Skip to content

Bump the all-composer-dependencies group with 7 updates - #9

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/composer/all-composer-dependencies-67155a2147
Closed

Bump the all-composer-dependencies group with 7 updates#9
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/composer/all-composer-dependencies-67155a2147

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 1, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the all-composer-dependencies group with 7 updates:

Package From To
illuminate/collections 13.13.0 13.18.0
nesbot/carbon 3.11.4 3.13.0
phpstan/phpstan 2.2.1 2.2.3
psy/psysh 0.12.23 0.12.24
phpstan/phpstan-phpunit 2.0.16 2.0.17
symfony/var-dumper 8.1.0 8.1.1
phpunit/phpunit 13.1.13 13.2.2

Updates illuminate/collections from 13.13.0 to 13.18.0

Commits

Updates nesbot/carbon from 3.11.4 to 3.13.0

Release notes

Sourced from nesbot/carbon's releases.

3.13.0

What's Changed

Full Changelog: CarbonPHP/carbon@3.12.3...3.13.0

3.12.3

What's Changed

  • Improve plus() and minus() method by @​kylekatarnls in CarbonPHP/carbon#126
    • Add $anchorDay parameter and OverflowMode for $overflow parameter
    • Add float support for $weeks, $days, $hours, $minutes, $seconds and $microseconds
    • Use __call so sub-classes are allowed to override those methods with divergent signatures

Full Changelog: CarbonPHP/carbon@3.12.2...3.12.3

3.12.2

What's Changed

Full Changelog: CarbonPHP/carbon@3.12.1...3.12.2

3.12.1

What's Changed

Full Changelog: CarbonPHP/carbon@3.12.0...3.12.1

3.12.0

What's Changed

... (truncated)

Commits
  • 40f6618 Merge pull request #129 from CarbonPHP/feature/set-month-with-anchor-day
  • b44349f Implement overflow and anchorDay parameters for year() and setYear()
  • bbd4a87 Implement overflow and anchorDay parameters for month() and setMonth()
  • 3628789 Merge pull request #128 from CarbonPHP/fix/allow-loading-custom-locales
  • 4ffdae3 Allow to load custom locales even when mute-operator is bypassed
  • cb3d764 Merge pull request #127 from CarbonPHP/feature/yearly
  • 9f56eb8 Add test for CarbonInterval::yearNoOverflow()
  • 8c6aebb Fix OverflowMode error message
  • b4b4ccf Add year interval/period with overflow modes
  • bafc181 Merge pull request #3341 from briannesbitt/job/update-sponsors
  • Additional commits viewable in compare view

Updates phpstan/phpstan from 2.2.1 to 2.2.3

Commits

Updates psy/psysh from 0.12.23 to 0.12.24

Release notes

Sourced from psy/psysh's releases.

PsySH v0.12.24

Experimental interactive readline

The pure-PHP experimental readline implementation now has its own built-in pager. Long output opens in an alternate-screen pager with keyboard and mouse scrolling, search, wrap-aware layout, and sensible scrollback behavior after exit.

This is specific to PsySH's experimental userland readline, and it's another reason to give it a try:

psysh --experimental-readline

Or enable it in config:

'useExperimentalReadline' => true,

The built-in pager is enabled automatically with experimental readline, or explicitly with 'pager' => true.

We'd love your feedback! Try it out and let us know what works, what doesn't, and what still feels weird.

Better docs

doc understands more PHP manual targets directly, including structured manual page IDs like language.types.array, language type/operator pages, and language constructs like array and list. Addresses #937 (thanks @​Tomirad!)

Manual output also got a big upgrade: variadic signatures make more sense; structured text, tables, and code blocks now render properly; PHP snippets get syntax highlighting; and wrapping works better across styled and wide-character output.

History improvements

  • Added history --session to show, save, or replay only commands from the current REPL session
  • history --clear now rejects filters and range options instead of accepting combinations it ignores

Bug fixes

  • Fix exception formatting over-matching and eating the beginning of error messages. Fixes #943 (thanks @​bilboque!)
  • Fix timeit median calculation
  • Fix sudo instantiation for classes without constructors
  • Avoid deprecated reflection calls on PHP 8.4+

Under the hood

  • Readline rendering now uses widgets and a shared mode stack for completion, history search, and the pager
  • Release automation now creates draft releases with gh
  • Removed Codecov from CI
  • Added Dependabot cooldowns and updated CI dependencies. Thanks @​dependabot!
  • Fixed Laravel and MediaWiki smoke tests
Commits
  • ca0fdcf Merge branch 'release/v0.12.24'
  • d5ab024 Bump to v0.12.24
  • 7094a01 Bump shivammathur/setup-php from 2.37.1 to 2.37.2
  • 94a2165 Make a few more deprecated reflection calls conditional.
  • 3d10b1d Bump actions/checkout from 6.0.3 to 7.0.0
  • aee298f Fix error message formatting matching too many characters
  • 9a18c5d Bump symfony/polyfill-mbstring from 1.38.1 to 1.38.2 in /build
  • 5db1c28 Add dependabot cooldown
  • 8981d9d Remove codecov from CI
  • e385b02 Add syntax highlighting for man code snippets
  • Additional commits viewable in compare view

Updates phpstan/phpstan-phpunit from 2.0.16 to 2.0.17

Release notes

Sourced from phpstan/phpstan-phpunit's releases.

2.0.17

  • c2f9775 - Update actions/cache action to v6 (#311)
  • 933f682 - Update actions/cache action to v5.1.0 (#310)
  • 8ec191f - Check #[RequiresPhpunit] in the same way we check #[RequiresPhp] (#308)
  • d138088 - Implement ClassAttributeRequiresPhpVersionRule (#305)
  • caada62 - Update github-actions to v7 (#307)
  • 611a216 - Update github-actions to v3.0.1 (#306)
  • 2312495 - Extract AttributeVersionRequirementHelper (#304)
  • 952d0ee - Warn about incomplete versions in #[RequiresPhp] (#303)
  • bf910b5 - Sanity check #[RequiresPhp] value and range (#269)
  • d309858 - Update github-actions to f3e473d (#301)
  • 4a8e26f - Update github-actions (#300)
  • 2c07f22 - Replace deprecated actions/create-release with softprops/action-gh-release
  • 67c9d57 - Bump GitHub Actions across major versions
  • a7baf3b - Bump GitHub Actions within their current majors
  • 3ea20e6 - Update github-actions
  • 53357ab - Update github-actions
  • 6760e77 - latest infection does not support PHP 8.2 (#296)
  • ecfa568 - Update release-toot.yml (#295)
  • 21ea2e9 - name-collision-detector (#294)
  • 6851172 - Update test assertions
  • e2c6207 - Fix build (#287)
  • db27c1f - Delete .github/workflows/claude-react-on-comment.yml
  • 1c9e1df - Refactor build workflow to use GITHUB_BASE_REF
  • 53c1301 - Lint workflows
  • fca9e3a - [StepSecurity] ci: Harden GitHub Actions
  • bfdcb62 - Remove PHPSTAN_BOT_TOKEN from checkout step
  • bb6479c - React on issues opened and fall back to issue body
  • 10e8509 - Add CLAUDE.md to export-ignore in .gitattributes
  • 2202890 - Add CLAUDE.md with project documentation for AI assistants
  • ffd7013 - Add Claude React on Comment workflow
Commits

Updates symfony/var-dumper from 8.1.0 to 8.1.1

Release notes

Sourced from symfony/var-dumper's releases.

v8.1.1

Changelog (symfony/var-dumper@v8.1.0...v8.1.1)

Commits
  • 40096a2 Merge branch '8.0' into 8.1
  • 7d38aaa Merge branch '7.4' into 8.0
  • 9a3a56a Merge branch '6.4' into 7.4
  • 29adc5e Unsafe unserialize phpstan rule
  • d4e663b Merge branch '8.0' into 8.1
  • ca15588 Merge branch '7.4' into 8.0
  • 067784d Merge branch '6.4' into 7.4
  • f280b3d Drop PR warning and auto-closing on subtree splits
  • See full diff in compare view

Updates phpunit/phpunit from 13.1.13 to 13.2.2

Release notes

Sourced from phpunit/phpunit's releases.

PHPUnit 13.2.2

Fixed

  • #6768: Negative priorities for hook methods are rejected by static analysis
  • #6778: Deprecation triggered outside of tests cannot be ignored

Learn how to install or update PHPUnit 13.2 in the documentation.

Keep up to date with PHPUnit:

PHPUnit 13.2.1

Fixed

  • #6741: Test is not run when --filter matches the name of a data set but not the name of the test method
  • #6743: Improve error message for invalid version constraint in attribute
  • #6744: Environment variable attributes reject empty-string values since PHPUnit 13.2.0

Learn how to install or update PHPUnit 13.2 in the documentation.

Keep up to date with PHPUnit:

PHPUnit 13.2.0

Added

  • #3387: Specify a list of tests to run
  • #4201: Handle interrupts and display current test results
  • #4501: Option to mark test as risky when it does not contribute to code coverage
  • #5757: Add assertions for ignoring whitespace differences in strings
  • #5810: Do not dump arrays and objects in failure messages of IsTrue, IsFalse, IsNull, IsFinite, IsInfinite, and IsNan constraints
  • #5838: Inherit #[RunTestsInSeparateProcesses] from parent test classes
  • #5922: assertContainsEquals() should use sebastian/comparator for element comparison
  • #6000: Report PHPT test as risky when --SKIPIF-- does not have standard-output side effect
  • #6075: Support test execution order sorted by descending duration
  • #6346: Emit warning when conflicting CLI options are used
  • #6534: Make $_dataName available to #[TestDoxFormatter] callbacks
  • #6559: Improved API for exception message expectations
  • #6565: Optional $skipWhenEmpty parameter for #[DataProvider] and #[DataProviderExternal]
  • #6566: Allow --stop-on-defect, --stop-on-error, etc. to accept an optional threshold
  • #6567: Make diff context lines configurable
  • #6574: Improve willReturnMap() with constraint support and strict matching

... (truncated)

Changelog

Sourced from phpunit/phpunit's changelog.

[13.2.2] - 2026-06-29

Fixed

  • #6768: Negative priorities for hook methods are rejected by static analysis
  • #6778: Deprecation triggered outside of tests cannot be ignored

[13.2.1] - 2026-06-15

Fixed

  • #6741: Test is not run when --filter matches the name of a data set but not the name of the test method
  • #6743: Improve error message for invalid version constraint in attribute
  • #6744: Environment variable attributes reject empty-string values since PHPUnit 13.2.0

[13.2.0] - 2026-06-05

Added

  • #3387: Specify a list of tests to run
  • #4201: Handle interrupts and display current test results
  • #4501: Option to mark test as risky when it does not contribute to code coverage
  • #5757: Add assertions for ignoring whitespace differences in strings
  • #5810: Do not dump arrays and objects in failure messages of IsTrue, IsFalse, IsNull, IsFinite, IsInfinite, and IsNan constraints
  • #5838: Inherit #[RunTestsInSeparateProcesses] from parent test classes
  • #5922: assertContainsEquals() should use sebastian/comparator for element comparison
  • #6000: Report PHPT test as risky when --SKIPIF-- does not have standard-output side effect
  • #6075: Support test execution order sorted by descending duration
  • #6346: Emit warning when conflicting CLI options are used
  • #6534: Make $_dataName available to #[TestDoxFormatter] callbacks
  • #6559: Improved API for exception message expectations
  • #6565: Optional $skipWhenEmpty parameter for #[DataProvider] and #[DataProviderExternal]
  • #6566: Allow --stop-on-defect, --stop-on-error, etc. to accept an optional threshold
  • #6567: Make diff context lines configurable
  • #6574: Improve willReturnMap() with constraint support and strict matching
  • #6575: --list-test-ids CLI option and enhance --filter CLI option to support test ID syntax
  • #6577: --run-test-id <test-id> CLI option that accepts a single test ID for exact matching
  • #6579: Properly handle issues triggered outside of tests
  • #6597: Compact output (activated through --compact CLI option and PHPUNIT_COMPACT_OUTPUT=1 environment variable)
  • #6598: --disable-coverage-targeting CLI option
  • #6602: Separate configuration for branch coverage from path coverage
  • #6606: Support for partially ordered parameter sets in mock object expectations
  • #6611: Add CPU time to telemetry
  • #6681: Comment-aware variants of XML comparison assertions
  • The executionOrder attribute in the XML configuration file now accepts defects combined with any main order, as well as three-way combinations of depends/no-depends, defects, and a main order (for example, depends,defects,duration-ascending)
  • --validate-configuration CLI option to validate an XML configuration file for PHPUnit
  • Report TestDox information in Open Test Reporting XML
  • Report per-test and per-test-suite resource usage (time, memory usage, peak memory usage) in Open Test Reporting XML
  • Report number of assertions performed for each test in Open Test Reporting XML
  • Report structured comparison failure details (expected, actual, diff) in Open Test Reporting XML

... (truncated)

Commits
  • 492c067 Prepare release
  • 6941100 Update actions/cache action to v6.1.0
  • bc718af Update actions/setup-java action to v5.4.0
  • 7ff5c39 Fix CS/WS issues
  • 5d21f24 Enter the test-case context before checking a test's requirements
  • 7fc6d2b Merge branch '12.5' into 13.2
  • 329e6b2 Merge branch '11.5' into 12.5
  • 34702ac Merge branch '10.5' into 11.5
  • 3d40350 Merge branch '9.6' into 10.5
  • 7c7c091 Merge branch '8.5' into 9.6
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the all-composer-dependencies group with 7 updates
c95230b 
Bumps the all-composer-dependencies group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [illuminate/collections](https://github.com/illuminate/collections) | `13.13.0` | `13.18.0` |
| [nesbot/carbon](https://github.com/CarbonPHP/carbon) | `3.11.4` | `3.13.0` |
| [phpstan/phpstan](https://github.com/phpstan/phpstan-phar-composer-source) | `2.2.1` | `2.2.3` |
| [psy/psysh](https://github.com/bobthecow/psysh) | `0.12.23` | `0.12.24` |
| [phpstan/phpstan-phpunit](https://github.com/phpstan/phpstan-phpunit) | `2.0.16` | `2.0.17` |
| [symfony/var-dumper](https://github.com/symfony/var-dumper) | `8.1.0` | `8.1.1` |
| [phpunit/phpunit](https://github.com/sebastianbergmann/phpunit) | `13.1.13` | `13.2.2` |


Updates `illuminate/collections` from 13.13.0 to 13.18.0
- [Commits](illuminate/collections@v13.13.0...v13.18.0)

Updates `nesbot/carbon` from 3.11.4 to 3.13.0
- [Release notes](https://github.com/CarbonPHP/carbon/releases)
- [Commits](CarbonPHP/carbon@3.11.4...3.13.0)

Updates `phpstan/phpstan` from 2.2.1 to 2.2.3
- [Commits](https://github.com/phpstan/phpstan-phar-composer-source/commits)

Updates `psy/psysh` from 0.12.23 to 0.12.24
- [Release notes](https://github.com/bobthecow/psysh/releases)
- [Commits](bobthecow/psysh@v0.12.23...v0.12.24)

Updates `phpstan/phpstan-phpunit` from 2.0.16 to 2.0.17
- [Release notes](https://github.com/phpstan/phpstan-phpunit/releases)
- [Commits](phpstan/phpstan-phpunit@2.0.16...2.0.17)

Updates `symfony/var-dumper` from 8.1.0 to 8.1.1
- [Release notes](https://github.com/symfony/var-dumper/releases)
- [Changelog](https://github.com/symfony/var-dumper/blob/8.2/CHANGELOG.md)
- [Commits](symfony/var-dumper@v8.1.0...v8.1.1)

Updates `phpunit/phpunit` from 13.1.13 to 13.2.2
- [Release notes](https://github.com/sebastianbergmann/phpunit/releases)
- [Changelog](https://github.com/sebastianbergmann/phpunit/blob/13.2.2/ChangeLog-13.2.md)
- [Commits](sebastianbergmann/phpunit@13.1.13...13.2.2)

---
updated-dependencies:
- dependency-name: illuminate/collections
  dependency-version: 13.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-composer-dependencies
- dependency-name: nesbot/carbon
  dependency-version: 3.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-composer-dependencies
- dependency-name: phpstan/phpstan
  dependency-version: 2.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-composer-dependencies
- dependency-name: psy/psysh
  dependency-version: 0.12.24
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-composer-dependencies
- dependency-name: phpstan/phpstan-phpunit
  dependency-version: 2.0.17
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-composer-dependencies
- dependency-name: symfony/var-dumper
  dependency-version: 8.1.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-composer-dependencies
- dependency-name: phpunit/phpunit
  dependency-version: 13.2.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-composer-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update php code labels Jul 1, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 1, 2026
@dependabot
dependabot Bot deleted the dependabot/composer/all-composer-dependencies-67155a2147 branch August 1, 2026 19:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file php Pull requests that update php code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants