Skip to content

chore(deps): bump the composer group with 12 updates - #156

Merged
SMillerDev merged 1 commit into
mainfrom
dependabot/composer/composer-15c2186cf6
Oct 16, 2026
Merged

chore(deps): bump the composer group with 12 updates#156
SMillerDev merged 1 commit into
mainfrom
dependabot/composer/composer-15c2186cf6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 16, 2026

Copy link
Copy Markdown

Bumps the composer group with 12 updates:

Package From To
composer/semver 3.5.0 3.5.1
guzzlehttp/guzzle 7.15.2 7.15.5
guzzlehttp/promises 2.5.1 2.5.3
guzzlehttp/psr7 2.13.0 2.13.1
myclabs/deep-copy 1.13.4 1.14.0
nikic/php-parser 5.7.0 5.9.0
php-http/client-common 2.7.2 2.7.3
sebastian/recursion-context 5.0.1 5.0.2
symfony/console 6.4.47 6.4.48
symfony/filesystem 6.4.45 6.4.48
symfony/process 6.4.46 6.4.48
symfony/string 6.4.46 6.4.48

Updates composer/semver from 3.5.0 to 3.5.1

Release notes

Sourced from composer/semver's releases.

3.5.1

  • Fixed Intervals::isSubsetOf() returning false for < 0.0.0, which now correctly matches nothing and so is a subset of any constraint (#192)

Full Changelog: composer/semver@3.5.0...3.5.1

Changelog

Sourced from composer/semver's changelog.

[3.5.1] 2026-10-05

  • Fixed Intervals::isSubsetOf() returning false for < 0.0.0, which now correctly matches nothing and so is a subset of any constraint (#192)
Commits

Updates guzzlehttp/guzzle from 7.15.2 to 7.15.5

Release notes

Sourced from guzzlehttp/guzzle's releases.

7.15.5

Changed

  • Adjusted guzzlehttp/psr7 version constraint to ^2.13.1
  • Adjusted guzzlehttp/promises version constraint to ^2.5.3

7.15.4

Added

  • Added support for PHP 8.6

Changed

  • Replace the deprecated spl_object_hash() in handler stack debug output for PHP 8.6

7.15.3

Changed

  • Adjusted guzzlehttp/promises version constraint to ^2.5.2

Fixed

  • Fail a cURL multi handler wait with an attributable error when the transfer is no longer tracked
  • Fix StreamHandler resolving numeric IPv4 hosts differently from cURL handlers on macOS and Windows
  • Fix StreamHandler TLS peer names and proxy authorities for numeric IPv4 hosts on all platforms
  • Settle a cURL multi handler transfer displaced by a request reusing its native handle ID
Changelog

Sourced from guzzlehttp/guzzle's changelog.

7.15.5 - 2026-08-24

Changed

  • Adjusted guzzlehttp/psr7 version constraint to ^2.13.1
  • Adjusted guzzlehttp/promises version constraint to ^2.5.3

7.15.4 - 2026-08-24

Added

  • Added support for PHP 8.6

Changed

  • Replace the deprecated spl_object_hash() in handler stack debug output for PHP 8.6

7.15.3 - 2026-08-05

Changed

  • Adjusted guzzlehttp/promises version constraint to ^2.5.2

Fixed

  • Fail a cURL multi handler wait with an attributable error when the transfer is no longer tracked
  • Fix StreamHandler resolving numeric IPv4 hosts differently from cURL handlers on macOS and Windows
  • Fix StreamHandler TLS peer names and proxy authorities for numeric IPv4 hosts on all platforms
  • Settle a cURL multi handler transfer displaced by a request reusing its native handle ID
Commits

Updates guzzlehttp/promises from 2.5.1 to 2.5.3

Release notes

Sourced from guzzlehttp/promises's releases.

2.5.3

Added

  • Added support for PHP 8.6

2.5.2

Fixed

  • Fixed EachPromise abandoning its aggregate when the pending window drains unsettled
  • Fixed EachPromise admitting new work after its aggregate has settled
Changelog

Sourced from guzzlehttp/promises's changelog.

2.5.3 - 2026-08-24

Added

  • Added support for PHP 8.6

2.5.2 - 2026-08-05

Fixed

  • Fixed EachPromise abandoning its aggregate when the pending window drains unsettled
  • Fixed EachPromise admitting new work after its aggregate has settled
Commits

Updates guzzlehttp/psr7 from 2.13.0 to 2.13.1

Release notes

Sourced from guzzlehttp/psr7's releases.

2.13.1

Added

  • Add support for PHP 8.6

Fixed

  • Prefix relative paths that begin with a colon segment with ./ instead of throwing
Changelog

Sourced from guzzlehttp/psr7's changelog.

2.13.1 - 2026-08-24

Added

  • Add support for PHP 8.6

Fixed

  • Prefix relative paths that begin with a colon segment with ./ instead of throwing
Commits
  • 95e7828 Release 2.13.1
  • a583cbe Add PHP 8.6 to the CI matrix and version guidance (#883)
  • 93b91b0 Prefix relative paths that begin with a colon segment instead of throwing (#878)
  • 5b1264e Test that noncanonical IPv4 host spellings pass through unchanged (#874)
  • See full diff in compare view

Updates myclabs/deep-copy from 1.13.4 to 1.14.0

Release notes

Sourced from myclabs/deep-copy's releases.

1.14.0

What's Changed

PHP 8.6 is supported and PHP 7.x support has been dropped (8.0 or greater is required now).

Full Changelog: myclabs/DeepCopy@1.13.4...1.14.0

Commits

Updates nikic/php-parser from 5.7.0 to 5.9.0

Release notes

Sourced from nikic/php-parser's releases.

PHP-Parser 5.9.0

Fixed

  • Fix attribute insertion on enums and enum cases in formatting-preserving pretty printer.
  • Reject invalid Unicode escapes above \u{10FFFF}. Previously the limit was \u{1FFFFF}.
  • Don't allow newlines in (void) cast emulation.
  • Fix warning on float hex/binary/octal literals with PHP 8.6.

Added

  • Added support for PHP 8.6 partial function application. Placeholders are represented using ArgPlaceholder nodes.

PHP-Parser 5.8.0

Fixed

  • Treat _ as label character in formatting-preserving pretty printer.
  • Handle comment after object operator in keyword emulator.

Changed

  • Drop support for pipe operator in constant expression evaluator. It is not supported in constant expressions and may pose security risks, as it allows calls to arbitrary functions.
  • void parameter types now generate a (recoverable) error during parsing.
  • Restored reverse emulation support for fn keywords when targeting PHP before 7.4.
Changelog

Sourced from nikic/php-parser's changelog.

Version 5.9.0 (2026-09-13)

Fixed

  • Fix attribute insertion on enums and enum cases in formatting-preserving pretty printer.
  • Reject invalid Unicode escapes above \u{10FFFF}. Previously the limit was \u{1FFFFF}.
  • Don't allow newlines in (void) cast emulation.
  • Fix warning on float hex/binary/octal literals with PHP 8.6.

Added

  • Added support for PHP 8.6 partial function application. Placeholders are represented using ArgPlaceholder nodes.

Version 5.8.0 (2026-06-04)

Fixed

  • Treat _ as label character in formatting-preserving pretty printer.
  • Handle comment after object operator in keyword emulator.

Changed

  • Drop support for pipe operator in constant expression evaluator. It is not supported in constant expressions and may pose security risks, as it allows calls to arbitrary functions.
  • void parameter types now generate a (recoverable) error during parsing.
  • Restored reverse emulation support for fn keywords when targeting PHP before 7.4.
Commits
  • 9e33da9 Release PHP-Parser 5.9.0
  • 23c8e36 Implement support for partial function application
  • 1aa08bf Use iteration over recursion in `PrettyPrinterAbstract:: newOperandRequiresPa...
  • 160ea57 Suppress warning on hexdec/bindec/octdec overflow
  • fbd47f7 Fix attribute insertion on enum cases in formatting-preserving printer
  • 04ba49c Anchor the void cast emulator's interior whitespace check
  • 0725f08 Reject Unicode escapes above the maximum code point
  • 021f412 Fix attribute insertion on enums in formatting-preserving printer (#1156)
  • 10d6a90 Fix typo in Pretty_printing docs: "defaul" -> "default" (#1153)
  • 044a6a3 Release PHP-Parser 5.8.0
  • Additional commits viewable in compare view

Updates php-http/client-common from 2.7.2 to 2.7.3

Release notes

Sourced from php-http/client-common's releases.

2.7.3

  • Allow installation with Symfony 8.
  • Run tests with PHP 8.5.
Changelog

Sourced from php-http/client-common's changelog.

2.7.3 - 2025-11-29

  • Allow installation with Symfony 8.
  • Run tests with PHP 8.5.
Commits

Updates sebastian/recursion-context from 5.0.1 to 5.0.2

Release notes

Sourced from sebastian/recursion-context's releases.

sebastian/recursion-context 5.0.2

Changed

  • Suppress the PHP 8.6 deprecation of spl_object_hash() for now; migrating the code to spl_object_id() would be a break of backward compatibility
Changelog

Sourced from sebastian/recursion-context's changelog.

[5.0.2] - 2026-08-11

Changed

  • Suppress the PHP 8.6 deprecation of spl_object_hash() for now; migrating the code to spl_object_id() would be a break of backward compatibility
Commits
  • 5d32fe2 Suppress the PHP 8.6 deprecation of spl_object_hash() for now; migrating the ...
  • See full diff in compare view

Updates symfony/console from 6.4.47 to 6.4.48

Release notes

Sourced from symfony/console's releases.

v6.4.48

Changelog (symfony/console@v6.4.47...v6.4.48)

Commits
  • c9c4cf6 [Console] Build the lazy signal listeners before a signal can interrupt an au...
  • 051e665 [String] Fix the width of emoji sequences and conjoining Hangul jamo
  • See full diff in compare view

Updates symfony/filesystem from 6.4.45 to 6.4.48

Release notes

Sourced from symfony/filesystem's releases.

v6.4.48

Changelog (symfony/filesystem@v6.4.45...v6.4.48)

Commits

Updates symfony/process from 6.4.46 to 6.4.48

Release notes

Sourced from symfony/process's releases.

v6.4.48

Changelog (symfony/process@v6.4.46...v6.4.48)

Commits
  • 2a0cb83 [Process] Don't let inherited SYMFONY_DOTENV_VARS override explicitly passed ...
  • 96b3de8 [Process] Fix flaky testWaitUntilCallbackIsNotCalledAnymoreAfterItThrew
  • ab9f596 [Process] Fix flaky testIteratorOutput on Windows
  • 004a18f [Process] Fix waitUntil() missing output read by its own status updates
  • 20597aa [Process] Fix flaky tests on slow Windows runners
  • 0141e4d [Process] Widen the timing bound of testIteratorInputDoesNotWaitForOutput
  • See full diff in compare view

Updates symfony/string from 6.4.46 to 6.4.48

Release notes

Sourced from symfony/string's releases.

v6.4.48

Changelog (symfony/string@v6.4.46...v6.4.48)

Commits
  • 9459a27 [String] Fix wordwrap() with $cut when the string ends with the break
  • 476c397 [String] Fix width() of escape sequences with an intermediate or a digit fina...
  • f1c7445 [String] Fix width() of OSC sequences terminated by BEL
  • 8e50b1a [String] Fix width() of skin tones on keycap and text-default bases, and of f...
  • 36a678d bug #66447 [String] Fix the width of emoji sequences and conjoining Hangul ja...
  • a33125e [String] Fix the width of emoji sequences and conjoining Hangul jamo
  • c03032a [String] Update wcswidth data with Unicode 18
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the composer group with 12 updates
ff0761f 
Bumps the composer group with 12 updates:

| Package | From | To |
| --- | --- | --- |
| [composer/semver](https://github.com/composer/semver) | `3.5.0` | `3.5.1` |
| [guzzlehttp/guzzle](https://github.com/guzzle/guzzle) | `7.15.2` | `7.15.5` |
| [guzzlehttp/promises](https://github.com/guzzle/promises) | `2.5.1` | `2.5.3` |
| [guzzlehttp/psr7](https://github.com/guzzle/psr7) | `2.13.0` | `2.13.1` |
| [myclabs/deep-copy](https://github.com/myclabs/DeepCopy) | `1.13.4` | `1.14.0` |
| [nikic/php-parser](https://github.com/nikic/PHP-Parser) | `5.7.0` | `5.9.0` |
| [php-http/client-common](https://github.com/php-http/client-common) | `2.7.2` | `2.7.3` |
| [sebastian/recursion-context](https://github.com/sebastianbergmann/recursion-context) | `5.0.1` | `5.0.2` |
| [symfony/console](https://github.com/symfony/console) | `6.4.47` | `6.4.48` |
| [symfony/filesystem](https://github.com/symfony/filesystem) | `6.4.45` | `6.4.48` |
| [symfony/process](https://github.com/symfony/process) | `6.4.46` | `6.4.48` |
| [symfony/string](https://github.com/symfony/string) | `6.4.46` | `6.4.48` |


Updates `composer/semver` from 3.5.0 to 3.5.1
- [Release notes](https://github.com/composer/semver/releases)
- [Changelog](https://github.com/composer/semver/blob/main/CHANGELOG.md)
- [Commits](composer/semver@3.5.0...3.5.1)

Updates `guzzlehttp/guzzle` from 7.15.2 to 7.15.5
- [Release notes](https://github.com/guzzle/guzzle/releases)
- [Changelog](https://github.com/guzzle/guzzle/blob/7.15.5/CHANGELOG.md)
- [Commits](guzzle/guzzle@7.15.2...7.15.5)

Updates `guzzlehttp/promises` from 2.5.1 to 2.5.3
- [Release notes](https://github.com/guzzle/promises/releases)
- [Changelog](https://github.com/guzzle/promises/blob/2.5.3/CHANGELOG.md)
- [Commits](guzzle/promises@2.5.1...2.5.3)

Updates `guzzlehttp/psr7` from 2.13.0 to 2.13.1
- [Release notes](https://github.com/guzzle/psr7/releases)
- [Changelog](https://github.com/guzzle/psr7/blob/2.13.1/CHANGELOG.md)
- [Commits](guzzle/psr7@2.13.0...2.13.1)

Updates `myclabs/deep-copy` from 1.13.4 to 1.14.0
- [Release notes](https://github.com/myclabs/DeepCopy/releases)
- [Commits](myclabs/DeepCopy@1.13.4...1.14.0)

Updates `nikic/php-parser` from 5.7.0 to 5.9.0
- [Release notes](https://github.com/nikic/PHP-Parser/releases)
- [Changelog](https://github.com/nikic/PHP-Parser/blob/master/CHANGELOG.md)
- [Commits](nikic/PHP-Parser@v5.7.0...v5.9.0)

Updates `php-http/client-common` from 2.7.2 to 2.7.3
- [Release notes](https://github.com/php-http/client-common/releases)
- [Changelog](https://github.com/php-http/client-common/blob/2.x/CHANGELOG.md)
- [Commits](php-http/client-common@2.7.2...2.7.3)

Updates `sebastian/recursion-context` from 5.0.1 to 5.0.2
- [Release notes](https://github.com/sebastianbergmann/recursion-context/releases)
- [Changelog](https://github.com/sebastianbergmann/recursion-context/blob/5.0.2/ChangeLog.md)
- [Commits](sebastianbergmann/recursion-context@5.0.1...5.0.2)

Updates `symfony/console` from 6.4.47 to 6.4.48
- [Release notes](https://github.com/symfony/console/releases)
- [Changelog](https://github.com/symfony/console/blob/8.2/CHANGELOG.md)
- [Commits](symfony/console@v6.4.47...v6.4.48)

Updates `symfony/filesystem` from 6.4.45 to 6.4.48
- [Release notes](https://github.com/symfony/filesystem/releases)
- [Changelog](https://github.com/symfony/filesystem/blob/8.2/CHANGELOG.md)
- [Commits](symfony/filesystem@v6.4.45...v6.4.48)

Updates `symfony/process` from 6.4.46 to 6.4.48
- [Release notes](https://github.com/symfony/process/releases)
- [Changelog](https://github.com/symfony/process/blob/8.2/CHANGELOG.md)
- [Commits](symfony/process@v6.4.46...v6.4.48)

Updates `symfony/string` from 6.4.46 to 6.4.48
- [Release notes](https://github.com/symfony/string/releases)
- [Changelog](https://github.com/symfony/string/blob/8.2/CHANGELOG.md)
- [Commits](symfony/string@v6.4.46...v6.4.48)

---
updated-dependencies:
- dependency-name: composer/semver
  dependency-version: 3.5.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: composer
- dependency-name: guzzlehttp/guzzle
  dependency-version: 7.15.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: composer
- dependency-name: guzzlehttp/promises
  dependency-version: 2.5.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: composer
- dependency-name: guzzlehttp/psr7
  dependency-version: 2.13.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: composer
- dependency-name: myclabs/deep-copy
  dependency-version: 1.14.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: composer
- dependency-name: nikic/php-parser
  dependency-version: 5.9.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: composer
- dependency-name: php-http/client-common
  dependency-version: 2.7.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: composer
- dependency-name: sebastian/recursion-context
  dependency-version: 5.0.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: composer
- dependency-name: symfony/console
  dependency-version: 6.4.48
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: composer
- dependency-name: symfony/filesystem
  dependency-version: 6.4.48
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: composer
- dependency-name: symfony/process
  dependency-version: 6.4.48
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: composer
- dependency-name: symfony/string
  dependency-version: 6.4.48
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: composer
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from Grotax as a code owner October 16, 2026 09:23
@dependabot dependabot Bot added dependencies This is a dependency update. php Pull requests that update php code skip-changelog This change does not require an entry in the changelog, since it is not notable. labels Oct 16, 2026
@SMillerDev
SMillerDev merged commit 39d5fea into main Oct 16, 2026
9 of 10 checks passed
@SMillerDev
SMillerDev deleted the dependabot/composer/composer-15c2186cf6 branch October 16, 2026 09:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Grotax Grotax Awaiting requested review from Grotax Grotax is a code owner

Assignees

No one assigned

Labels

dependencies This is a dependency update. php Pull requests that update php code skip-changelog This change does not require an entry in the changelog, since it is not notable.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@SMillerDev