reload / github-security-jira

Github Action for integrating Security Alerts with JIRA
MIT License
53 stars 32 forks source link

build(deps-dev): bump squizlabs/php_codesniffer from 3.9.2 to 3.10.0 #398

Closed dependabot[bot] closed 5 months ago

dependabot[bot] commented 5 months ago

Bumps squizlabs/php_codesniffer from 3.9.2 to 3.10.0.

Release notes

Sourced from squizlabs/php_codesniffer's releases.

3.10.0 - 2024-05-20

Added

  • Tokenizer support for PHP 8.2 Disjunctive Normal Form (DNF) types. #3731, #387, #461
    • Includes new T_TYPE_OPEN_PARENTHESIS and T_TYPE_CLOSE_PARENTHESIS tokens to represent the parentheses in DNF types.
    • These new tokens, like other parentheses, will have the parenthesis_opener and parenthesis_closer token array indexes set and the tokens between them will have the nested_parenthesis index.
    • The File::getMethodProperties(), File::getMethodParameters() and File::getMemberProperties() methods now all support DNF types. #471, #472, #473
    • Additionally, the following sniff has been updated to support DNF types:
      • Generic.PHP.LowerCaseType #478
    • Thanks to Juliette Reinders Folmer for the patches.
  • Documentation for the following sniffs:
    • Squiz.WhiteSpace.FunctionClosingBraceSpace
    • Thanks to Przemek Hernik for the patch.

Changed

Fixed

  • Fixed bug #466 : Generic.Functions.CallTimePassByReference was not flagging call-time pass-by-reference in class instantiations using the self/parent/static keywords.
  • Fixed bug #494 : edge case bug in tokenization of an empty block comment.
  • Fixed bug #494 : edge case bug in tokenization of an empty single-line DocBlock.
  • Fixed bug #499 : Generic.ControlStructures.InlineControlStructure now handles statements with a comment between else and if correctly.

New Contributors

The PHP_CodeSniffer project is happy to welcome the following new contributors: @​przemekhernik

Statistics

Closed: 2 issues Merged: 26 pull requests

If you like to stay informed about releases and more, follow @​phpcs on Mastodon or @​PHP_CodeSniffer on X.

... (truncated)

Changelog

Sourced from squizlabs/php_codesniffer's changelog.

[3.10.0] - 2024-05-20

Added

  • Tokenizer support for PHP 8.2 Disjunctive Normal Form (DNF) types. #3731sq-3731, #387, #461
    • Includes new T_TYPE_OPEN_PARENTHESIS and T_TYPE_CLOSE_PARENTHESIS tokens to represent the parentheses in DNF types.
    • These new tokens, like other parentheses, will have the parenthesis_opener and parenthesis_closer token array indexes set and the tokens between them will have the nested_parenthesis index.
    • The File::getMethodProperties(), File::getMethodParameters() and File::getMemberProperties() methods now all support DNF types. #471, #472, #473
    • Additionally, the following sniff has been updated to support DNF types:
      • Generic.PHP.LowerCaseType #478
    • Thanks to [Juliette Reinders Folmer][@​jrfnl] for the patches.
  • Documentation for the following sniffs:
    • Squiz.WhiteSpace.FunctionClosingBraceSpace
    • Thanks to [Przemek Hernik][@​przemekhernik] for the patch.

Changed

  • The help screens have received a face-lift for improved usability and readability. #447
  • The Squiz.Commenting.ClosingDeclarationComment sniff will now also examine and flag closing comments for traits. #442
  • The following sniff(s) have efficiency improvements:
    • Generic.Arrays.ArrayIndent
    • Thanks to [Rodrigo Primo][@​rodrigoprimo] for the patch.
  • The autoloader will now always return a boolean value indicating whether it has loaded a class or not. #479
    • Thanks to [Juliette Reinders Folmer][@​jrfnl] for the patch.
  • Various housekeeping, including improvements to the tests and documentation.

Fixed

  • Fixed bug #466 : Generic.Functions.CallTimePassByReference was not flagging call-time pass-by-reference in class instantiations using the self/parent/static keywords.
  • Fixed bug #494 : edge case bug in tokenization of an empty block comment.
    • Thanks to [Juliette Reinders Folmer][@​jrfnl] for the patch
  • Fixed bug #494 : edge case bug in tokenization of an empty single-line DocBlock.
    • Thanks to [Juliette Reinders Folmer][@​jrfnl] for the patch
  • Fixed bug #499 : Generic.ControlStructures.InlineControlStructure now handles statements with a comment between else and if correctly.

#387: PHPCSStandards/PHP_CodeSniffer#387 #442: PHPCSStandards/PHP_CodeSniffer#442 #447: PHPCSStandards/PHP_CodeSniffer#447 #461: PHPCSStandards/PHP_CodeSniffer#461 #466: PHPCSStandards/PHP_CodeSniffer#466 #471: PHPCSStandards/PHP_CodeSniffer#471 #472: PHPCSStandards/PHP_CodeSniffer#472 #473: PHPCSStandards/PHP_CodeSniffer#473 #478: PHPCSStandards/PHP_CodeSniffer#478 #479: PHPCSStandards/PHP_CodeSniffer#479 #494: PHPCSStandards/PHP_CodeSniffer#494 #499: PHPCSStandards/PHP_CodeSniffer#499

Commits
  • 57e0980 Merge pull request #501 from PHPCSStandards/feature/changelog-3.10.0
  • 98eaf50 Changelog for the 3.10.0 release
  • b7c2356 Merge pull request #494 from PHPCSStandards/feature/tokenizer-comments-add-tests
  • bef6fff Tokenizers/Comment: minor tweaks
  • 252675c Tokenizers/Comment: bug fix - empty docblock
  • c54cb10 Tokenizers/PHP: bug fix - empty block comment
  • d96c7d6 Tokenizers/Comment: add tests
  • 4866ee3 Merge pull request #499 from rodrigoprimo/fix-inline-control-structure-bug
  • f83ba7e Generic/InlineControlStructure: fix error when handling else if
  • 72b50b9 [Documentation] Squiz.WhiteSpace.FunctionClosingBraceSpace (#408)
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)