Skip to content

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Sep 15, 2025

Updates the requirements on squizlabs/php_codesniffer to permit the latest version.

Changelog

Sourced from squizlabs/php_codesniffer's changelog.

[4.0.0] - 2025-09-16

This release contains breaking changes.

Upgrade guides for both [ruleset maintainers/end-users][wiki-upgrade-4.0-end-users], as well as for [sniff developers and integrators][wiki-upgrade-4.0-extenders], have been published to the Wiki.

You are strongly encouraged to read the upgrade guide applicable to your situation before upgrading.

This release includes all improvements and bugfixes from PHP_CodeSniffer 3.13.3 and 3.13.4.

Changed

  • Tokenizer/PHP: fully qualified exit/die/true/false/null will be tokenized as the keyword token and the token 'content' will include the leading backslash. #1201
  • Wherever possible based on the PHP 7.2 minimum version, parameter types have been added to all methods. #1237
  • The supported PHPUnit version constraints have been updated to ^8.4.0 || ^9.3.4 || ^10.5.32 || 11.3.3 - 11.5.28 || ^11.5.31. #1247
    • External standards using the PHP_CodeSniffer native framework may need to update their own PHPUnit version constraints.
  • Various housekeeping, including improvements to the tests and documentation.

Fixed

  • Fixed bug #1082: new exit codes weren't applied when running phpcbf on code provided via STDIN.
  • Fixed bug #1172: // phpcs:set for inline array properties did not handle a single item array with the value true, false or null correctly.
  • Fixed bug #1174: progress bar wasn't showing files as fixed when running phpcbf in parallel mode.
  • Fixed bug #1226: PHP 8.5 "Using null as an array offset" deprecation notice.

Other

  • Please be aware that the master branch has been renamed to 3.x and the default branch has changed to the 4.x branch.
    • If you contribute to PHP_CodeSniffer, you will need to update your local git clone.
    • If you develop against PHP_CodeSniffer and run your tests against dev branches of PHPCS, you will need to update your workflows.

#1082: PHPCSStandards/PHP_CodeSniffer#1082 #1172: PHPCSStandards/PHP_CodeSniffer#1172 #1174: PHPCSStandards/PHP_CodeSniffer#1174 #1201: PHPCSStandards/PHP_CodeSniffer#1201 #1226: PHPCSStandards/PHP_CodeSniffer#1226 #1237: PHPCSStandards/PHP_CodeSniffer#1237 #1247: PHPCSStandards/PHP_CodeSniffer#1247

[4.0.0RC1] - 2025-06-18

This release includes all improvements and bugfixes from PHP_CodeSniffer [3.13.1] and [3.13.2].

Changed

  • The error code Squiz.Functions.FunctionDeclarationArgumentSpacing.SpacingAfterVisbility has been changed to Squiz.Functions.FunctionDeclarationArgumentSpacing.SpacingAfterVisibility. #1136
    • Thanks to [Juliette Reinders Folmer][@​jrfnl] for the patch.
  • The following sniff(s) have received efficiency improvements:
    • Generic.ControlStructures.InlineControlStructure

... (truncated)

Commits
  • 06113cf Merge pull request #1260 from PHPCSStandards/feature/changelog-4.0.0
  • 7bb1928 Merge branch '3.x' into 4.x
  • 8222a52 Merge pull request #1261 from PHPCSStandards/feature/release-checklist-fix-order
  • 82f2cd8 Release checklist: fix order
  • 68e414d Changelog for the 4.0.0 release
  • 2f9900a Merge branch '3.x' into 4.x
  • 38efc5d Merge pull request #1259 from PHPCSStandards/feature/update-release-checklist...
  • 230c7c2 Update release checklist and document branch management
  • c66fd3c Merge branch '3.x' into 4.x
  • 3acd7ee Merge pull request #1258 from PHPCSStandards/feature/updates-for-branch-rename
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Updates the requirements on [squizlabs/php_codesniffer](https://github.com/PHPCSStandards/PHP_CodeSniffer) to permit the latest version.
- [Release notes](https://github.com/PHPCSStandards/PHP_CodeSniffer/releases)
- [Changelog](https://github.com/PHPCSStandards/PHP_CodeSniffer/blob/4.x/CHANGELOG-4.x.md)
- [Commits](PHPCSStandards/PHP_CodeSniffer@3.0.0...4.0.0)

---
updated-dependencies:
- dependency-name: squizlabs/php_codesniffer
  dependency-version: 4.0.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file php Pull requests that update Php code labels Sep 15, 2025
@nguereza-tony
Copy link
Member

nguereza-tony commented Sep 16, 2025 via email

@dependabot dependabot bot closed this Sep 16, 2025
Copy link
Author

dependabot bot commented on behalf of github Sep 16, 2025

Looks like this PR is closed. If you re-open it I'll rebase it as long as no-one else has edited it (you can use @dependabot reopen if the branch has been deleted).

Copy link
Author

dependabot bot commented on behalf of github Sep 16, 2025

Looks like this PR is closed. If you re-open it, I'll rebase it, as long as no-one else has edited it.

Copy link
Author

dependabot bot commented on behalf of github Sep 16, 2025

Dependabot tried to reopen this PR, but was told that the target branch has been deleted (and therefore that this PR couldn't be reopened).

Copy link
Author

dependabot bot commented on behalf of github Sep 16, 2025

OK, I won't notify you about version 4.x.x again, unless you re-open this PR.

@dependabot dependabot bot deleted the dependabot/composer/squizlabs/php_codesniffer-4.star branch September 16, 2025 07:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file php Pull requests that update Php code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant