reload / github-security-jira

Github Action for integrating Security Alerts with JIRA
MIT License
53 stars 32 forks source link

Bump squizlabs/php_codesniffer from 3.10.2 to 3.10.3 #437

Closed dependabot[bot] closed 1 month ago

dependabot[bot] commented 1 month ago

Bumps squizlabs/php_codesniffer from 3.10.2 to 3.10.3.

Release notes

Sourced from squizlabs/php_codesniffer's releases.

3.10.3 - 2024-09-18

Changed

Fixed

  • Fixed bug #553 : Squiz.Classes.SelfMemberReference: false negative(s) when namespace operator was encountered between the namespace declaration and the OO declaration.
  • Fixed bug #579 : AbstractPatternSniff: potential PHP notice during live coding.
  • Fixed bug #580 : Squiz.Formatting.OperatorBracket: potential PHP notice during live coding.
  • Fixed bug #581 : PSR12.ControlStructures.ControlStructureSpacing: prevent fixer conflict by correctly handling multiple empty newlines before the first condition in a multi-line control structure.
  • Fixed bug #585 : Tokenizer not applying tab replacement in heredoc/nowdoc openers.
  • Fixed bug #588 : Squiz.PHP.EmbeddedPhp false positive when checking spaces after a PHP short open tag.
  • Fixed bug #597 : Generic.PHP.LowerCaseKeyword did not flag nor fix non-lowercase anonymous class keywords.
  • Fixed bug #598 : Squiz.PHP.DisallowMultipleAssignments: false positive on assignments to variable property on object stored in array.
  • Fixed bug #608 : Squiz.Functions.MultiLineFunctionDeclaration did not take (parameter) attributes into account when checking for one parameter per line.

Other


New Contributors

The PHP_CodeSniffer project is happy to welcome the following new contributors: @​maryo

Statistics

Closed: 4 issues Merged: 19 pull requests

If you like to stay informed about releases and more, follow @​phpcs on Mastodon or @​PHP_CodeSniffer on X.

Please consider funding the PHP_CodeSniffer project. If you already do so: thank you!

Changelog

Sourced from squizlabs/php_codesniffer's changelog.

[3.10.3] - 2024-09-18

Changed

  • Various housekeeping, including improvements to the tests and documentation.

Fixed

  • Fixed bug #553 : Squiz.Classes.SelfMemberReference: false negative(s) when namespace operator was encountered between the namespace declaration and the OO declaration.
    • Thanks to [Juliette Reinders Folmer][@​jrfnl] for the patch
  • Fixed bug #579 : AbstractPatternSniff: potential PHP notice during live coding.
    • Thanks to [Juliette Reinders Folmer][@​jrfnl] for the patch
  • Fixed bug #580 : Squiz.Formatting.OperatorBracket: potential PHP notice during live coding.
    • Thanks to [Juliette Reinders Folmer][@​jrfnl] for the patch
  • Fixed bug #581 : PSR12.ControlStructures.ControlStructureSpacing: prevent fixer conflict by correctly handling multiple empty newlines before the first condition in a multi-line control structure.
  • Fixed bug #585 : Tokenizer not applying tab replacement in heredoc/nowdoc openers.
    • Thanks to [Juliette Reinders Folmer][@​jrfnl] for the patch
  • Fixed bug #588 : Squiz.PHP.EmbeddedPhp false positive when checking spaces after a PHP short open tag.
  • Fixed bug #597 : Generic.PHP.LowerCaseKeyword did not flag nor fix non-lowercase anonymous class keywords.
    • Thanks to [Marek Štípek][@​maryo] for the patch.
  • Fixed bug #598 : Squiz.PHP.DisallowMultipleAssignments: false positive on assignments to variable property on object stored in array.
    • Thanks to [Juliette Reinders Folmer][@​jrfnl] for the patch
  • Fixed bug #608 : Squiz.Functions.MultiLineFunctionDeclaration did not take (parameter) attributes into account when checking for one parameter per line.
    • Thanks to [Juliette Reinders Folmer][@​jrfnl] for the patch

Other

  • The provenance of PHAR files associated with a release can now be verified via GitHub Artifact Attestations using the GitHub CLI tool with the following command: gh attestation verify [phpcs|phpcbf].phar -o PHPCSStandards. #574
    • Thanks to [Juliette Reinders Folmer][@​jrfnl] for the patch.

#553: PHPCSStandards/PHP_CodeSniffer#553 #574: PHPCSStandards/PHP_CodeSniffer#574 #579: PHPCSStandards/PHP_CodeSniffer#579 #580: PHPCSStandards/PHP_CodeSniffer#580 #581: PHPCSStandards/PHP_CodeSniffer#581 #585: PHPCSStandards/PHP_CodeSniffer#585 #588: PHPCSStandards/PHP_CodeSniffer#588 #597: PHPCSStandards/PHP_CodeSniffer#597 #598: PHPCSStandards/PHP_CodeSniffer#598 #608: PHPCSStandards/PHP_CodeSniffer#608

Commits
  • 62d3299 Merge pull request #615 from PHPCSStandards/feature/changelog-3.10.3
  • 863be8c Changelog for the 3.10.3 release
  • 2809074 Merge pull request #614 from PHPCSStandards/feature/docs-various-fixes
  • 35e259b Docs: various minor fixes
  • 335318f Merge pull request #612 from PHPCSStandards/dependabot/github_actions/DavidAn...
  • 5bc630c GH Actions: Bump DavidAnson/markdownlint-cli2-action from 16 to 17
  • 16b6f35 Merge pull request #610 from PHPCSStandards/feature/598-squiz-disallowmultipl...
  • 0ab692a Squiz/DisallowMultipleAssignments: bug fix - dynamic property assignment on o...
  • b87dafd Merge pull request #609 from PHPCSStandards/feature/608-squiz-multilinefuncti...
  • f39847a Squiz/MultiLineFunctionDeclaration: bug fix - skip over attributes
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)