php-tuf / composer-stager

Stages Composer commands so they can be safely run on a codebase in production.
MIT License
16 stars 8 forks source link

Bump the all group with 2 updates #366

Closed dependabot[bot] closed 5 months ago

dependabot[bot] commented 5 months ago

Bumps the all group with 2 updates: phpstan/phpstan and squizlabs/php_codesniffer.

Updates phpstan/phpstan from 1.11.1 to 1.11.2

Release notes

Sourced from phpstan/phpstan's releases.

1.11.2

Improvements 🔧

Function signature fixes 🤖

  • More concrete return types for some database functions (#3078), thanks @​devnix!

Internals 🔍

Commits
  • 0d5d429 PHPStan 1.11.2
  • c55d0e3 Updated PHPStan to commit c55d0e35f2dd475534a3272272cd19b601687bc6
  • da6e9ae Updated PHPStan to commit da6e9ae49806b1ed3c029e88a546837a15a1dee5
  • 0055aac Updated PHPStan to commit 0055aac00c8d75d9cf91d4452519f236f22c8505
  • 5a73f07 Updated PHPStan to commit 5a73f076468e3513156129da864d407c872a4b49
  • d77ab48 Update baselines
  • 49f87ce Updated PHPStan to commit 49f87ced5835fffce2f91b4768cdc1ab59a1e67e
  • 1e4df5c Update errors identifiers
  • 5cebee3 Updated PHPStan to commit 5cebee3ab99c89dc39dec4ac631a4df63a233c38
  • c81aa85 Update BACKERS.md
  • Additional commits viewable in compare view


Updates squizlabs/php_codesniffer from 3.10.0 to 3.10.1

Release notes

Sourced from squizlabs/php_codesniffer's releases.

3.10.1 - 2024-05-22

Added

  • Documentation for the following sniffs:
    • Generic.Commenting.DocComment
    • Thanks to Rodrigo Primo for the patch.

Changed

  • The following have received efficiency improvements:
  • Various housekeeping, including improvements to the tests and documentation.

Fixed

  • Fixed bug #110, #437, #475: File::findStartOfStatement(): the start of statement/expression determination for tokens in parentheses/short array brackets/others scopes, nested within match expressions, was incorrect in most cases. The trickle down effect of the bug fixes made to the File::findStartOfStatement() method, is that the Generic.WhiteSpace.ScopeIndent and the PEAR.WhiteSpace.ScopeIndent sniffs should now be able to correctly determine and fix the indent for match expressions containing nested expressions. These fixes also fix an issue with the Squiz.Arrays.ArrayDeclaration sniff and possibly other, unreported bugs.
  • Fixed bug #504: The tokenizer could inadvertently mistake the last parameter in a function call using named arguments for a DNF type.
  • Fixed bug #508: Tokenizer/PHP: extra hardening against handling parse errors in the type handling layer.

Statistics

Closed: 5 issues Merged: 7 pull requests

If you like to stay informed about releases and more, follow @​phpcs on Mastodon or @​PHP_CodeSniffer on X.

Full Changelog: https://github.com/PHPCSStandards/PHP_CodeSniffer/compare/3.10.0...3.10.1

Changelog

Sourced from squizlabs/php_codesniffer's changelog.

[3.10.1] - 2024-05-22

Added

  • Documentation for the following sniffs:
    • Generic.Commenting.DocComment
    • Thanks to [Rodrigo Primo][@​rodrigoprimo] for the patch.

Changed

  • The following have received efficiency improvements:
    • Type handling in the PHP Tokenizer
    • Thanks to [Juliette Reinders Folmer][@​jrfnl] for the patch.
  • Various housekeeping, including improvements to the tests and documentation.
    • Thanks to [Juliette Reinders Folmer][@​jrfnl] for their contributions.

Fixed

  • Fixed bug #110, #437, #475: File::findStartOfStatement(): the start of statement/expression determination for tokens in parentheses/short array brackets/others scopes, nested within match expressions, was incorrect in most cases. The trickle down effect of the bug fixes made to the File::findStartOfStatement() method, is that the Generic.WhiteSpace.ScopeIndent and the PEAR.WhiteSpace.ScopeIndent sniffs should now be able to correctly determine and fix the indent for match expressions containing nested expressions. These fixes also fix an issue with the Squiz.Arrays.ArrayDeclaration sniff and possibly other, unreported bugs.
    • Thanks to [Juliette Reinders Folmer][@​jrfnl] for the patch
  • Fixed bug #504: The tokenizer could inadvertently mistake the last parameter in a function call using named arguments for a DNF type.
    • Thanks to [Juliette Reinders Folmer][@​jrfnl] for the patch
  • Fixed bug #508: Tokenizer/PHP: extra hardening against handling parse errors in the type handling layer.
    • Thanks to [Juliette Reinders Folmer][@​jrfnl] for the patch

#110: PHPCSStandards/PHP_CodeSniffer#110 #437: PHPCSStandards/PHP_CodeSniffer#437 #475: PHPCSStandards/PHP_CodeSniffer#475 #504: PHPCSStandards/PHP_CodeSniffer#504 #508: PHPCSStandards/PHP_CodeSniffer#508

Commits
  • 8f90f7a Merge pull request #510 from PHPCSStandards/feature/changelog-3.10.1
  • c9525a8 Changelog for the 3.10.1 release
  • 3361ff2 Merge pull request #509 from PHPCSStandards/feature/file-findstartendofstatem...
  • fb351b3 Merge pull request #508 from PHPCSStandards/feature/tokenizer-php-harden-the-...
  • a82f02e File::find[Start|End]OfStatement(): add QA tests
  • 83373f9 File::findStartOfStatement(): fix some unintentional parse errors in the test...
  • 83afad8 Tokenizer/PHP: minor doc fix in type handling layer
  • 87c3936 Tokenizer/PHP: efficiency fix
  • 07477a7 Tokenizer/PHP: don't retokenize tokens in a broken type DNF declaration
  • cac9038 Tokenizer/PHP: efficiency improvement for DNF type handling
  • Additional commits viewable in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions