Update all non-major dependencies by renovate[bot] · Pull Request #10 · LM-Commons/lmc-api-auth

renovate · 2026-03-31T09:14:53Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
psalm/plugin-phpunit	`^0.19.5` → `^0.20.0`
vimeo/psalm	`6.16.1` → `6.19.1`

Release Notes

psalm/psalm-plugin-phpunit (psalm/plugin-phpunit)

`v0.20.4`

Compare Source

Bump plugin API to include ^0.3.

Full Changelog: psalm/psalm-plugin-phpunit@0.20.3...0.20.4

`v0.20.3`

Compare Source

Bumps the plugin api to include ^0.2.

Full Changelog: psalm/psalm-plugin-phpunit@0.20.2...0.20.3

`v0.20.2`

Compare Source

What's Changed

Fix #[Test] attribute detection for inherited and fully-qualified attributes by @alies-dev in #160

New Contributors

@alies-dev made their first contribution in #160

Full Changelog: psalm/psalm-plugin-phpunit@0.20.1...0.20.2

`v0.20.1`

Compare Source

`v0.20.0`

Compare Source

What's Changed

Switch to psalm/psalm-plugin-api 0.1.0 (targeting Psalm v7 beta)
Bump actions/cache from 3 to 4 by @dependabot[bot] in #153
Bump actions/checkout from 3 to 4 by @dependabot[bot] in #152
Bump actions/cache from 4 to 5 by @dependabot[bot] in #157
Bump actions/checkout from 4 to 6 by @dependabot[bot] in #156

Full Changelog: psalm/psalm-plugin-phpunit@0.19.5...0.20.0

vimeo/psalm (vimeo/psalm)

`v6.19.1`

Compare Source

What's Changed

Fixes

Keep polyfills of newer native functions out of the global functions on cached runs by @danog in #12025
[6.x] Allow asymmetric visibility on static properties in PHP 8.5 by @alies-dev in #12035
Fix: ReflectionClass template became invariant on PHP 8.4 by @alies-dev in #12036
Fix crash on static property fetch via builtin class string by @HenkPoley in #12038
Check $class::$prop reads and assignments when the class is a variable by @HenkPoley in #12040
Fix missing new $c checks when the class string has a leading backslash by @HenkPoley in #12039

Full Changelog: vimeo/psalm@6.19.0...6.19.1

`v6.19.0`

Compare Source

What's Changed

Features

[6.x] Support @param-closure-this docblock tag by @alies-dev in #11853
[6.x] Allow #[\Override] on properties (PHP 8.5) by @alies-dev in #11891
[6.x] Support PHP 8.5 clone-with-properties by @alies-dev in #11893
[6.x] Accept string pseudo-type intersections in docblocks by @alies-dev in #11823
[6.x] extract IdeDetector, auto-detect IDE when none specified by @alies-dev in #11802
[6.x] Accept --no-progress in psalm-refactor by @alies-dev in #11995
Add support for PHP 8.4 asymmetric property visibility by @danog in #11988
Enforce #[\NoDiscard] on every analysed PHP version by @danog in #12007
Report native symbols used below the PHP version that introduced them by @danog in #12006
Load genuinely-new native classes on every PHP version, tagged with @since by @danog in #12008
Respect PHP version guards when reporting unavailable native symbols by @danog in #12010
Date native functions and methods by the versioned callmaps by @danog in #12009

Fixes

[6.x] Resolve transitive @mixin chains (depth >= 2) by @alies-dev in #11868
[6.x] Keep the template argument of a constructed generic object at a call site by @alies-dev in #11991
[6.x] Fix parallel scan crash on PHP-native intersection types by @alies-dev in #11841
fix: shallow-scan extraFiles also for language server by @susnux in #11919
[6.x] Check set visibility for clone() withProperties keys by @alies-dev in #11999
[6.x] Resolve self/static template args against implementing class before bound check by @alies-dev in #11833
Fix ClassMustBeFinal final insertion for #11460 by @HenkPoley in #11855
Fix builtin class string instantiation by @HenkPoley in #11860
Fix invalid SARIF region for issues reported at line 0 by @eyupcanakman in #11903
[6.x] Resolve method templates for polymorphic array callables by @alies-dev in #11815

Other changes

[6.x] Add TKeyedArray::make() factory to 6.x for cross-version plugin compatibility by @alies-dev in #11810
[6.x] Quiet CLI output when running under an AI agent by @alies-dev in #11812
Bump mheap/github-action-required-labels from 5.5.2 to 5.6.0 by @dependabot[bot] in #11907
Bump actions/cache from 5.0.5 to 6.1.0 by @dependabot[bot] in #11896
Bump docker/setup-buildx-action from 4.1.0 to 4.2.0 by @dependabot[bot] in #11902
Bump docker/setup-buildx-action from 4.2.0 to 4.4.1 by @dependabot[bot] in #12005
Bump fkirc/skip-duplicate-actions from 5.3.1 to 5.3.2 by @dependabot[bot] in #12004
Bump actions/checkout from 6.0.2 to 7.0.1 by @dependabot[bot] in #12003
[6.x] Propagate throws from pseudo-method dispatch by @alies-dev in #11843
Fix for coding standard issue in commit ca15124 by @HenkPoley in #11856
Bump actions/cache from 5.0.5 to 6.1.0 by @dependabot[bot] in #12002

New Contributors

@susnux made their first contribution in #11919

Full Changelog: vimeo/psalm@6.18.1...6.19.0

`v6.18.1`

Compare Source

What's Changed

Features

Emit issues on php <8.5 if overridden method uses self instead of static by @danog in #11985
[6.x] Support parameter-conditional types in @self-out / @this-out by @alies-dev in #11964

Fixes

fix: false-positive NullableReturnStatement when a nullsafe property fetch is compared to a non-nullable value by @yuriy-sorokin in #11982

Other changes

[6.x] Throw TypeParseTreeException for an incomplete conditional type by @alies-dev in #11962

New Contributors

@yuriy-sorokin made their first contribution in #11982

Full Changelog: vimeo/psalm@6.18.0...6.18.1

`v6.18.0`

Compare Source

What's Changed

Features

[6.x] Support the PHP 8.5 #[\NoDiscard] attribute by @alies-dev in #11892

Fixes

Fix closure param type inference by @danog in #11972
Don't mint a type variable for a purely-mixed construction inference by @danog in #11973
Add the PHP 8.5 trace key to error_get_last() by @janedbal in #11975

Internal changes

Check out branch-specific baselines for test-with-real-projects by @danog in #11957

Other changes

[6.x] Substitute self in @property type tokens at scan time by @alies-dev in #11846

New Contributors

@janedbal made their first contribution in #11975

Full Changelog: vimeo/psalm@6.17.2...6.18.0

`v6.17.2`

Compare Source

What's Changed

Fixes

Fix function manipulator by @danog in #11671
Update nikic/php-parser version to ^5.2.0 by @danielmorell in #11927

Other changes

Fix crash on first-class callables in taint analysis by @Portll in #11932
Fix MissingOverrideAttribute false positive for private trait methods by @Eljees in #11926

New Contributors

@Portll made their first contribution in #11932
@danielmorell made their first contribution in #11927
@Eljees made their first contribution in #11926

Full Changelog: vimeo/psalm@6.17.1...6.17.2

`v6.17.1`

Compare Source

What's Changed

Fixes

Fix #11937 by @danog in #11938

Full Changelog: vimeo/psalm@6.17.0...6.17.1

`v6.17.0`

Compare Source

What's Changed

Features

Support better template inference with type variables: class templates that cannot be inferred at the construction site are now tracked as type variables whose bounds are reconciled once the surrounding function has been analyzed. This legalizes widening within a template's declared bounds (e.g. new Box(1) followed by $box->set('two') under @template T of int|string) and introduces the new IncompatibleTypeParameters issue (level 1), documented in https://psalm.dev/docs/annotating_code/type_variables/ by @muglug in #11875

Fixes

[6.x] Fix InterfaceAnalyzer crash when storage is overwritten by reflection by @alies-dev in #11760
[6.x] Fix $this failing to parse inside generic type parameters by @alies-dev in #11768
[6.x] Use macOS bundle ID for PhpStorm (support JetBrains Tool installed apps), respect PHPSTORM env var on Darwin by @alies-dev in #11801
[6.x] Ignore inline covariant/contravariant keywords in generic type parameters instead of reporting UndefinedDocblockClass (backport) by @alies-dev in #11836
Keep foreach key/value non-nullable after a breaking loop by @muglug in #11874
PHP 8.5 compatibility: TLiteralFloat now renders NAN values as float(NAN) in type keys and IDs instead of crashing by @danog in 9d6db9e and ca15124

Docs

Add docs/annotating_code/type_variables.md and the IncompatibleTypeParameters issue page by @muglug in #11875

Internal changes

[6.x] fix tests: drop incorrect impure- Closure prefix in TypeParseTest by @alies-dev in #11834
[6.x] fix tests: whitelist Override in SuicidalAutoloader fixture by @alies-dev in #11835
fix: pin GitHub Actions to SHA for supply chain security by @riccardosarro in #11863
Clean up redundant assignment-conditions and repeated getArgs() calls by @muglug in #11888
Remove dead write-only static properties and simplify ScopeAnalyzer break/continue logic by @muglug in #11889
Fix test-with-real-projects.sh on macOS (use gsed when available, tolerate a missing phar) by @danog in 9d6db9e
Fix macOS CI: bump setup-php to v2.37.2 so PHP 8.5 installs on macos-15 by @danog in a2892df
Fix Mockery 1.6.15 compatibility in plugin tests by @danog in 7b50a17
Drop voidParamType test: nikic/php-parser 5.8 rejects void params at parse time by @danog in 056992a

Other changes

Allow sebastian/diff 9 by @liviuconcioiu in #11861

New Contributors

@riccardosarro made their first contribution in #11863

Full Changelog: vimeo/psalm@6.16.1...6.17.0

Configuration

📅 Schedule: (in timezone UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

Read more information about the use of Renovate Bot within LM-Commons.

renovate · 2026-03-31T09:14:56Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: composer.lock

Loading composer repositories with package information
Dependency amphp/parallel is also a root requirement. Package has not been listed as an update argument, so keeping locked at old version. Use --with-all-dependencies (-W) to include root dependencies.
Dependency psr/container is also a root requirement. Package has not been listed as an update argument, so keeping locked at old version. Use --with-all-dependencies (-W) to include root dependencies.
Updating dependencies
Your requirements could not be resolved to an installable set of packages.

  Problem 1
    - Root composer.json requires psalm/plugin-phpunit ^0.20.0 -> satisfiable by psalm/plugin-phpunit[0.20.4].
    - Root composer.json requires vimeo/psalm 6.19.1 -> satisfiable by vimeo/psalm[6.19.1].
    - psalm/plugin-phpunit 0.20.4 requires psalm/psalm-plugin-api ^0.1|^0.2|^0.3 -> satisfiable by psalm/psalm-plugin-api[0.1.0, 0.2.0, 0.3.0].
    - psalm/psalm-plugin-api[0.1.0, ..., 0.3.0] conflict with vimeo/psalm <7.0.0.

Use the option --with-all-dependencies (-W) to allow upgrades, downgrades and removals for packages currently locked to specific versions.

| datasource | package | from | to | | ---------- | -------------------- | ------ | ------ | | packagist | psalm/plugin-phpunit | 0.19.7 | 0.20.4 | | packagist | vimeo/psalm | 6.16.1 | 6.19.1 | Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

renovate Bot added the renovate label Mar 31, 2026

renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 2ec4e07 to f48dd10 Compare April 23, 2026 20:43

renovate Bot changed the title ~~Update all non-major dependencies~~ Update dependency psalm/plugin-phpunit to ^0.20.0 Apr 23, 2026

renovate Bot changed the title ~~Update dependency psalm/plugin-phpunit to ^0.20.0~~ Update all non-major dependencies to ^0.20.0 Jun 5, 2026

renovate Bot changed the title ~~Update all non-major dependencies to ^0.20.0~~ Update all non-major dependencies Jun 24, 2026

renovate Bot changed the title ~~Update all non-major dependencies~~ Update dependency psalm/plugin-phpunit to ^0.20.0 Jun 27, 2026

renovate Bot force-pushed the renovate/all-minor-patch branch from f48dd10 to f3f01b9 Compare September 12, 2026 19:05

renovate Bot changed the title ~~Update dependency psalm/plugin-phpunit to ^0.20.0~~ Update all non-major dependencies Sep 12, 2026

renovate Bot force-pushed the renovate/all-minor-patch branch from f3f01b9 to 77eaad3 Compare September 20, 2026 00:15

renovate Bot force-pushed the renovate/all-minor-patch branch from 77eaad3 to 59d26a7 Compare September 27, 2026 03:40

renovate Bot force-pushed the renovate/all-minor-patch branch from 59d26a7 to 1aed104 Compare October 3, 2026 11:42

Navigation Menu

Update all non-major dependencies - #10

Update all non-major dependencies#10
renovate[bot] wants to merge 1 commit into
1.0.xfrom
renovate/all-minor-patch

renovate Bot commented Mar 31, 2026 •

edited

Loading

Uh oh!

renovate Bot commented Mar 31, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Mar 31, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

New Contributors

What's Changed

What's Changed

Fixes

What's Changed

Features

Fixes

Other changes

New Contributors

What's Changed

Features

Fixes

Other changes

New Contributors

What's Changed

Features

Fixes

Internal changes

Other changes

New Contributors

What's Changed

Fixes

Other changes

New Contributors

What's Changed

Fixes

What's Changed

Features

Fixes

Docs

Internal changes

Other changes

New Contributors

Configuration

Uh oh!

renovate Bot commented Mar 31, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Artifact update problem

File name: composer.lock

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Mar 31, 2026 •

edited

Loading

renovate Bot commented Mar 31, 2026 •

edited

Loading