An open index of dependabot pull requests across open source projects.

composer (master)(deps-dev): bump the development-dependencies group with 4 updates

Open
Number: #650
Type: Pull Request
State: Open
Author: dependabot[bot] dependabot[bot]
Association: Unknown
Comments: 2
Created: July 08, 2026 at 02:05 AM UTC
(14 days ago)
Updated: July 08, 2026 at 02:09 AM UTC
(14 days ago)
Labels:
dependencies
Assignees:
mimmi20
Description:

Updates the requirements on infection/infection, phpstan/phpstan, rector/rector and tomasvotruba/cognitive-complexity to permit the latest version.
Updates infection/infection to 0.34.0

Release notes

Sourced from infection/infection's releases.

0.34.0

Added:

Changed:

Full Changelog: https://github.com/infection/infection/compare/0.33.3...0.34.0

Commits
  • 373c2ab Allow skipping run command with positional args (#3285)
  • d8b56fc Add support for positional arguments for config:list-sources command (#3307)
  • 2960c35 Deprecate --filter options in favor of new positional arguments for filteri...
  • 0efff96 Support positional arguments to mimic --filter and `--test-framewor-extra-a...
  • cd433d3 refactor(autoreview): Refine autoreview I/O detection for source classes (#3286)
  • 371d88d refactor(autoreview): Move the PHPUnit related code from IoCodeDetector to th...
  • a6fd990 refactor(autoreview): Minor variable and method renames (#3305)
  • f75942d feat: Add our own local unified diff output builder (#3300)
  • 9031987 docs: Improve the description of the Differ service (#3304)
  • af20b6b Support sebastian/diff: 9 (#3298)
  • Additional commits viewable in compare view

Updates phpstan/phpstan to 2.2.3

Commits

Updates rector/rector to 2.5.2

Release notes

Sourced from rector/rector's releases.

Released Rector 2.5.2

Bugfixes 🐛

  • Match class + path in unused-skip reporting — fix combined class => [paths] skips being wrongly flagged as unused (#8073)
  • Mark skip used only when rule would change the file — a class/path skip counts as "used" only if the rule would actually touch that file, killing false "used" hits (#8076)
  • Improve unused-skip resolver methods — cleaner resolution internals (#8072)
  • Track used skips as class => [paths] map — richer per-path skip tracking backing the report (#8074)
Commits
  • 49ff633 Rector 2.5.2
  • 56d179b Updated Rector to commit dd21759b1194fe28cd266337124fd3035c62ead9
  • 228203d Updated Rector to commit 2328ea6338d2496c409aaf2d8a001052e323feda
  • d7cb788 Updated Rector to commit 19dcdb7816f10cb502a1b2ef5a6628185f74e49d
  • 76d81c5 Updated Rector to commit aea1570424613c9a0acbf80c3abeb41d7dd33dbe
  • 34a9124 Rector 2.5.1
  • 6502d60 Updated Rector to commit df98b3b4e5f024d2260edc233dc9cb4adfe6a3e0
  • b74237c Updated Rector to commit 84ab911ef53267aa1c4a9466064def614e486eea
  • e3c4ee7 Updated Rector to commit 3893ea422afa3fb801ae64fa546c8a2cb24b0f97
  • bdd26a9 Updated Rector to commit 580b374ea3638fd50cf9b98b84445cd9fe53768e
  • Additional commits viewable in compare view

Updates tomasvotruba/cognitive-complexity to 1.2.0

Commits

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
Technical Details
ID: 16124628
UUID: 4833688213
Node ID: PR_kwDOEeJGNs7vFbzD
Host: GitHub
Repository: mimmi20/mezzio-navigation-laminasviewrenderer