Skip to content

chore(deps-dev): bump the php-dev-tools group across 1 directory with 4 updates - #7087

Open
dependabot[bot] wants to merge 1 commit into
4.4from
dependabot/composer/php-dev-tools-1addf0eb16
Open

chore(deps-dev): bump the php-dev-tools group across 1 directory with 4 updates#7087
dependabot[bot] wants to merge 1 commit into
4.4from
dependabot/composer/php-dev-tools-1addf0eb16

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 30, 2026

Copy link
Copy Markdown
Contributor

Bumps the php-dev-tools group with 4 updates in the / directory: phpstan/phpstan, rector/rector, symfony/browser-kit and symfony/phpunit-bridge.

Updates phpstan/phpstan from 2.2.8 to 2.2.13

Commits

Updates rector/rector from 2.6.4 to 2.6.6

Release notes

Sourced from rector/rector's releases.

Released Rector 2.6.6

File selection

--filter option to narrow processed files (#8419)

New --filter option keeps only files whose path matches all given patterns. Repeat the option to require several patterns at once, handy for scoping a run to a subtree or a naming convention without editing config paths.

vendor/bin/rector process src --filter Controller --filter Admin

Before: process every file under the given paths. After: process only files matching all --filter patterns.

Bugfixes 🐛

  • Add back RectorConfig::tag() as a no-op BC layer (#8431)
  • TypeDeclarationDocblocks: fix invalid array-in-key docblock when narrowing long array unions (#8430)
  • BetterPhpDocParser: keep import used only in an annotation array key (#8429)
  • RenameVariableToMatchMethodCallReturnTypeRector: fix partial rename with same-named nested arrow param (#8428)
  • ArrayFirstLastRector: skip nested compound assignment (#8425)
  • ReturnTypeFromStrictNewArrayRector: add doc return type only for list and generic arrays (#8423), skip noisy array-shape union return docblock (#8422)

Extension packages

rector-phpunit 🟢

  • AllowMockObjectsForDataProviderRector: skip dynamic method call (#781)
  • AssertEmptyNullableObjectToAssertInstanceofRector: skip assertNull/assertEmpty (#780)
  • AddSeeTestAnnotationRector: skip existing imported or short @see annotation (#779)

rector-downgrade-php ⬇️

  • DowngradeSetAccessibleReflectionPropertyRector: handle getProperties()/getMethods() loop (#396)
  • DowngradeHashAlgorithmXxHashRector: skip PHP_VERSION_ID guarded hash() calls (#394)

Internal / cleanup

  • Add mspirkov/yii2-rector link to README (#8427)
  • Add fixtures for arrow functions returning a ?? expression (#8421)

Released Rector 2.6.5

Caching

This release makes the cache smarter about config changes - fewer needless full re-runs, while still invalidating when results could actually differ.

Configured rule value changes now invalidate the cache (#8400)

... (truncated)

Commits
  • ca069d6 Rector 2.6.6
  • dd1dbd8 Updated Rector to commit c8f5daeffd982de54092ead1bc0d278a60aa3747
  • c6ecc8d Updated Rector to commit 0919678db52fe2ede06192b3b19834401da4a472
  • 27296aa Updated Rector to commit 96fd595f95029db66bd5205e6c5aa60eb4745353
  • 1e88d3d Updated Rector to commit ee2e8d0dd1afbdc754e5c9f6db7835e5136055f8
  • 33b2be9 Updated Rector to commit ee2e8d0dd1afbdc754e5c9f6db7835e5136055f8
  • 0a5abf5 Updated Rector to commit 28a4645c168c2567f79108c1c4463cda1afb4aff
  • 646f9f7 Updated Rector to commit 28a4645c168c2567f79108c1c4463cda1afb4aff
  • 78802da Updated Rector to commit 28a4645c168c2567f79108c1c4463cda1afb4aff
  • 7a20767 Updated Rector to commit 0c3d4f4e3c5c3eb7eabc0f7097bd7efaea657439
  • Additional commits viewable in compare view

Updates symfony/browser-kit from 7.4.14 to 7.4.17

Release notes

Sourced from symfony/browser-kit's releases.

v7.4.17

Changelog (symfony/browser-kit@v7.4.14...v7.4.17)

Commits
  • 7aff5c4 Merge branch '6.4' into 7.4
  • 4f63147 bug #65507 [BrowserKit] Fix decoding raw cookie values that contain a plus si...
  • 7f33927 [BrowserKit] Return the most specific cookie when several ones match
  • a38b682 [BrowserKit] Fix decoding raw cookie values that contain a plus sign
  • be14bb6 Merge branch '6.4' into 7.4
  • d3dfdbd [BrowserKit][HttpClient][Routing] Don't pass objects to http_build_query()
  • 162cbee Merge branch '6.4' into 7.4
  • 18b919f Check arrays and bools directly instead of comparing them to count()/true/fal...
  • See full diff in compare view

Updates symfony/phpunit-bridge from 8.1.4 to 8.1.6

Release notes

Sourced from symfony/phpunit-bridge's releases.

v8.1.6

Changelog (symfony/phpunit-bridge@v8.1.5...v8.1.6)

  • bug #65754 Fix ClockMock::hrtime() when the clock is not mocked and when the nanoseconds have leading zeros (@​nicolas-grekas)

v8.1.5

Changelog (symfony/phpunit-bridge@v8.1.4...v8.1.5)

Commits
  • abd3c4e Merge branch '7.4' into 8.1
  • ff3a78a Merge branch '6.4' into 7.4
  • e41aaf9 [PhpUnitBridge] Fix ClockMock::hrtime() when the clock is not mocked and when...
  • c1eba6a Merge branch '7.4' into 8.1
  • af20e33 Merge branch '6.4' into 7.4
  • dbee311 [PhpUnitBridge] Fix finding the project root when vendor/ is a symlink
  • c5ab53d Merge branch '7.4' into 8.1
  • 2b01f60 Merge branch '6.4' into 7.4
  • 00d2aff [PhpUnitBridge] Fix crash when a deprecation is triggered from a method inher...
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update Php code labels Aug 30, 2026
@ttokoro20240902

Copy link
Copy Markdown
Contributor

rector / Rector が赤いのは、本 PR が上げた rector/rector の破壊的変更によるものです。ただし直すべきなのは lock ではなく本体の rector.php とコード側なので、rector 分を #7099 に切り出しました。

[ERROR] Undefined constant Rector\Symfony\Set\SymfonySetList::SYMFONY_74

原因

rector 2.6.2 の「every extension package now ships a single composer-based set」で、バージョン別のセット定数が撤去されました。本 PR は 2.6.1 → 2.6.3 なのでこの撤去をまたぎます。

SetList 2.6.1 2.6.3
SymfonySetList 38 5(SYMFONY_25SYMFONY_81 の 33 個が消滅)
DoctrineSetList 21 7
PHPUnitSetList 15 5

rector.php が参照している撤去済みの定数は 3 つあります。rector は最初の未定義定数で即座に落ちるため、ログには 1 つしか出ません。

  • SymfonySetList::SYMFONY_74
  • DoctrineSetList::DOCTRINE_DBAL_30
  • PHPUnitSetList::PHPUNIT_110

対応

#7099COMPOSER_BASED へ移行しました。移行で新たに有効になるルール分が 126 ファイル、さらに #7099 では lock を 2.6.4 まで上げているため 2.6.2〜2.6.4 の新ルール分が 44 ファイルあり、いずれも適用済みです。2.6.4 が警告する死んだ skip と二重登録も掃除しました。CI は 132 pass / fail 0 です。

設定移行だけを先に入れると、その PR の CI は旧版で走るため「新版で緑になること」を検証できず、追従漏れ(上記 44 ファイル)が見えないままになります。そのため #7099 に bump ごと含めています。

#7099 をマージしたあと本 PR を @dependabot rebase していただければ、base が 2.6.4 になるので rector 分が落ち、残り 4 件(phpstan 2.2.10 / symfony/browser-kit / symfony/dom-crawler / symfony/phpunit-bridge)の更新になります。

ttokoro20240902 added a commit that referenced this pull request Sep 2, 2026
rector 2.6.2 がバージョン別のセット定数を撤去したため, 2.6.3 以降では
rector.php が [ERROR] Undefined constant で起動しなくなる。撤去されたのは
SymfonySetList で 33 個 (SYMFONY_25〜SYMFONY_81), DoctrineSetList で 14 個,
PHPUnitSetList で 10 個。本設定が参照していたのは次の 3 つ。

- SymfonySetList::SYMFONY_74     → SymfonySetList::COMPOSER_BASED
- DoctrineSetList::DOCTRINE_DBAL_30 → DoctrineSetList::COMPOSER_BASED
- PHPUnitSetList::PHPUNIT_110    → PHPUnitSetList::COMPOSER_BASED

COMPOSER_BASED は 2.6.1 にも存在するため, この置き換えは現行版でもそのまま動く。
各ルールが composer.json / installed.json を見て, インストール済みバージョンに
合うものだけ実行する。

置き換えで新たに有効になるルールは先行するコミットで適用済みなので,
本コミット時点の dry-run は 1283 ファイルで 0 件。

あわせて 2 点:

- ArgumentAdderRector を skip する。composer-based セットの設定では
  ContainerBuilder::addCompilerPass() に第 2 引数 0 (int) を足すが,
  シグネチャは string $type なので TypeError になる
- withCache() の cacheClass を渡さない。既定が FileCacheStorage で,
  2.6.3 では指定しても無視される (MemoryCacheStorage が撤去された)

refs #7087

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
@dependabot dependabot Bot changed the title chore(deps-dev): bump the php-dev-tools group with 4 updates chore(deps-dev): bump the php-dev-tools group across 1 directory with 4 updates Sep 2, 2026
@dependabot
dependabot Bot force-pushed the dependabot/composer/php-dev-tools-1addf0eb16 branch 2 times, most recently from fe7e6f7 to 57e8cb9 Compare September 6, 2026 22:03
ttokoro20240902 added a commit that referenced this pull request Sep 10, 2026
build(deps-dev): rector を 2.6.4 へ上げ, composer-based セットへ移行する (refs #7087)
… 4 updates

Bumps the php-dev-tools group with 4 updates in the / directory: [phpstan/phpstan](https://github.com/phpstan/phpstan-phar-composer-source), [rector/rector](https://github.com/rectorphp/rector), [symfony/browser-kit](https://github.com/symfony/browser-kit) and [symfony/phpunit-bridge](https://github.com/symfony/phpunit-bridge).


Updates `phpstan/phpstan` from 2.2.8 to 2.2.13
- [Commits](https://github.com/phpstan/phpstan-phar-composer-source/commits)

Updates `rector/rector` from 2.6.4 to 2.6.6
- [Release notes](https://github.com/rectorphp/rector/releases)
- [Commits](rectorphp/rector@2.6.4...2.6.6)

Updates `symfony/browser-kit` from 7.4.14 to 7.4.17
- [Release notes](https://github.com/symfony/browser-kit/releases)
- [Changelog](https://github.com/symfony/browser-kit/blob/8.2/CHANGELOG.md)
- [Commits](symfony/browser-kit@v7.4.14...v7.4.17)

Updates `symfony/phpunit-bridge` from 8.1.4 to 8.1.6
- [Release notes](https://github.com/symfony/phpunit-bridge/releases)
- [Changelog](https://github.com/symfony/phpunit-bridge/blob/8.2/CHANGELOG.md)
- [Commits](symfony/phpunit-bridge@v8.1.4...v8.1.6)

---
updated-dependencies:
- dependency-name: phpstan/phpstan
  dependency-version: 2.2.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: php-dev-tools
- dependency-name: rector/rector
  dependency-version: 2.6.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: php-dev-tools
- dependency-name: symfony/browser-kit
  dependency-version: 7.4.17
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: php-dev-tools
- dependency-name: symfony/phpunit-bridge
  dependency-version: 8.1.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: php-dev-tools
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/composer/php-dev-tools-1addf0eb16 branch from 57e8cb9 to 8247abb Compare September 10, 2026 02:02
@coderabbitai

coderabbitai Bot commented Sep 10, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 9da4660f-b138-443c-bad6-10c8f2292ad5

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file php Pull requests that update Php code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant