chore(deps): update composer dev tooling dependencies by renovate[bot] · Pull Request #213 · Lendable/message

renovate · 2026-01-15T19:11:57Z

This PR contains the following updates:

Package	Change	Age	Confidence
ergebnis/composer-normalize	`^2.43.0` → `^2.49.0`
ergebnis/phpstan-rules	`^2.12` → `^2.13.1`
lendable/composer-license-checker	`^1.2.1` → `^1.4.0`
lendable/phpunit-extensions	`^0.3` → `^0.4`
php-cs-fixer/shim	`^3.60.0` → `^3.93.1`
phpstan/phpstan	`^2.1` → `^2.1.38`
phpstan/phpstan-deprecation-rules	`^2.0` → `^2.0.3`
phpstan/phpstan-phpunit	`^2.0` → `^2.0.12`
phpstan/phpstan-strict-rules	`^2.0` → `^2.0.8`
phpunit/phpunit (source)	`^11.2.8` → `^11.5.50`
rector/rector (source)	`^2.3` → `^2.3.5`

Release Notes

ergebnis/composer-normalize (ergebnis/composer-normalize)

`v2.49.0`

Compare Source

For a full diff see [2.48.2...2.49.0][2.48.2...2.49.0].

Changed

Updated schema.json ([#1507]), by [@ergebnis-bot]
Updated composer/composer ([#1416]), by [@localheinz]

ergebnis/phpstan-rules (ergebnis/phpstan-rules)

`v2.13.1`

Compare Source

For a full diff see [2.13.0...2.13.1][2.13.0...2.13.1].

Fixed

Adjusted Files\NoPhpstanIgnoreRule to traverse into all nodes ([#1011]), by [@localheinz]

`v2.13.0`

Compare Source

For a full diff see [2.12.0...2.13.0][2.12.0...2.13.0].

Added

Added Files\NoPhpstanIgnoreRule, which reports an error when a @phpstan-ignore, @phpstan-ignore-line, or @phpstan-ignore-next-line tag is used to suppress an error ([#1009]), by [@localheinz]

Changed

Required phpstan/phpstan:^2.1.35 ([#1010]), by [@localheinz]

Lendable/composer-license-checker (lendable/composer-license-checker)

`v1.4.0`

Compare Source

Features

Require PHP 8.4 (#445) (b1c9200)

Fixes / Maintenance

deps: Allow symfony 8 (#444) (be0d11e)

Lendable/phpunit-extensions (lendable/phpunit-extensions)

`v0.4.0`

Compare Source

Features

Require PHP 8.3 and PHPUnit 12 (#144) (a64b829)

`v0.3.2`

Compare Source

Fixes

Don't use named args for testDouble call (#130) (ea01591)

PHP-CS-Fixer/shim (php-cs-fixer/shim)

phpstan/phpstan-phar-composer-source (phpstan/phpstan)

`v2.1.38`

Compare Source

`v2.1.37`

Compare Source

`v2.1.36`

Compare Source

`v2.1.35`

Compare Source

`v2.1.34`

Compare Source

phpstan/phpstan-phpunit (phpstan/phpstan-phpunit)

`v2.0.12`

Compare Source

e4c5a22 - TestMethodsHelper - class methods cache
80091f9 - TestMethodsHelper - speed-up by asking for immediate methods only

phpstan/phpstan-strict-rules (phpstan/phpstan-strict-rules)

`v2.0.8`

Compare Source

1ed9e62 - Allow literal string dynamic property
7493a9f - Update dessant/lock-threads action to v6
796f9c9 - Update actions/checkout action to v6
3dcd0b8 - Remove duplicate rules in Readme

sebastianbergmann/phpunit (phpunit/phpunit)

`v11.5.50`: PHPUnit 11.5.50

Compare Source

Changed

To prevent Poisoned Pipeline Execution (PPE) attacks using prepared .coverage files in pull requests, a PHPT test will no longer be run if the temporary file for writing code coverage information already exists before the test runs

Learn how to install or update PHPUnit 11.5 in the documentation.

Keep up to date with PHPUnit:

You can follow @phpunit@phpc.social to stay up to date with PHPUnit's development.
You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

`v11.5.49`: PHPUnit 11.5.49

Compare Source

Fixed

#6362: Manually instantiated test doubles are broken since PHPUnit 11.2
#6470: Infinite recursion in Count::getCountOf() for unusal implementations of Iterator or IteratorAggregate

Learn how to install or update PHPUnit 11.5 in the documentation.

Keep up to date with PHPUnit:

You can follow @phpunit@phpc.social to stay up to date with PHPUnit's development.
You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

`v11.5.48`: PHPUnit 11.5.48

Compare Source

Changed

Reverted a change that caused a build failure for the PHP project's nightly community job

Learn how to install or update PHPUnit 11.5 in the documentation.

Keep up to date with PHPUnit:

You can follow @phpunit@phpc.social to stay up to date with PHPUnit's development.
You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

`v11.5.47`: PHPUnit 11.5.47

Compare Source

Fixed

#6470: Mocking a class with a property hook setter accepting more types than the property results in a fatal error

Learn how to install or update PHPUnit 11.5 in the documentation.

Keep up to date with PHPUnit:

You can follow @phpunit@phpc.social to stay up to date with PHPUnit's development.
You can subscribe to the PHPUnit Updates newsletter to receive updates about and tips for PHPUnit.

rectorphp/rector (rector/rector)

`v2.3.5`: Released Rector 2.3.5

Compare Source

New Features 🥳

feat: create new SafeDeclareStrictTypesRector (#7814), Thanks @calebdw!

Bugfixes 🐛

Fix ArrayItem scope filling on Foreach_ value (#7858)
Fix use of deprecated Node\Expr\ArrayItem over Node\ArrayItem (#7859)
make PropertyFetchFinder more generic (to be used in rector-phpunit) (#7860)
Fix arrow function scope search in BetterNodeFinder (#7861)

rectorphp/rector-symfony 🎵

Rename Annotation\Route attributes to Attribute\Route on Symfony 7.x (#917), Thanks @mickverm

rectorphp/rector-doctrine 🟠

[ODM 2.16] Rename 'Doctrine\ODM\MongoDB\Mapping\Annotations' namespace to 'Doctrine\ODM\MongoDB\Mapping\Attribute' (#477), Thanks @mickverm

rectorphp/rector-phpunit 🟢

[code-quality] Add NoSetupWithParentCallOverrideRector (#617)
[code-quality] Add BareCreateMockAssignToDirectUseRector (#611)
[code-quality] Add DirectInstanceOverMockArgRector (#609)
[PHPUnit 12] Add CreateStubOverCreateMockArgRector (#608)

`v2.3.4`: Released Rector 2.3.4

Compare Source

Bugfixes 🐛

Bump to PHPStan ^2.1.36 (#7850)
[Php81] Exclude Doctrine ODM MongoDB 2.16 Document and EmbeddedDocument from ReadOnlyPropertyRector. (#7848), Thanks @mickverm!

`v2.3.3`: Released Rector 2.3.3

Compare Source

Bugfixes 🐛

rectorphp/rector-src@61f8719 Pin PHPStan 2.1.34, as 2.1.35 introduced a complex regression breaking Rector - see rectorphp/rector-src#7847

`v2.3.2`: Released Rector 2.3.2

Compare Source

New Features 🥳

[dx] Rename DeprecatedAnnotationToDeprecatedAttributeRector for PHP 8.5 to explicit ConstAndTraitDeprecatedAttributeRector, add trait suport (#7823)

Bugfixes 🐛

Bump to PHPStan 2.1.34 and fix compatible code (rectorphp/rector-src#7844)
[perf] optimize ParamTypeByMethodCallTypeRector for speed with early checks (#7831)
make resolveClassReflection non-nullable as always passed a node (#7833)
[Php74] Skip closure in attribute on ClosureToArrowFunctionRector (#7834)
Manage named arguments when removing values (#7835), Thanks @carlos-granados!
bump to PHP 8.3 + update deps + allow it in CI (#7838)
Support array_values in ArrayFirstLastRector (#7830), Thanks @Orest-Divintari!
[Php85] Skip as assigned var/op on ArrayFirstLastRector (#7843)
Remove no longer needed tweak AlwaysRememberedExpr on Printer per PHPStan 2.1.34 (#7770)

rectorphp/rector-phpunit 🟢

fix a class name that should be string (#607)
Support array_values in ArrayFirstLastRector (#7830), Thanks @Orest-Divintari!
[Php85] Skip as assigned var/op on ArrayFirstLastRector (#7843)

`v2.3.1`: Released Rector 2.3.1

Compare Source

New Features and Changes 🥳

[tdd] Add AddReturnDocblockForDimFetchArrayFromAssignsRector (#7792)
[tdd] Add AddReturnDocblockFromMethodCallDocblockRector (#7796)
[tdd] Add AddVarArrayDocblockFromDimFetchAssignRector (#7801)
[DeadCode] Add RemoveDeadIfBlocksRector (#7528), Thanks @john-shaffer!
[dead-code] Add RemoveVoidDocblockFromMagicMethodRector (#7822) - Thanks @parijke!
[experiment] Remove leaveNode() method on AbstractRector and CallableNodeVisitor (#7767)

Bugfixes 🐛

Skip Doctrine Connection calls in AddReturnDocblockFromMethodCallDocblockRector (#7797)
add static all support to AddReturnDocblockFromMethodCallDocblockRector (#7798)
add object support to DocblockReturnArrayFromDirectArrayInstanceRector (#7795)
[TypeDeclarationDocblocks] Use FQCN return docblock for array of object types on AddReturnDocblockFromMethodCallDocblockRector (#7800), Thanks @guanguans!
[php 8.3] cover private abstract constants in AddTypeToConstRector (#7804)
Add check for append in foreach items assignment (#7815), Thanks @solverat!
Static closure rule ignores arguments with $this binding (#7721), Thanks @peterfox!
fix: skip non-native methods (#7747), Thanks @calebdw!
[Php74] Fix indentation space on ClosureToArrowFunctionRector with comment inner closure (#7779)
[DeadCode] Handle crash when parent does not has default param and child has (#7782)
fix mixed[] override with empty array in DocblockReturnArrayFromDirectArrayInstanceRector (#7793)
[ChangesReporting] Fix total changed result on JsonOutputFormatter (#7807)
Manage named arguments when replacing a value (#7784), Thanks @carlos-granados!
[DeadCode] Register RemoveNextSameValueConditionRector in dead-code set (#7790)
[DeadCode] Skip final and non-public __construct() on RemoveParentDelegatingConstructorRector (#7806)
[DeadCode][Php80] Handle crash on mix ClassPropertyAssignToConstructorPromotionRector+RemoveParentDelegatingConstructorRector (#7799)
[DeadCode] Skip with elseif/else on RemoveNextSameValueConditionRector (#7809)
[DeadCode] Merge comment on RemoveNextSameValueConditionRector (#7810)
skip marker attribute in RemoveEmptyClassMethodRector (#7813)
[DeadCode] Skip private promoted property on RemoveParentDelegatingConstructorRector (#7817)
Remove rector from rule definition title (#7820), Thanks @simonschaufi!
[experiment-next] Remove leaveNode() calls on AbstractImmutableNodeTraverser (#7778)
[DeadCode] Handle multi vars on RemoveNonExistingVarAnnotationRector (#7780)
[Php71] Try to handle no variants on RemoveExtraParametersRector (#7803)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2026-01-15T19:12:02Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: composer.lock

Command failed: composer update ergebnis/composer-normalize:2.49.0 ergebnis/phpstan-rules:2.13.1 lendable/composer-license-checker:1.4.0 lendable/phpunit-extensions:0.4.0 php-cs-fixer/shim:3.93.1 phpstan/phpstan:2.1.38 phpstan/phpstan-deprecation-rules:2.0.3 phpstan/phpstan-phpunit:2.0.12 phpstan/phpstan-strict-rules:2.0.8 phpunit/phpunit:11.5.50 rector/rector:2.3.5 --with-dependencies --ignore-platform-req=ext-* --ignore-platform-req=lib-* --no-ansi --no-interaction --no-scripts --no-autoloader --no-plugins --minimal-changes
Loading composer repositories with package information
Updating dependencies
Your requirements could not be resolved to an installable set of packages.

  Problem 1
    - Root composer.json requires lendable/composer-license-checker ^1.4.0 -> satisfiable by lendable/composer-license-checker[1.4.0].
    - lendable/composer-license-checker 1.4.0 requires php ~8.4.0 || ~8.5.0 -> your php version (8.3; overridden via config.platform, same as actual) does not satisfy that requirement.
  Problem 2
    - Root composer.json requires lendable/phpunit-extensions ^0.4 -> satisfiable by lendable/phpunit-extensions[0.4.0].
    - lendable/phpunit-extensions 0.4.0 requires phpunit/phpunit ^12.5 -> found phpunit/phpunit[12.5.0, ..., 12.5.9] but it conflicts with your root composer.json require (^11.5.50).

Use the option --with-all-dependencies (-W) to allow upgrades, downgrades and removals for packages currently locked to specific versions.

coderabbitai · 2026-01-15T19:12:04Z

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

🔍 Trigger a full review

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

renovate bot added the renovate label Jan 15, 2026

renovate bot enabled auto-merge January 15, 2026 19:12

renovate bot force-pushed the renovate/composer-dev-tooling branch 4 times, most recently from 8eb7292 to 97ed093 Compare January 22, 2026 13:42

renovate bot force-pushed the renovate/composer-dev-tooling branch 6 times, most recently from 7327538 to 92e1f11 Compare January 29, 2026 16:38

renovate bot force-pushed the renovate/composer-dev-tooling branch 8 times, most recently from 93c2111 to 50d4a80 Compare February 4, 2026 23:57

chore(deps): update composer dev tooling dependencies

28830f6

renovate bot force-pushed the renovate/composer-dev-tooling branch from 50d4a80 to 28830f6 Compare February 6, 2026 19:12

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update composer dev tooling dependencies#213

chore(deps): update composer dev tooling dependencies#213
renovate[bot] wants to merge 1 commit intomainfrom
renovate/composer-dev-tooling

renovate bot commented Jan 15, 2026 •

edited

Loading

Uh oh!

renovate bot commented Jan 15, 2026 •

edited

Loading

Uh oh!

coderabbitai bot commented Jan 15, 2026 •

edited

Loading

Review skipped

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate bot commented Jan 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Changed

Fixed

Added

Changed

Features

Fixes / Maintenance

Features

Fixes

v11.5.50: PHPUnit 11.5.50

Changed

Keep up to date with PHPUnit:

v11.5.49: PHPUnit 11.5.49

Fixed

Keep up to date with PHPUnit:

v11.5.48: PHPUnit 11.5.48

Changed

Keep up to date with PHPUnit:

v11.5.47: PHPUnit 11.5.47

Fixed

Keep up to date with PHPUnit:

v2.3.5: Released Rector 2.3.5

New Features 🥳

Bugfixes 🐛

rectorphp/rector-symfony 🎵

rectorphp/rector-doctrine 🟠

rectorphp/rector-phpunit 🟢

v2.3.4: Released Rector 2.3.4

Bugfixes 🐛

v2.3.3: Released Rector 2.3.3

Bugfixes 🐛

v2.3.2: Released Rector 2.3.2

New Features 🥳

Bugfixes 🐛

rectorphp/rector-phpunit 🟢

v2.3.1: Released Rector 2.3.1

New Features and Changes 🥳

Bugfixes 🐛

Configuration

Uh oh!

renovate bot commented Jan 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Artifact update problem

File name: composer.lock

Uh oh!

coderabbitai bot commented Jan 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate bot commented Jan 15, 2026 •

edited

Loading

`v11.5.50`: PHPUnit 11.5.50

`v11.5.49`: PHPUnit 11.5.49

`v11.5.48`: PHPUnit 11.5.48

`v11.5.47`: PHPUnit 11.5.47

`v2.3.5`: Released Rector 2.3.5

`v2.3.4`: Released Rector 2.3.4

`v2.3.3`: Released Rector 2.3.3

`v2.3.2`: Released Rector 2.3.2

`v2.3.1`: Released Rector 2.3.1

renovate bot commented Jan 15, 2026 •

edited

Loading

coderabbitai bot commented Jan 15, 2026 •

edited

Loading