^1.1 || ^2.0` - `boesing/psalm-plugin-stringf ^1.4` - `friendsofphp/proxy-manager-lts ^1` - `laminas/laminas-cli ^1.8` - `laminas/laminas-coding-standard ~2.5.0` - `laminas/laminas-container-config-test ^1.0` - `lctrs/psalm-psr-container-plugin ^1.9` - `mikey179/vfsstream ^1.6.11@alpha` - `phpbench/phpbench ^1.2.7` - `phpunit/phpunit ^10.4` - `psalm/plugin-phpunit ^0.18.4` - `symfony/console ^6.0` - `vimeo/psalm ^5.22`

github-actions

.github/workflows/continuous-integration.yml

.github/workflows/docs-build.yml

.github/workflows/release-on-milestone-closed.yml

---

• [ ] Check this box to trigger a request for Renovate to run again on this repository

[Ocramius]

Note:

• we need to drop this filtering on CI runs: https://github.com/laminas/laminas-servicemanager/blob/88531f4cd84d4a2dbb2ec094060e92b21c2a48b3/.github/workflows/continuous-integration.yml#L5-L8
• we need to re-run renovate (rebase) after that, to ensure CI runs, before renovate auto-merges anything (so far, it is waiting for status checks)
• we need to add DCO commit message syntax to renovate commits

[internalsystemerror]

I think we're good now. The current schedule is set to be daily, which is before 2am (https://docs.renovatebot.com/presets-schedule/#scheduledaily). Some actions will occur outside of the schedule, but we will want to check on this again tomorrow now.

Edit: Ooo, and I just saw that the Signed-off-by message is appearing on the dashboard. I can probably offer a PR to add a signOffCommits option to renovate instead as a more permanent solution. https://github.com/laminas/.github/pull/22 should resolve this.

[Ocramius]

Ok, checks failed because:

• markdownlint failed (we really need a package.lock for this stuff)
• Expected CI failures

Overall seems promising, but hard to verify auto-merge capabilities tonight 😬

[Ocramius]

Note: I expected a PR for the failed CI run for the lockfile branch 🤔

[internalsystemerror]

I expect this to happen during the next scheduled period, before 2am each day.