Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

composer(deps): bump the minor-patch-dependencies group with 4 updates #343

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 5, 2024

Updates the requirements on monolog/monolog, phpstan/phpstan, phpunit/phpunit and rector/rector to permit the latest version.
Updates monolog/monolog to 3.7.0

Release notes

Sourced from monolog/monolog's releases.

3.7.0

  • Added NormalizerFormatter->setBasePath(...) (and JsonFormatter by extension) that allows removing the project's path from the stack trace output (47e301d3e)
  • Fixed JsonFormatter handling of incomplete classes (#1834)
  • Fixed private error handlers causing problems with custom StreamHandler implementations (#1866)

Full Changelog: Seldaek/monolog@3.6.0...3.7.0

Changelog

Sourced from monolog/monolog's changelog.

3.7.0 (2024-06-28)

  • Added NormalizerFormatter->setBasePath(...) (and JsonFormatter by extension) that allows removing the project's path from the stack trace output (47e301d3e)
  • Fixed JsonFormatter handling of incomplete classes (#1834)
  • Fixed private error handlers causing problems with custom StreamHandler implementations (#1866)

3.6.0 (2024-04-12)

  • Added LineFormatter->setBasePath(...) that allows removing the project's path from the stack trace output (#1873)
  • Added $includeExtra option in PsrHandler to also use extra data to replace placeholder values in the message (#1852)
  • Added ability to customize what is a duplicated message by extending the DeduplicationHandler (#1879)
  • Added handling for using GelfMessageFormatter together with the AmqpHandler (#1869)
  • Added ability to extend GoogleCloudLoggingFormatter (#1859)
  • Fixed __toString failures in context data crashing the normalization process (#1868)
  • Fixed PHP 8.4 deprecation warnings (#1874)

3.5.0 (2023-10-27)

  • Added ability to indent stack traces in LineFormatter via e.g. indentStacktraces(' ') (#1835)
  • Added ability to configure a max level name length in LineFormatter via e.g. setMaxLevelNameLength(3) (#1850)
  • Added support for indexed arrays (i.e. [] and not {} arrays once json serialized) containing inline linebreaks in LineFormatter (#1818)
  • Added WithMonologChannel attribute for integrators to use to configure autowiring (#1847)
  • Fixed log record extra data leaking between handlers that have handler-specific processors set (#1819)
  • Fixed LogglyHandler issue with record level filtering (#1841)
  • Fixed display_errors parsing in ErrorHandler which did not support string values (#1804)
  • Fixed bug where the previous error handler would not be restored in some cases where StreamHandler fails (#1815)
  • Fixed normalization error when normalizing incomplete classes (#1833)

3.4.0 (2023-06-21)

  • Added LoadAverageProcessor to track one of the 1, 5 or 15min load averages (#1803)
  • Added support for priority to the AsMonologProcessor attribute (#1797)
  • Added TelegramBotHandler topic/message_thread_id support (#1802)
  • Fixed FingersCrossedHandler passthruLevel checking (#1801)
  • Fixed support of yearly and monthly rotation log file to rotate only once a month/year (#1805)
  • Fixed TestHandler method docs (#1794)
  • Fixed handling of falsey display_errors string values (#1804)

3.3.1 (2023-02-06)

  • Fixed Logger not being serializable anymore (#1792)

3.3.0 (2023-02-06)

  • Deprecated FlowdockHandler & Formatter as the flowdock service was shutdown (#1748)
  • Added ClosureContextProcessor to allow delaying the creation of context data by setting a Closure in context which is called when the log record is used (#1745)
  • Added an ElasticsearchHandler option to set the op_type to create instead of the default index (#1766)
  • Added support for enum context values in PsrLogMessageProcessor (#1773)
  • Added graylog2/gelf-php 2.x support (#1747)
  • Improved BrowserConsoleHandler logging to use more appropriate methods than just console.log in the browser (#1739)

... (truncated)

Commits

Updates phpstan/phpstan to 1.11.6

Release notes

Sourced from phpstan/phpstan's releases.

1.11.6

Bleeding edge 🔪

  • Precise array shapes for preg_match() for $matches by-ref parameter (#2589), thanks @​staabm!
  • Improved the type of the $mode parameter for the count() (#3190), thanks @​kuma3!

If you want to see the shape of things to come and adopt bleeding edge features early, you can include this config file in your project's phpstan.neon:

includes:
	- vendor/phpstan/phpstan/conf/bleedingEdge.neon

Of course, there are no backwards compatibility guarantees when you include this file. The behaviour and reported errors can change in minor versions with this file included. Learn more

Improvements 🔧

Bugfixes 🐛

Function signature fixes 🤖

Internals 🔍

... (truncated)

Commits
  • 6ac78f1 PHPStan 1.11.6
  • 09cbbaa More readable "This result is out of date." in dark mode
  • e1a73b0 Revert "Avoid filter from interfering with page structure"
  • 579402b Updated PHPStan to commit 579402b64bce9b20619ba33ed1e4df1f61c074a6
  • 82f74d9 Update BACKERS.md
  • cb9978d Updated PHPStan to commit cb9978d49c0595d86cb836d8b52e53df16924b79
  • bac513c Update crate-ci/typos action to v1.22.9
  • 71632a1 Update website
  • 57b51e1 Editor - hide inner area overlapping rounded borders
  • 44bd2ca Nicer editor in dark mode
  • Additional commits viewable in compare view

Updates phpunit/phpunit to 10.5.25

Release notes

Sourced from phpunit/phpunit's releases.

PHPUnit 10.5.25

Changed

  • Updated dependencies for PHAR distribution

How to install or update PHPUnit

Changelog

Sourced from phpunit/phpunit's changelog.

[10.5.25] - 2024-07-03

Changed

  • Updated dependencies for PHAR distribution

[10.5.24] - 2024-06-20

Changed

  • #5877: Use array_pop() instead of array_shift() for processing Test objects in TestSuite::run() and optimize TestSuite::isEmpty()

[10.5.23] - 2024-06-20

Changed

  • #5875: Also destruct TestCase objects early that use a data provider

[10.5.22] - 2024-06-19

Changed

  • #5871: Do not collect unnecessary information using debug_backtrace()

[10.5.21] - 2024-06-15

Changed

  • #5861: Destroy TestCase object after its test was run

[10.5.20] - 2024-04-24

  • #5771: JUnit XML logger may crash when test that is run in separate process exits unexpectedly
  • #5819: Duplicate keys from different data providers are not handled properly

[10.5.19] - 2024-04-17

Fixed

  • #5818: Calling method() on a test stub created using createStubForIntersectionOfInterfaces() throws an unexpected exception

[10.5.18] - 2024-04-14

Deprecated

  • #5812: Support for string array keys in data sets returned by data provider methods that do not match the parameter names of the test method(s) that use(s) them

Fixed

  • #5795: Using @testWith annotation may generate PHP Warning: Uninitialized string offset 0

... (truncated)

Commits

Updates rector/rector to 1.2.0

Release notes

Sourced from rector/rector's releases.

Released Rector 1.2.0

New Rules 🚀

  • [Renaming] Add RenameAttributeRector (#6009)
  • [TypeDeclaration] Add AddClosureUnionReturnTypeRector (#6033)
  • [TypeDeclaration] Add AddClosureNeverReturnTypeRector (#6039)
  • [Php71] Add MultiDimensionalArrayToArrayDestructRector (#6031), Thanks @​nikolicaleksa!
  • [TypeDeclaration] Add AddClosureReturnTypeFromStrictParamRector (#6044)
  • [TypeDeclaration] Add AddClosureReturnTypeFromReturnCastRector (#6061)
  • [TypeDeclaration] Add AddClosureReturnTypeFromStrictNativeCallRector (#6059)

New Features 🥳

  • [DX] Add withAttributes(all) option, add PHPUnit and Doctrine code quality sets to withPreparedSets() (#6004)
  • [DX] Add symfony code quality preset (#6008)
  • [DX] Add withDowngradeSets() to better target downgrades (#6015)
  • Add always config for EncapsedStringsToSprintfRector (#6050), Thanks @​ruudk!
  • Add only_direct_assign config for SimplifyUselessVariableRector (#6034), Thanks @​ruudk!
  • Skip files with short <?= PHP tag as leads to invalid changes (#6068), (#6075)
  • [Bridge] Add SetRectorsResolver, SetProviderCollector for easier use in 3rd-party tools (#6030)
  • [DX] Inform about deprecated rules in config (#6047)
  • [Config] Exclude listed on .gitignore for withRootFiles() (#6028)

Bugfixes 🐛

  • AddTypeToConstRector: apply if const references another class const (#6017), Thanks @​tugmaks!
  • fix: Skip adding string casting to closure return when it returns str… (#6018), Thanks @​nikolicaleksa!
  • fix: Add code as a named argument (#6062), Thanks @​nikolicaleksa!
  • Fix message handler removal in RemoveUnusedPublicMethodParameterRector (#6001)
  • fix: Skip refactoring when foreach if statement contains calls to met… (#6019), Thanks @​nikolicaleksa!
  • fix: Use named arguments if they are already used (#6022), Thanks @​nikolicaleksa!
  • [Naming] Handle used in arrow function param, then used again outer ArrowFunction on RenameParamToMatchTypeRector (#6046)
  • Fix docker commands in CONTRIBUTING.md (#6023), Thanks @​tugmaks!
  • fix: Skip static calls which are made using the class name (#6024), Thanks @​nikolicaleksa!
  • feat: Support functions for first-class-callable (#6027), Thanks @​nikolicaleksa!
  • [Cleanup] Deprecate ChangeAndIfToEarlyReturnRector as creates less readable code with inverted conditions (#6041)
  • fix: Convert DateTime to Carbon properly when negative days/months are used (#6051), Thanks @​nikolicaleksa!
  • [Php81] Handle usage as arg by ref key on falsy ObjectType on ReadOnlyPropertyRector (#6054)
  • fix: Skip remove always true condition on method calls (#6063), Thanks @​nikolicaleksa!

Removed and Deprecated 💀

  • [TypeDeclaration] Remove ArrowFunction from ReturnTypeFromReturnDirectArrayRector and ReturnTypeFromReturnNewRector (#6032)
  • [Cleanup] Remove @​changelog as no longer maintained/used, use RuleDefinition instead (#6035)
  • [Cleanup] Remove FormatPerservingPrinter as only delegate method, use BetterStandardPrinter directly (#6036)

... (truncated)

Commits
  • 2fa3875 Rector 1.2.0
  • a0361c8 Updated Rector to commit a0ae659a312c39122c4b43167a4591ad7aff6405
  • 2203e98 Updated Rector to commit 436f0bc52f8fbd648b2fca69ecb5f7700aebdb99
  • 23b3490 Updated Rector to commit 1561c90c6b9ef040532a34afa1c2f581ad5dfbc1
  • 78890de Updated Rector to commit 3c2100b3a8d2372094135efa9c4d0433078337b5
  • 738f339 Updated Rector to commit ef333502fb722ef471049b492a257781d02d0d62
  • 8ead3fe Updated Rector to commit ef333502fb722ef471049b492a257781d02d0d62
  • 7d2f984 Updated Rector to commit b94486c7b2663616901e4fd67047c963af9bd400
  • e6124b8 Updated Rector to commit 554cad981917c1d402601c9fb158e3be9a66eeb1
  • 2f18f17 Updated Rector to commit 33655134e27ea56c99a01e159425d1f358c0b4a0
  • Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Updates the requirements on [monolog/monolog](https://github.com/Seldaek/monolog), [phpstan/phpstan](https://github.com/phpstan/phpstan), [phpunit/phpunit](https://github.com/sebastianbergmann/phpunit) and [rector/rector](https://github.com/rectorphp/rector) to permit the latest version.

Updates `monolog/monolog` to 3.7.0
- [Release notes](https://github.com/Seldaek/monolog/releases)
- [Changelog](https://github.com/Seldaek/monolog/blob/main/CHANGELOG.md)
- [Commits](Seldaek/monolog@3.6.0...3.7.0)

Updates `phpstan/phpstan` to 1.11.6
- [Release notes](https://github.com/phpstan/phpstan/releases)
- [Changelog](https://github.com/phpstan/phpstan/blob/1.11.x/CHANGELOG.md)
- [Commits](phpstan/phpstan@1.11.5...1.11.6)

Updates `phpunit/phpunit` to 10.5.25
- [Release notes](https://github.com/sebastianbergmann/phpunit/releases)
- [Changelog](https://github.com/sebastianbergmann/phpunit/blob/10.5.25/ChangeLog-10.5.md)
- [Commits](sebastianbergmann/phpunit@10.5.24...10.5.25)

Updates `rector/rector` to 1.2.0
- [Release notes](https://github.com/rectorphp/rector/releases)
- [Commits](rectorphp/rector@1.1.1...1.2.0)

---
updated-dependencies:
- dependency-name: monolog/monolog
  dependency-type: direct:production
  dependency-group: minor-patch-dependencies
- dependency-name: phpstan/phpstan
  dependency-type: direct:development
  dependency-group: minor-patch-dependencies
- dependency-name: phpunit/phpunit
  dependency-type: direct:development
  dependency-group: minor-patch-dependencies
- dependency-name: rector/rector
  dependency-type: direct:development
  dependency-group: minor-patch-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested a review from mimmi20 as a code owner July 5, 2024 02:45
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jul 5, 2024
Copy link
Contributor

github-actions bot commented Jul 5, 2024

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
composer/monolog/monolog >= 3.7.0, < 4.0.0 🟢 5.3
Details
CheckScoreReason
Code-Review⚠️ 2Found 7/30 approved changesets -- score normalized to 2
Maintained🟢 1030 commit(s) and 20 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Token-Permissions⚠️ -1No tokens found
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow⚠️ -1no workflows found
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ -1no dependencies found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Fuzzing⚠️ 0project is not fuzzed
Vulnerabilities🟢 100 existing vulnerabilities detected
Security-Policy⚠️ 0security policy file not detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
composer/monolog/monolog >= 3.6.0, < 4.0.0 🟢 5.3
Details
CheckScoreReason
Code-Review⚠️ 2Found 7/30 approved changesets -- score normalized to 2
Maintained🟢 1030 commit(s) and 20 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Token-Permissions⚠️ -1No tokens found
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow⚠️ -1no workflows found
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ -1no dependencies found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Fuzzing⚠️ 0project is not fuzzed
Vulnerabilities🟢 100 existing vulnerabilities detected
Security-Policy⚠️ 0security policy file not detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0

Scanned Manifest Files

composer.json
  • monolog/monolog@>= 3.7.0, < 4.0.0
  • phpstan/phpstan@>= 1.11.6, < 2.0.0
  • phpunit/phpunit@>= 10.5.25, < 11.0.0
  • rector/rector@>= 1.2.0, < 2.0.0
  • monolog/monolog@>= 3.6.0, < 4.0.0
  • phpstan/phpstan@>= 1.11.5, < 2.0.0
  • phpunit/phpunit@>= 10.5.24, < 11.0.0
  • rector/rector@>= 1.1.1, < 2.0.0

Copy link

codeclimate bot commented Jul 5, 2024

Code Climate has analyzed commit ec37f36 and detected 0 issues on this pull request.

The test coverage on the diff in this pull request is 100.0% (50% is the threshold).

This pull request will bring the total coverage in the repository to 97.5% (0.0% change).

View more on Code Climate.

@mimmi20 mimmi20 merged commit 60be1ef into master Jul 5, 2024
78 checks passed
@mimmi20 mimmi20 deleted the dependabot/composer/master/minor-patch-dependencies-cd14c91b32 branch July 5, 2024 04:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant