Merge pull request #348 from mimmi20/dependabot/composer/master/minor…

…-patch-dependencies-d951d277b3 composer(deps-dev): bump the minor-patch-dependencies group with 4 updates
mimmi20 · Jul 26, 2024 · 5d566a7 · 5d566a7
2 parents 3238fb4 + 690b519
commit 5d566a7
Show file tree

Hide file tree

Showing 13 changed files with 73 additions and 30 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -16,14 +16,24 @@ updates:
       timezone: "Europe/Berlin"
 
     groups:
-      # Specify a name for the group, which will be used in pull request titles
-      # and branch names
-      minor-patch-dependencies:
+      security-updates:
+        applies-to: "security-updates"
+        patterns:
+          - "*"
+        exclude-patterns:
+          - "friendsofphp/php-cs-fixer"
+          - "sirbrillig/phpcs-variable-analysis"
+          - "slevomat/coding-standard"
+          - "squizlabs/php_codesniffer"
+      version-updates:
         applies-to: "version-updates"
-        # Define patterns to include dependencies in the group (based on
-        # dependency name)
         patterns:
           - "*"
+        exclude-patterns:
+          - "friendsofphp/php-cs-fixer"
+          - "sirbrillig/phpcs-variable-analysis"
+          - "slevomat/coding-standard"
+          - "squizlabs/php_codesniffer"
 
     open-pull-requests-limit: 10
 
@@ -87,12 +97,12 @@ updates:
       timezone: "Europe/Berlin"
 
     groups:
-      # Specify a name for the group, which will be used in pull request titles
-      # and branch names
-      minor-patch-dependencies:
+      security-updates:
+        applies-to: "security-updates"
+        patterns:
+          - "*"
+      version-updates:
         applies-to: "version-updates"
-        # Define patterns to include dependencies in the group (based on
-        # dependency name)
         patterns:
           - "*"
 
@@ -150,10 +160,12 @@ updates:
     groups:
       # Specify a name for the group, which will be used in pull request titles
       # and branch names
-      minor-patch-dependencies:
+      security-updates:
+        applies-to: "security-updates"
+        patterns:
+          - "*"
+      version-updates:
         applies-to: "version-updates"
-        # Define patterns to include dependencies in the group (based on
-        # dependency name)
         patterns:
           - "*"
 

diff --git a/.github/renovate.json5 b/.github/renovate.json5
@@ -7,7 +7,7 @@
     ":combinePatchMinorReleases",
     ":disableDependencyDashboard",
     ":disableRateLimiting",
-    ":enableRenovate",
+    ":disableRenovate",
     ":enableVulnerabilityAlertsWithLabel(security)",
     ":gitSignOff",
     ":ignoreUnstable",
@@ -43,6 +43,7 @@
     "Change": "[{{#if displayFrom}}`{{{displayFrom}}}` -> {{else}}{{#if currentValue}}`{{{currentValue}}}` -> {{/if}}{{/if}}{{#if displayTo}}`{{{displayTo}}}`{{else}}`{{{newValue}}}`{{/if}}]({{#if depName}}https://renovatebot.com/diffs/npm/{{replace '/' '%2f' depName}}/{{{currentVersion}}}/{{{newVersion}}}{{/if}})"
   },
   "rangeStrategy": "bump",
+  "recreateWhen": "never",
   "rollbackPrs": true,
   "schedule": ["before 4am on Friday"],
   "packageRules": [
@@ -92,27 +93,53 @@
     {
       "matchPackageNames": [
         "@csstools/postcss-color-function",
+        "@csstools/postcss-color-mix-function",
+        "@csstools/postcss-exponential-functions",
+        "@csstools/postcss-font-format-keywords",
+        "@csstools/postcss-gradients-interpolation-method",
+        "@csstools/postcss-initial",
+        "@csstools/postcss-is-pseudo-class",
+        "@csstools/postcss-media-minmax",
+        "@csstools/postcss-media-queries-aspect-ratio-number-values",
+        "@csstools/postcss-nested-calc",
+        "@csstools/postcss-progressive-custom-properties",
         "@csstools/postcss-text-decoration-shorthand",
         "@csstools/postcss-trigonometric-functions",
         "@types/node",
         "@vitest/coverage-istanbul",
         "@vitest/ui",
+        "autoprefixer",
         "aws/aws-sdk-php",
         "browserslist",
+        "eslint-plugin-prettier",
         "friendsofphp/php-cs-fixer",
+        "laminas/laminas-authentication",
         "laminas/laminas-form",
         "laminas/laminas-i18n",
         "laminas/laminas-validator",
+        "lilconfig",
+        "mezzio/mezzio",
         "mimmi20/coding-standard",
         "mimmi20/mezzio-setlocale-middleware",
         "phpstan/phpstan",
         "postcss",
+        "postcss-color-hex-alpha",
+        "postcss-color-rebeccapurple",
         "postcss-custom-media",
         "postcss-custom-properties",
         "postcss-custom-selectors",
+        "postcss-image-set-function",
+        "postcss-import",
+        "postcss-nested",
+        "postcss-nesting",
+        "postcss-place",
+        "postcss-prefix-selector",
         "postcss-prefixwrap",
         "postcss-preset-env",
+        "postcss-pseudo-class-any-link",
+        "postcss-selector-not",
         "prettier",
+        "prettier-eslint",
         "raven-actions/actionlint",
         "rector/rector",
         "rector/type-perfect",
@@ -125,7 +152,9 @@
         "stylelint-config-standard",
         "typescript",
         "vite",
-        "vitest"
+        "vitest",
+        "vite-plugin-dts",
+        "yaml"
       ],
       "enabled": false
     },

diff --git a/.github/workflows/cleanup-caches.yml b/.github/workflows/cleanup-caches.yml
@@ -12,7 +12,7 @@ on:
 
 jobs:
   cleanup:
-    runs-on: "ubuntu-22.04"
+    runs-on: "ubuntu-24.04"
     steps:
       - name: "Checkout"
         uses: "actions/checkout@v4"

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -30,7 +30,7 @@ on:
 jobs:
   analyze:
     name: "Analyze"
-    runs-on: "ubuntu-22.04"
+    runs-on: "ubuntu-24.04"
     permissions:
       actions: read
       contents: read

diff --git a/.github/workflows/continuous-integration.yml b/.github/workflows/continuous-integration.yml
@@ -73,6 +73,7 @@ jobs:
       matrix:
         operating-system:
           - "ubuntu-22.04"
+          - "ubuntu-24.04"
 
         php-version:
           - "8.1"
@@ -140,6 +141,7 @@ jobs:
       matrix:
         operating-system:
           - "ubuntu-22.04"
+          - "ubuntu-24.04"
 
         php-version:
           - "8.1"
@@ -215,7 +217,7 @@ jobs:
         run: "vendor/bin/infection --show-mutations --only-covered --min-covered-msi=97 --min-msi=97 --coverage=.build/coverage --logger-github --no-progress -vv"
 
   finish-code-coverage:
-    runs-on: "ubuntu-22.04"
+    runs-on: "ubuntu-24.04"
 
     needs: "code-coverage"
 
@@ -232,7 +234,7 @@ jobs:
   tests-status:
     name: "Unit & Integration Tests Status"
 
-    runs-on: "ubuntu-22.04"
+    runs-on: "ubuntu-24.04"
 
     if: always()
 

diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
@@ -20,7 +20,7 @@ permissions:
 
 jobs:
   dependency-review:
-    runs-on: "ubuntu-latest"
+    runs-on: "ubuntu-24.04"
     steps:
       - name: "Checkout"
         uses: "actions/checkout@v4"

diff --git a/.github/workflows/labels.yml b/.github/workflows/labels.yml
@@ -22,7 +22,7 @@ jobs:
     permissions:
       issues: write
 
-    runs-on: "ubuntu-22.04"
+    runs-on: "ubuntu-24.04"
 
     steps:
       - name: "Checkout"

diff --git a/.github/workflows/lint-workflow-files.yml b/.github/workflows/lint-workflow-files.yml
@@ -7,7 +7,7 @@ on:
 
 jobs:
   actionlint:
-    runs-on: "ubuntu-22.04"
+    runs-on: "ubuntu-24.04"
 
     steps:
       - name: "Checkout"

diff --git a/.github/workflows/lock-closed-issues.yml b/.github/workflows/lock-closed-issues.yml
@@ -11,7 +11,7 @@ on:
 
 jobs:
   lock:
-    runs-on: "ubuntu-22.04"
+    runs-on: "ubuntu-24.04"
     steps:
       - uses: "Dunning-Kruger/[email protected]"
         with:

diff --git a/.github/workflows/reactions.yml b/.github/workflows/reactions.yml
@@ -21,7 +21,7 @@ permissions:
 
 jobs:
   action:
-    runs-on: "ubuntu-22.04"
+    runs-on: "ubuntu-24.04"
     steps:
       - uses: "dessant/reaction-comments@v4"
         with:

diff --git a/.github/workflows/release-drafter.yml b/.github/workflows/release-drafter.yml
@@ -31,7 +31,7 @@ jobs:
       # otherwise, read permission is required at least
       pull-requests: write
 
-    runs-on: "ubuntu-22.04"
+    runs-on: "ubuntu-24.04"
 
     steps:
       # Drafts your next Release notes as Pull Requests are merged into "master"

diff --git a/.github/workflows/renovate-config-validator.yml b/.github/workflows/renovate-config-validator.yml
@@ -6,7 +6,7 @@ on:
 
 jobs:
   validate:
-    runs-on: "ubuntu-22.04"
+    runs-on: "ubuntu-24.04"
 
     steps:
       - name: "Checkout"

diff --git a/composer.json b/composer.json
@@ -33,19 +33,19 @@
     "infection/infection": "^0.27.11 || ^0.28.1",
     "laminas/laminas-modulemanager": "^2.16.0",
     "laminas/laminas-servicemanager": "^3.22.1 || ^4.0.0",
-    "mimmi20/coding-standard": "^5.2.36",
+    "mimmi20/coding-standard": "^5.2.37",
     "nikic/php-parser": "^4.19.1 || ^5.0.2",
     "phpstan/extension-installer": "^1.4.1",
-    "phpstan/phpstan": "^1.11.7",
+    "phpstan/phpstan": "^1.11.8",
     "phpstan/phpstan-deprecation-rules": "^1.2.0",
     "phpstan/phpstan-phpunit": "^1.4.0",
     "phpunit/phpunit": "^10.5.25",
-    "rector/rector": "^1.2.1",
+    "rector/rector": "^1.2.2",
     "rector/type-perfect": "^0.1.8",
     "symplify/phpstan-rules": "^13.0.0",
     "tomasvotruba/cognitive-complexity": "^0.2.3",
     "tomasvotruba/type-coverage": "^0.3.1",
-    "tomasvotruba/unused-public": "^0.3.9"
+    "tomasvotruba/unused-public": "^0.3.10"
   },
   "autoload": {
     "psr-4": {
-Original file line number
+Diff line change
@@ Expand Up / @@ -11,7 +11,7 @@ on: @@
     jobs:
       lock:
-        runs-on: "ubuntu-22.04"
+        runs-on: "ubuntu-24.04"
         steps:
           - uses: "Dunning-Kruger/[email protected]"
             with:
@@ Expand Down @@