Skip to content

Update all non-major dependencies - #517

Open
renovate[bot] wants to merge 1 commit into
1.45.xfrom
renovate/all-minor-patch
Open

Update all non-major dependencies#517
renovate[bot] wants to merge 1 commit into
1.45.xfrom
renovate/all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented Jan 5, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Adoption Passing Confidence Type Update
infection/infection 0.32.7 → 0.35.10 age adoption passing confidence require minor
laminas/laminas-ci-matrix-action 1.32.0 → v1.36 age adoption passing confidence action minor
laminas/laminas-continuous-integration-action 1.43.0 → v1.48 age adoption passing confidence action minor
php-standard-library/filesystem (source) ^6.1.1 → ^6.4.2 age adoption passing confidence require-dev patch
php-standard-library/type (source) ^6.1.1 → ^6.4.2 age adoption passing confidence require-dev patch
phpunit/phpunit (source) ^13.1.10 → ^13.4.6 age adoption passing confidence require-dev minor
psalm/plugin-phpunit ^0.19.7 → ^0.22.2 age adoption passing confidence require-dev minor
sanmai/later ^0.1.7 → ^0.1.8 age adoption passing confidence require patch
shivammathur/setup-php 2.36.0 → 2.40.0 age adoption passing confidence action minor
vimeo/psalm ^6.16.1 → ^6.20.10 age adoption passing confidence require patch

Release Notes

infection/infection

v0.35.10

Compare Source

Added

This release adds selective mutation exclusions. Use @infection-ignore followed by comma-separated mutator names to exclude specific mutations:

class Example
{
    // @infection-ignore ArrayItemRemoval, FalseValue
    public function values(): array
    {
        return [false, true];
    }
}

This excludes ArrayItemRemoval and FalseValue throughout the method while allowing other mutators to apply. The annotation works in docblocks and ordinary comments, applies to the annotated code and everything nested inside it, and combines with exclusions inherited from enclosing code.

Mutator names are exact and case-sensitive. Unknown names and empty lists produce warnings with the source file and line number. As with @infection-ignore-all, excluded mutations are not generated and do not contribute to the Ignored result count.

Added by @​theofidry in #​3717.

Full Changelog: infection/infection@0.35.9...master

v0.35.9

Compare Source

Fixed:

New Contributors

Full Changelog: infection/infection@0.35.8...0.35.9

v0.35.8

Compare Source

Fixed:

Full Changelog: infection/infection@0.35.7...0.35.8

v0.35.7

Compare Source

Added:

  • Explain why MSI checks are skipped by @​theofidry in #​3597
  • [BC Break] Validate configurations with PHPUnit 13.2 and newer by @​theofidry in #​3627.
    Invalid configurations now fail in a separate validation step before the initial test run, changing the error output.
  • Add an option to configure the timeout in the configuration generator (#​1286) by @​balliolon2 in #​3632
  • [BC Break] Apply a CPU limit to detected thread counts by @​theofidry in #​3655.
    Automatic thread selection now respects CPU quotas. The default uses 80% of cores, rounded down with a minimum of one; max uses all cores but one. For example, the default on eight cores without a quota cap produces six threads instead of seven.

Fixed:

  • [BC Break] Stop validating PHPUnit configurations against external XSDs for PHPUnit 10 and newer by @​theofidry in #​3626.
    Schema errors are reported through PHPUnit instead of Infection's previous schema validation, changing the error output. PHPUnit 9 and older retain the existing validation.
  • Restore libxml state after schema validation by @​theofidry in #​3644
  • [BC Break] Fix source filtering for initial-test:run by @​theofidry in #​3645.
    --filter now selects file paths; use --git-diff-filter for Git status filtering. Replace --base with --git-diff-base, together with --git-diff-filter or --git-diff-lines.
  • Report configuration files that are not a JSON object by @​VincentBorgers in #​3647
  • [BC Break] Make mutant memory limiting a test framework implementation detail by @​theofidry in #​3529.
    Automatically derived memory limits now apply only to PHPUnit mutant processes. Third-party adapters, including Codeception, lose the previous mechanism; PHPUnit runs through phpunit.bat on Windows also lose the automatic limit.
  • Fix signature mutants of methods with attributes being reported as not covered by @​maks-rafalko in #​3663
  • [BC Break] Allow automatic parallelism on Windows by @​theofidry in #​3656.
    Automatic thread selection can now use more than one thread on Windows. Set --threads=1 to retain serial execution.
  • [BC Break] Reject non-positive thread counts by @​theofidry in #​3660.
    --threads values that convert to zero or a negative integer, such as 0, -1, or 0.5, now fail. Use a positive thread count or max.
  • Resolve thread counts only if necessary by @​theofidry in #​3654

New Contributors

Full Changelog: infection/infection@0.35.6...0.35.7

v0.35.6

Compare Source

Added:

Fixed:

Internal:

New Contributors

Full Changelog: infection/infection@0.35.5...0.35.6

v0.35.5

Compare Source

Fixed:

Internal:

New Contributors

Full Changelog: infection/infection@0.35.4...0.35.5

v0.35.4

Compare Source

Fixed:

Full Changelog: infection/infection@0.35.3...0.35.4

v0.35.3

Compare Source

Fixed:

Full Changelog: infection/infection@0.35.2...0.35.3

v0.35.2

Compare Source

Fixed:

New Contributors

Full Changelog: infection/infection@0.35.1...0.35.2

v0.35.1

Compare Source

Fixed:

  • fix(phar): Upgrade Box so the PHAR works on PHP 8.5 (array_first() bug) by @​lazerg in #​3495

Full Changelog: infection/infection@0.35.0...0.35.1

v0.35.0: Fix auto-prepend file logic, mago freezes and Windows-specific PHPUnit tests filtering

Compare Source

Fixes:

Internal:

New Contributors

Full Changelog: infection/infection@0.34.2...0.35.0

v0.34.2

Compare Source

Fixed:

Internal:

New Contributors

Full Changelog: infection/infection@0.34.1...0.34.2

v0.34.1: Bugfixes and internal stuff

Compare Source

Fixed

  • Do not limit the PHPStan process by the memory usage detected for PHPUnit (#​3341, #​3358)
  • Fix the usage of git when the working directory or infection configuration did not match the git root directory (#​3403, #​3399)
  • Fix the PCOV coverage when covered code is outside of the current working directory (#​3410, #​3411)

Docs

Various ADRs additions:

  • Introduce an ADR for the cache naming convention (#​3328)
  • Update the covers annotation ADR (#​3368)
  • Document ADRs (#​3369)
  • Define the PHP version support policy (#​3372)
  • Clarify exception assertions in tests (#​3373)
  • Fix typo in ADR005 (#​3377)
  • Fix incorrect statement in ADR007 (#​3378)
  • Do a review of ADR 0003 (#​3379)
  • Add an ADR about our usage of assertEquals in our PHPUnit tests (#​3375)
  • Add an ADR for event and subscriber names (#​3374)
  • Add an ADR about how the public API is defined (#​3383)
  • Fix the ADR numbering by (#​3420)
  • Add an ADR for the final usage (#​3381)

Misc:

Internal

Various AutoReview related changes/improvements:

  • Rename some methods of the IO-Detector (#​3310)
  • Fix PHPat I/O detection for PHPUnit covers attributes (#​3276)
  • Move the public readonly property check to PHPat (#​3330)
  • Move the exceptions of the PHPat public property rule as PHPStan false-positives (#​3347)
  • Introduce PHPStan deprecration rules (#​3331)
  • Enforce the usage of CannotBeInstantiated (#​3360)
  • Remove useless inheritdoc PHPDoc tags (#​3370)
  • Add PHPat rule to enforce the ADR 0001 (#​3371)
  • Introduce a class reflection utility for PHPat (#​3380)
  • Use PHPUnit attributes for environment variables (#​3398)

A few Docker Sandbox related changes:

  • Allow maintainers to declare their own kits to personalise their sandboxes (#​3335)
  • Allow to commit from the Docker Sandbox by (#​3336)
  • Update the usages of docker sandbox by (#​3338)
  • Add tests for the docker sandbox kits (#​3339)

Improved guidance and usage for AI for infection's codebase:

Upgraded to infection's tests to PHPUnit 12:

  • Fix PHPUnit 12 deprecrations (#​3324)
  • Fix PHPUnit configuration for coverage (#​3333)
  • Upgrade to PHPUnit 12 (#​3274)

Started the efforts to rework the TestFramework API:

  • Streamline EngineTest (#​3313)
  • Initiate the rework of ShellCommandLineExecutor as a plan to include it in the TestFramework contract:
    • Leverage the ShellCommandLineExecutor (#​3323)
  • Move the CommandLineBuilder and VersionParser utilities to the common package (#​3365)
  • Codify adapter package boundaries with PHPat (#​3269)

Improved or fixed some tests:

Misc:

  • Refactor positional path classifier tests (#​3309)
  • Exclude the benchmark script create-main.php from PHPStan (#​3320)
  • Rename CachedSourceCollector to MemoizedSourceCollector (#​3329)
  • Collect performance metrics on release tag pushes by @​sanmai (#​3416)

Full Changelog: infection/infection@0.34.0...0.34.1

v0.34.0

Compare Source

Added:

Changed:

Full Changelog: infection/infection@0.33.3...0.34.0

v0.33.3

Compare Source

Added

Changed:

New Contributors

Full Changelog: infection/infection@0.33.2...0.33.3

v0.33.2

Compare Source

Changed:

Internal:

Full Changelog: infection/infection@0.33.1...0.33.2

v0.33.1

Compare Source

Changed:

Full Changelog: infection/infection@0.33.0...0.33.1

v0.33.0

Compare Source

Added:

Changed:

  • feat!: BC break: Improve the project directory resolution to the ConfigurationFactory by @​theofidry in #​3009

Fixed:

Internal:

Full Changelog: infection/infection@0.32.7...0.33.0

laminas/laminas-ci-matrix-action

v1.36

Compare Source

v1.35

Compare Source

v1.34

Compare Source

v1.33

Compare Source

laminas/laminas-continuous-integration-action

v1.48

Compare Source

v1.47

Compare Source

v1.46

Compare Source

v1.45

Compare Source

v1.44

Compare Source

sebastianbergmann/phpunit (phpunit/phpunit)

v13.4.6: PHPUnit 13.4.6

Compare Source

Changed
  • Issues whose message refers to an anonymous class could not be ignored using a baseline on PHP 8.6 (as of PHP 8.6, such messages contain the full name of the anonymous class: a NUL byte followed by the file, line, and a counter)
  • Make PHAR build reproducible across filesystems (files are now added to the PHAR sorted by their path instead of in the order in which the filesystem lists them)
Fixed
  • When method() is called for a method of a test double that cannot be configured, for instance because it does not exist, every subsequent invocation of a method of that test double fails with Method name is not configured
  • When a hook method of a test, for instance setUp(), marks the test as incomplete, the hook method is reported as failed
  • When an "after test" method, for instance tearDown(), marks a successful test as incomplete or skips it, the test is reported as failed
  • When a before-first-test method, for instance setUpBeforeClass(), calls markTestIncomplete(), each test of the test class is reported as failed instead of the test class being skipped as it is when markTestSkipped() is called
  • When an after-last-test method, for instance tearDownAfterClass(), calls markTestIncomplete() or markTestSkipped() after the tests of the test class have been run, this is reported as a failure, also for each test of the test class that is run in process isolation
  • A failed PHP assertion, made using assert(), in a hook method is reported as an error of that method instead of as a failure, and it is counted as an error instead of as a failure when that method is a before-first-test method or an after-last-test method
  • When an assertion fails in an "after test" method, for instance tearDown(), of a test that already failed, errored, or was marked as incomplete, a failure is reported in addition to the outcome of the test, so the test is counted more than once and onNotSuccessfulTest() is called with the failure from the "after test" method instead of the test's own
  • When a test fails because of an exception of a registered failure type, an error or a failure in an "after test" method, for instance tearDown(), is reported in addition to the test's failure, so the test is counted more than once
  • A test that fails because of an exception of a registered failure type is considered risky when it does not perform assertions or, when requireCoverageMetadata="true" is configured, when it does not define a code coverage target, unlike a test that fails because an assertion failed
  • The TestDox output does not show the failure of a before-first-test method or an after-last-test method, for instance an assertion failure in setUpBeforeClass()
  • Control characters and ANSI escape sequences in user-supplied strings are not made visible in the output of --debug and in the logfiles written by --log-events-text and --log-events-verbose-text
  • Groups configured for a test directory or test file using the groups attribute of <directory> or <file> in the XML configuration file are not assigned to PHPT tests, so --group and --exclude-group do not select them and --list-groups and --list-tests-xml report them as being in the default group or not at all
Removed
  • The library PHAR (phpunit-library-X.Y.Z.phar) is no longer built, it could not be loaded since PHPUnit 9.5.8

Learn how to install or update PHPUnit 13.4 in the documentation.

Keep up to date with PHPUnit:

v13.4.5: PHPUnit 13.4.5

Compare Source

Fixed
  • The static analysis cache directory that is automatically created in the operating system's path used for temporary files when no cache directory is configured is not used when the POSIX extension is not loaded

Learn how to install or update PHPUnit 13.4 in the documentation.

Keep up to date with PHPUnit:

[`v13.4.4

[!IMPORTANT]
✂ PR body was truncated to here.

Configuration

📅 Schedule: (in timezone UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

Read more about the use of Renovate Bot within ocramius/* projects.

@renovate

renovate Bot commented Jan 5, 2026

Copy link
Copy Markdown
Contributor Author

Branch automerge failure

This PR was configured for branch automerge. However, this is not possible, so it has been raised as a PR instead.

  • Branch has one or more failed status checks

@renovate renovate Bot added the renovate label Jan 5, 2026
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from aaaaa05 to 6f90db1 Compare January 7, 2026 16:45
@renovate renovate Bot changed the title Update dependency infection/infection to v0.32.1 Update dependency infection/infection to v0.32.2 Jan 7, 2026
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from fdef2fb to 13d37d8 Compare January 13, 2026 05:37
@renovate renovate Bot changed the title Update dependency infection/infection to v0.32.2 Update dependency infection/infection to v0.32.3 Jan 13, 2026
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 15872f0 to 55087ca Compare January 15, 2026 12:57
@renovate renovate Bot changed the title Update dependency infection/infection to v0.32.3 Update all non-major dependencies Jan 15, 2026
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 3bf1195 to d5d7a4a Compare January 21, 2026 05:29
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 8 times, most recently from 6f9004b to 1422bde Compare January 30, 2026 17:50
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 6 times, most recently from c535efa to d65ac32 Compare February 8, 2026 08:24
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from b87b106 to f0d5f40 Compare March 2, 2026 10:59
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 86e33dd to 12bfe22 Compare March 16, 2026 02:07
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from badf0e8 to 790b708 Compare March 17, 2026 12:38
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 6 times, most recently from 35361a1 to a7eda33 Compare April 6, 2026 05:51
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 7 times, most recently from 70b4b73 to eb7a6dc Compare April 14, 2026 06:08
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 7 times, most recently from 94bc314 to f1d618f Compare April 20, 2026 04:58
@Ocramius

Ocramius commented Oct 17, 2026

Copy link
Copy Markdown
Member

Thinking of moving 100% to Mago for this - feature parity with psalm is there, and I currently don't have much time to update the plugin for Psalm

@renovate
Update all non-major dependencies
474e7b5 
| datasource  | package                                       | from    | to      |
| ----------- | --------------------------------------------- | ------- | ------- |
| packagist   | infection/infection                           | 0.32.7  | 0.35.10 |
| github-tags | laminas/laminas-ci-matrix-action              | 1.32.0  | v1.36   |
| github-tags | laminas/laminas-continuous-integration-action | 1.43.0  | v1.48   |
| packagist   | php-standard-library/filesystem               | 6.4.2   | 6.4.2   |
| packagist   | php-standard-library/type                     | 6.4.2   | 6.4.2   |
| packagist   | phpunit/phpunit                               | 13.1.14 | 13.4.6  |
| packagist   | psalm/plugin-phpunit                          | 0.19.7  | 0.22.2  |
| packagist   | sanmai/later                                  | 0.1.8   | 0.1.8   |
| github-tags | shivammathur/setup-php                        | 2.36.0  | 2.40.0  |
| packagist   | vimeo/psalm                                   | 6.20.10 | 6.20.10 |
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@Ocramius Ocramius

Labels

renovate

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@Ocramius