This repository was archived by the owner on Dec 10, 2025. It is now read-only.
Open
Conversation
Contributor
Author
⚠ Artifact update problemRenovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is. ♻ Renovate will retry this branch, including artifacts, only when one of the following happens:
The artifact failure details are included below: File name: composer.lock |
2c7f1ae to
b7e37c4
Compare
e7a739a to
a10623d
Compare
7d97dcc to
76d0acb
Compare
1f7910d to
12e9d75
Compare
9f648af to
358cf79
Compare
d20e07e to
77fc249
Compare
363eb0d to
09fba03
Compare
de62112 to
6abe6c2
Compare
fa57188 to
b53eeb9
Compare
e5f39e3 to
c01d5f4
Compare
35885d4 to
581ad29
Compare
581ad29 to
dec848b
Compare
5868dd6 to
79206b4
Compare
| datasource | package | from | to | | ----------- | -------------------------- | ------- | ------- | | packagist | composer/composer | 2.7.7 | 2.9.2 | | packagist | infection/infection | 0.27.11 | 0.31.9 | | github-tags | laminas/automatic-releases | 1.24.0 | 1.25.0 | | packagist | ocramius/package-versions | 2.8.0 | 2.11.0 | | github-tags | containerbase/php-prebuild | 8.3.28 | 8.5.0 | | packagist | phpunit/phpunit | 10.5.26 | 10.5.60 | | packagist | psalm/plugin-phpunit | 0.19.0 | 0.19.5 | | github-tags | shivammathur/setup-php | 2.30.0 | 2.36.0 | | packagist | symfony/process | 7.4.0 | 7.4.0 | | packagist | vimeo/psalm | 5.25.0 | 5.26.1 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^2.7.2->^2.9.2^0.27.11->^0.31.91.24.0->1.25.0^2.8.0->^2.11.0~8.1.0 || ~8.2.0 || ~8.3.0->~8.1.0 || ~8.2.0 || ~8.3.0 || ~8.5.0^10.5.15->^10.5.60^0.19.0->^0.19.52.30.0->2.36.0^7.0.4->^7.4.0^5.23.1->^5.26.1Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
composer/composer (composer/composer)
v2.9.2Compare Source
--no-security-blockingflag to disable/configure security blocking (#12617)audit > ignoreto act only on audits or only on security blocking (#12618, #12612)configcommand not being able to set the new audit settings (#12609)v2.9.1Compare Source
v2.9.0Compare Source
v2.8.12Compare Source
config --globalpath resolution issue (#12537)v2.8.11Compare Source
bumpcommand handling of 0.x versions (#12468)auditcommand failing hard if any advisory constraint was invalid (#12507)v2.8.10Compare Source
v2.8.9Compare Source
bump-after-updatetriggering after anupdate --lock, which makes no sense (#12371)ZipArchive(#12409)composer <script-name>(#12383)v2.8.8Compare Source
v2.8.7Compare Source
COMPOSER_MAX_PARALLEL_PROCESSenv var to control max amount of parallel processes Composer will start (#12356)diagnosecommand output--with ...constraints to make them apply to packages replaced a package with a different name (#12353)v2.8.6Compare Source
COMPOSER_WITH_DEPENDENCIESandCOMPOSER_WITH_ALL_DEPENDENCIESenv vars to enable the--with[-all]-dependenciesflags (#12289)COMPOSER_SKIP_SCRIPTSenv var to tell Composer to skip certain script handlers by script names (comma separated) (#12290)v2.8.5Compare Source
Added build provenance attestation so you can also now download and verify phar files from GitHub releases:
fundingvalues causing parse errors in packages (#12247)reload()is used (#12269)vendor/composer/autoload*.php(#12263)v2.8.4Compare Source
auditcommand not being meaningful (now 1 for vulnerabilities and 2 for abandoned, 3 for both) (#12203)bump-after-updatefailing when using inline constraints (#12223)create-projectcommand to now disable symlinking when used with a path repo as argument (#12222)validate --no-check-publishto hide publish errors entirely as they are irrelevant (#12196)auditcommand returning a failing code when composer audit fails as this should not trigger build failures, but running audit as standard part of your build is probably a terrible idea anyway (#12196)v2.8.3Compare Source
v2.8.2Compare Source
create-projectregression in 2.8.1 when using path repos with relative paths (#12150)v2.8.1Compare Source
config --globalpath resolution issue (#12537)v2.8.0Compare Source
https_proxyenv var falling back tohttp_proxy's value. The fallback and warning have now been removed per the 2.7.3 release notes (#11938, #11915)--patch-onlyflag to theupdatecommand to restrict updates to patch versions and make an update of all deps safer (#12122)--abandonedflag to theauditcommand to configure how abandoned packages should be treated, overriding theaudit.abandonedconfig setting (#12091)--ignore-severityflag to theauditcommand to ignore one or more advisory severities (#12132)--bump-after-updateflag to theupdatecommand to run bump after the update is done (#11942)scriptsreceive additional CLI arguments and where they appear in the command, see the docs (#12086)allow-missing-requirementsconfig setting to skip the error when the lock file is not fulfilling the composer.json's dependencies (#11966)--typeflag to filter packages by type(s) in thereinstallcommand (#12114)--strict-ambiguousflag to thedump-autoloadcommand to make it return with an error code if duplicate classes are found (#12119)dump-autoloadwhen vendor files have been deleted (#12139)create-projectto avoid having to run it again and again (#12120)sort-packagesis enabled (#11348)E_STRICT(#12116)initcommand to validate the given license identifier (#12115)v2.7.9Compare Source
completioncommand (#12015)v2.7.8Compare Source
release-age,release-dateandlatest-release-datein the JSON output ofoutdated(#12053)#signs (#12042)bumpcommand not handling some~constraints correctly (#12038)relative: truesometimes not being respected in path repo symlinks (#12092)archivecommand crashing when a path cannot be realpath'd on windows (#11544)685add7)infection/infection (infection/infection)
v0.31.9: Support PHPStan-dev version in PHPStanAdapterCompare Source
Changed:
Full Changelog: infection/infection@0.31.8...0.31.9
v0.31.8Compare Source
Changed:
Full Changelog: infection/infection@0.31.7...0.31.8
v0.31.7: Show uncovered mutants to output when--with-uncoveredis usedCompare Source
Fixed:
--with-uncoveredis used by @maks-rafalko in #2443--dry-runby @maks-rafalko in #2436Full Changelog: infection/infection@0.31.6...0.31.7
v0.31.6: Introduce --logger-text optionCompare Source
Added:
--logger-textoption to enforce text logger file path by @romm in #2438Full Changelog: infection/infection@0.31.5...0.31.6
v0.31.5Compare Source
Fixed:
--dry-runoption using DryRunProcess wrapper (alternative approach) by @sanmai in #2435Changed:
executionOrder="defects,random"for phpunit.xml by @staabm in #2267CloneVisitorand use nativeCloningVisitorfromphp-parserby @maks-rafalko in #2430Full Changelog: infection/infection@0.31.4...0.31.5
v0.31.4Compare Source
Changed:
--fail-without-result-cacheby @staabm in #2429Internal:
Full Changelog: infection/infection@0.31.3...0.31.4
v0.31.3: PHPStan running out of memory when attempting --static-analysis-tool=phpstanCompare Source
Fixed:
Changed:
Internal:
Full Changelog: infection/infection@0.31.2...0.31.3
v0.31.2: --static-analysis-tool-options and no MSI shown by default for non-covered codeCompare Source
Added:
Mutation Score Indicator (MSI)from default output, show only with--with-uncoveredby @Copilot in #2378Changed:
--static-analysis-tool-optionsCLI option with proper multiple options support by @Copilot in #2374Internal:
copilot-setup-steps.ymlby @maks-rafalko in #2377New Contributors
Full Changelog: infection/infection@0.31.1...0.31.2
v0.31.1: Cleanup old PHPUnit cache files in Infection tmp directoryCompare Source
Added:
Internal:
DiffColorizerby @staabm in #2353Full Changelog: infection/infection@0.31.0...0.31.1
v0.31.0Compare Source
Changed:
--only-covered; Introduce--with-uncoveredinstead by @staabm in #2336executionOrder="defects,random"forphpunit.xmlby @staabm in #2328Fixed:
Internal:
Backward Compatibility Break
This version introduces BC Break. Do the following:
bin/infection, now you need to add--with-uncovered, because by default, Infection doesn't mutate uncovered code anymorebin/infection --only-covered, you need to remove this option because now this is a default behavior and this options has been removedFull Changelog: infection/infection@0.30.3...0.31.0
v0.30.3Compare Source
Changed:
--only-covered; Introduce--with-uncoveredinstead by @staabm in #2336executionOrder="defects,random"forphpunit.xmlby @staabm in #2328Fixed:
Internal:
Backward Compatibility Break
This version introduces BC Break. Do the following:
bin/infection, now you need to add--with-uncovered, because by default, Infection doesn't mutate uncovered code anymorebin/infection --only-covered, you need to remove this option because now this is a default behavior and this options has been removedFull Changelog: infection/infection@0.30.3...0.31.0
v0.30.2Compare Source
Added:
ReturnRemovalmutator by @sanmai in #2296Changed:
0metrics in result summary by @staabm in #2311Fixed:
Internal:
Full Changelog: infection/infection@0.30.2...0.30.3
v0.30.1Compare Source
Changed:
LogicalNotmutator by @staabm in #2283IdenticalEqualby @sanmai in #2248Internal:
Full Changelog: infection/infection@0.30.1...0.30.2
v0.30.0Compare Source
Changed:
TextFileLogger: add hints about different logfile options by @staabm in #2278TrueValue/FalseValuemutator by @staabm in #2280Fixed:
--static-analysis-tool=phpstanby @maks-rafalko in #2284Internal:
Full Changelog
v0.29.14Compare Source
Full Changelog
Added:
--threadsto the config file underthreadskey by @maks-rafalko in #2158--show-mutations=int|maxto support non-bool values by @staabm in #2216--id=<mutant-hash>to run the only one Mutant for killing it by @maks-rafalko in #2226perMutatortimings by @staabm in #2164perMutatorlogger table header by @staabm in #2175--static-analysis-tool=phpstan) if they are escaped and not killed by PHPUnit tests by @maks-rafalko in #2098Changed:
falsewith a non-falsy value by @staabm in #2121ProtectedVisibility: by @staabm in #2112DecrementIntegermutator by @staabm in #2204IncrementIntegermutator by @staabm in #2208DecrementIntegermutator by @staabm in [#2238](https://redirect.github.com/infection/infection/pu