Bump the dependencies group with 2 updates #1577
Conversation
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the dependencies group with 2 updates: [dominikb/composer-license-checker](https://github.com/dominikb/composer-license-checker) and [phpstan/phpstan](https://github.com/phpstan/phpstan). Updates `dominikb/composer-license-checker` from 2.4.1 to 2.4.2 - [Release notes](https://github.com/dominikb/composer-license-checker/releases) - [Changelog](https://github.com/dominikb/composer-license-checker/blob/master/CHANGELOG.md) - [Commits](dominikb/composer-license-checker@2.4.1...2.4.2) Updates `phpstan/phpstan` from 1.10.27 to 1.10.29 - [Release notes](https://github.com/phpstan/phpstan/releases) - [Changelog](https://github.com/phpstan/phpstan/blob/1.11.x/CHANGELOG.md) - [Commits](phpstan/phpstan@1.10.27...1.10.29) --- updated-dependencies: - dependency-name: dominikb/composer-license-checker dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: phpstan/phpstan dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
the
dependencies
|
Test failures are an awful confluence of issues. react/promise 3 was just released. Composer 2.x-dev supports that, but 2.5.8 still supports react/promise 2. Composer chose to move to 2.x-dev instead of staying on an older release of react/promise. The problem is this triggered a Composer bug causing the phpstan rule to be missing: composer/composer#11586 I manually tweaked composer.lock to keep a stable Composer release for now. That may be reset next time an update runs, but hopefully the Composer bug is fixed before then. Ideally there'd be some way to tell Composer to prefer a stable releases over new ones. |
Codecov ReportPatch and project coverage have no change.
Additional details and impacted files@@ Coverage Diff @@
## main #1577 +/- ##
=========================================
Coverage 91.76% 91.76%
Complexity 1809 1809
=========================================
Files 124 124
Lines 6470 6470
=========================================
Hits 5937 5937
Misses 533 533 ☔ View full report in Codecov by Sentry. |
Bumps the dependencies group with 2 updates: dominikb/composer-license-checker and phpstan/phpstan.
Updates
dominikb/composer-license-checkerfrom 2.4.1 to 2.4.2Release notes
Sourced from dominikb/composer-license-checker's releases.
Changelog
Sourced from dominikb/composer-license-checker's changelog.
Commits
4fc6530Relase version 2.4.241d6d98Update license lookup for new tldrlegal websiteUpdates
phpstan/phpstanfrom 1.10.27 to 1.10.29Release notes
Sourced from phpstan/phpstan's releases.
Commits
ee5d8f2PHPStan 1.10.297c80750Updated PHPStan to commit 7c8075089ae70a63637e8e77ba52cd41152bbb308632ccfUpdated PHPStan to commit 8632ccf13d9af658e6f8b49589826672e2f074168102c4eUpdated PHPStan to commit 8102c4ea57c9a09906f25458c3fa94ac4734694f3673f33Updated PHPStan to commit 3673f332ccb735eb4cb56f86fdb51a9a2f3bd4727028469Updated PHPStan to commit 70284695660ad04ff3d1b87be464d0dbcb0abea3a32d15bUpdated PHPStan to commit a32d15bd4005337227946d668802c64a3b9c58335113389Updated PHPStan to commit 511338926d57797f6a6fb855d971f95a298c25ebbe637c2Updated PHPStan to commit be637c28c6d03f88e09e7a634e5f02fb60b82d7334fc187Updated PHPStan to commit 34fc18758aa8d55788d994df32b023e03d77c0e5Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name> dependencywill close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name> dependencywill remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions