github-actions[bot]
commented
4 months ago Dependency Review
✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.
OpenSSF Scorecard
| Package | Version | Score | Details |
|---|
Scanned Manifest Files
composer.json
- infection/infection@>= 0.27.11, < 0.28.0 || >= 0.28.1, < 0.29.0 || >= 0.29.0, < 0.30.0
- phpstan/extension-installer@>= 1.4.1, < 2.0.0
- phpstan/phpstan@>= 1.11.4, < 2.0.0
- infection/infection@>= 0.27.11, < 0.28.0 || >= 0.28.1, < 0.29.0
- phpstan/extension-installer@>= 1.3.1, < 2.0.0
- phpstan/phpstan@>= 1.11.3, < 2.0.0
codeclimate[bot]
This PR contains the following updates:
infection/infection^0.27.11 \|\| ^0.28.1->^0.27.11 \|\| ^0.28.1 \|\| ^0.29.0phpstan/extension-installer^1.3.1->^1.4.1phpstan/phpstan^1.11.3->^1.11.4Release Notes
infection/infection (infection/infection)
### [`v0.29.4`](https://togithub.com/infection/infection/blob/HEAD/CHANGELOG.md#0294-2024-06-08) [Compare Source](https://togithub.com/infection/infection/compare/0.29.3...0.29.4) [Full Changelog](https://togithub.com/infection/infection/compare/0.29.0...0.29.4) **Added:** - Introduce `--logger-project-root-directory` by [@vincentchalamon](https://togithub.com/vincentchalamon) in [https://github.com/infection/infection/pull/1978](https://togithub.com/infection/infection/pull/1978) ### [`v0.29.3`](https://togithub.com/infection/infection/releases/tag/0.29.3): Add support for `colinodell/json5` v3 [Compare Source](https://togithub.com/infection/infection/compare/0.29.2...0.29.3) **Changed:** - Add support for `colinodell/json5` v3 by [@Slamdunk](https://togithub.com/Slamdunk) in [https://github.com/infection/infection/pull/1976](https://togithub.com/infection/infection/pull/1976) **Full Changelog**: https://github.com/infection/infection/compare/0.29.2...0.29.3 ### [`v0.29.2`](https://togithub.com/infection/infection/releases/tag/0.29.2): Highlight inline differences in CLI [Compare Source](https://togithub.com/infection/infection/compare/0.29.1...0.29.2) **Added:** - \[Logs] Highlight inline differences in CLI by [@Slamdunk](https://togithub.com/Slamdunk) in [https://github.com/infection/infection/pull/1974](https://togithub.com/infection/infection/pull/1974) **Full Changelog**: https://github.com/infection/infection/compare/0.29.1...0.29.2 ### [`v0.29.1`](https://togithub.com/infection/infection/releases/tag/0.29.1): Fix usage of custom mutator with bootstrap file [Compare Source](https://togithub.com/infection/infection/compare/0.29.0...0.29.1) **Fixed:** - Fix usage of custom mutator with bootstrap file by [@maks-rafalko](https://togithub.com/maks-rafalko) in [https://github.com/infection/infection/pull/1973](https://togithub.com/infection/infection/pull/1973) **Full Changelog**: https://github.com/infection/infection/compare/0.29.0...0.29.1 ### [`v0.29.0`](https://togithub.com/infection/infection/blob/HEAD/CHANGELOG.md#0290-2024-05-28) [Compare Source](https://togithub.com/infection/infection/compare/0.28.1...0.29.0) [Full Changelog](https://togithub.com/infection/infection/compare/0.28.1...0.29.0) **Added:** - Support custom mutators by [@vss414](https://togithub.com/vss414) in [https://github.com/infection/infection/pull/1686](https://togithub.com/infection/infection/pull/1686) - Custom mutator generator by [@maks-rafalko](https://togithub.com/maks-rafalko) in [https://github.com/infection/infection/pull/1969](https://togithub.com/infection/infection/pull/1969) Read about how to create custom mutators: https://infection.github.io/guide/custom-mutators.html **Changed:** - Move `Infection\Mutator\Mutator` to a separate package by [@maks-rafalko](https://togithub.com/maks-rafalko) in [https://github.com/infection/infection/pull/1963](https://togithub.com/infection/infection/pull/1963) - Make `Mutator::getDefinition` return type non-nullable by [@maks-rafalko](https://togithub.com/maks-rafalko) in [https://github.com/infection/infection/pull/1958](https://togithub.com/infection/infection/pull/1958) - Enable Rector's `AddCoversClassAttributeRector` rule by [@maks-rafalko](https://togithub.com/maks-rafalko) in [https://github.com/infection/infection/pull/1962](https://togithub.com/infection/infection/pull/1962) - Mention Discord instead of Slack in issue github template by [@staabm](https://togithub.com/staabm) in [https://github.com/infection/infection/pull/1951](https://togithub.com/infection/infection/pull/1951) - test: Force mutators to include remedies by [@theofidry](https://togithub.com/theofidry) in [https://github.com/infection/infection/pull/1954](https://togithub.com/infection/infection/pull/1954) - Use the latest composer 2 to prevent issue with incompatibility for Box and composer 2.1 by [@maks-rafalko](https://togithub.com/maks-rafalko) in [https://github.com/infection/infection/pull/1957](https://togithub.com/infection/infection/pull/1957) - Use the latest v1 test checker action by [@maks-rafalko](https://togithub.com/maks-rafalko) in [https://github.com/infection/infection/pull/1960](https://togithub.com/infection/infection/pull/1960) - Upgrade Rector and fix new issues by [@maks-rafalko](https://togithub.com/maks-rafalko) in [https://github.com/infection/infection/pull/1961](https://togithub.com/infection/infection/pull/1961) - Use new PHP-CS-Fixer with parallelization by [@maks-rafalko](https://togithub.com/maks-rafalko) in [https://github.com/infection/infection/pull/1964](https://togithub.com/infection/infection/pull/1964) - Remove our own custom FQCN visitor as we already use php-parser's `NameResolver` visitor by [@maks-rafalko](https://togithub.com/maks-rafalko) in [https://github.com/infection/infection/pull/1967](https://togithub.com/infection/infection/pull/1967) - Replace deprecated constant `NodeTraverser::DONT_TRAVERSE_CURRENT_AND_CHILDREN` with `NodeVisitor::DONT_TRAVERSE_CURRENT_AND_CHILDREN` by [@maks-rafalko](https://togithub.com/maks-rafalko) in [https://github.com/infection/infection/pull/1968](https://togithub.com/infection/infection/pull/1968) - Remove our own `ParentConnectorVisitor` and use `nikic-phpparser`'s one by [@maks-rafalko](https://togithub.com/maks-rafalko) in [https://github.com/infection/infection/pull/1970](https://togithub.com/infection/infection/pull/1970)phpstan/extension-installer (phpstan/extension-installer)
### [`v1.4.1`](https://togithub.com/phpstan/extension-installer/releases/tag/1.4.1) [Compare Source](https://togithub.com/phpstan/extension-installer/compare/1.4.0...1.4.1) - [f6b87fa](http://github.com/phpstan/extension-installer/commit/f6b87faf9fc7978eab2f7919a8760bc9f58f9203) - Test more Composer versions - [4ce4d5c](http://github.com/phpstan/extension-installer/commit/4ce4d5cfb44b4d4fa14b46917ce5e74e4e04abbd) - Revert "Bump composer-plugin-api" ### [`v1.4.0`](https://togithub.com/phpstan/extension-installer/releases/tag/1.4.0) [Compare Source](https://togithub.com/phpstan/extension-installer/compare/1.3.1...1.4.0) - [5b19a72](http://github.com/phpstan/extension-installer/commit/5b19a72c93e79bb0d410ac2cd55f02c4a6e0cfbe) - Fix - [bf14f4a](http://github.com/phpstan/extension-installer/commit/bf14f4ae1008f0db5d803716547ed0c5b2e812b1) - Skip zero/inf bounds - [2586069](http://github.com/phpstan/extension-installer/commit/258606908dc22f7fe5840edf8fb08559e5b0c219) - Convert constraints into strings consistently - [aae3978](http://github.com/phpstan/extension-installer/commit/aae3978a664ff3d43e32d4e9b7623a118dd6fe2e) - Dump PHPStan version constraint for each package - [bfd401b](http://github.com/phpstan/extension-installer/commit/bfd401b13fbcec2830a5e3125fc7e436e065f897) - Fix CI - [7e654f8](http://github.com/phpstan/extension-installer/commit/7e654f8ee7630b78c0fa53f650f57753ea7ba002) - Fix - [792118f](http://github.com/phpstan/extension-installer/commit/792118f79358fb45b128f14a434f3ec6fee3bacf) - Fix CS - [487e1ad](http://github.com/phpstan/extension-installer/commit/487e1adedd5a470fbcf3b40fa140a13961d7cee9) - Open 1.4.x-dev - [219172e](http://github.com/phpstan/extension-installer/commit/219172eeb996a1a739f61e344ebb5478078ffc59) - Dump PHPStan version constraint to GeneratedConfig - [9416e06](http://github.com/phpstan/extension-installer/commit/9416e06452dcfa8d3f474eb03e95692c0608051c) - Bump composer-plugin-api - [2ea5b42](http://github.com/phpstan/extension-installer/commit/2ea5b421881fb793baa8d49a9106c5077caae599) - Update lock-closed-issues.yml - [dd08fd9](http://github.com/phpstan/extension-installer/commit/dd08fd9e6ca7490a9a15173091b407e160856af8) - chore(deps): update cbrgm/mastodon-github-action action to v2 - [03b1d7e](http://github.com/phpstan/extension-installer/commit/03b1d7e5884e396df6408789883463e151902b93) - chore(deps): update metcalfc/changelog-generator action to v4.3.1 - [5861df6](http://github.com/phpstan/extension-installer/commit/5861df6468d3eb2e532e0483473b9f28e9b9fdde) - chore(deps): update metcalfc/changelog-generator action to v4.2.0 - [abd5064](http://github.com/phpstan/extension-installer/commit/abd5064c04a226d0173e886291b270e283245cee) - chore(deps): update dessant/lock-threads action to v5 - [dcbaea0](http://github.com/phpstan/extension-installer/commit/dcbaea034d6823cc06217adbfcd76b747ea0e312) - chore(deps): update actions/checkout action to v4 - [181c23c](http://github.com/phpstan/extension-installer/commit/181c23c71b9992e7b091376c1b2f97e1de4a75c6) - Update .gitattributes - [7aa403a](http://github.com/phpstan/extension-installer/commit/7aa403a252d3a7494a6fb362e68f218b577aa44e) - Next-gen coding standard workflow - [a7ce75f](http://github.com/phpstan/extension-installer/commit/a7ce75f779a53ab600d803b09b833488130780c8) - chore(deps): update dependency slevomat/coding-standard to v8.12.1 - [cf5912d](http://github.com/phpstan/extension-installer/commit/cf5912d9a241c5683dac512df20b8630757cec4c) - Revert "Next-gen coding standard workflow" - [4255c03](http://github.com/phpstan/extension-installer/commit/4255c031511b1261eb1c5f6143184f5bbe9c39db) - Next-gen coding standard workflowphpstan/phpstan (phpstan/phpstan)
### [`v1.11.4`](https://togithub.com/phpstan/phpstan/releases/tag/1.11.4) [Compare Source](https://togithub.com/phpstan/phpstan/compare/1.11.3...1.11.4) # Improvements 🔧 - Detect `--generate-baseline` combined with `--pro` (https://github.com/phpstan/phpstan-src/commit/dd028cb4ccc44c6aa12b51f443e8761d5d4efc1d), [#11093](https://togithub.com/phpstan/phpstan/issues/11093) - Add error identifier to RawErrorFormatter ([#3112](https://togithub.com/phpstan/phpstan-src/pull/3112)), [#11125](https://togithub.com/phpstan/phpstan/issues/11125), thanks [@zonuexe](https://togithub.com/zonuexe)! - Pass current rule level to PHPStan Pro (https://github.com/phpstan/phpstan-src/commit/7af14fbfc027b15e3342ac95be783bd3fa1df413) - Read and enforce PHPStan version constraints from `phpstan/extension-installer` v1.4 (https://github.com/phpstan/phpstan-src/commit/1d005ef1e72f77afada37bad491f2b6602f4cc92) # Bugfixes 🐛 - Consider `numeric-string` types after string concat ([#3117](https://togithub.com/phpstan/phpstan-src/pull/3117)), thanks [@staabm](https://togithub.com/staabm)! - Fix type loss with recursive `count()` ([#2812](https://togithub.com/phpstan/phpstan-src/pull/2812)), thanks [@staabm](https://togithub.com/staabm)! - `array_slice()` returns `non-empty-array` for existing offsets and positive limit ([#3124](https://togithub.com/phpstan/phpstan-src/pull/3124)), [#10721](https://togithub.com/phpstan/phpstan/issues/10721), thanks [@staabm](https://togithub.com/staabm)! - Consider a `ClosureType()` as maybe impure by default when no `$impurePoints` array provided ([#3125](https://togithub.com/phpstan/phpstan-src/pull/3125)), [#11135](https://togithub.com/phpstan/phpstan/issues/11135), thanks [@jf-m](https://togithub.com/jf-m)! # Function signature fixes 🤖 - Make the return type of `tempnam()` and `tmpfile()` to benevolent union ([#3111](https://togithub.com/phpstan/phpstan-src/pull/3111)), thanks [@zonuexe](https://togithub.com/zonuexe)! - Fix `gnupg_init` function ([#3118](https://togithub.com/phpstan/phpstan-src/pull/3118)), thanks [@pistej](https://togithub.com/pistej)! # Internals 🔍 - Update `react/promise` (https://github.com/phpstan/phpstan-src/commit/da754e2294a619bacc95cd42426e94c17a57365b)Configuration
📅 Schedule: Branch creation - "before 4am on Wednesday" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Mend Renovate. View repository job log here.