Skip to content

chore(deps): bump the php-deps group across 1 directory with 12 updates - #160

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/composer/legacy/php-deps-e0ec531c64
Open

chore(deps): bump the php-deps group across 1 directory with 12 updates#160
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/composer/legacy/php-deps-e0ec531c64

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the php-deps group with 12 updates in the /legacy directory:

Package From To
guzzlehttp/guzzle 7.15.3 7.15.5
symfony/console 7.4.16 7.4.18
symfony/yaml 7.4.15 7.4.17
symfony/finder 7.4.14 7.4.17
symfony/filesystem 7.4.15 7.4.18
symfony/process 7.4.13 7.4.18
symfony/event-dispatcher 7.4.15 7.4.17
symfony/dependency-injection 7.4.16 7.4.17
symfony/config 7.4.16 7.4.17
composer/ca-bundle 1.5.13 1.5.14
symfony/var-dumper 7.4.15 7.4.17
friendsofphp/php-cs-fixer 3.95.18 3.95.23

Updates guzzlehttp/guzzle from 7.15.3 to 7.15.5

Release notes

Sourced from guzzlehttp/guzzle's releases.

7.15.5

Changed

  • Adjusted guzzlehttp/psr7 version constraint to ^2.13.1
  • Adjusted guzzlehttp/promises version constraint to ^2.5.3

7.15.4

Added

  • Added support for PHP 8.6

Changed

  • Replace the deprecated spl_object_hash() in handler stack debug output for PHP 8.6
Changelog

Sourced from guzzlehttp/guzzle's changelog.

7.15.5 - 2026-08-24

Changed

  • Adjusted guzzlehttp/psr7 version constraint to ^2.13.1
  • Adjusted guzzlehttp/promises version constraint to ^2.5.3

7.15.4 - 2026-08-24

Added

  • Added support for PHP 8.6

Changed

  • Replace the deprecated spl_object_hash() in handler stack debug output for PHP 8.6
Commits

Updates symfony/console from 7.4.16 to 7.4.18

Release notes

Sourced from symfony/console's releases.

v7.4.18

Changelog (symfony/console@v7.4.17...v7.4.18)

v7.4.17

Changelog (symfony/console@v7.4.16...v7.4.17)

Commits
  • 23d6f88 Merge branch '6.4' into 7.4
  • 3b8473e [Console][FrameworkBundle] Fix profiling a command stopped at ConsoleEvents::...
  • 962e18f Merge branch '6.4' into 7.4
  • 60e3944 bug #65500 [Console] Keep backslashes preceding < and > when escaping text (n...
  • 29967b3 [Console] Fix clearing more lines than a section holds
  • f7b6aea [Console] Keep backslashes preceding < and > when escaping text
  • d7adc77 Merge branch '6.4' into 7.4
  • 42b9966 PHP CS Fixer: fix minor detected issues
  • 41768e7 Merge branch '6.4' into 7.4
  • 517f633 [Console] Consume the whole escape sequence when reading autocomplete input
  • Additional commits viewable in compare view

Updates symfony/yaml from 7.4.15 to 7.4.17

Release notes

Sourced from symfony/yaml's releases.

v7.4.17

Changelog (symfony/yaml@v7.4.15...v7.4.17)

Commits
  • 0b040d7 Merge branch '6.4' into 7.4
  • 44b712e [Yaml] Fix parsing tagged block scalars inside sequences
  • be761cf Merge remote-tracking branch 'origin/6.4' into 7.4
  • d7bcebd [Yaml] Fix parsing an alias followed by a comment
  • 7a22f45 Merge branch '6.4' into 7.4
  • 452a769 [Yaml] Do not treat an uppercase 0X prefix as hexadecimal
  • See full diff in compare view

Updates symfony/finder from 7.4.14 to 7.4.17

Release notes

Sourced from symfony/finder's releases.

v7.4.17

Changelog (symfony/finder@v7.4.14...v7.4.17)

Commits
  • 5ce2882 Merge branch '6.4' into 7.4
  • 211b28d bug #65529 [Finder] Fix gitignore matching of negated patterns and excluded d...
  • 36bf1f4 [Finder] Do not report dangling symlinks as both files and directories
  • ba8a509 [Finder] Fix gitignore matching of negated patterns and excluded directories
  • See full diff in compare view

Updates symfony/filesystem from 7.4.15 to 7.4.18

Release notes

Sourced from symfony/filesystem's releases.

v7.4.18

Changelog (symfony/filesystem@v7.4.17...v7.4.18)

v7.4.17

Changelog (symfony/filesystem@v7.4.15...v7.4.17)

Commits
  • 90d412a Merge branch '6.4' into 7.4
  • 6dabf41 bug #65598 [Filesystem] Fix makeRelative() stripping leading dots when the ba...
  • 9d95cf0 [Filesystem] Fix makeRelative() stripping leading dots of dotfile names
  • 14aa49d [Filesystem] Keep tempnam() files private when a suffix is given
  • ee7bc7b Merge branch '6.4' into 7.4
  • e84ffb3 [Filesystem] Iterate the target directory when deleting obsolete entries in m...
  • 7956513 Merge branch '6.4' into 7.4
  • fce3a06 Check arrays and bools directly instead of comparing them to count()/true/fal...
  • See full diff in compare view

Updates symfony/process from 7.4.13 to 7.4.18

Release notes

Sourced from symfony/process's releases.

v7.4.18

Changelog (symfony/process@v7.4.17...v7.4.18)

v7.4.17

Changelog (symfony/process@v7.4.13...v7.4.17)

Commits
  • 058d17f Merge branch '6.4' into 7.4
  • 0b0c5b7 [Process] Do not wait for output when the input iterator has more data
  • ec27298 Merge branch '6.4' into 7.4
  • c9dee6f [Process] Remove outdated LogicException PHPDoc
  • d49eeae Merge branch '6.4' into 7.4
  • a2482d7 Drop PR warning and auto-closing on subtree splits
  • See full diff in compare view

Updates symfony/event-dispatcher from 7.4.15 to 7.4.17

Release notes

Sourced from symfony/event-dispatcher's releases.

v7.4.17

Changelog (symfony/event-dispatcher@v7.4.15...v7.4.17)

Commits
  • d269974 Merge branch '6.4' into 7.4
  • d7110a8 [DoctrineBridge][EventDispatcher] Fix losing listeners when a lazy listener a...
  • 2d45bdc Merge branch '6.4' into 7.4
  • 9677b41 Use spl_object_id() instead of spl_object_hash()
  • See full diff in compare view

Updates symfony/dependency-injection from 7.4.16 to 7.4.17

Release notes

Sourced from symfony/dependency-injection's releases.

v7.4.17

Changelog (symfony/dependency-injection@v7.4.16...v7.4.17)

Commits
  • f318ac9 Merge branch '6.4' into 7.4
  • 675b2df bug #65532 [DependencyInjection] Keep % escaping when resolving values agains...
  • c049539 bug #65474 [DependencyInjection] Fix compiling nested service locators (nicol...
  • 83d5d4b bug #65473 [DependencyInjection] Fix sorting tagged services when autoconfigu...
  • 02fc34c Merge branch '6.4' into 7.4
  • 1fc3346 [DependencyInjection] Detect circular references through a shared factory bui...
  • ec19ce6 [DependencyInjection] Keep % escaping when resolving values against a resolve...
  • 4bf35cb [DependencyInjection] Fix compiling nested service locators
  • 8bc57f0 [DependencyInjection] Fix sorting tagged services when autoconfiguration dupl...
  • e156273 [DependencyInjection] Skip abstract classes and interfaces in findTaggedResou...
  • Additional commits viewable in compare view

Updates symfony/config from 7.4.16 to 7.4.17

Release notes

Sourced from symfony/config's releases.

v7.4.17

Changelog (symfony/config@v7.4.16...v7.4.17)

Commits
  • 696e12d Merge branch '6.4' into 7.4
  • 6a5abf6 [Config] Fix dumping keyless prototyped arrays of arrays in XmlReferenceDumper
  • 99951f2 Merge branch '6.4' into 7.4
  • 626f19a Check arrays and bools directly instead of comparing them to count()/true/fal...
  • See full diff in compare view

Updates composer/ca-bundle from 1.5.13 to 1.5.14

Release notes

Sourced from composer/ca-bundle's releases.

1.5.14

Full Changelog: composer/ca-bundle@1.5.13...1.5.14

Commits

Updates symfony/var-dumper from 7.4.15 to 7.4.17

Release notes

Sourced from symfony/var-dumper's releases.

v7.4.17

Changelog (symfony/var-dumper@v7.4.15...v7.4.17)

Commits
  • 53712df Merge branch '6.4' into 7.4
  • 13909d2 [VarDumper] Fix division by zero when dumping a DatePeriod whose interval doe...
  • 6694e15 [VarDumper] Fix losing colors when dumping to php://output on the CLI
  • c1d3f32 Merge branch '6.4' into 7.4
  • a02410b [VarDumper] Don't call ArrayIterator::getFlags() nor ::setFlags()
  • See full diff in compare view

Updates friendsofphp/php-cs-fixer from 3.95.18 to 3.95.23

Release notes

Sourced from friendsofphp/php-cs-fixer's releases.

v3.95.23 Adalbertus

What's Changed

Full Changelog: PHP-CS-Fixer/PHP-CS-Fixer@v3.95.22...v3.95.23

v3.95.22 Adalbertus

What's Changed

New Contributors

Full Changelog: PHP-CS-Fixer/PHP-CS-Fixer@v3.95.21...v3.95.22

v3.95.21 Adalbertus

What's Changed

Full Changelog: PHP-CS-Fixer/PHP-CS-Fixer@v3.95.20...v3.95.21

v3.95.20 Adalbertus

What's Changed

New Contributors

Full Changelog: PHP-CS-Fixer/PHP-CS-Fixer@v3.95.19...v3.95.20

v3.95.19 Adalbertus

What's Changed

... (truncated)

Changelog

Sourced from friendsofphp/php-cs-fixer's changelog.

Changelog for v3.95.23

  • fix: FunctionsAnalyzer - detect return type of a closure with a use clause (#9806)

Changelog for v3.95.22

  • fix: StaticLambdaFixer - do not make a lambda static when it is the direct subject of bindTo() or call() (#9802)
  • chore: Implement PHPStan Preg::replaceCallback() extension (#9799)
  • chore: Utils - fix stableSort() and sortFixers() template types, remove @phpstan-ignore suppressions (#9798)
  • deps: bump phpstan/phpstan from 2.2.8 to 2.2.9 (#9797)

Changelog for v3.95.21

  • fix: StatementIndentationFixer - do not treat ternary colon as block start (#9795)
  • perf: Introduce new candidate check for transformers (#9770)
  • perf: Optimize NameQualifiedTransformer token insertion (#9759)
  • CI: add BC check (#9791)
  • deps: upgrade dev-tools (#9793)

Changelog for v3.95.20

  • fix: PsrAutoloadingFixer - do not throw when the file cannot be resolved on disk (#9762)
  • refactor: Transformers - move looping over tokens directly into each transformer individually (#9782)
  • test: drop mikey179/vfsstream (#9787)
  • test: NoUnusedImportsFixerTest - add new cases around quoted values (#9784)

Changelog for v3.95.19

  • fix: binary_operator_spaces alignment for nested single-line arrays in multiline array (#9654)
  • fix: ClassDefinitionFixer - keep multiline constructor args when anonymous class has both extends and implements (#9625)
  • fix: SelfStaticAccessorFixer - do not stop fixing a class after a static return type (#9774)
  • chore: Fix incorrect URL in CommentsAnalyzer.php docblock (#9772)
  • chore: Runner - ignore coverage of non-deterministic parallel branches (#9785)
  • CI: fix using PHP_CS_FIXER_FAST_LINT_TEST_CASES (#9783)
  • deps: bump phpstan/phpstan from 2.2.7 to 2.2.8 in /dev-tools in the phpstan group (#9779)
  • deps: bump squizlabs/php_codesniffer from 4.0.1 to 4.0.4 in /dev-tools (#9768)
  • deps: bump the all group across 1 directory with 2 updates (#9767)
  • test: introduce TestCaseUtils::createTemporaryDirectory() helper (#9788)
  • test: ProjectCodeTest - restore the duplicate check in data providers (#9761)
  • test: AbstractFixerTestCase - use spl_object_id() to fix PHP 8.6 deprecations (#9786)
Commits
  • b2932a5 prepared the 3.95.23 release
  • 925f2ce fix: FunctionsAnalyzer - detect return type of a closure with a use claus...
  • a196b1b bumped version
  • 482722e prepared the 3.95.22 release
  • 4edec9c fix: StaticLambdaFixer - do not make a lambda static when it is the direct ...
  • e8053ea chore: Implement PHPStan Preg::replaceCallback() extension (#9799)
  • 364cfee chore: Utils - fix stableSort() and sortFixers() template types, remove...
  • d8531ed deps: bump phpstan/phpstan from 2.2.8 to 2.2.9 (#9797)
  • 033b7c4 bumped version
  • 1228a1c prepared the 3.95.21 release
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the php-deps group with 12 updates in the /legacy directory:

| Package | From | To |
| --- | --- | --- |
| [guzzlehttp/guzzle](https://github.com/guzzle/guzzle) | `7.15.3` | `7.15.5` |
| [symfony/console](https://github.com/symfony/console) | `7.4.16` | `7.4.18` |
| [symfony/yaml](https://github.com/symfony/yaml) | `7.4.15` | `7.4.17` |
| [symfony/finder](https://github.com/symfony/finder) | `7.4.14` | `7.4.17` |
| [symfony/filesystem](https://github.com/symfony/filesystem) | `7.4.15` | `7.4.18` |
| [symfony/process](https://github.com/symfony/process) | `7.4.13` | `7.4.18` |
| [symfony/event-dispatcher](https://github.com/symfony/event-dispatcher) | `7.4.15` | `7.4.17` |
| [symfony/dependency-injection](https://github.com/symfony/dependency-injection) | `7.4.16` | `7.4.17` |
| [symfony/config](https://github.com/symfony/config) | `7.4.16` | `7.4.17` |
| [composer/ca-bundle](https://github.com/composer/ca-bundle) | `1.5.13` | `1.5.14` |
| [symfony/var-dumper](https://github.com/symfony/var-dumper) | `7.4.15` | `7.4.17` |
| [friendsofphp/php-cs-fixer](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer) | `3.95.18` | `3.95.23` |



Updates `guzzlehttp/guzzle` from 7.15.3 to 7.15.5
- [Release notes](https://github.com/guzzle/guzzle/releases)
- [Changelog](https://github.com/guzzle/guzzle/blob/7.15.5/CHANGELOG.md)
- [Commits](guzzle/guzzle@7.15.3...7.15.5)

Updates `symfony/console` from 7.4.16 to 7.4.18
- [Release notes](https://github.com/symfony/console/releases)
- [Changelog](https://github.com/symfony/console/blob/8.2/CHANGELOG.md)
- [Commits](symfony/console@v7.4.16...v7.4.18)

Updates `symfony/yaml` from 7.4.15 to 7.4.17
- [Release notes](https://github.com/symfony/yaml/releases)
- [Changelog](https://github.com/symfony/yaml/blob/8.2/CHANGELOG.md)
- [Commits](symfony/yaml@v7.4.15...v7.4.17)

Updates `symfony/finder` from 7.4.14 to 7.4.17
- [Release notes](https://github.com/symfony/finder/releases)
- [Changelog](https://github.com/symfony/finder/blob/8.2/CHANGELOG.md)
- [Commits](symfony/finder@v7.4.14...v7.4.17)

Updates `symfony/filesystem` from 7.4.15 to 7.4.18
- [Release notes](https://github.com/symfony/filesystem/releases)
- [Changelog](https://github.com/symfony/filesystem/blob/8.2/CHANGELOG.md)
- [Commits](symfony/filesystem@v7.4.15...v7.4.18)

Updates `symfony/process` from 7.4.13 to 7.4.18
- [Release notes](https://github.com/symfony/process/releases)
- [Changelog](https://github.com/symfony/process/blob/8.2/CHANGELOG.md)
- [Commits](symfony/process@v7.4.13...v7.4.18)

Updates `symfony/event-dispatcher` from 7.4.15 to 7.4.17
- [Release notes](https://github.com/symfony/event-dispatcher/releases)
- [Changelog](https://github.com/symfony/event-dispatcher/blob/8.2/CHANGELOG.md)
- [Commits](symfony/event-dispatcher@v7.4.15...v7.4.17)

Updates `symfony/dependency-injection` from 7.4.16 to 7.4.17
- [Release notes](https://github.com/symfony/dependency-injection/releases)
- [Changelog](https://github.com/symfony/dependency-injection/blob/8.2/CHANGELOG.md)
- [Commits](symfony/dependency-injection@v7.4.16...v7.4.17)

Updates `symfony/config` from 7.4.16 to 7.4.17
- [Release notes](https://github.com/symfony/config/releases)
- [Changelog](https://github.com/symfony/config/blob/8.2/CHANGELOG.md)
- [Commits](symfony/config@v7.4.16...v7.4.17)

Updates `composer/ca-bundle` from 1.5.13 to 1.5.14
- [Release notes](https://github.com/composer/ca-bundle/releases)
- [Commits](composer/ca-bundle@1.5.13...1.5.14)

Updates `symfony/var-dumper` from 7.4.15 to 7.4.17
- [Release notes](https://github.com/symfony/var-dumper/releases)
- [Changelog](https://github.com/symfony/var-dumper/blob/8.2/CHANGELOG.md)
- [Commits](symfony/var-dumper@v7.4.15...v7.4.17)

Updates `friendsofphp/php-cs-fixer` from 3.95.18 to 3.95.23
- [Release notes](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/releases)
- [Changelog](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/blob/master/CHANGELOG.md)
- [Commits](PHP-CS-Fixer/PHP-CS-Fixer@v3.95.18...v3.95.23)

---
updated-dependencies:
- dependency-name: guzzlehttp/guzzle
  dependency-version: 7.15.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: php-deps
- dependency-name: symfony/console
  dependency-version: 7.4.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: php-deps
- dependency-name: symfony/yaml
  dependency-version: 7.4.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: php-deps
- dependency-name: symfony/finder
  dependency-version: 7.4.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: php-deps
- dependency-name: symfony/filesystem
  dependency-version: 7.4.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: php-deps
- dependency-name: symfony/process
  dependency-version: 7.4.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: php-deps
- dependency-name: symfony/event-dispatcher
  dependency-version: 7.4.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: php-deps
- dependency-name: symfony/dependency-injection
  dependency-version: 7.4.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: php-deps
- dependency-name: symfony/config
  dependency-version: 7.4.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: php-deps
- dependency-name: composer/ca-bundle
  dependency-version: 1.5.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: php-deps
- dependency-name: symfony/var-dumper
  dependency-version: 7.4.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: php-deps
- dependency-name: friendsofphp/php-cs-fixer
  dependency-version: 3.95.23
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: php-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update php code labels Sep 1, 2026
Copilot AI lite review requested due to automatic review settings September 1, 2026 14:40
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update php code labels Sep 1, 2026

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot wasn't able to review any files in this pull request.


💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file php Pull requests that update php code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant