Skip to content

Release 3.0.4: reviewed Dependabot batch - #19

Merged
TonisOrmisson merged 7 commits into
masterfrom
release/3.0.4
Sep 7, 2026
Merged

Release 3.0.4: reviewed Dependabot batch#19
TonisOrmisson merged 7 commits into
masterfrom
release/3.0.4

Conversation

@TonisOrmisson

@TonisOrmisson TonisOrmisson commented Sep 7, 2026

Copy link
Copy Markdown
Contributor

Integrates Dependabot PRs #14, #15, #16, #17 and #18 without rewriting their commits. Removes the deprecated PHPUnit --do-not-cache-result flag from branch coverage (default caching does not affect test selection or coverage). No runtime changes.

Validation: full composer qa:release passed locally on PHP 8.5.9, including 517 tests, line and branch coverage, mutation testing and bidirectional R/haven SAV/ZSAV interoperability. All dependency changes reviewed; final combined PHP 8.4/8.5 CI required before release.

Summary by CodeRabbit

  • Documentation

    • Added release notes for version 3.0.4, including updated development tooling and compatibility information.
    • Confirmed that runtime APIs and SAV/ZSAV file formats remain unchanged.
  • Chores

    • Updated supported development tooling versions.
    • Expanded compatibility for Infection 0.34 and 0.35.
    • Removed an obsolete coverage-runner option to maintain compatibility with current PHPUnit versions.

dependabot Bot and others added 7 commits August 21, 2026 08:45
Bumps [phpunit/phpunit](https://github.com/sebastianbergmann/phpunit) from 13.2.6 to 13.3.1.
- [Release notes](https://github.com/sebastianbergmann/phpunit/releases)
- [Changelog](https://github.com/sebastianbergmann/phpunit/blob/13.3.1/ChangeLog-13.3.md)
- [Commits](sebastianbergmann/phpunit@13.2.6...13.3.1)

---
updated-dependencies:
- dependency-name: phpunit/phpunit
  dependency-version: 13.3.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [friendsofphp/php-cs-fixer](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer) from 3.95.18 to 3.95.22.
- [Release notes](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/releases)
- [Changelog](https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/blob/master/CHANGELOG.md)
- [Commits](PHP-CS-Fixer/PHP-CS-Fixer@v3.95.18...v3.95.22)

---
updated-dependencies:
- dependency-name: friendsofphp/php-cs-fixer
  dependency-version: 3.95.22
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [infection/infection](https://github.com/infection/infection) from 0.34.1 to 0.35.2.
- [Release notes](https://github.com/infection/infection/releases)
- [Changelog](https://github.com/infection/infection/blob/master/CHANGELOG.md)
- [Commits](infection/infection@0.34.1...0.35.2)

---
updated-dependencies:
- dependency-name: infection/infection
  dependency-version: 0.35.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [rector/rector](https://github.com/rectorphp/rector) from 2.5.9 to 2.6.3.
- [Release notes](https://github.com/rectorphp/rector/releases)
- [Commits](rectorphp/rector@2.5.9...2.6.3)

---
updated-dependencies:
- dependency-name: rector/rector
  dependency-version: 2.6.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [phpstan/phpstan](https://github.com/phpstan/phpstan-phar-composer-source) from 2.2.7 to 2.2.9.
- [Commits](https://github.com/phpstan/phpstan-phar-composer-source/commits)

---
updated-dependencies:
- dependency-name: phpstan/phpstan
  dependency-version: 2.2.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
…infection-0.35.2', 'origin/dependabot/composer/friendsofphp/php-cs-fixer-3.95.22', 'origin/dependabot/composer/rector/rector-2.6.3', 'origin/dependabot/composer/phpstan/phpstan-2.2.9' and 'origin/dependabot/composer/phpunit/phpunit-13.3.1' into release/3.0.4
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Sep 7, 2026

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review Completed 2026-09-07T18:36:59.639564Z a9943ce PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@coderabbitai

coderabbitai Bot commented Sep 7, 2026

Copy link
Copy Markdown

Review Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Team

Run ID: ff9a62e4-e450-4033-9a53-90f0017fd178

📥 Commits

Reviewing files that changed from the base of the PR and between 371c508 and a9943ce.

⛔ Files ignored due to path filters (1)
  • composer.lock is excluded by !**/*.lock
📒 Files selected for processing (3)
  • CHANGELOG.md
  • composer.json
  • tools/run-branch-coverage.php
💤 Files with no reviewable changes (1)
  • tools/run-branch-coverage.php

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.


📝 Walkthrough

Walkthrough

The change updates Infection development dependency constraints, removes a deprecated PHPUnit option from branch-coverage shards, and adds the 3.0.4 changelog entry.

Changes

Development tooling compatibility

Layer / File(s) Summary
Tooling constraints and coverage runner
composer.json, tools/run-branch-coverage.php, CHANGELOG.md
The Infection constraint accepts ^0.34 and ^0.35. Branch-coverage shards no longer pass --do-not-cache-result. The changelog records the tooling updates and confirms no runtime API or SAV/ZSAV format changes.

Estimated code review effort: 2 (Simple) | ~5 minutes

Merge Risk: ⚪ Minimal · up to a9943

This release updates development tooling and branch-coverage compatibility without runtime API or data-format changes. No concrete merge-blocking risk remains.

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly identifies the 3.0.4 release and the reviewed dependency updates. It accurately summarizes the main change without unnecessary detail.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
✨ Finishing Touches
📝 Generate docstrings
  • Create stacked PR
  • Commit on current branch
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch release/3.0.4

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@TonisOrmisson
TonisOrmisson merged commit 249f8a0 into master Sep 7, 2026
13 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant