chore(deps): update all non-major dependencies (minor) by renovate[bot] · Pull Request #346 · digital-blueprint/webapppassword

renovate · 2026-09-12T02:05:39Z

This PR contains the following updates:

Package	Change	Age	Confidence
behat/behat (source)	`3.32.0` → `3.33.0`
vimeo/psalm	`6.5.0` → `6.17.2`

Release Notes

Behat/Behat (behat/behat)

`v3.33.0`

Compare Source

Changed

Emit deprecation if definition and function number of parameters do not match by @carlos-granados in #1867
Show the suite name in failure summaries when several suites ran by @Amoifr in #1865

Added

Add 'inline_failures' option to progress formatter by @AlexSkrypnyk in #1861
Add support for filtering on Cucumber tag expressions by @Amoifr in #1863
Add DataTable and DocString step argument types to reduce coupling to the Gherkin TableNode / PyStringNode
by @Amoifr in #1864 and #1878
Add hasStdOut() and getStdOut() to ExecutedStepResult by @carlos-granados in #1874
Mark reachable interfaces and value objects as @api by @carlos-granados in #1868

Fixed

Rerun should count scenarios as failed if before / after hooks failed.
Previously, scenarios that only failed due to a Scenario, Feature, or Suite hook were never re-run, potentially
causing incorrect passing builds. By @Amoifr in #1877
Handle aborted suites when printing unused definitions by @Amoifr in #1882

Internal

Don't use PHPUnit assertions in Behat's own test suite by @carlos-granados in #1872
Change how we assert on how PHP renders anonymous class names by @carlos-granados in #1873
Use the new hasStdOut()/getStdOut() functions by @carlos-granados in #1880

vimeo/psalm (vimeo/psalm)

`v6.17.2`

Compare Source

What's Changed

Fixes

Fix function manipulator by @danog in #11671
Update nikic/php-parser version to ^5.2.0 by @danielmorell in #11927

Other changes

Fix crash on first-class callables in taint analysis by @Portll in #11932
Fix MissingOverrideAttribute false positive for private trait methods by @Eljees in #11926

New Contributors

@Portll made their first contribution in #11932
@danielmorell made their first contribution in #11927
@Eljees made their first contribution in #11926

Full Changelog: vimeo/psalm@6.17.1...6.17.2

`v6.17.1`

Compare Source

What's Changed

Fixes

Fix #11937 by @danog in #11938

Full Changelog: vimeo/psalm@6.17.0...6.17.1

`v6.17.0`

Compare Source

What's Changed

Features

Support better template inference with type variables: class templates that cannot be inferred at the construction site are now tracked as type variables whose bounds are reconciled once the surrounding function has been analyzed. This legalizes widening within a template's declared bounds (e.g. new Box(1) followed by $box->set('two') under @template T of int|string) and introduces the new IncompatibleTypeParameters issue (level 1), documented in https://psalm.dev/docs/annotating_code/type_variables/ by @muglug in #11875

Fixes

[6.x] Fix InterfaceAnalyzer crash when storage is overwritten by reflection by @alies-dev in #11760
[6.x] Fix $this failing to parse inside generic type parameters by @alies-dev in #11768
[6.x] Use macOS bundle ID for PhpStorm (support JetBrains Tool installed apps), respect PHPSTORM env var on Darwin by @alies-dev in #11801
[6.x] Ignore inline covariant/contravariant keywords in generic type parameters instead of reporting UndefinedDocblockClass (backport) by @alies-dev in #11836
Keep foreach key/value non-nullable after a breaking loop by @muglug in #11874
PHP 8.5 compatibility: TLiteralFloat now renders NAN values as float(NAN) in type keys and IDs instead of crashing by @danog in 9d6db9e and ca15124

Docs

Add docs/annotating_code/type_variables.md and the IncompatibleTypeParameters issue page by @muglug in #11875

Internal changes

[6.x] fix tests: drop incorrect impure- Closure prefix in TypeParseTest by @alies-dev in #11834
[6.x] fix tests: whitelist Override in SuicidalAutoloader fixture by @alies-dev in #11835
fix: pin GitHub Actions to SHA for supply chain security by @riccardosarro in #11863
Clean up redundant assignment-conditions and repeated getArgs() calls by @muglug in #11888
Remove dead write-only static properties and simplify ScopeAnalyzer break/continue logic by @muglug in #11889
Fix test-with-real-projects.sh on macOS (use gsed when available, tolerate a missing phar) by @danog in 9d6db9e
Fix macOS CI: bump setup-php to v2.37.2 so PHP 8.5 installs on macos-15 by @danog in a2892df
Fix Mockery 1.6.15 compatibility in plugin tests by @danog in 7b50a17
Drop voidParamType test: nikic/php-parser 5.8 rejects void params at parse time by @danog in 056992a

Other changes

Allow sebastian/diff 9 by @liviuconcioiu in #11861

New Contributors

@riccardosarro made their first contribution in #11863

Full Changelog: vimeo/psalm@6.16.1...6.17.0

`v6.16.1`

Compare Source

What's Changed

Fixes

Fix --show-snippet option silently consuming next CLI argument by @alies-dev in #11684
Explicitly disable JIT by default by @danog in #11745

Full Changelog: vimeo/psalm@6.16.0...6.16.1

`v6.16.0`

Compare Source

What's Changed

Features

Add stub for memcached by @ADmad in #11717

Fixes

Fix duplicate error for abstract methods in traits if the issue is due to the implementer by @kkmuffme in #11695
Report regular issue instead of throw/crash by @kkmuffme in #11693
Add PHP 8.5 (and 8.4) handling where it wasn't added yet by @kkmuffme in #11697
curl_share_init_persistent requires non-empty array otherwise throws by @kkmuffme in #11701
Add max_depth option to unserialize() callmap type by @eyupcanakman in #11702
Fix false InvalidArgument for sprintf precision placeholders by @eyupcanakman in #11729

Internal changes

Disable JIT by default, make it opt-in via --force-jit by @alies-dev in #11682
Regenerate callmaps to include new ext-mongodb 2.2 API by @alcaeus in #11720
Bump docker/setup-buildx-action from 3 to 4 by @dependabot[bot] in #11719

New Contributors

@eyupcanakman made their first contribution in #11702

Full Changelog: vimeo/psalm@6.15.1...6.16.0

`v6.15.1`

Compare Source

What's Changed

Internal changes

Allow sebastian/diff 8 by @Jean85 in #11667

Full Changelog: vimeo/psalm@6.15.0...6.15.1

`v6.15.0`

Compare Source

Note: GPG signatures for older releases will be regenerated shortly using the new 99BF4D9A33D65E1E key, since the old one expired.

What's Changed

Features

Support PHP 8.4 interface property hooks by @adamaveray in #11569

Fixes

Improve performance of getIssueTrace by @danog in #11629
Minor property hook improvements by @danog in #11657
Fix GPG signing key by @danog in #11658

Other changes

Add a missing argument of PDO::sqliteCreateFunction(). by @sukei in #11591

New Contributors

@adamaveray made their first contribution in #11569
@sukei made their first contribution in #11591

Full Changelog: vimeo/psalm@6.14.3...6.15.0

`v6.14.3`

Compare Source

What's Changed

Fixes

Remove redefinition of Attribute constants. by @hschletz in #11625
Remove usages of deprecated curl_close() function by @theodorejb in #11626
Declare NoDiscard attribute as immutable by @Baptouuuu in #11611
dependencies : allow symfony 8 by @NicolasDievart in #11594

Internal changes

Bump actions/cache from 4 to 5 by @dependabot[bot] in #11623

Other changes

New Contributors

@hschletz made their first contribution in #11625
@Baptouuuu made their first contribution in #11611
@NicolasDievart made their first contribution in #11594

Full Changelog: vimeo/psalm@6.14.2...6.14.3

`v6.14.2`

Compare Source

What's Changed

Fixes

Fix supported versions regex by @danog in #11614

Full Changelog: vimeo/psalm@6.14.1...6.14.2

`v6.14.1`

Compare Source

What's Changed

Features

Do not ignore null array offsets within isset by @danog in #11608

Full Changelog: vimeo/psalm@6.14.0...6.14.1

`v6.14.0`

Compare Source

What's Changed

Features

Add PHP 8.5 support by @MarjovanLier in #11604
Add PHP 8.5 support by @danog

Internal changes

Improve performance by avoiding repeated scanning of files included/required only once by @mmcev106 in #11478

Other changes

feat(language server): add --on-open-debounce-ms by @kk-daniel in #11550
fix(language server): fix --on-change-debounce-ms by @kk-daniel in #11549
Replace deprecated __sleep method with __serialize by @theodorejb in #11563
Fix the opcache status retrieval if restricted paths are set. by @dmvrtx in #11556
Bump actions/checkout from 4 to 5 by @dependabot[bot] in #11539
fix: deprecations for PHP 8.5 by @jorgsowa in #11541
ci: add nikic/php-parser deprecations to Psalm baseline by @jorgsowa in #11596
fix: deprecated null offset by @jorgsowa in #11599
Bump actions/checkout from 5 to 6 by @dependabot[bot] in #11593

New Contributors

@dmvrtx made their first contribution in #11556
@MarjovanLier made their first contribution in #11604

Full Changelog: vimeo/psalm@6.13.1...6.14.0

`v6.13.1`

Compare Source

What's Changed

Fixes

Add windows support to psalm-review by @HenkPoley in #11528

Full Changelog: vimeo/psalm@6.13.0...6.13.1

`v6.13.0`

Compare Source

What's Changed

Features

✨ Full support for iterables for iterator_to_array by @andrew-demb in #11430
Add an arrayCache configuration key that can be used to disable the newly introduced array cache: this will slightly slow down execution times while reducing RAM usage, avoiding OOM issues on bigger codebases by @danog

Full Changelog: vimeo/psalm@6.12.1...6.13.0

`v6.12.1`

Compare Source

What's Changed

Fixes

Fix false negatives with mixed in templated value-of/key-of by @danog in #11499
Avoid tainting problems with first-class callables by @danog

Full Changelog: vimeo/psalm@6.12.0...6.12.1

`v6.12.0`: - Cache refactoring

Compare Source

This release features a major cache refactoring, improving stability, removing race conditions and adding a new feature called cache consolidation, which consolidates the cache, normally composed of split files, into one single file with the --consolidate-cache flag, for quicker runs when doing whole project scans!

To use cache consolidation, simply run Psalm with the --consolidate-cache flag after running a normal analysis: running with this flag will skip analysis and only consolidate the cache.
If you consolidate your cache in CI runs, sure to re-consolidate the cache again after running Psalm before re-saving the updated cache.

What's Changed

Features

Implement cache consolidation with --consolidate-cache flag by @danog in #11450
Cache refactoring by @danog in #11415
Add ignoreIncludeSideEffects configuration key by @danog in #11451

Fixes

Fix crash on numeric annotation by @VincentLanglet in #11445
Disable diffing if not in diff run by @danog in #11447
Update stubs for ext-mongodb 2.0 by @alcaeus in #11453
Update stubs for ext-mongodb 2.1 by @alcaeus in #11454

Docs

[Doc] Clarify union vs. intersection for numeric supertype by @kylekatarnls in #11444

New Contributors

@kylekatarnls made their first contribution in #11444

Full Changelog: vimeo/psalm@6.11.0...6.12.0

`v6.11.0`

Compare Source

What's Changed

Features

Add new ClassFilePathProviderInterface plugin hook to polyfill custom autoloaders by @danog in #11422

Fixes

Small analysis bugfix by @danog

Subscribe to the brand new Psalm newsletter to stay up to date with all of Psalm's news!

Full Changelog: vimeo/psalm@6.10.3...6.11.0

`v6.10.3`

Compare Source

What's Changed

Fixes

Fix #11420 by @danog in #11421

Full Changelog: vimeo/psalm@6.10.2...6.10.3

`v6.10.2`

Compare Source

What's Changed

Fixes

InvalidNamedArgument "objectOrClass" for ReflectionClass constructor due to incorrect stub by @savinmikhail in #11407
DateTimeImmutable::setTimestamp rename argument to $timestamp by @savinmikhail in #11409
fix: alter of ClassMustBeFinal inserts final before attributes by @Tofandel in #11390
Add fix for PropertyHooks by @craig-mcmahon in #11411
Disable diff mode by @danog in #11416

New Contributors

@savinmikhail made their first contribution in #11407
@craig-mcmahon made their first contribution in #11411

Full Changelog: vimeo/psalm@6.10.1...6.10.2

`v6.10.1`

Compare Source

What's Changed

Fixes

Deprecate reflection's setAccessible on 8.1+ by @danog in #11401
Better types for mb_substitute_character by @danog in #11400

Full Changelog: vimeo/psalm@6.10.0...6.10.1

`v6.10.0`

Compare Source

Join the new official Psalm news channel and the Psalm community!

The news channel will be used to share inside exclusive news about upcoming Psalm features (including property hook support, coming within the next few releases!), and the community group can be used to discuss and share the way you use Psalm!

What's Changed

Features

Add rank to SARIF report by @danog in #11383
Add forceJit and noCache configuration keys by @danog in #11380

Full Changelog: vimeo/psalm@6.9.6...6.10.0

`v6.9.6`

Compare Source

Add git, ssh and composer to the docker image by @danog.

Full Changelog: vimeo/psalm@6.9.5...6.9.6

`v6.9.5`

Compare Source

What's Changed

Fixes

Fix some possible JIT crashes in official docker image by @danog
Improve stub generation by @danog
Merge multiple docblocks for statements by @robchett in #11371

Full Changelog: vimeo/psalm@6.9.4...6.9.5

`v6.9.4`

Compare Source

What's Changed

Fixes

Backport #11364 to 6.x by @haas-dtv in #11369

Full Changelog: vimeo/psalm@6.9.3...6.9.4

`v6.9.3`

Compare Source

What's Changed

Fixes

Hotfix #11363 by @danog in #11366

Internal changes

Bump docker image to PHP 8.4.5 by @danog in #11367

Full Changelog: vimeo/psalm@6.9.2...6.9.3

`v6.9.2`

Compare Source

Fixes multiplatform builds for the latest tag of the docker image ».

Full Changelog: vimeo/psalm@6.9.1...6.9.2

`v6.9.1`

Compare Source

`v6.9.0`: - Docker image!

Compare Source

Psalm now has an official docker image!

It uses a custom build of PHP built from scratch, running Psalm +30% faster on average than normal PHP (+50% faster if comparing to PHP without opcache installed).

To use it, simply run:

docker run -v $PWD:/app --rm -it ghcr.io/danog/psalm:latest /composer/vendor/bin/psalm --no-cache

Issues due to missing extensions can be fixed by enabling them in psalm.xml and/or requiring them in composer.json, see here » for more info.

Extensions not stubbed by Psalm itself (and thus not available as a psalm config option) may be stubbed using traditional PHP stubs.

What's Changed

Features

Add docker image by @danog in #11307

Full Changelog: vimeo/psalm@6.8.9...6.9.0

`v6.8.9`

Compare Source

What's Changed

Fixes

Fix polyfill version range by @danog in #11345
Improve idn_to_* signatures for 8.4 by @danog in #11351
push original callable when creating callable-object in order to keep return type by @orklah in #11354

Internal changes

Small performance improvement by @danog in #11348

Full Changelog: vimeo/psalm@6.8.8...6.8.9

`v6.8.8`

Compare Source

What's Changed

Fixes

Fix Could not locate trait statement errors by @danog in #11341

Internal changes

Improve debugging of PHP bugs by @danog in #11339

Full Changelog: vimeo/psalm@6.8.7...6.8.8

`v6.8.7`

Compare Source

What's Changed

Fixes

Fix array_reverse type for list{0: int, 1?: int} etc. by @MoonE in #11150
Improve closure template inference by @danog in #11334
Allow RoundingMode as param to round by @danog in #11335
Fix issues with array_any by @danog

Full Changelog: vimeo/psalm@6.8.6...6.8.7

`v6.8.6`

Compare Source

What's Changed

Fixes

Allow integer and string concatenation by @danog in #11329

Full Changelog: vimeo/psalm@6.8.5...6.8.6

`v6.8.5`

Compare Source

What's Changed

Fixes

Fixes PHP Error: Undefined array key 1 by @tm1000 in #11328
Fix issue with plugins by @danog

Full Changelog: vimeo/psalm@6.8.4...6.8.5

`v6.8.4`

Compare Source

This release introduces fully reproducible builds (the composer.lock file is now added to phars).

Full Changelog: vimeo/psalm@6.8.3...6.8.4

`v6.8.3`

Compare Source

What's Changed

Fixes

Fix phar build by bumping box (the minimum supported PHP version for the phar is now PHP 8.2) by @danog in #11324

Internal changes

Reproducible builds (fixes #10446) by @danog in #10566

Full Changelog: vimeo/psalm@6.8.2...6.8.3

`v6.8.2`

Compare Source

What's Changed

Fixes

Fix phar generation by @danog in #11323

Full Changelog: vimeo/psalm@6.8.1...6.8.2

`v6.8.1`

Compare Source

What's Changed

Internal changes

Log PHP version earlier by @danog in #11317

Full Changelog: vimeo/psalm@6.8.0...6.8.1

`v6.8.0`

Compare Source

What's Changed

Features

Add longScanWarning config by @danog in #11302
Preload all classes before forking (+5% performance) by @danog in #11309
Improve new array function types, add Deprecated attr support by @danog in #11303

Fixes

Die when PHP doc not found in update-property-map.php by @M393 in #11136
Do not throw exceptions on deprecation errors while autoloading deps by @danog in #11313
Fix ElseIfAnalyzer inconsistency and remove dead code by @theodorejb in #10611
Deduplicate loop analysis by @theodorejb in #10782
Add correct type to readline_completion_function by @danog in #11316
Add rdkafka to extension list in config.xsd by @danog in #11314

New Contributors

@M393 made their first contribution in #11136

Full Changelog: vimeo/psalm@6.7.1...6.8.0

`v6.7.1`

Compare Source

What's Changed

Internal changes

Require jsonmapper v5 by @danog in #11300

Full Changelog: vimeo/psalm@6.7.0...6.7.1

`v6.7.0`

Compare Source

What's Changed

Features

Add new allowBoolToLiteralBoolComparison config (disabled by default), used to control emission of RedundantIdentityWithTrue issues (previously, their emission was controlled by the strictBinaryOperands config) by @danog in #11283
Enable missing #[Override] attribute detection (automatic Psalter fixer available) by @danog in #11283
Enable strict binary operand comparison checks (useful for strict_types migration) by @danog in #11283
Seal all class properties and methods: this enforces exact description of all class magic (__get/__call...) methods and properties with @method or @property, see here for more info by @danog in #11283
Disable dangerous @psalm-suppress all annotation (may be re-enabled manually with the disableSuppressAll config) by @danog in #11283
Types in lazy objects by @BenMorel in #11296

Fixes

Fix parameter name in SplObjectStorage by @kamil-tekiela in #11134
Fix empty compact report if baseline file is used by @andrey-tech in #11111

Internal changes

Expose Progress instance to plugins by @danog in #11297
Change PluginEntryPointInterface to take a PluginRegistrationSocket @danog in #11298

New Contributors

@andrey-tech made their first contribution in #11111

Full Changelog: vimeo/psalm@6.6.2...6.7.0

`v6.6.2`

Compare Source

What's Changed

Fixes

Allow running generate_testsuites.php from a different dir by @MoonE in #11155
Add missing reset of context inside_general_use by @MoonE in #11157
Fix false positives for UnusedIssueHandlerSuppression by @edsrzf in #11212
Fix condition on literal-string by @VincentLanglet in #11252
Object property types by @MoonE in #11291
Fix some more tests when running phpunit with args by @MoonE in #11153
Fix type of property-get with coalesce by @MoonE in #11152
Fix condition on lowercase-string by @VincentLanglet in #11293

Full Changelog: vimeo/psalm@6.6.1...6.6.2

`v6.6.1`

Compare Source

What's Changed

Fixes

fix: add taint source on plugin-added taints by @Patrick-Remy in #10206
handle instanceof $this by @orklah in #11286

Docs

Fix key type in PossiblyUndefinedStringArrayOffset.md by @emmanuelGuiton in #11277

Full Changelog: vimeo/psalm@6.6.0...6.6.1

`v6.6.0`

Compare Source

What's Changed

Features

Add ClassMustBeFinal issue by @danog in #11279
Enable MissingOverrideAttribute on all PHP versions by @danog in #11284

Fixes

Fix trait issue with MissingOverrideAttribute by @danog in #11284
Enable attribute parsing on versions lower than 8.0 by @danog in #11284
Fix type assertion for Arithemtic addition and subtraction by @KevinVanSonsbeek in #11269
Fix config error in LSP by @tm1000 in #11255
Replace felixfbecker/advanced-json-rpc with maintained fork by @danog in #11282

Docs

Improve stub docs by @danog in #11276

Internal changes

Reorganize tools by @danog in #11278

Full Changelog: vimeo/psalm@6.5.1...6.6.0

`v6.5.1`

Compare Source

What's Changed

Fixes

Specify minimum PHP patch release in composer.json as well by @danog in #11271
Bump symfony/filesystem by @weirdan in #11273

Internal changes

Enable opcache if installed by @danog in #11274

Full Changelog: vimeo/psalm@6.5.0...6.5.1

Configuration

📅 Schedule: (UTC)

Branch creation
- Only on Sunday and Saturday (* * * * 0,6)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2026-09-12T02:05:41Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: composer.lock

Command failed: composer update behat/behat:3.33.0 vimeo/psalm:6.17.2 --with-dependencies --ignore-platform-req=ext-* --ignore-platform-req=lib-* --no-ansi --no-interaction --no-scripts --no-autoloader --no-plugins --minimal-changes
Loading composer repositories with package information
Updating dependencies
Your requirements could not be resolved to an installable set of packages.

  Problem 1
    - Root composer.json requires vimeo/psalm ^6.0 -> satisfiable by vimeo/psalm[6.17.2].
    - vimeo/psalm 6.17.2 requires php ~8.1.31 || ~8.2.27 || ~8.3.16 || ~8.4.3 || ~8.5.0 -> your php version (8.3; overridden via config.platform, same as actual) does not satisfy that requirement.

chore(deps): update dependency guzzlehttp/guzzle to v8.1.0

d26f0ac

Navigation Menu

Uh oh!

chore(deps): update all non-major dependencies (minor) - #346

chore(deps): update all non-major dependencies (minor)#346
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

renovate Bot commented Sep 12, 2026 •

edited

Loading

Uh oh!

renovate Bot commented Sep 12, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Sep 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Changed

Added

Fixed

Internal

What's Changed

Fixes

Other changes

New Contributors

What's Changed

Fixes

What's Changed

Features

Fixes

Docs

Internal changes

Other changes

New Contributors

What's Changed

Fixes

What's Changed

Features

Fixes

Internal changes

New Contributors

What's Changed

Internal changes

What's Changed

Features

Fixes

Other changes

New Contributors

What's Changed

Fixes

Internal changes

Other changes

New Contributors

What's Changed

Fixes

What's Changed

Features

What's Changed

Features

Internal changes

Other changes

New Contributors

What's Changed

Fixes

What's Changed

Features

What's Changed

Fixes

v6.12.0: - Cache refactoring

What's Changed

Features

Fixes

Docs

New Contributors

What's Changed

Features

Fixes

What's Changed

Fixes

What's Changed

Fixes

New Contributors

What's Changed

Fixes

What's Changed

Features

What's Changed

Fixes

What's Changed

Fixes

What's Changed

Fixes

renovate Bot commented Sep 12, 2026 •

edited

Loading

`v6.12.0`: - Cache refactoring

`v6.9.0`: - Docker image!