Directorium/Ordo
1
0
Fork 0
Code Issues 73 Pull requests 4 Projects Releases 1 Packages Wiki Activity Actions

chore: bump squizlabs/php_codesniffer from 3.13.5 to 4.0.1 #112

Open
dependabot[bot] wants to merge 1 commit from dependabot/composer/develop/squizlabs/php_codesniffer-4.0.1 into develop
pull from: dependabot/composer/develop/squizlabs/php_codesniffer-4.0.1
merge into: Directorium:develop
Conversation 1 Commits 1 Files changed 2 +10 -10
dependabot[bot] commented 2026-07-07 12:05:35 +00:00 (Migrated from github.com)
Copy link

Bumps squizlabs/php_codesniffer from 3.13.5 to 4.0.1.

Release notes

Sourced from squizlabs/php_codesniffer's releases.

4.0.1 - 2025-11-10

This release includes all improvements and bugfixes from PHP_CodeSniffer 3.13.5.

Added

  • Runtime support for PHP 8.5. All known PHP 8.5 deprecation notices have been fixed.
    • Syntax support for new PHP 8.5 features will follow in a future release.
    • If you find any PHP 8.5 deprecation notices which were missed, please report them.

Changed

  • The Squiz.ControlStructures.SwitchDeclaration sniff will now flag a PHP close tag as a "wrong opener" and will auto-fix this by inserting a colon. #1316
  • Various housekeeping, including improvements to the tests and documentation.

Fixed

  • 4.x regression #1277: bring back whitespace tolerance in phpcs:ignore comma-separated rule reference lists.
    • Note: this bug did not affect phpcs:disable/phpcs:enable ignore annotations.
  • Fixed bug #968: Generic.WhiteSpace.ScopeIndent was reporting false positives - and making incorrect fixes - for lines following a line containing an arrow function.
  • Fixed bug #1216: Tokenizer/PHP: added more defensive coding to prevent PHP 8.5 "Using null as an array offset" deprecation notices.
  • Fixed bug #1279: Tokenizer/PHP: on PHP < 8.0, an unclosed attribute (parse error) could end up removing some tokens from the token stream.
    • This could lead to false positives and false negative from sniffs, but could also lead to incorrect fixes being made mangling the file under scan.
  • Fixed bug #1315: Squiz.ControlStructures.SwitchDeclaration: a number of the fixers would get into fixer conflicts with each other if the code under scan contained multiple statements on a line within a switch.
    • The sniff will now forbid - and auto-fix - multiple statements on one line for case/default and "case breaking" statements.
  • Fixed bug #1316: Tokenizer/PHP: a PHP close tag after a switch case condition or after a default keyword, was not regarded as a "scope_opener" for the case/default body.
  • Fixed bug #1316: PSR2.ControlStructures.SwitchDeclaration: the WrongOpener error is now also auto-fixable if the wrong opener is a PHP close tag.
  • Fixed bug #1316: Squiz.PHP.NonExecutableCode would throw false positives when code within a switch control structure would move in and out of PHP.

New Contributors

The PHP_CodeSniffer project is happy to welcome the following new contributors: @​andrewnicols, @​Soh1121

Statistics

Closed: 2 issues Merged: 8 pull requests

Follow @​phpcs on Mastodon or @​PHP_CodeSniffer on X to stay informed.

Please consider funding the PHP_CodeSniffer project. If you already do so: thank you!

4.0.0 - 2025-09-16

This release contains breaking changes.

Upgrade guides for both ruleset maintainers/end-users, as well as for sniff developers and integrators, have been published to the Wiki.

You are strongly encouraged to read the upgrade guide applicable to your situation before upgrading.

... (truncated)

Changelog

Sourced from squizlabs/php_codesniffer's changelog.

Changelog

The file documents changes to the PHP_CodeSniffer project for the 3.x series of releases.

Commits
  • 0525c73 Merge pull request #1318 from PHPCSStandards/feature/changelog-4.0.1
  • 4c09fb4 Changelog for the 4.0.1 release
  • 7ed8ea2 Merge pull request #1316 from PHPCSStandards/feature/tokenizer-php-switch-cas...
  • b80dc24 Various sniffs: update tests to safeguard handling of case/default with P...
  • 6bd0af6 Squiz/NonExecutableCode: bug fix - false positive with PHP close tag after ca...
  • 6d61496 Squiz/SwitchDeclaration: make implied semicolon via close tag auto-fixable
  • 21c0e80 PSR2/SwitchDeclaration: make implied semicolon via close tag auto-fixable
  • 6327f77 Tokenizer/PHP: PHP close tag should be regarded as scope opener for switch ca...
  • 9397930 Squiz/SwitchDeclaration: bug fix - fixer conflict for single line code (#1315)
  • 2c13a90 Merge pull request #1308 from Soh1121/issue-968/fix-wrong-indentation-with-ar...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Bumps [squizlabs/php_codesniffer](https://github.com/PHPCSStandards/PHP_CodeSniffer) from 3.13.5 to 4.0.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/PHPCSStandards/PHP_CodeSniffer/releases">squizlabs/php_codesniffer's releases</a>.</em></p> <blockquote> <h2>4.0.1 - 2025-11-10</h2> <p>This release includes all improvements and bugfixes from PHP_CodeSniffer <a href="https://github.com/PHPCSStandards/PHP_CodeSniffer/blob/4.x/CHANGELOG-3.x.md#3135---2025-11-04">3.13.5</a>.</p> <h3>Added</h3> <ul> <li>Runtime support for PHP 8.5. All known PHP 8.5 deprecation notices have been fixed. <ul> <li>Syntax support for new PHP 8.5 features will follow in a future release.</li> <li>If you find any PHP 8.5 deprecation notices which were missed, please report them.</li> </ul> </li> </ul> <h3>Changed</h3> <ul> <li>The Squiz.ControlStructures.SwitchDeclaration sniff will now flag a PHP close tag as a &quot;wrong opener&quot; and will auto-fix this by inserting a colon. <a href="https://redirect.github.com/PHPCSStandards/PHP_CodeSniffer/issues/1316">#1316</a></li> <li>Various housekeeping, including improvements to the tests and documentation.</li> </ul> <h3>Fixed</h3> <ul> <li>4.x regression <a href="https://redirect.github.com/PHPCSStandards/PHP_CodeSniffer/issues/1277">#1277</a>: bring back whitespace tolerance in <code>phpcs:ignore</code> comma-separated rule reference lists. <ul> <li>Note: this bug did not affect <code>phpcs:disable</code>/<code>phpcs:enable</code> ignore annotations.</li> </ul> </li> <li>Fixed bug <a href="https://redirect.github.com/PHPCSStandards/PHP_CodeSniffer/issues/968">#968</a>: Generic.WhiteSpace.ScopeIndent was reporting false positives - and making incorrect fixes - for lines following a line containing an arrow function. <ul> <li>Thanks to <a href="https://github.com/Soh1121">Soichi Sato</a> for the patch.</li> </ul> </li> <li>Fixed bug <a href="https://redirect.github.com/PHPCSStandards/PHP_CodeSniffer/issues/1216">#1216</a>: Tokenizer/PHP: added more defensive coding to prevent PHP 8.5 &quot;Using null as an array offset&quot; deprecation notices. <ul> <li>Thanks to <a href="https://github.com/andrewnicols">Andrew Lyons</a> for the patch.</li> </ul> </li> <li>Fixed bug <a href="https://redirect.github.com/PHPCSStandards/PHP_CodeSniffer/issues/1279">#1279</a>: Tokenizer/PHP: on PHP &lt; 8.0, an unclosed attribute (parse error) could end up removing some tokens from the token stream. <ul> <li>This could lead to false positives and false negative from sniffs, but could also lead to incorrect fixes being made mangling the file under scan.</li> </ul> </li> <li>Fixed bug <a href="https://redirect.github.com/PHPCSStandards/PHP_CodeSniffer/issues/1315">#1315</a>: Squiz.ControlStructures.SwitchDeclaration: a number of the fixers would get into fixer conflicts with each other if the code under scan contained multiple statements on a line within a <code>switch</code>. <ul> <li>The sniff will now forbid - and auto-fix - multiple statements on one line for <code>case</code>/<code>default</code> and &quot;case breaking&quot; statements.</li> </ul> </li> <li>Fixed bug <a href="https://redirect.github.com/PHPCSStandards/PHP_CodeSniffer/issues/1316">#1316</a>: Tokenizer/PHP: a PHP close tag after a <code>switch</code> case condition or after a <code>default</code> keyword, was not regarded as a &quot;scope_opener&quot; for the <code>case</code>/<code>default</code> body.</li> <li>Fixed bug <a href="https://redirect.github.com/PHPCSStandards/PHP_CodeSniffer/issues/1316">#1316</a>: PSR2.ControlStructures.SwitchDeclaration: the <code>WrongOpener</code> error is now also auto-fixable if the wrong opener is a PHP close tag.</li> <li>Fixed bug <a href="https://redirect.github.com/PHPCSStandards/PHP_CodeSniffer/issues/1316">#1316</a>: Squiz.PHP.NonExecutableCode would throw false positives when code within a switch control structure would move in and out of PHP.</li> </ul> <hr /> <h3>New Contributors</h3> <p>The PHP_CodeSniffer project is happy to welcome the following new contributors: <a href="https://github.com/andrewnicols"><code>@​andrewnicols</code></a>, <a href="https://github.com/Soh1121"><code>@​Soh1121</code></a></p> <h3>Statistics</h3> <p><strong>Closed</strong>: 2 issues <strong>Merged</strong>: 8 pull requests</p> <p>Follow <a href="https://phpc.social/@phpcs"><code>@​phpcs on Mastodon</code></a> or <a href="https://twitter.com/PHP_CodeSniffer"><code>@​PHP_CodeSniffer on X</code></a> to stay informed.</p> <p>Please consider <a href="https://opencollective.com/php_codesniffer">funding the PHP_CodeSniffer project</a>. If you already do so: thank you!</p> <h2>4.0.0 - 2025-09-16</h2> <p><strong>This release contains breaking changes.</strong></p> <p>Upgrade guides for both <a href="https://github.com/PHPCSStandards/PHP_CodeSniffer/wiki/Version-4.0-User-Upgrade-Guide">ruleset maintainers/end-users</a>, as well as for <a href="https://github.com/PHPCSStandards/PHP_CodeSniffer/wiki/Version-4.0-Developer-Upgrade-Guide">sniff developers and integrators</a>, have been published to the Wiki.</p> <p>You are strongly encouraged to read the upgrade guide applicable to your situation before upgrading.</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/PHPCSStandards/PHP_CodeSniffer/blob/4.x/CHANGELOG-3.x.md">squizlabs/php_codesniffer's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <p>The file documents changes to the PHP_CodeSniffer project for the 3.x series of releases.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/PHPCSStandards/PHP_CodeSniffer/commit/0525c73950de35ded110cffafb9892946d7771b5"><code>0525c73</code></a> Merge pull request <a href="https://redirect.github.com/PHPCSStandards/PHP_CodeSniffer/issues/1318">#1318</a> from PHPCSStandards/feature/changelog-4.0.1</li> <li><a href="https://github.com/PHPCSStandards/PHP_CodeSniffer/commit/4c09fb42780c391e9c2affa80269bd093af089bd"><code>4c09fb4</code></a> Changelog for the 4.0.1 release</li> <li><a href="https://github.com/PHPCSStandards/PHP_CodeSniffer/commit/7ed8ea2bce1603d8f925740a5d7045ee8e6d40d8"><code>7ed8ea2</code></a> Merge pull request <a href="https://redirect.github.com/PHPCSStandards/PHP_CodeSniffer/issues/1316">#1316</a> from PHPCSStandards/feature/tokenizer-php-switch-cas...</li> <li><a href="https://github.com/PHPCSStandards/PHP_CodeSniffer/commit/b80dc24cf99812c1847c887e41b4a218165360ff"><code>b80dc24</code></a> Various sniffs: update tests to safeguard handling of <code>case</code>/<code>default</code> with P...</li> <li><a href="https://github.com/PHPCSStandards/PHP_CodeSniffer/commit/6bd0af631b5f22d16bde057fd8be962c866913bb"><code>6bd0af6</code></a> Squiz/NonExecutableCode: bug fix - false positive with PHP close tag after ca...</li> <li><a href="https://github.com/PHPCSStandards/PHP_CodeSniffer/commit/6d61496ab04df59448b6a9e220be9c91c823926b"><code>6d61496</code></a> Squiz/SwitchDeclaration: make implied semicolon via close tag auto-fixable</li> <li><a href="https://github.com/PHPCSStandards/PHP_CodeSniffer/commit/21c0e80120f7bddf0e986f58ffa2facd32aff5f8"><code>21c0e80</code></a> PSR2/SwitchDeclaration: make implied semicolon via close tag auto-fixable</li> <li><a href="https://github.com/PHPCSStandards/PHP_CodeSniffer/commit/6327f7707a73c1e4d6bc8668a1c1ebba51ce27f1"><code>6327f77</code></a> Tokenizer/PHP: PHP close tag should be regarded as scope opener for switch ca...</li> <li><a href="https://github.com/PHPCSStandards/PHP_CodeSniffer/commit/93979308666822d67aed0720378bb9be6ef14e42"><code>9397930</code></a> Squiz/SwitchDeclaration: bug fix - fixer conflict for single line code (<a href="https://redirect.github.com/PHPCSStandards/PHP_CodeSniffer/issues/1315">#1315</a>)</li> <li><a href="https://github.com/PHPCSStandards/PHP_CodeSniffer/commit/2c13a9078eb3a680dfbda085eb90e6c6bb05a023"><code>2c13a90</code></a> Merge pull request <a href="https://redirect.github.com/PHPCSStandards/PHP_CodeSniffer/issues/1308">#1308</a> from Soh1121/issue-968/fix-wrong-indentation-with-ar...</li> <li>Additional commits viewable in <a href="https://github.com/PHPCSStandards/PHP_CodeSniffer/compare/3.13.5...4.0.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=squizlabs/php_codesniffer&package-manager=composer&previous-version=3.13.5&new-version=4.0.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>
manlycucumber (Migrated from github.com) reviewed 2026-07-07 12:05:35 +00:00
This pull request can be merged automatically.
This branch is out-of-date with the base branch
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin dependabot/composer/develop/squizlabs/php_codesniffer-4.0.1:dependabot/composer/develop/squizlabs/php_codesniffer-4.0.1
git switch dependabot/composer/develop/squizlabs/php_codesniffer-4.0.1
Sign in to join this conversation.
Reviewers
No reviewers
manlycucumber
Labels
Clear labels   
area: build
Build & tooling

  
area: ci
CI / release

  
area: compare
Cross-edition / cross-rite comparison tool

  
area: model
Structured liturgical models (Ordo Missae, Office, diff)

  
area: plugin
WordPress integration & lifecycle

  
area: provenance
Sources, citations, errata, and the resolution trace

  
area: rite
Multi-rite framework and non-Roman rites

  
area: settings
Settings / white-label

  
area: ui
Reader UI & mockups

  
backport
Cherry-pick into a maintained older line

  
blocked
Blocked until something else resolves

  
breaking
Backward-incompatible change (major bump)

  
confirmed
Reproduced / accepted as real

  
dependencies
Pull requests that update a dependency file

  
duplicate
Duplicate of another issue

  
epic
Epic — tracking issue grouping child issues

  
invalid
Not a valid issue

  
needs-info
Waiting on more detail

  
needs-triage
New, not yet reviewed

  
php
Pull requests that update php code

  
priority: high
Do next; urgent or high impact

  
priority: low
Nice to have / someday

  
priority: medium
Normal queue

  
regression
Worked in a previous release

  
type: chore
Maintenance / internal

  
type: correction
A liturgical-data correction backed by a citation

  
type: docs
Documentation

  
type: enhancement
Improvement to existing behaviour

  
type: feature
New user-facing capability

  
type: fix
Bug fix

  
type: perf
Performance improvement

  
type: refactor
Internal refactor

  
type: security
Security fix

  
wontfix
Will not be worked on

No labels
area: build
area: ci
area: compare
area: model
area: plugin
area: provenance
area: rite
area: settings
area: ui
backport
blocked
breaking
confirmed
dependencies
duplicate
epic
invalid
needs-info
needs-triage
php
priority: high
priority: low
priority: medium
regression
type: chore
type: correction
type: docs
type: enhancement
type: feature
type: fix
type: perf
type: refactor
type: security
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
Directorium/Ordo!112
No description provided.